“Regulation works. Illicit marijuana providers don’t ask for or check for ID, but licensed businesses most certainly do.”