Are AI-Generated Text Detectors Robust to Adversarial Perturbations?