Updated 1Password to 4.2.

Sending this PR first so that anyone going to work on this will be aware of some [shenanigans](https://groups.google.com/d/msg/nushackers/91V8kM2gLo0/oPz3aUa16PkJ) regarding the authenticity of the package.

In gist, sending different HTTP headers to the vendor's web server results in two different files being downloaded that have the same build number. I have reached out the AgileBits to see if they can rectify the issue, and **I don't think this should be merged** in the meanwhile.

The hash in the commit below refers to the package obtained using `wget`, without sending `Accept Encoding: gzip`.