I’m no crypto expert, but really?

function nonce() { return Math.round(Math.random() * 99999).toString(); }