What is the difference between optimistic and pessimistic concurrency control?