Add session token support for use with STS