Model Checking Java Programs With Classes