States can ban ‘bath bombs’ that look like candy