Use https for callback URL when DEBUG=True and in sandbox mode