What are the assumptions in a case-control study?