Norfolk Southern made improvements after one of its trains derailed near an Ohio town, but the company is nowhere near the “gold standard for safety” it is striving to be, according to federal regulators.