[for-in] add "in" token to lexical scanner
[JS] fix memory leak when assigning properties to objects
[JS] support "in" operator