Add support for question-marks in hash fragments

From [rfc3986](https://tools.ietf.org/html/rfc3986#section-3.5):

> The characters slash ("/") and question mark ("?") are allowed to
> represent data within the fragment identifier.

lib/router.js

@@ -90,22 +90,20 @@ Route.prototype.match = function (url, options) {
 
     // 2. check path
     // remove query string and hash fragment from url
-    var pos = url.indexOf('?');
-    var path;
-    if (pos >= 0) {
-        // remove query string
-        path = url.substring(0, pos);
-    } else {
-        pos = url.indexOf('#');
+    //
+    // hash fragment does not get sent to server.
+    // But since routr can be used on both server and client,
+    // we should remove hash fragment before matching the regex.
+    var path = url;
+    var pos;
+
+    // Leave `pos` at the beginning of the query-string, if any.
+    ['#', '?'].forEach(function(delimiter){
+        pos = url.indexOf(delimiter);
         if (pos >= 0) {
-            // hash fragment does not get sent to server.
-            // But since routr can be used on both server and client,
-            // we should remove hash fragment before matching the regex.
-            path = url.substring(0, pos);
-        } else {
-            path = url;
+            path = path.substring(0, pos);
         }
-    }
+    });
 
     var pathMatches = self.regexp.exec(path);
     if (!pathMatches) {