Defending Pre-trained Language Models as Few-shot Learners against Backdoor Attacks