Single Word Change is All You Need: Designing Attacks and Defenses for Text Classifiers