title: Turning YII_CSRF_TOKEN secure flag on
body: <p>I have enabled CSRF Validation in Yii:</p>
  
  <p><code>'enableCsrfValidation' =&gt; true,</code></p>
  
  <p>Everything works as expected however I'd like for the session cookie to have the <code>secure</code> flag turned on.</p>
  
  <p>With other cookies you can set the secure flag in the config:</p>
  
  <pre><code>'session'=&gt;array(
      'cookieParams' =&gt; array(
          'httponly'=&gt;true,
          'secure' =&gt; true,
      ),
  ),
  </code></pre>
  
  <p>How do you do this for the <code>YII_CSRF_TOKEN</code>?</p>