Add support for federated sessions. The two parts to this change are:

    1) Allow the user to specify the session_token configuration
    variable
    2) Pass the x-amz-security-token on uploads