support for temporary credentials  via x-amz-security-token header