Don't sign STS.assumeRoleWithWebIdentity request.

Also send this request as a GET rather than POST.
Add integration test for STS.assumeRoleWithWebIdentity