proof by induction that rev (rev xs) = xs