Fix rule management
Fix rule management

The `value` is modified later (with `splice`),
so rules are not immutable, `unsafe-inline` rules
are deleted, if request comes from firefox.

On every request, rules should be cloned.

helmetjs/helmet,helmetjs/helmet