The error you are getting:
Security error Security header is not valid
means there is a problem with your API credentials.
You may be using live API credentials but configured eCart to use the Sand Box, or vice versa.
Perhaps you have not excepted the billing agreement.