Formal Verification of a Distributed Master Election Protocol