I added the error message to the failure page. It says you security header is invalid, so that means that your username/password or security key is invalid. Open the file: webassist/ecart/credentials/gateways.php and verify the information on lines 7-9 match the credentials listed in your sandbox account.