Fixes security group handling for spot instances launched into an EC2 VPC

Simply one line modification to fix security groups for VPC spot instances (which must use LaunchSpecification.SecurityGroupId instead of LaunchSpecification.SecurityGroup).