Improving autoencoder robustness