update sandbox package versions, add cssc* to app