javascript count substring in string