Non-Negative Networks Against Adversarial Attacks