Fix #250: Splats shouldn’t increase function length

ES6 rest parameters do not contribute to the `length` property of
functions.

Before CSR didn’t either, except when the last parameter was a splat.
Merge pull request #287 from lydell/fn-splat-length

Fix #250: Splats shouldn’t increase function length