With the wide use of html5 history api I feel like the user should be redirect with a query string as default instead of hash.
What would be the benefit?
As I see it, it would just unnecessarily share the access token with the web server that doesn’t need it, and it would make it harder to support older and less developed browsers.