JavaScript security improvement: Nonces