Detecting unusual input to neural networks