fix gcsfs permissions

[delgadom]

We should be able to carry around credentials. Docs assert tokens are cached and also you can authenticate using token="cloud" when within a cloud system. The former seems like the better solution because it preserves granular permissions. But both seem like an option.