Testing the Robustness of AutoML Systems