feat/13799 : add 'httpOnly' attribute to CSRF cookie

src/presentation/maarchRM/Observer/csrf.php

@@ -128,7 +128,7 @@ class csrf
         
         $responseToken = $this->getLastToken($accountTokens);
         
-        \laabs::setToken($this->config["cookieName"], $responseToken, null, false);
+        \laabs::setToken($this->config["cookieName"], $responseToken, null, true);
     }
 
     /**