Add support for EC2 IAM roles, via a config option 'token'

which adds an x-amz-security-token header to requests.