WL-3387 Update remove group with CSRF.

We were missing the CSRF token when removing the group.