States sue SEC over Reg BI