authenticate user before he/she is able to obtain amazon s3 temp key