Detect clock skew

[iamed2]

A precursor to #45

When we get "signature exprired" we can check the time that AWS thinks it is (in the message) and compare that with the now time and the signature expiry time. If the difference between AWS time and the now time accounts for the difference in the AWS time and the signature expiry time, we can warn the user about clock skew.