Opting out of all protection would raise an exception because the idempotency check was wrong

[oreoshake]

idempotent_additions? would return false when comparing OPT_OUT with OPT_OUT, causing header_hash_for to return a header cache with { nil => nil } which cause the middleware to blow up when { nil => nil } was merged into the rack header hash.

This is a regression in 3.1.0 only.

Now it returns true. I've added a test case to ensure that header_hash_for will never return such an element.

[coveralls]

Coverage increased (+0.9%) to 96.2% when pulling 0358c8e on fix-opt-out-regression into 171ca58 on master.