How river spillways protect major cities