Using DEA and financial ratings for credit risk evaluation: an empirical analysis