Allow setCredentials to accept a sessionToken

Need this for STS users.