javascript string replace capture group