Thompson Sampling Itself is Differentially Private