The Security header is not valid is an error on the paypal end, it means the paypal processor is not accepting the API Credentials being passed. If you give ftp information in a private message I can do some trouble shooting to look into what API information is being sent and to what end point to ensure it is sending what you expect