extend underscore with urlhash to get hash from a url string
use navigate replace, keep login&activation fragment out of history