property testing with clojure