When a crypto token turns out to be a security, the legal complications are dizzying