Sanctuary cities dig in after Trump executive order