SPIN Model Checking for the Verification of Clinical Guidelines