Fault tolerance control of SOFC systems based on nonlinear model predictive control