Formal analysis of secure contracting protocol for e-tendering