minor #5561 Change default value of cookie_httponly (jderusse)

This PR was merged into the 2.8 branch.

Discussion
----------

Change default value of cookie_httponly

| Q             | A
| ------------- | ---
| Doc fix?      | no
| New docs?     | symfony/symfony#15372
| Applies to    | 2.8
| Fixed tickets | symfony/symfony#15303

Commits
-------

e6c8b6c Change default value of cookie_httponly

reference/configuration/framework.rst

@@ -774,7 +774,7 @@ This determines whether cookies should only be sent over secure connections.
 cookie_httponly
 ...............
 
-**type**: ``boolean`` **default**: ``false``
+**type**: ``boolean`` **default**: ``true``
 
 This determines whether cookies should only be accessible through the HTTP
 protocol. This means that the cookie won't be accessible by scripting