Generating robust counterfactual explanations