escape all '#' in routing patterns
closes #713