Microsoft won't sell facial recognition to police until new law is in place