copy the passed-in ruleset in verify(); fixes #458

Fixes #458 and adds a relevant unit test.
Passes both `grunt test` and the in-browser test (in Chrome).