Minor modifications on firewall (APISpark extension)

2 modifications : 
* `FirewallFilter` does not "block" requests by default.
* Improvements on `RoleLimitPolicy`