VaR function

Compute Value-at-Risk (VaR) and expected shortfall (ES)