Remove OWASP_CRS/PROTOCOL_VIOLATION/INVALID_HREQ because of false positives (see https://github.com/SpiderLabs/owasp-modsecurity-crs/issues/173)