towards improving adversarial training of nlp models