6 states now have social media password laws