fixed up validators for window.location.hash, instead of .pathname