fix hash-based route match

- update dependencies
- remove query params from path
- separate out query separator regex