sandbox and some new app.js socket events