Passive Variable-Structure Fault-Tolerant Control for an Electrical 4WD Vehicle subject to Input Saturation