When assuming a role store initial MFA creds

[rkeiii]

Currently we discard the MFA creds used to assume a role. Instead we should store these so the user doesn't have to auth twice in order to have access to both sets of credentials.