fixed bug in STS query signing
added STS api for temporary credentials