Support security tokens in configuration file profiles.

Looks like the logic in provider.py is broken if you're using a configuration file profile with STS temporary credentials. The token isn't getting detected and requests always fail. This patch fixes it and adds a unit test for the same.