Mac Lane set theory