Formal set theory