1. add client-side validation to the MODx.window.CreateUserGroup

2. don't use cached window object; it needs updated record on each window
Merge remote-tracking branch 'upstream/pr/11899' into pr/11899

* upstream/pr/11899:
  1. add client-side validation to the MODx.window.CreateUserGroup