Coupling timed plant and controller models with urgent transitions without introducing deadlocks