Defense Against Syntactic Textual Backdoor Attacks with Token Substitution