Formal Specification and Analysis of an e-Voting System