Update shasum and remove box url (since it's private)