Proof of Heron's formula