Revisiting Residual Networks for Adversarial Robustness