Bi-level model predictive control for metro networks