`sinon.sandbox.create()` was removed in favor of
`sinon.createSandbox()`. See https://sinonjs.org/releases/v8.0.2/sandbox/.

The API documentation suggests using a default sandbox for most cases
rather than creating a custom one. To keep the change here simple, I've
left the logic as it was before, but just adapted to the new API.