Model-Based Demand-Limiting Control of Building Thermal Mass