Aire controls the differentiation program of thymic epithelial cells in the medulla for the establishment of self-tolerance