Start captive portal after stopping it

This fixes a regression introduced by ee986d82 (#1227)

This is done by adding <afterFwRestart> method to firewall helpers