Fix use of STS generated auth key + tokens with SWF

Be explicit about what the security token is.  Note that this does change the parameter name but it couldn't ever have worked before since passing the token as an unnamed parameter meant it was being used as https_connection_factory.

I can make both parameter names work but it felt like cruft since it couldn't have worked before.