Fix self register service: profile is mandatory in UserGroups
Add CSRF token in schemaplugin services