s3-auth use security_token_has_sid() from the common code