Backdoor Mitigation by Correcting the Distribution of Neural Activations