Set nonce for loading the zxcvbn

Signed-off-by: Morris Jobke <hey@morrisjobke.de>

core/js/setup.js

@@ -123,6 +123,7 @@ $(document).ready(function() {
 			t('core', 'Strong password')
 		],
 		drawTitles: true,
+		nonce: btoa(OC.requestToken),
 	});
 
 	// centers the database chooser if it is too wide

settings/js/security_password.js

@@ -81,5 +81,6 @@ $(document).ready(function () {
 		],
 		drawTitles: true,
 		$addAfter: $('input[name="newpassword-clone"]'),
+		nonce: btoa(OC.requestToken),
 	});
-});
\ No newline at end of file
+});