A Fusion-Denoising Attack on InstaHide with Data Augmentation