I want to set the config for the cookie component but I am unsure where to add the code.
Do I set it in the AppController or the bootstrap?
public function initialize()
{
parent::initialize();
$this->loadComponent('Csrf');
$this->Cookie->config([
'httpOnly' => true
]);
}