Fixed STS AssumeRoleWithWebIdentity operation so that request is not signed
Updated changelog for next release