Insert instead of append for Captive Portal rules

As reported in #24, the "captive portail gracetime" for browser didn't
work as expected.
One of the causes was the iptables rules order.