Fixed two major exploits pointed out in #21

* the context-object passed into `runInNewContext` is now recursively cloned with a null prototype on its objects, this should solve the exploit using __defineGetter__, __defineSetter__.
* scripts are now run with `\"use strict\";` which should solve the arguments.callee attack.