Make change password link to BZ instead of doing it in canvas

It determines the bz domain from the current domain to avoid adding a new config option. By removing 'portal' from the URL, it leaves us with the real thing. This will need to be updated if we ever change URL schemes.