California Spam-busting bill comes with $1 million penalty