Only put credentials in hash fragment on Cordova.

I don't understand why, but setting `document.location.hash` in IE8
breaks Facebook login (and only Facebook login).