Move key in query parameter to hash parameter

Fixes #10 e2ee vulnerability since the query parameter gets sent to the webserver as well and thus the password to encrypt the data.
Moves ?key=123 to #key=123.