move rank fn into bandit.arms; change exploit to use (first (rank ...)) rather than max-key