JavaScript: validate email address