Mitigating the Structural Bias in Graph Adversarial Defenses