Securing Recommender System via Cooperative Training