Request: Remove hash from redirect URIs

[mdeggies]

The URIs we're redirected to for registration, login, and forgot password all have an extra hash in them:

https://tenant-name.id.stormpath.io/#/forgot

Although this doesn't impact the functionality of IDSite, it could definitely be polished to improve the user's experience. (In Angular, the extra hash can be removed by simply enabling HTML5 mode for the $locationProvider. Perhaps a similar fix could be used here.)