set token from AWS_SECURITY_TOKEN env