Utah becomes the first US state to target VPNs with a strict age verification law