Portland becomes the first U.S. city to ban companies using facial recognition software on customers after the mayor said it could be used for surveillance on protesters