added x-amz-security-token to presigned urls for s3

When you are using temporary credentials like ones you get using IAM roles, you need to pass your security token in the query string as well as the key and signature when you create a presigned URL for s3 objects.