Move some code around in password_policy_init() to fix "Force password change on next login" to work on bakery slave sites

If a user account is marked as "Force password change on next login" and the user attempts to login from a Bakery slave site here's what happens:
- User logs in
- Password Policy module detects that the user needs to change their password and does a drupal_set_message('change your password') and redirects to /user/edit
- Bakery redirects the user to the master site
- dsm is gone - we're on a different site now. From the user's point of view they were just whisked away to the admin site for no apparent reason and can't navigate anywhere else

Patches coming soon.