Set ALLOWED_HOSTS for sandbox