Paraphrasing evades detectors of AI-generated text, but retrieval is an effective defense