lorazepam legal requirements