Model recovery anti-windup for plants with rate and magnitude saturation