Add ability to override audit rule severity in AuditConfiguration, add test; add extra test for BadAriaRole too