update framework csrf configuration

https://github.com/symfony/symfony/pull/9252