Under a new California law, it is illegal for employers or admissions officers to require applicants to hand over their social media usernames and passwords.