ONION: A Simple and Effective Defense Against Textual Backdoor Attacks