Design and nonlinear validation of the ITER magnetic control system