Extending STPA to Improve the Analysis of User Interface Software in Medical Devices