California passes law that bans default passwords in devices