Don't require creds for upload.createupload.

Allows `createupload` to work with any given S3 URL, not just one returned in a creds object.