Updated conn params for security_token.

Fills in the only places ``security_token`` wasn't previously being passed. Finishes #1942.

Review please (no rush)? @danielgtaylor