allow aws secret token for authentication

also, implements original PR #40