BAPFL: Exploring Backdoor Attacks Against Prototype-based Federated Learning