Make the security tracker relocatable to another base URL

Hosting the tracker at an URL different from /tracker/ was not possible
without these changes. There's still one small glitch left with the
hardcoding of /tracker/logo.png in static/style.css.