Fix #1015

Issuing 'undo' in the prover when there is
nothing to undo should result in a less
scary looking error message.