Assessing discriminative ability of risk models in clustered data