js closure private variable