update SandboxController#create to use data_source_id instead of instance_id