Handle temporary AWS credentials

I've made a change to allow the use of temporary AWS credentials supplied by the STS service. To use temp credentials the caller needs to supply an extra header on the request, X-Amz-Security-Token, containing the token that STS supplies alongside the key and secret. This header also needs to be included in the signed header list.

The changes are backwardly compatible so that if the token is not supplied as part of the AwsCredentials object then the behaviour is the same as it was before the change.

I have added a test to Aws4SignerSpec to check that the header is added and signed correctly.
This line can now call `optional(key)` instead of `app.configuration.getString(key)`