Ownership Protection of Generative Adversarial Networks