Accounting for model error in 4D-Var