Proofs of AVL trees in coq