FedECA: A Federated External Control Arm Method for Causal Inference with Time-To-Event Data in Distributed Settings