A few CSS parser robustness improvements

  - Allow # character in URLs
  - Scan for url\s*( instead of just url to avoid matching identifiers
    that contain the text url
  - Return Failure instead of Empty when parse fails