Fault tolerant train door control