Integral windup protection

Modify TemperatureControl module to do simple integral windup
protection (ignore the I term of PID when far from setpoint)

Addresses #539.