implement iam token refreshing using the EC2 metadata