Deduplicating Training Data Mitigates Privacy Risks in Language Models