Utah becomes first state to target VPN use in age-verification law