Model Checking Java Programs With Guitar