1password extension security issue