Add support for "Assume role with saml" in AWS

Support for AssumeRoleWithSAML:
http://docs.aws.amazon.com/STS/latest/APIReference/API_AssumeRoleWithSAML.html

This one is a bit tricky as everything tends to be signed in fog, this STS command needs to work without being signed.

To do that the usual `:aws_access_key_id` and `:aws_secret_access_key` need to be optional.
Bypassing the signing `connect`. The goal of the role with SAML is to not rely on pre-existing AWS credentials and instead rely on a different system (SAML) to manage the authentication. This means that the content can't be signed with the AWS credentials.