A proof of Bertrand's postulate