adding support for x-amz-security-token to be sent when set in config or env