Iterative Adversarial Attack on Image-Guided Story Ending Generation