Improving VAEs’ Robustness to Adversarial Attack