Default CSRF token to Httponly.
Default CSRF token to Httponly.

While this _could_ be backwards incompatible. I think it is a safer
default to start new applications with.

ndm2/cakephp,ndm2/cakephp,berrygoudswaard/cakephp,nrother/cakephp,ionas/cakephp,ADmad/cakephp,justinyost/cakephp,CakeDC/cakephp,ionas/cakephp,ndm2/cakephp,HavokInspiration/cakephp,mvdriel/cakephp,CakeDC/cakephp,cakephp-fr/cakephp,bravo-kernel/cakephp,tenkoma/cakephp,garethellis36/cakephp,gmponos/cakephp,CVO-Technologies/cakephp,ionas/cakephp,cakephp-fr/cakephp,Phillaf/cakephp,tenkoma/cakephp,tgr0ss/cakephp,ADmad/cakephp,garethellis36/cakephp,petteyg/cakephp,cakephp/cakephp,mvdriel/cakephp,davidyell/cakephp,dakota/cakephp,elboletaire/cakephp,tenkoma/cakephp,ndm2/cakephp,berrygoudswaard/cakephp,thinkingmedia/cakephp,elboletaire/cakephp,tgr0ss/cakephp,jeffblack360/cakephp,tgr0ss/cakephp,Phillaf/cakephp,garethellis36/cakephp,mvdriel/cakephp,gmponos/cakephp,mvdriel/cakephp,HavokInspiration/cakephp,petteyg/cakephp,michaelze/cakephp,justinyost/cakephp,cakephp/cakephp,berrygoudswaard/cakephp,cakephp/cakephp,CVO-Technologies/cakephp,petteyg/cakephp,HavokInspiration/cakephp,cakephp-fr/cakephp,garethellis36/cakephp,tenkoma/cakephp,bravo-kernel/cakephp,nrother/cakephp,dakota/cakephp,nrother/cakephp,gmponos/cakephp,jeffblack360/cakephp,CVO-Technologies/cakephp,dakota/cakephp,michaelze/cakephp,ADmad/cakephp,bravo-kernel/cakephp,thinkingmedia/cakephp,thinkingmedia/cakephp,CakeDC/cakephp,jeffblack360/cakephp,michaelze/cakephp,CakeDC/cakephp,davidyell/cakephp,petteyg/cakephp,justinyost/cakephp,ADmad/cakephp,cakephp/cakephp,davidyell/cakephp,elboletaire/cakephp,Phillaf/cakephp,dakota/cakephp