The avoidance and control of tokamak disruptions