The system now uses a smarter process to generate the link. It checks for a valid URL in the following order:
Organization URL
Logical Domain URL
The system.baseURL setting in ekp.properties
The URL the user was on when they requested the password reset