Add AWS_SESSION_TOKEN support

We use MFA access only @ Simple, so we need dis to get started.

- if AWS_SESSION_TOKEN is set, just use that.
- wrote a test.

Fixes https://github.com/stripe/aws-go/issues/4.