Don't override blog's url when updating password

When a user updated the password on a wp.com blog, it'd set the blog's
xmlrpc to wordpress.com/xmlrpc.php, and it'd return permission errors on
every request