Robust network routing under cascading failures