router: permit clicks on anchors to bubble up

preventDefault() but don't return false