Account for single element objects in mappers

[em-c-rod]

NIST and CCI tags can be both an array of Strings or just a single string, so forEach loops need to be able to handle a single element object. Ex: nist: ["SC-2"] to nist: "SC-2"

Add unit tests to account for this.