Added some model checks during machine initialisation

Tests that a region or composite state can have no more than one
initial state