the Security header is not valid means that paypal is not accepting the API credentials.
if you are sure you have the correct credentials entered, than make sure that you have accepted the billing agreement.
sometimes paypal just generates bad credentials, and you need to request new ones.