Add missing request header

When making IAM authenticated requests to S3 `x-amz-security-token`
header is required.