Need ability to change the csrf cookie age from default 1yr

Security scan shows csrf cookie age needs to be at session level, need a way to modify this value as this is looked upon as a security risk.