From California to Vermont, lawmakers are protecting kids online