Adversarial Feature Augmentation and Normalization for Visual Recognition