automatic induction; see the end of unit1.ver and the proof of progress in stlc.fst
merging