Understanding Adversarial Training with Energy-based Models