Private prison firm sues states over law