check whether query_auth is true before adding x-amz-security-token when run using an IAM role