CAB-SIM: A cause based operator model for use in dynamic Probabilistic Safety Assessments for nuclear power plants