Estimating Value at Risk and Expected Shortfall