REFACTOR sandbox user with Role and ADD defaultTargetUrl, interceptUrlMap to Config