On the Loss Landscape of Adversarial Training: Identifying Challenges and How to Overcome Them Tao Lin