LoRA Users Beware: A Few Spurious Tokens Can Manipulate Your Finetuned Model