improved proof for leq-trans
'with' pattern matching