#7 recently added support AWS session token based authentication. We have forgotten to amend the signature tests in the process. We should write tests asserting that when used, the X-AMZ-SECURITY-TOKEN is added to the request's headers and is included in the signature process.