fix(http): strip hash fragment in fullUrl()

Useful in cases where location.url is used, or when a hash fragment is inadvertently included.

This does not solve the case where HTML5-mode is not supported and local paths use something like index.html#/users. That's a case which may be worth solving, but it's a fair bit harder, and eventually won't be worth solving at all.

Closes #27