“Regulation works. Unregulated marijuana providers don’t ask for or check for ID, but licensed businesses most certainly do.”