Difference between composite key and candidate key