Just for future reference - the issue was that the jupyter command did not have the --config flag so it was never responding to the c.NotebookApp.disable_check_xsrf config.
Just for future reference - the issue was that the jupyter command did not have the --config flag so it was never responding to the c.NotebookApp.disable_check_xsrf config.