Change all OWASP_CRS/WEB_ATTACK/SQL_INJECTION rules to stop looking at cookies because of false positives
I'm just going to enable anomaly scoring mode

Revert "Forgot to comment out a dependent rule when I removed rule #960015"

This reverts commit db4afbcfb4589a792938c7c20a543d2999c24c45.
I'm just going to enable anomaly scoring mode

Revert "Remove Rule #960015 due to too many false-positives"

This reverts commit bfe832d77ec86f580aa20a6dbeacdd027ebcc396.