the response back fro paypal is:
Security header is not valid
this happens if the API creadentials are not correct.
Be aware that ewhen using the sandbox, you need to havce seperate API credentials.
the live API credentials will not work in the sand box.
you need to request sandbox api credentials from paypal, then enter them in the webassist -> eCart -> Payment Gateway Credentials screen.