How contractors price risk in bids: theory and practice