Robustness of Network Controllability with Respect to Node Removals