Generating Adversarial Samples in Mini-Batches May Be Detrimental To Adversarial Robustness