html5hash + server side redirect for #/ urls
permissions attempt