Model recovery anti-windup for output saturated SISO linear closed loops