Direct versus indirect standardization in risk adjustment