fix(http): strip hash fragment in fullUrl()

Useful in cases where location.url is used, or when a hash fragment is inadvertently included.

Closes #27