Temporary session token support

This adds support for passing in temporary AWS STS credentials, which include a session token.