Revisiting Adversarial Training at Scale