Temporary fix: hardcode domain in password emails.

Was directing people to example.com, despite the
Site object being set properly.

Please do this properly when time permits