update framework csrf configuration

| Q             | A
| ------------- | ---
| Doc fix?      | yes
| New docs?     | yes (symfony/symfony#9252)
| Applies to    | 2.4+