A few CSS parser robustness improvements

- Allow # character in URLs
- Scan for url\s*( instead of just url to avoid matching identifiers
  that contain the text url
- Return Failure instead of Empty when parse fails

(There was an issue for the second item there, but I can't seem to find it now...)