quickstart-upload guide mixes server URLS

[bcli4d]

In the quickstart-upload guide, the code initially accesses zenodo.org/api. In the 'All API access requires an access token, so create one.' step, the user is redirected to get an access token from zenodo.org.
The example code then accesses sandbox.zenodo.org/api In the 'Next, let’s create a new empty upload:' step, the example code accesses sandbox.zenodo.org/ap. This will fail because the access token was not issued by sandbox.zenodo.org.
-The example code should be consistent in the server that it accesses.
-The Testing section of the guide mentions the availability of the sandbox server. It would be helpful to state that an access token issued by that server is needed in order to use it.