We should allow a user to set tokenFromMultipartDataEnabled in the Kotlin DSL, just as we do in the Java DSL. The configuration would look like

@EnableWebSecurity
open class CsrfConfig : WebSecurityConfigurerAdapter() {
    override fun configure(http: HttpSecurity) {
        http {
            csrf {
                tokenFromMultipartDataEnabled = true
            }
        }
    }
}