A token airdrop may not spare you from securities regulation