Your Model Trains on My Data? Protecting Intellectual Property of Training Data via Membership Fingerprint Authentication