Backdoor Attacks on Crowd Counting