check whether query_auth is true before adding x-amz-security-token when run using an IAM role

Raised in ticket:
https://github.com/boto/boto/issues/2043