fixed bug where sandbox was not using cabal.config to override cabal.san...

I think is the cabal.config override behavior that was documented (but not implemented).