VPCSecurityGroups for RDS should be a list, not a basestring

Title says it all. 

Thanks for a really useful library!