sssd-tools-2.5.2-150500.8.3 >  A dRp9|K'J;I<㟑TWa}4T'yԲK1h7mς1?e g55  HZX3#X@|}pHhDYƢQl?Pkn#& z R(Z(ј4>f2 ֈү6<|=~2GPWe"\2`2{Վp7Hѻ @?,2v<8~Rk{GݜŠgr=(qbBvV'X!B}971e4720a3cddd61e20575509746479cf4147bc9382a24305d9142e3bc4e2c65372c89f076ad85deac8cf851cd79db0d0f49c7a5ȉdRp9|CcC;k  X2W&;A'5P'pM}#wٳo) :=Uk٬/.t($+~w\_j:̀&Ka6wqEI~aeH]o`RGk~TZE`ִ7wY c]~ ϰg!3iG"SuBՖI}5[e&E8SwF$oI%=dC#ؽI<2^%atRbG3`uzX>p>?d   9+ ASpv|bb b b b 6b b b b!"b##($\(((((8(D9*D:.DF\GpbHbIbXY\b]b^bc0deflubv, w4bxbyDGz`ptzCsssd-tools2.5.2150500.8.3Commandline tools for sssdThe packages contains commandline tools for managing users and groups using the "local" id provider of the System Security Services Daemon (sssd).dRs390zp32TSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/System/Managementhttps://github.com/SSSD/sssdlinuxs390x8x K-Ud8Lnv&Dy>uGmm2f ^ _# 4_{2[ mc 9NjLt # [ A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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-2.5.2-150500.8.3.src.rpmsssd-toolssssd-tools(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/usr/bin/python3libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libifp_iface_sync.so()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpam_misc.so.0()(64bit)libpam_misc.so.0(LIBPAM_MISC_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)libref_array.so.1(REF_ARRAY_0.1.1)(64bit)libsss_certmap.so.0()(64bit)libsss_certmap.so.0(SSS_CERTMAP_0.1)(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_iface_sync.so()(64bit)libsss_sbus_sync.so()(64bit)libsss_util.so()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)python3-sssd-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sssd-common2.5.2-150500.8.33.0.4-14.6.0-14.0-15.2-12.5.2-150500.8.34.14.3c@c1@b/.@b@b~ba@aq@a @`!@``x*`m`T@_ts@^}^f/^ P@^[^ @]}@]µ]@]@]@]@\@\\+@\mA@[t[*AZZ@ZH@Z%8Z!D@YYw2X~@X,XX@X7@X@X@XN@XGX`@WWW@W@V&@VqR@VO @V U@U5@UU@U}lT@TTq@T6T`TR(@scabrero@suse.dedmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.deckowalczyk@suse.comckowalczyk@suse.comckowalczyk@suse.comckowalczyk@suse.comhguo@suse.comhguo@suse.comhguo@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.commichael@stroeder.comjengelh@inai.demichael@stroeder.comkukuk@suse.deluizluca@gmail.commichael@stroeder.comdimstar@opensuse.orgjengelh@inai.demichael@stroeder.commichael@stroeder.comjengelh@inai.dehguo@suse.commichael@stroeder.commpluskal@suse.comjengelh@inai.dejengelh@inai.demichael@stroeder.comjengelh@inai.dejengelh@inai.dehguo@suse.comcrrodriguez@opensuse.orgmichael@stroeder.comhguo@suse.comhoward@localhostjengelh@inai.demeissner@suse.comledest@gmail.comjengelh@inai.de- Fix build with MIT 1.20; Add patch 0004-BUILD-Accept-krb5-1.20-for-building-the-PAC-plugin.patch- Fix sdap_access_host No matching host rule found; (bsc#1202559); Add patch 0001-Fix-sdap_access_host-No-matching-host-rule-found.patch- Fix shell command injection in sssctl via the logs-fetch and cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add 0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch- Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attributte; (bsc#1190775); (gh#SSSD/sssd#4893); Add patch 0001-ldap-ignore-unreadable-references.patch- Fix 32-bit libraries package. Libraries were moved from sssd to sssd-common to fix bsc#1182058 and baselibs.conf was not updated accordingly; (bsc#1196166);- Remove caches only when performing a package downgrade. The sssd daemon takes care of upgrading the database format when necessary (bsc#1195552)- Update the private ldb modules installation following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Remove libsmbclient-devel BuildRequires in favor of pkgconfig(smbclient)- Update to version 2.5.2; (jsc#SLE-17763); * originalADgidNumber attribute in the SSSD cache is now indexed. * Add new config option fallback_to_nss. - Changes from version 2.5.1 * auto_private_groups option can be set centrally through ID range setting in IPA (see ipa idrange commands family). This feature requires SSSD update on both client and server. This feature also requires freeipa 4.9.4 and newer. * Fix getsidbyname issues with IPA users with a user-private-group. * Default value of ldap_sudo_random_offset changed to 0 (disabled). This makes sure that sudo rules are available as soon as possible after SSSD start in default configuration. - Changes from version 2.5.0 * Added support for automatic renewal of renewable TGTs that are stored in KCM ccache. This can be enabled by setting tgt_renewal = true. See the sssd-kcm man page for more details. This feature requires MIT Kerberos krb5-1.19-0.beta2.3 or higher. * Backround sudo periodic tasks (smart and full refresh) periods are now extended by a random offset to spread the load on the server in environments with many clients. * Completing a sudo full refresh now postpones the smart refresh by ldap_sudo_smart_refresh_interval value. This ensure that the smart refresh is not run too soon after a successful full refresh. * If debug_backtrace_enabled is set to true then on any error all prior debug messages (to some limit) are printed even if debug_level is set to low value. * Besides trusted domains known by the forest root, trusted domains known by the local domain are used as well. * New configuration option offline_timeout_random_offset to control random factor in backend probing interval when SSSD is in offline mode. * ad_gpo_implicit_deny is now respected even if there are no applicable GPOs present. * During the IPA subdomains request a failure in reading a single specific configuration option is not considered fatal and the request will continue. * Unknown IPA id-range types are not considered as an error - Changes from version 2.4.2 * Default value of "user" config option was fixed into accordance with man page, i.e. default is "root". * pam_sss_gss now support authentication indicators to further harden the authentication. - Changes from version 2.4.1 * New PAM module pam_sss_gss for authentication using GSSAPI. * case_sensitive=Preserving can now be set for trusted domains with AD and IPA providers. * krb5_use_subdomain_realm=True can now be used when sub-domain user principal names have upnSuffixes which are not known in the parent domain. SSSD will try to send the Kerberos request directly to a KDC of the sub-domain. * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald output, to avoid issues with PID parsing in rsyslog (BSD-style forwarder) output. * Added pam_gssapi_check_upn to enforce authentication only with principal that can be associated with target user. * Added pam_gssapi_services to list PAM services that can authenticate using GSSAPI. - Changes from version 2.4.0 * Session recording can now exclude specific users or groups when scope is set to all (see exclude_users and exclude_groups options). * Active Directory provider now sends CLDAP pings over UDP protocol to Domain Controllers in parallel to determine site and forest to speed up server discovery. - Changes from version 2.3.1 * Domains can be now explicitly enabled or disabled using enable option in domain section. This can be especially used in configuration snippets. * New configuration options memcache_size_passwd, memcache_size_group, memcache_size_initgroups that can be used to control memory cache size. * Fixed several regressions in GPO processing introduced in sssd-2.3.0 * Fixed regression in PAM responder: failures in cache only lookups are no longer considered fatal. * Fixed regression in proxy provider: pwfield=x is now default value only for sssd-shadowutils target. - Changes from version 2.3.0 * SSSD can now handle hosts and networks nsswitch databases (see resolve_provider option). * By default, authentication request only refresh user's initgroups if it is expired or there is not active user's session (see pam_initgroups_scheme option). * OpenSSL is used as default crypto provider, NSS is deprecated. * The AD provider now defaults to GSS-SPNEGO SASL mechanism (see ldap_sasl_mech option). * The AD provider can now be configured to use only ldaps port (see ad_use_ldaps option). * SSSD now accepts host entries from GPO's security filter. * New debug level (0x10000) added for low level LDB messages only (see sssd.conf man page). - Changes from version 2.2.3 * allow_missing_name now treats empty strings the same as missing names. * "soft_ocsp" and "soft_crl" options have been added to make the checks for revoked certificates more flexible if the system is offline. * Smart card authentication in polkit is now allowed by default. * Handling of FreeIPA users and groups containing ‘@’ sign now works. * Issue when autofs was unable to mount shares was fixed. * SSSD was unable to hande ldap_uri containing URIs with different port numbers, which has been rectified. - Changes from version 2.2.2 * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache. This has been fixed. * Because of a race condition SSSD could crash during shutdown. The race condition was fixed. * Fixed a bug that limited number of external groups fetched by SSSD to 2000. * pam_sss now properly creates gnome keyring during login. * SSSD with KCM could wrongly pick older ccache instead of the latest one after login. This was fixed. - Changes from version 2.2.1 * New options were added which allow sssd-kcm to handle bigger data. * SSSD can now automatically refresh cached user data from subdomains in IPA/AD trust. * Fixed issue with SSSD hanging when connecting to non-responsive server with ldaps://. * SSSD is now restarted by systemd after crashes. * Fixed refression when dyndns_update was set to True and dyndns_refresh_interval was not set or set to 0 then DNS records were not updated at all. * Fixed issue when default_domain_suffix was used with files provider and caused all results from files domain to be fully qualified. * Fixed issue with sudo rules not being visible on OpenLDAP servers * Fixed crash with auth_provider = proxy that prevented logins - Changes from version 2.2.0 * The Kerberos provider can now include more KDC addresses or host names when writing data for the Kerberos locator plugin. * The 2FA prompting can now be configured. * The LDAP authentication provider now allows to use a different method of changing LDAP passwords using a modify operation in addition to the default extended operation. * The "auto_private_groups" configuration option now takes a new value hybrid. * A new option "ad_gpo_ignore_unreadable" was added. * The "cached_auth_timeout" parameter is now inherited by trusted domains. * The "ldap_sasl_mech" option now accepts another mechanism "GSS-SPNEGO" in addition to "GSSAPI". * The sssctl tool has two new commands, "cert-show" and "cert-map". - Changes from version 2.1.0 * Any provider can now match and map certificates to user identities. * pam_sss can now be configured to only perform Smart Card authentication or return an error if this is not possible. * pam_sss can also prompt the user to insert a Smart Card if, during an authentication it is not available. * It is now possible to refresh the KCM configuration without restarting the whole SSSD deamon * A new configuration option ad_gpo_implicit_deny was added. This option (when set to True) can be used to deny access to users even if there is not applicable GPO. * The dynamic DNS update can now batch DNS updates to include all address family updates in a single transaction. - Changes from version 2.0.0 * The Python API for managing users and groups in local domains (id_provider=local) was removed completely. The local provider (id_provider=local) and the command line tools to manage users and groups in the local domains, such as sss_useradd is not built anymore. * The LDAP provider had a special-case branch for evaluating group memberships with the RFC2307bis schema when group nesting was explicitly disabled. This codepath is removed. * The ldap_groups_use_matching_rule_in_chain and ldap_initgroups_use_matching_rule_in_chain options and the code that evaluated them was removed. * The "ldap_sudo_include_regexp" option changed its default value from true to false. Wildcards in the sudoHost LDAP attribute are no longer evaluated. This was costly to evaluate on the LDAP server side and at the same time rarely used. * The KCM responder has a new back end to store credential caches in a local database * The list of PAM services which are allowed to authenticate using a Smart Card is now configurable using a new option pam_p11_allowed_services. - Make cifs-idmap plugin (idmapwb.so) use update-alternatives mechanism to be able to switch between cifs-utils and sssd; (bsc#1182682). - Build sssd's KCM - Drop obsolete patches: + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch + 0002-intg-Do-not-hardcode-nsslibdir.patch + 0003-MONITOR-Do-not-use-two-configuration-databases.patch + 0004-Strip-whitespaces-in-netgroup-triple.patch + 0005-nss-sssd-returns-for-emtpy-home-directories.patch + 0006-Rotate-child-log-files.patch + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch + 0014-util-Remove-the-unused-function-is_email_from_domain.patch + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch + 0019-winbind-idmap-plugin-support-inferface-version-6.patch + 0020-winbind-idmap-plugin-fix-detection.patch + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch + 0027-utils-make-N_ELEMENTS-public.patch + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch + sssd-gpo_host_security_filter-1.16.1.patch + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch + 0036-ad_gpo_ndr.c-more-ndr-updates.patch + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch + 0038-CACHE-Create-timestamp-if-missing.patch + 0039-sss_cache-Do-not-fail-for-missing-domains.patch- Fix sss_cache spurious error messages when invoked from shadow-utils; (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch- Use /run instead of /var/run for daemon PID files; (bsc#1185185);- Create timestamp attribute in cache objects if missing; (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);- Fix a dependency loop by moving internal libraries to sssd-common package; (bsc#1182058);- Fix build against samba >= 4.12 + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch + 0036-ad_gpo_ndr.c-more-ndr-updates.patch - Fix build with curl >= 7.62.0 + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch- Update samba secrets after changing machine password; (jsc#SLE-11503); Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch- Install infopipe dbus service (bsc#1106598)- SSSD GPO host entries are ignored if computer cn does not match it's samaccountname, add 0001-Resolve-computer-lookup-failure-when-sam-cn.patch; (jsc#SLE-9298); (bsc#1160688)- SSSD should accept host entries from GPO's security filter, add sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)- Fix building with newer samba versions (bsc#1137876) - Added patches: * 0027-utils-make-N_ELEMENTS-public.patch * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch- Update winbind idmap plugin to support interface version 6 (jsc#SLE-9819) - Added patches: * 0019-winbind-idmap-plugin-support-inferface-version-6.patch * 0020-winbind-idmap-plugin-fix-detection.patch * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch- Delete linked local user overrides when deleting a user (bsc#1133168) - Added patches: * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch- Fix domain offline after first boot when resolv.conf is a symlink (bsc#1136139) - Added patches: * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch- Fix login not possible when email address is duplicated in ldap attributes (bsc#1149597) - Added patches: * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch * 0014-util-Remove-the-unused-function-is_email_from_domain.patch- Fix memory leak in nss netgroup enumeration (bsc#1139247); - Added patches: * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch- Allow defaults sudoRole without sudoUser attribute (bsc#1135247) - Added an option to skip GPOs that have groupPolicyContainers, unreadable by SSSD (bsc#1124194) (CVE-2018-16838) - Added patches: * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch- Create directory to download and cache GPOs (bsc#1132879) - Add a netgroup counter to struct nss_enum_index (bsc#1132657) - Added patches: * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch- Rotate child debug file descriptors on SIGHUP (bsc#1080156) - Added patches: * 0006-Rotate-child-log-files.patch- Fix fallback_homedir returning '/' for empty home directories (CVE-2019-3811) (bsc#1121759) - Install logrotate configuration (bsc#1004220) - Strip whitespaces in netgroup triples (bsc#1087320) - Align systemd service file with upstream * Run interactive and change service type to notify (bsc#1120852) * Replace deprecated '-f' and use '--logger' - Fix sssd not starting in foreground mode (bsc#1125277) - Added patches: * 0003-MONITOR-Do-not-use-two-configuration-databases.patch * 0004-Strip-whitespaces-in-netgroup-triple.patch * 0005-nss-sssd-returns-for-emtpy-home-directories.patch- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)- Introduce patches: * Create sockets with right permissions: 0001-SUDO-Create-the-socket-with-stricter-permissions.patch (bsc#1098377, CVE-2018-10852) * Fix for sssd upstream integration tests 0002-intg-Do-not-hardcode-nsslibdir.patch (bsc#1098163)- Update to new minor upstream release 1.16.1 (fate#323340): New Features: * A new option auto_private_groups was added. If this option is enabled, SSSD will automatically create user private groups based on user’s UID number. The GID number is ignored in this case. * The SSSD smart card integration now supports a special type of PAM conversation implemented by GDM which allows the user to select the appropriate smrt card certificate in GDM. * A new API for accessing user and group information was added. This API is similar to the tradiional Name Service Switch API, but allows the consumer to talk to SSSD directly as well as to fine-tune the query with e.g. how cache should be evaluated. * The sssctl command line tool gained a new command access-report, which can generate who can access the client machine. Currently only generating the report on an IPA client based on HBAC rules is supported. * The hostid provider was moved from the IPA specific code to the generic LDAP code. This allows SSH host keys to be access by the generic LDAP provider as well. See the ldap_host_* options in the sssd-ldap manual page for more details. * Setting the memcache_timeout option to 0 disabled creating the memory cache files altogether. This can be useful in cases there is a bug in the memory cache that needs working around.- Updated sssd.spec: The IPA provider depends on AD provider's PAC executable, hence introducing the package dependency. (bsc#1021441, bsc#1062124)- Remove package descriptions for the python 2 packages that are no longer distributed: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config - Correct python version dependency of tools package. (bsc#1082108)- Correct dependency of sss_obfuscate command line program.- In an ongoing effort to reduce dependency on python version 2, the following python libraries are no longer built. Nevertheless their python3 counterparts remain in place: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config- Update to new upstream release 1.16.0 Security fixes * This release fixes CVE-2017-12173: Unsanitized input when searching in local cache database. SSSD stores its cached data in an LDAP like local database file using libldb. To lookup cached data LDAP search filters like (objectClass=user)(name=user_name) are used. However, in sysdb_search_user_by_upn_res(), the input was not sanitized and allowed to manipulate the search filter for cache lookups. This would allow a logged in user to discover the password hash of a different user. New Features * SSSD now supports session recording configuration through tlog. This feature enables recording of everything specific users see or type during their sessions on a text terminal. For more information, see the sssd-session-recording(5) manual page. * SSSD can act as a client agent to deliver Fleet Commander policies defined on an IPA server. Fleet Commander provides a configuration management interface that is controlled centrally and that covers desktop, applications and network configuration. * Several new systemtap probes were added into various locations in SSSD code to assist in troubleshooting and analyzing performance related issues. Please see the sssd-systemtap(5) manual page for more information. * A new LDAP provide access control mechanism that allows to restrict access based on PAM's rhost data field was added. For more details, please consult the sssd-ldap(5) manual page, in particular the options ldap_user_authorized_rhost and the rhost value of ldap_access_filter.- Update to new upstream release 1.15.3 (KCM disabled) New Features * In a setup where an IPA domain trusts an Active Directory domain, it is now possible to define the domain resolution order (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names). * Design page - Shortnames in trusted domains * SSSD ships with a new service called KCM. This service acts as a storage for Kerberos tickets when "libkrb5" is configured to use "KCM:" in "krb5.conf". * Design page - KCM server for SSSD * NOTE: There are several known issues in the "KCM" responder that will be handled in the next release. * Support for user and group resolution through the D-Bus interface and authentication and/or authorization through the PAM interface even for setups without UIDs or Windows SIDs present on the LDAP directory side. This enhancement allows SSSD to be used together with apache modules to provide identities for applications * Design page - Support for non-POSIX users and groups * SSSD ships a new public library called "libsss_certmap" that allows a flexible and configurable way of mapping a certificate to a user identity. * Design page - Matching and Mapping Certificates * The Kerberos locator plugin can be disabled using an environment variable "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the "sssd_krb5_locator_plugin" manual page for mode details. * The "sssctl" command line tool supports a new command "user-checks" that enables the administrator to check whether a certain user should be allowed or denied access to a certain PAM service. * The "secrets" responder now forwards requests to a proxy Custodia back end over a secure channel.- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to krb5-common sub-package. Address bsc#1024836.- Update to new upstream release 1.15.2 * It is now possible to configure certain parameters of a trusted domain in a configuration file sub-section. * Several issues related to socket-activating the NSS service, especially if SSSD was configured to use a non-privileged userm were fixed. The NSS service now does not change the ownership of its log files to avoid triggering a name-service lookup while the NSS service is not running yet. Additionally, the NSS service is started before any other service to make sure username resolution works and the other service can resolve the SSSD user correctly. * A new option "cache_first" allows the administrator to change the way multiple domains are searched. When this option is enabled, SSSD will first try to "pin" the requested name or ID to a domain by searching the entries that are already cached and contact the domain that contains the cached entry first. Previously, SSSD would check the cache and the remote server for each domain. This option brings performance benefit for setups that use multiple domains (even auto-discovered trusted domains), especially for ID lookups that would previously iterate over all domains. Please note that this option must be enabled with care as the administrator must ensure that the ID space of domains does not overlap. * The SSSD D-Bus interface gained two new methods: "FindByNameAndCertificate" and "ListByCertificate". These methods will be used primarily by IPA and `mod_lookup_identity to correctly match multple users who use the same certificate for Smart Card login. * A bug where SSSD did not properly sanitize a username with a newline character in it was fixed.- Switch *all* URLs after fedorahosted.org retirement- Updated project URL - Update to new upstream release 1.15.1 * Several issues related to starting the SSSD services on-demand via socket activation were fixed. In particular, it is no longer possible to have a service started both by sssd and socket-activated. Another bug which might have caused the responder to start before SSSD started and cause issues especially on system startup was fixed. * A new 'files' provider was added. This provider mirrors the contents of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose of this new provider is to make it possible to use SSSD's interfaces, such as the D-Bus interface for local users and enable leveraging the in-memory fast cache for local users as well, as a replacement for `nscd`. In future, we intend to extend the D-Bus interface to also provide setting and retrieving additional custom attributes for the files users. * SSSD now autogenerates a fallback configuration that enables the files domain if no SSSD configuration exists. This allows distributions to enable the 'sssd' service when the SSSD package is installed. Please note that SSSD must be build with the configuration option '--enable-files-domain' for this functionality to be enabled. * Support for public-key authentication with Kerberos (PKINIT) was added. This support will enable users who authenticate with a Smart Card to obtain a Kerberos ticket during authentication.- Remove obsolete insserv call- Added /etc/sssd/conf.d/ for configuration snippets- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update - Update to new upstream release 1.15.0 * SSSD now allows the responders to be activated by the systemd service manager and exit when idle. This means the services line in sssd.conf is optional and the responders can be started on-demand, simplifying the sssd configuration. Please note that this change is backwards-compatible and the responders listed explicitly in sssd.conf's services line are managed by sssd in the same manner as in previous releases. Please refer to man sssd.conf(5) for more information * The sudo provider is no longer disabled for configurations that do not explicitly include the sudo responder in the services list. In order to disable the sudo-related back end code that executes the periodic LDAP queries, set the sudo_provider to none explicitly * The watchdog signal handler no longer uses signal-unsafe functions. This bug was causing a deadlock in case the watchdog was about to kill a stuck process * A bug that prevented TLS to be set up correctly on systems where libldap links with GnuTLS was fixed * The functionality to alter SSSD configuration through the D-Bus interface provided by the IFP responder was removed. This functionality was not used to the best of our knowledge, had no tests and prevented the InfoPipe responder from running as a non-privileged user. * A bug that prevented statically-linked applications from using libnss_sss was fixed by removing dependency on -lpthreads from the libnss_sss library (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for an example on why linking with -lpthread from an NSS modules is problematic) * Previously, SSSD did not ignore GPOs that were missing the gPCFunctionalityVersion attribute and failed the whole GPO processing. Starting with this version, the GPOs without the gPCFunctionalityVersion are skipped.- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-login): the latter has been deprecated since systemd 209 and finally removed with systemd 230.- Add 0001-krb5-1.15-build-fix.patch to unlock building against future KRB versions.- Update to new upstream release 1.14.2 * Several more regressions caused by cache refactoring to use qualified names internally were fixed, including a regression that prevented the krb5_map_user option from working correctly. * A regression when logging in with a smart card using the GDM login manager was fixed * SSSD now removes the internal timestamp on startup cache when the persistent cache is removed. This enables admins to follow their existing workflow of just removing the persistent cache and start from a fresh slate * Several fixes to the sssd-secrets responder are present in this release * A bug in the autofs responder that prevented automounter maps from being returned when sssd_be was offline was fixed * A similar bug in the NSS responder that prevented netgroups from being returned when sssd_be was offline was fixed * Disabling the netlink integration can now be done with a new option disable_netlink. Previously, the netlink integration could be disabled with a sssd command line switch, which is being deprecated in this release. * The internal watchdog no longer kills sssd processes in case time shifts during sssd runtime * The fail over code is able to cope with concurrent SRV resolution requests better in this release * The proxy provider gained a new option proxy_max_children that allows the administrator to control the maximum number of child helper processes that authenticate users with auth_provider=proxy * The InfoPipe D-Bus responder exports the UUIDs of user and group objects through a uniqueID property- Update to new upstream release 1.14.1 * The IPA provider now supports logins with enterprise principals (also known as additional UPN suffixes). This functionality also enabled Active Directory users from trusted AD domains who use an additional UPN suffix to log in. Please note that this feature requires a recent IPA server. * When a user name is overriden in an IPA domain, resolving a group these users are a member of now returns the overriden user names * Users can be looked up by and log in with their e-mail address as an identifier. In order to do so, an attribute that represents the user's e-mail address is fetched by default. This attribute can by customized by setting the ldap_user_email configuration option. * A new ad_enabled_domains option was added. This option lets the administrator select domains that SSSD should attempt to reach in the AD forest SSSD is joined to. This option is useful for deployments where not all domains are reachable on the network level, yet the administrator needs to access some trusted domains and therefore disabling the subdomains provider completely is not desirable. * The sssctl tool has two new commands active-server and servers that allow the administrator to observe the server that SSSD is bound to and the servers that SSSD autodiscovered * SSSD used to fail to start when an attribute name is present in both the default SSSD attribute map and the custom ldap_user_extra_attrs map * GPO policy procesing no longer fails if the gPCMachineExtensionNames attribute only contains whitespaces * Several commits fix regressions related to switching all user and group names to fully qualified format, such as running initgroups for a user who is only a member of a primary group * Several patches fix regressions caused by splitting the database into two ldb files, such as when user attributes change without increasing the modifyTimestamp attribute value * systemd unit files are now shipped for the sssd-secrets responder, allowing the responder to be socket-activated. To do so, administrators should enable the sssd-secrets.socket and sssd-secrets.service systemd units. * The sssd binary has a new switch --disable-netlink that lets sssd skip messages from the kernel's netlink interface. * A crash when entries with special characters such as '(' were requested was fixed * The ldap_rfc_2307_fallback_to_local_users option was broken in the previous version. This release fixes the functionality.- Update to new upstream release 1.14.0 * The AD provider is now able to look up users from Active Directory domains by certificate. This change enables logins for Active Directory users with the help of a smart card. * The sss_override tool is now able to add certificates as local overrides in the SSSD cache. Please note that the certificate overrides are stored in the local cache, so removing the cache also removes all the certificates! * Invalid certificates are skipped instead of aborting the whole operation when logging in with a smart card using SSH. * This version allows several OCSP-related options such as the OCSP responder to be configured during smart card authentication. * SSSD is now able to determine the name of the user who logs in from the inserted smart card without having to type in the username. Note that this functionality must be enabled with the allow_missing_name pam_sss option. * The sss_cache command line tool is now able to invalidate SUDO rules with its new -r/-R switches. Note that the sudo rules ar not refreshed with the sss_cache tool immediately. * A new command line tool called sssctl was added. This tool allows to observe the status of SSSD. * A new option local_negative_timeout was added. This option allows the admin to specify the time during which lookups for users that are not handled by SSSD but are present on the system (typically in /etc/passwd and /etc/group) and prevents repeated lookups of local users on the remote server during initgroups operation. * An ID-mapping plugin for the winbind deamon was added. With this plugin, it's possible for winbind to use the same ID-mapping scheme as SSSD uses, producing consistent ID values. - Remove 0001-build-detect-endianness-at-configure-time.patch (included upstream)- Enable PAC responder. PAC is an extension element returned by domain controller, to speed up resolution of authorisation data such as group memberships.- Update to new upstream release 1.13.4 * The IPA sudo provider was reimplemented. The new version reads the data from IPA's LDAP tree (as opposed to the compat tree populated by the slapi-nis plugin that was used previously). The benefit is that deployments which don't require the compat tree for other purposes, such as support for non-SSSD clients can disable those autogenerated LDAP trees to conserve resources that slapi-nis otherwise requires. There should be no visible changes to the end user. * SSSD now has the ability to renew the machine credentials (keytabs) when the ad provider is used. Please note that a recent version of the adcli (0.8 or newer) package is required for this feature to work. * The automatic ID mapping feature was improved so that the administrator is no longer required to manually set the range size in case a RID in the AD domain is larger than the default range size * A potential infinite loop in the NFS ID mapping plugin that was resulting in an excessive memory usage was fixed * Clients that are pinned to a particular AD site using the ad_site option no longer communicate with DCs outside that site during service discovery. * The IPA identity provider is now able to resolve external (typically coming from a trusted AD forest) group members during get-group-information requests. Please note that resolving external group memberships for AD users during the initgroup requests used to work even prior to this update. This feature is mostly useful for cases where an IPA client is using the compat tree to resolve AD trust users. * The IPA ID views feature now works correctly even for deployments without a trust relationship. Previously, the subdomains IPA provider failed to read the views data if no master domain record was created on the IPA server during trust establishment. * A race condition in the client libraries between the SSSD closing the socket as idle and the client application using the socket was fixed. This bug manifested with a Broken Pipe error message on the client. * SSSD is now able to resolve users with the same usernames in different OUs of an AD domain * The smartcard authentication now works properly with gnome-screensaver- Enable internal testsuite- Update to new maintenance release 1.13.3 * A bug that prevented user lookups and logins after migration from winsync to IPA-AD trusts was fixed. * A bug that prevented the ignore_group_members option from working correctly in AD provider setups that use a dedicated primary group (as opposed to a user-private group) was fixed. * Offline detection and offline login timeouts were improved for AD users logging in from a domain trusted by an IPA server. * The AD provider supports setting up autofs_provider=ad .- Update to new upstream release 1.13.2 * Initial support for Smart Card authentication was added. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. * This release supports authenticating againt a KDC proxy.- Update to new upstream release 1.13.1 * Initial support for Smart Card authentication was added. The feature can be activated with the new pam_cert_auth option. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. At the same time, only the long-term password is cached, so offline access would still work using the long term password. * A new command line tool sss_override is present in this release. The tools allows to override attributes on the SSSD side. It's helpful in environment where e.g. some hosts need to have a different view of POSIX attributes than others. Please note that the overrides are stored in the cache as well, so removing the cache will also remove the overrides. * Several enhancements to the dynamic DNS update code. Notably, clients that update multiple interfaces work better with this release. * This release supports authenticating againt a KDC proxy * The fail over code was enhanced so that if a trusted domain is not reachable, only that domain will be marked as inactive but the backed would stay in online mode.- Update to new upstream release 1.13 * Support for separate prompts when using two-factor authentication * Added support for one-way trusts between an IPA and Active Directory environment. (Depends on IPA 4.2) * The fast memory cache now also supports the initgroups operation. * The PAM responder is now capable of caching authentication for configurable period, which might reduce server load in cases where accounts authenticate very frequently. Refer to the "cached_auth_timeout" option in sssd.conf(5). * The Active Directory provider has changed the default value of the "ad_gpo_access_control" option from permissive to enforcing. As a consequence, the GPO access control now affects all clients that set access_provider to ad. In order to restore the previous behaviour, set ad_gpo_access_control to permissive or use a different access_provider type. * Group Policy objects defined in a different AD domain that the computer object is defined in are now supported. * Credential caching and Offline authentication are also available when using two-factor authentication * The Python bindings are now built for both Python2 and Python3. * The LDAP bind timeout, StartTLS timeout and password change timeout are now configurable using the ldap_opt_timeout option.- Kill unused libsss_sudo-devel solvable.- Obsolete/provide libsss_sudo in sssd main package. Sudo capability is an integral feature in SSSD and the library is not supposed to be used separately.- sssd.service: add Before= and Wants=nss-user-lookup.target correct fix for bsc#926961- Update to new upstream release 1.12.5 * The background refresh tasks now supports refreshing users and groups as well. See the "refresh_expired_interval" parameter in the sssd.conf manpage. * A new option subdomain_inherit was added. * When an expired account attempts to log in, a configurable error message can be displayed with sufficient pam_verbosity setting. See the "pam_account_expired_message" option. * OpenLDAP ppolicy can be honored even when an alternate login method (such as SSH key) is used. See the "ldap_access_order" option. * A new option :krb5_map_user" was added, allowing the admin to map UNIX usernames to Kerberos principals. * BUG FIXES: * Fixed AD-specific bugs that resulted in the incorrect set of groups being displayed after the initgroups operation. * Fixes related to the IPA ID views feature. Setups using this should update sssd on both IPA servers and clients. * The AD provider now handles binary GUIDs correctly. * A bug that prevented the `ignore_group_members` parameter to be used with the AD provider was fixed. * The failover code now reads and honors TTL value for SRV queries as well. * Race condition between setting the timeout in the back ends and reading it in the front end during initgroup operation was fixed. This bug affected applications that perform the initgroups(3) operation in multiple processes simultaneously. * Setups that only want to use the domain SSSD is connected to, but not the autodiscovered trusted domains by setting `subdomains_provider=none` now work correctly as long as the domain SID is set manually in the config file. * In case only "allow" rules are used, the simple access provider is now able to skip unresolvable groups. * The GPO access control code now handles situations where user and computer objects were in different domains.- Update to new upstream release 1.12.4 (Changelog highlights following) * This is mostly a bug fixing release with only minor enhancements visible to the end user. * Contains many fixes and enhancements related to the ID views functionality of FreeIPA servers. * Several fixes related to retrieving AD group membership in an IPA-AD trust scenario. * Fixes a bug where the GPO access control previously didn't work at all if debugging was enabled in smb.conf. * SSSD can now be pinned to a particular AD site instead of autodiscovering the site. * A regression that caused setting the SELinux context for IPA users to fail, was fixed. * Fixed a potential crash caused by a double-free error when an SSSD service was killed by the monitor process.- A minor rpmspec cleanup to get rid of five rpmlint warnings * Remove mentioning of system-wide dbus configuration file from comments. * Remove traditional init script. * Remove compatibility for producing packages on older OpenSUSE releases.- Update to new upstream release 1.12.3 * SSSD now allows the IPA client to move from one ID view to another after SSSD restart. * It is possible to apply ID views to IPA domains as well. Previous SSSD versions only allowed views to be applied to AD trusted domains. * Overriding SSH public keys is supported in this release. * Move semanage related functions to a separate library.- build with PIE- fix bashism in postun script- Update to new upstream release 1.12.2 (bugfix release, bnc#900159) * Fixed a regression where the IPA provider did not fetch User Private Groups correctly * An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. * Several new options are available for deployments that need to restrict a certain PAM service from connecting to a certain SSSD domain. For more details, see the description of pam_trusted_users and pam_public_domains options in the sssd.conf(5) man page and the domains option in the pam_sss(8) man page. * When SSSD is acting as an IPA client in setup with trusted AD domains, it is able to return group members or full group memberships for users from trusted AD domains. * Support for the "views" feature of IPA. - Remove 0001-build-call-AC_BUILD_AUX_DIR-before-anything-else.patch (merged upstream)s390zp32 1683131359  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ab2.5.2-150500.8.32.5.2-150500.8.3 sss_cachesss_debuglevelsss_obfuscatesss_overridesss_seedsssctlman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupdel.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsss_cache.8.gzsss_debuglevel.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsssctl.8.gzman8sss_groupmod.8.gzman8sss_groupdel.8.gzsss_groupmod.8.gzman8sss_groupmod.8.gzman8sss_cache.8.gzsss_debuglevel.8.gzsss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsssctl.8.gzman8sss_cache.8.gzsss_debuglevel.8.gzsss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsssctl.8.gz/usr/sbin//usr/share/man/ca//usr/share/man/ca/man8//usr/share/man/cs//usr/share/man/cs/man8//usr/share/man/de//usr/share/man/de/man8//usr/share/man/es//usr/share/man/es/man8//usr/share/man/fr//usr/share/man/fr/man8//usr/share/man/ja//usr/share/man/ja/man8//usr/share/man/man8//usr/share/man/nl//usr/share/man/nl/man8//usr/share/man/pt//usr/share/man/pt/man8//usr/share/man/ru//usr/share/man/ru/man8//usr/share/man/sv//usr/share/man/sv/man8//usr/share/man/uk//usr/share/man/uk/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:SLE-15-SP5:GA/standard/d2dbaa8704159c0272a853cb437952ef-sssdcpioxz5s390x-suse-linux  ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=2db58244b1b411543feb7e1d6b7d7db3658e0f06, for GNU/Linux 3.2.0, strippedPOSIX shell script, ASCII text executablePython script, ASCII text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=d82058be1e33480c5b07ae3ffdce49aa74d8f995, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=406e8b9571bbf59000dd012609aa7fa7faed83fe, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=1ccd647894f4c82e9ce9eae1eb562d00afd0c988, for GNU/Linux 3.2.0, strippeddirectorytroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)) RRR!RRRRRRRRRR RRRRRR!RRRRRRRRR RRRR!RRRRRRRR RRRRR RR RRR!R RRRRRRRRRRRRR RRRR RR Rb凄E1^HGtutf-8387e84d90af4a9fcbf274b7a3e65a612734fdc0a68ecd2e3b43bf5a12c42ad35? 7zXZ !t/{Z] crv9wI.NĬUGpX{ڊyj|,Z \F,3d ܠ= 7$(t(N[~D?l]88WўZm}Jou!WV_J> 7&T߂yԹ'%F`; CDNFjM[ ͕kABޏj&$san4v]hP[J"xU 1)TtyvS*4es(HF~VSRGHmY.WC+SeKڱ/'`,R f`>U՞T&|>8@HLE1B'8U ; `|I9ht>'ЬВ)W7H%mO x)06dZiymKOr1yk4egaz\uӀجIX;$ _+*sCp(lC4w jh7Rܼ뷐Yb5x95ap%_^ɏKɳi?Zȕ!yv)lqG~&cA~׺Y M)T~Blv Uw ܬ1hlUJimϣ ?w<̅6A:J_{tOjJv;R7 )XȨ"!*(Ӥ Z )$`+ejd+4kd}έ]y ]?Aq0MpF,8PL/t|}O}/LBf &qK%H['h =Am{B8GWE,<ۤ*^V3O"Li#cU8}D+0AڶˮCQFzoZq,0+Y#*|I5UbE"bs1iGJ:&b%z33@4208A*g~\Es?3SDyK1տ) Zq`Buhp?*)aTN#`'k c P_kM-B5ؖG$TUsfsZZ Q(E\]гtU8Br66E}r|)f؞MEyNDXweCtF?1DfdYqƘtdv9,x/9B6=E PZՆvOcBϿuH%(]..V~oɜVW 9扵^3܁#֗ c'O_}hᶤmmׄnDc8xySH,ٝZ|4=˥&0fLigS};̴y@U0c >)&*|U€ܮ' tOVA+x;(4JAZ: Q'4`wk߃"ym'P Bc"ohIݬ2V όHClY2u)k0n1]d{4}W!霙TGA%3Ja ^?桫Xc^!a-mlE( AK͉|1Cр)a,XSZOP }Ń׽ Ab(vچ}7.8C#0 =3YZ.HA%gK  .Z2AǬwۏ#mJ~kQC8V4.4e7?'.ȱ/G!zsAsn;|w(!e04mQwd,RL": m!>N@1RV6^LKj/L$}OV߭LTvc,Y^\sy.VTd!}Nxԝe/qܖm@w_}Ű[e1  վ ?BKѲ;,n{&jazUҺӓN?^U( )76!B1%c}[y. 䥯k$WǞP&J0<НބQ{uѠ zchxЊ~ w -K| JڹoϞp\%hb[ӱ7Uy%z&h?_1NVW7C\f>1ءFc~G铃! />h g{x$w*oU+_;8{Dį:@Խw,?qlahLK( Rs$<tnǷmӺ޵tė)B]S3#挟˧e(mRHGR;9U׍mEiz>* v48ҥ%kJ,I(4LSvL? Ph !#eQ%5t*s4D3nKip-/? i:Ȧ>ڵ6ew3zl1_*.CX m.v?ԉ|^49Ǟu4CNq{e_`JY~ΠT^5 :٤2,hf&6mӉkƆ@sqT?ʪ0OQ#79si8[S̿׵x~y0CcR?NOiw= |_#bgL{/G*QCe ޝԯ v[pi.C#Siyv?*1ed{ ! +/v d1Q6DE@igVZ#kUlF^+0@9 kqi/2XVXjy4)Dh*m0бI(samfI@-a^S7)]ӅJbѱ#lM]T[1gbⴌn,uY7cxs6_ !Fß? IS@9zw"VHeɴV.[ICSG d勒8eY:&Jq>{"^Dc xp<ЌoИl\ % 涚:ws*MJ2{?z WtT]Es4Rئr ٟ#<Ӽ-~=ӳQ왥S2dI(857':{RhT„dxxу Yi5_۽#sh>oHvqYY5᭶( tQ,#j{(l$,/HJ7 ]S@y!kgB6¥ {sn.V^_#&$u2'\LC7hGzEy@^:#Al[֯+,(L} z#P`)!B-7*v *B-a'H1[e_{Oyy6XJ?s8d <_a^LBaև9`|U4!LcxCuI=[/sC0/t2/Jr> wh1tra-{ >'G JGXIN}xбZIT,R2r9aw@jRn )U "I#(ܽ驪0ˍ$(N%g:X' vU/DV#v d7gg3K{6>O p߈+uő8SbvbE0-D_#Dɩe\Wk vB?Pc7x h9O'=V!*Fb.⫵8`XLyv\TE=Kӕ5|[r˯GZx$_Ȟ=&β祵nDeo3VtîWk &41}8eZL%%J(+OfxrrbΉ>':v F|{d)O۸ԯBeKmAĵ_B$PwN \=!nC\2uQ:%Dh-櫔[S<(+ftvӓqIR7} oJO9f2(dYB`oao 2H^;{Oû/N_LYrl\qMuJ:Ў <:uz^(k"k5\z%fp~@M{q\>JAGCX|v"9 Gkݺ3 iqSjqJu<|ǰ03\m)>h6a;#%Bvk+ |w3uIcr2Z4Z4>HOr W83b!4emLkY Ͳv#V~K Y`돤Lj9Ukt ao=Fu$+̼:8()>Y6b8 "2 z(ye&0.BJ|<{g!mʒC ’GG=}J649`;C#LqZv_Gkk:h.-|$qǚ"0h;p>=a[ H~ԏE[kY4ۻruxf_jKӯ1B1>ڍf!KnkOjE)IofD0N7iJ  a^5L +u > 5û{5|2rE4!cֽjvώ'ka ]޵ ơMRea@R6fAK~<ꂪw`WJ} K_chN<\t]r}DOPD`m@U1BAzq H f- /_+HJy028 ֆlP0mV8G\&%t x jƒ>ʓ#9}=$Q 0{zkzgdOj/ByuI0?YVi#dc#Pާ [ݼ԰5SrOb&e4v|fcwBs]D&<ư^ VP7:YyQE_lVw{ Qe2k4')05hdžA)4!&PΡ Ipaeh~% ~]^, P7嶝6+ΏgbOQWq"bc„oʅ|P!aĽOjͳ:QЪ"$6PsǻvB/D0F]*.,\1>>AQB毋,{ˍ`!}$5/0CIl&?I먈("2Z΁fVˍ-V"G":Z9ŨN.pZK?js^>0I֑C:M=pΨǶw~gm۽7 |Żso^!38[iP-ELgN!0ep`]h1wPEf!uz ׼0{pѽ#g^D@ܸ˫)aGH_VEA>k.eē 9z{ t<2K-DX; nr=oXIf\e岭,GM _ҵEUz;UlfʹCO:3=e? mm3tzDZu@k$uNGMIԋ3Vu?<$7":sfݴ:}BD4[Ll􀆰5RW xkD):G#ǒ?xZ|ʄ-8YFFg ݐi"GR%օ;t驀&Ui^ʌt#ENu>OR#.mOfm!Ne2=`쯟=(Xδ깞TW zۇqy56T0 WNe(Y j׆Hԓř׳H?u?R\UTa YT\Usǰq-'G+>ޠK/ -/<^ %yϱ ԍ)ݛ7ko(wWc _I0}5â&*!EOKbJTE\!?ux ^ӚdOWYdgTdx/̄YtV$kTe ƃk 2^?eh]p.ϼc57UfXb9^8P~ 'ȑqZM@F>g l*WFBj_L58(խ{0S" e~?ͶU4c#e`NjaэۡP:hLVp^qiHU ߽/d^Ͽ,$c-(ȡH˲\#mY\I9tGO`|MI䈻˹~lǚ׼ D[/Y턔TL 9pu+]d]Ų?V|<}h!B"~() >͎M. y[nۺD4x ;ǽWp%ǎ g:a^G $4KհJQgCW_\`&>c!}zr^V}]W'R`8JZ?ﳧm K#͋B?WM]=yxxEKh޲zZK'`m䶚A?L }rX0^|L| \ !^rv#tـs[>f0՛sk[dݵ ml4rǒfrij`Jz3N4w_BuۈVު|\]6euJ1Aۖ!\G4g'&=lRjZ-e:m{|nۂd:ܩBi^-1GA+Ή򯈁ȹu gj>Kl;m_KŁ}j3{% ?tS ]ExmK/dR!j_7c`m(# OBN&tV)''ٝ;Ъ"S=.^ݿ3ku>Zh+EJMXD%mS,!4fYV0GFMɖuFI~w?XUY\kh'>&ą׹WZ R=3_AKb ;ZID<8 J6n窄Y1B)4>k[r6R V7n5/h q@H%cTL iGnjh81jrnҗ\48ur[!aKjDZJڝD:8$^ R-3Ptdż?ЄaD{dہ n}+gzmqFk~) G*WH5 m+i1²B1v5 Om#sי6;ÆE={|# G5-mͨn^mYgS4;'Ӣ_ _HVKCέSg$!Iu A{i@m)tw.$F hECOHģ3B8``Z ikl3OMŹ=4KMt<7or xreuw/}ݫltժ'FR9q"cA)Ӹ;hh4$[A{dgdpz3/a 5ǶXQϛNvKtshmܲZ+C@k+,p[+AF՛l}&[|Lqe [L~8Yg#.{2*!N$:+4fO2OaV-lJ5ɰ^IYe( N'7' *p_pDLaS9LW @5;5#ꏥ2!bsRzQt^_F2gڍnIޛS]ZA ϡ}) 9q% =pK ͉xۄoKI 58z8"װY-x.YփEeX"'lK }@-%\ o7pp#vj ;i`U2Ѭzn }l_S Bͽ?IEWPG6؅},/[>Z3*Ίʵ;<.Z.eGcy+1|p_˲mkcq1A +clg<#nB$"-NBE O+|9 S<}{=Y+ӗ5ZZ*;]aںGZ iä z5B2|$e凪 O74 ڋw c+\JΙU, Olms RǬôz%T+.@«k:ut&f"=ͰҶ/.],P>{3,jpOArRA~*2PUrv9Qf<6`D2Ǘ{,/q{u.&KtLY%'fۚMp.6b] ln\i7T?Kr7%]CۼjW??wú#ϵ8L$+m%ASy1t(YuWWXR:czDT[3O: 0j5 Np%c 28yՍu4kwcf˽|b6{E]Ka#9AX_e@M{]viv ;6k 7FLv([XfNҿ噜TY8nd]s:@KfI.www}1<ֲ 4BF "n|=1" g96\)C1^kn*?؏2LIcҢY88ܧ 9 a}jR 47fptZ sP=u eq?nBGw dhUNiAɄg7 H"z-R?|;¿4kxcl̖!ih5IƼQ. ɜAr71 H\˒L pٴm5Ɩς%"~թ\Np9xHMBBξQ%~C2/%_R@.De~$L`U>21،Aڤ^Y"2W vs $Q hWNcroZѮ^sc:zs[(y3J[>]Ż#UXĜa2oGN5~7;iÂfngTmz5u/yp.U팈4MIowkS|n55dVaN{A-WԸBc ;w+vef-D P2ے`&43=S2_O}bfkug;~҆jP;y.I:5Ƃ6@اwj4 uW>H NzbA/!0ax+Q6MRwEӞ9/M;>hS̮aKW#c&4Ni6Kg%,nv/+~b=f᠈v{5JVj /aU!8#hUAɧ$ **ĥ7^},d|!y/1Vs4jR?yk+q@vK ;/y<(e)Oץ0-rxa&Kud8:3cҨ<C?j a?ӥ=ƳQ&,: K1TS) @74[\gQ6Y}!/JjIs)61a Ox&v4uF1fl}@͛8ϗ^/j"3[%S+\2Q1`<l5Ey+ؕi͵H䡭~_KYļ9R0腮sY=~a~/Km'p-?;ύ?6AAvy/Q` RWU"B|)LՊB~V6?'R] J/ Vu F|Xqfxoq_]u%d xE:+T(ϵP {<D-w3i"hpNzɺ )Ŷ۩|'6tWE,f '0*@d='):}67:鷰Omߺj[ Q>8Q{&<-zCG/Hia-eĉr7|a4%zVAU 3dm 83 ߽a)ʿ X}LJ[gtsmA+߳3?i4A76'lDT<};ݦMlx|LN*xGԔDZ0)nūezJM A*>:&a %PCTz`C"T%['NJSixBw-|T%4GbV|*W(:lY0쿬o> > r~|`qAF~ Ls!DlfVV4 . v0T{8;frl3`(䳍 d{}nyLdt QsO_ĸ'v:ax~bTҼpܙȐ0^H =AP;bg-! VzdbD텏cqz63".X=\+)Y1ilzvs-(LIe=gRϩ^]rJ\- ygv^a>HπI\Y>Lϭ5ӹu{@D[[)#6  weS"b /./o!ߝgFސ|p\1hM෮⼢~k{T1@veOA-7$ngzsXOD0|1 u dp*OO W3%{a;!϶k~u›MvzνL,"mUP#3t* >#sQNȠ rq7H{mdc@`v Q`@jY5W?]0r'-I62/RFǛ2Dwsj(nEGC4d;6$ ۀ1cނ.L Myb0t P̥qj_$XiM! R8ZKR}b \PX`*H N0A*CB<%y`=`TǓIdգ⓳Ep;9&^ ݱyr _NSZ +?HH5tu>neuh.=g[㋓YUΨZ|j+9F -OZ3_XXYd0ׅ;K>-暲&i%ەHb/fH<ʶ{e3ۍWۤyٴK6pݼfI_ܫ_ :i/|ꎎk;h%0C %$y[k^j9\0!V}B&t+]w4˅OBӝWڬ oD)6= uO'JY=Q6`UF]t,gn „F"qu/uR ,;{);ÒDΗ5p/Ba2Kl:U=ˌu 7j9/֗匉myAQՈصx0JNbfl \~Suɯ9Os';Bl|^ązKoX+Xt%S)?Fp;J Ԉ?شҸ[ABw!(_k7m4'tJY Mf mQ#1{s 4 {UM$u'HF=6Wq%Ox)Հ!JA 5j $h72K<~1eGlZ.,2EVK4W(=k ^iFQFBO.L6؁:bı!H)eZ[ЪAK~aLR-ltB8l(AD{rv.wNM73~o[(!jy;8-u1x =&bwꟓRdǓ[Nn7})r bR Jp} fFOqwZG+l;ĨTbC%q0gjk>j;OnX~?cM8O0LՔ)K^.PGpw9qK}ww=:M7ϻ݋D9G.$yf9u8ZZXER/lUj 089 1v #E\?a< nn6xxe+>QO7H>j{g<Į@68P|q/eM ;M:_7ZR*d|-,Rȴvo goöЁ@[OnU 4uI.?e*% ׍lr]}}tg=SN Vߓ2{cᖉ8$QE:K*N Y>'($e E}WU6L?h<)!)bOq߽Csf*ʝh 6HU2v!$(Op u8 l8ݖl4{YsA/hns7B*^ vKR#%c3yx^Ie Q'.&duC1_ ٩)lx6j<…i`Pn >y`UVKNC^?U-\O )^{\dηţOlOް23c𷧿 U/xm8>Qe[u Z_Bcy ]-:."PMF aQ4˷XUݯx}3=Erm~WC3?;'xו;HɞeVŌQz}pCNJBPGj#Ao8@)<뮍LQzo+j2D&ϭ2ԄaGDW6G0Rav FtJSwrQfT~kIO~2ѫ!Jj|Jו)tOyV]VH8BiXɡ7.' /JiDVO\@Y@zIgs1eHy-߷;UX2Y, v}^2P*6k D7ߟ3} &v1(a4pKaQ2} tL@Y,dh4֮SI WAs]0e4#kiAlT9OQ N ٵ؞=+=ľ)}F `DS7>ew֟sz7*8ۃ*W_cWś} E71DgOPm~pM܏Lg0~yNY7S0:GUyIcڬ;,&@D6$H[;#wL[I+/QU Dcj-K T_Nw)⣛7@ܦ)JE$̢,5xFʽg Ym| w"Δ8=mg;ƨ1%Y wEGZPTY٠Vtp ܪ"Ԭ[Ġu#AQpPegMfJ/y_t$@l`YMABLGu.}({|MhL݇8#I}_ dKCroU-ƒtp#ͤ܉C| buڶ(nxVݱ|?,t_+caM Wݿ 65Yھn:{'uw&/C?_}h.){_ <~6 );ԁ_#kAocaםjv=MLm gfx,tHnhT#A7jB CUi)I(,cqְ- CV9?":4\6YvRc{}{8I$6+\š5ᰬB '@{2>t(Ĵ` N@;ȞKPBpFmp0gֺLcrmA6)m˥[&j֒.74otp:u6S1 Qq00t|$Pxwb٢Zp"`fDy;Ҭ:{;yax"w(yp`ݠ-'P'1OAi}U]~HdhD;RلR!֮=M]jPEgz6F4t"FQ~}:4*!LtaO]*+7r^hw MS-Ya*8|eϋEX+ri N}\ ̰\v}Z*}MWJ&)yEh- \<$bT6$#NfGUߌ 6_>rH|ljmTPuhCQЮCkӕP݌ 9{آDAqa1` :*7]]u?/?=3$!h1<n/ߎaޣ}֊EbVH; Sw[Q;eؙs9u2(`89gXrѶ*T;V]GY&Dw6+ڜWA~:*aaocf#v39H@ދPMNanZޤ[h=t0WJU7vw5{ISHp&Q" #vIm=t/)H!-)-jw]SfB6!BkN=OLnx&;?~)7d6&u!gbf̸2ᾋgJ=^1cgzM_lҫ/iy:YY^VL"Kԣb'݈j c ~ay K/SRpzIGʍl䴣$*?yTT'1d D}bM[1k.Vş⇝^%JLF-;;<ӹ g`@iʎp@㾗]f5E|m_ 𖉫zV]iWv.a <7' ąoOʬe t&yUl0X'F sQ}:G^-vJo g E' w5[IS>MS4f(Lm'̔G̝9%߮:B:&jYPm3˘J!FM4Nftu6Y߽ZdGZR//k-T+͏t{`S(&L(Aƫ9]D6}̰u$[LϘ|uB2-2rqa}f͍kK(׎& g lKTSo΀H}M ,}uy2Ϡ3 כ/^tuThl&28:Ӿ >Ak^ kLƴ37U)J<uO~X] Vޞttr[]HOy|׾Us댗v Y(`ɰ[^nBm~'_Z; v5Lbᡇ  D/0_;rwL ۧڠ2ּ+ܤSk_LY>jh@-3d{u3u0Lt<-FzwLJoCk" =*uK ȏJBzJ[:{=]̉X*t@ǽŘ͍nQRRU_;gud[f-LeV7(rJE=[$5T xzqHH &vE MR{:#4l/ k 83QסgC%ܰx"tCDHQ;L#^.eF| ՖYwjEWJZ)n9o$f&ܨ_*MAt3}ṇI硿G9{3yJvPZ/Dt0LMU|u׊L+/i_x :քv,x1T–vWC (~2I87R˜uÜdCL#HeΉC'6ĘK 0B/:7B OSE R>^',f@~nXyGm&l$"[ ~9;T\e٭jn}]m+: `];IA~`Xﳣ[Z#gEAIA ꀚL%Bbq{e}I AZ y]I?ն6OѠS)v vu 0]yEJSY zZRwW'UDEd/2/L*Q*j2)`{Q U4ޮ p1*-D3{4 %/HblP+wȋIc'Do D[($ VMu48(l2ע۲ j N"62RWTlU2>8# UȔ&qbrsc9<2:NZIZl]/w!Sb!E[:EoR]QJPXPԞ7pݛ#BBp{@˾IF)^ݗݖଽ`cRR%Gj,&/zR/hFIܰ|%^khAG]VnAA'Teq@ܔբR ?<d!Q6߷^ %ZQr]$2@BXQVRzkf Ѩ\JvxzU4!c62.T)1MXjtopm{a[\*%;Dl5Jw9.u[J imkm*kdhސ@'t$^t)a.1`f/ʇsCqƐ5` MV'c\!,OXuӀ$gˠƖCeʖ"5*q\ٵvbaHt8FpU0h8= S22Q\E-3QQɘx48xS܌ LaX:8 >M`kϿ섈Ma8a_X$9Q%.Bo8 6R A>+'ce9@ɂ" ч_JU(yUnl_>0i&XHS 8'j騆Ē]"'ul#G19KkY+M#! {TjzV@2clQ%%i*sGvDPkQqhe.P=^h15Us[;Jlh9)ʪN*UI &x~` ;޵3q!ci2tݣ]lv'DҶڌX\_:7`4 >*T;]U8$5?R7Crѣ s܄x POO?M+3qi!. FNZDHxp&-hgm7іW\A1!E>rlAO~$^ 7 >j':z%>qeIum(ۋf5"1frtRZ@ XY j_ǁ 5TJUNقHo)T% B?Z⃾e>?\48Ӂ'qd.* Vo쐢~3Ƹ 2NDv(aT}GgC <;tƚ+j(nycr#<  UeDƓ}S&/ 6q,U<p̲^Z+o+lkr\c^ V88VMb58qLED${<#u%a̠\G0UF)ko{2N˦%>?]̨:Ǐdz`,ճϸE }fʎ`] !H.jLR:ݐb-|u 8 ۮ3W-՛I}]tgK 7:flB=|%i10qrh5Lr@L.h\wIs#o~3h(ҸXz2={>b84o{ZJw5a.-#>") M@Wȳ;k2=Q)̕DT?"ٕ 4bѥFL}63 8 I"7]x5j^i D UC!JiTy͸A cʪuUc=pa! ǚ|CC5v1QiY33iJ'$qktVQ@.,n/kC:d]SfvxtŰ_^:"1[*{ӑ!uIJg4X)6qۦ |}WנKj Xz2IU<%MA`6Kr7˖?+/g`(G4)ք>JYMFpܴߍ83+&mV\+/;48_rZ 5=SpE Kx-`SNaA0PE{c@#F-&SThm@ap\к狩p?؋D4$_FOT0uD&|?NBT#DIFP4[P '&-{ha`#|(\~p=q.;jH | .ّijݍ40)³"8r8~м FKQ3NynF0@zZ0)3$mSC!L AQ2;h)DوLa}7iPHNr-^rå2nIg>#R4Աt^'\Ú."4mA!i]BB`4XOwy|QjZb?]$]Hԯ snXnWB?p3힔b CYLkX)> &< hyhN/܌6b,&W%Ɫ+_Q4ӤvK4+hl$Z(ynʠ90ڟ[vYY=D`.е%q|yJ˒⎆ģ!0I KT)R'>/Dq52narޢ} TH@FƗ|׊ZXyMx\%!:&WJa!( Vy [ۥZk p/ok$AkN4 26z+]uFA E[*hx`.NnoE"ސ1.^ꔾhڤ@`xn{yXόj UR)s  ~hѩd-hv,g:sNͨ G}&QCAcKkqe"eg#XG2+]);ڿ[ș*yܙ+iP?y&7Ls:ҹW5&`%jͨoV8L]i` =TNPl<쀰_j]^Ճ5 zZiA89(Je8z38>Gf]=cHq> !fI?5T*Ƴ1+fl)?}qRb;ݔ<o+) OHމr:ߒTm]@eot睇Eb~/)40] ɢg5&U2·qv.j x f*<g=O3w Ƀ>-1fNt{NdJH[mgz^/H2QHYt*nǀL+!>τahCnТW& 9I.VnZ>YUI%^Fb ޭ7 @q̳ am\GR&[*0io]Ϯz?]3f)--1 Iʉ7(3"^? Y-&Dey9Դ5Y9^? +XNY—`"=0fgTqݿ)L QL]"=HeUk(EJ%gH >%N8 v +)a7:"N3d ,&Ĥ+j 2{ I((^{Itw (f9YIЯ[7G1|:8²h!(ɪmq9:S !] $鯹KYK 0?w$pJY#,B<-8& lRGMKÊ  ш߄]+MSwaUh-[4ThAiѽl0C UH 2,Ijy ZczRX8mcm|kk>SE*Z7%uh~֗6 FYܢmY E迶OA=/unfwqY *2>Xwөy':3qIx\)"^mLe8B(ܬyΕ"r*p9kbo3-+h#@j9`D2c6c[ED0oNm:V 7G{46Da˔j_d:_;1y}K$.L 5LSxǻXy;I/ ޥtrzF'Oe;,DeL|:c {麫25ΎBkd{&,}}c5O10nYU|4χ)`=͏fkšOV|ѣr>Yx;DÖp!+eX=u0ۣ:m'Sk 5kX?$^iQ5nj/<[>ÿiXh v%(dyLjӪ(=doڃ^ؖ( r7p|S8V "Fڬ x{uǮ ^"82KeKZ輡@ 9ƭ,{ l b!t->*NLLRu$16?CYoْdB’ѢeNcEQuйV[Z=:~EЎN\څPvFy3?@gwBX a@i"oKMM)^ܹ"TZ =Vh[~!A蛎YkkF/\( '`-nF"^J|B{RBH[!K9ԥUo>ɻ~'d%ea"Us<I8m(q)p35,9BZ5 85SOT^H *pl)Eދ-Z/iWӅY!/) z4TE{h>;шD_p2'n,Šz'Zʎ|/"n7IQyo!ōS_Fi 5m,> qY2(jۖLTq7ӽueރܤy:4 \@ 4ɴJ)8<@q5tdeM\5A}'+Gnx@oxa3W clI>ѕFͿ\k_FmV"=Uu9e\ +ziQifE£cR15#St+8̑R3»VlU! :Nʕ+#I"%b\:ܖ!;^vUV*ѕſ X\N'Ampb== fg\8iuY~u2Hu]-,wV[^أXJ@ܮYȩj lZ |}>"dI{0" Wjej~yr*W1~ T/t(/Z!7KڏȞ N/qLϰ 4Êg֫X{(*u4nUZ{9] =d gwrhso_"W-Tɀ6D]0V// DӜĆ^PpC/т qWG-n?Db_t)&޲\O]fz?aBtH.ٵ5AJsAK Js=>2Q^ӏ~nb!C"'mGI_4kF T1onHF` +Jc[~|*`zh2KN__؍E&rcל Uhzj' unG.=ڄM`:)(#>ImtwdO(&8ƽ7!WxvFHk) ^$'ɹS\3 #周Fϰa7G0V5XUgQłk%FʑYI:Dt)@+p1 АP-I@r?g RN}B So8;)*``%D @س:x︓܋@pL~guM ;5?#4\%g<-Zw[H\mXZ+?7s栝y-j\;,T|pK6yizEۧ{M'GL<77}:l|A͑E2ـuU|)H7]< TylKɉYۡd[Ō5,)`r!zDU6\.ȑ6Zƹj;O(> dQe6pڅ.(3 :Ig ZB._A L%x܍[/7|o'&^jxc., M%X.V4!U Q$"Uނs!Etj[*4QVIl<堸Evj@kg}P&/m RU7JGDn׹"9UV&+muL=2j>={QGLi# OhKGvg&ޟԵ `lA:$=sYmWh;0btF "ڃ6zSЃ}4nOQia06.UdkBHDVCf9Ȁ63e▪ TrxpEM)]&bUg ~Y(bG/[ڗv`mI4،~MBAx2迆q"4ղKUŘsO.a7iaq~x_.=n1 '0/r~{E^՝rEbQr +? 3 {7 w n '·X8͝n  $`XJt$%3ƈ! ncXZi2ChU7V,mWHOu_G(p\EzRJG!f,> mjb6 SK5߫W+R݉1`H z 惃1#ϰs~Z<٬4ukEPe<~)J?N1:vh"HXFɁ!oP@]6Z7A݊঳[3y˷Y4!JsڎnD=*Р|{De ЧTZ)k"NQ<4qaI1pǔE}W`R^fo߯_H)09Ls _ߐAg;V+L8e5<(&Db:#O;W2Byol5ݘt97h۳7+D$nNq ;>oӍTF&υ ټ.Vމ˿XrIf1WyK3&1nXqw\p"dp'Uڤ+7oPqwN|\5.@+6IZiA`;B`Xr,d_1W_T%}32Q9&}&ooK.& u RTINJ8nrd+ْ^QD%%vZV}`N1&0ꐬza% a~C -;\ݥ&ScR*}}%㓯'=lGдnB 5n= *Yeu^~0c6oi}cW/R=o$KE_L8KGI! ƝlxNEd}ZN8(;y,$81p/aF9UHW8~ 66 G@2ZrR܏RFQٕc499 ڕ^:tD7+L@1X{d:H]tYbP(FMJ˅]9ɛŌwTD/q8HoG%p쀽)o>BuYQCvщ Z5jĻEWqD/ۦf\s m 3N$^Hi ov B*$pJ0sXl,iXIF}vQC:JbEKCyGʕ5\6ZP\υ6;'C/o=0'v:VqhS.'2rAw#q^8h3 R]em,b&GDŽ V0Prnz:ž0-1Q`~g@;sb\C^{-7Jۡ){#q ('Zi1o R %őa\*/>|tԻ\k<`y=z6Վ$F]6[|=_(Jı,kflb'z.VDrBGbȀ#3@7߅ڂEN<v/j9UT.8+f0nq s?>]B:\ az4"`Z W}MY 10O>阙kvƸͦ$IvOŜޭtP uDni71;QulV4jt7umD'1%/4K&WhEQFVj|Kyu|cՃ /ߖñw{ Oz XZ N&ǘ=sJeªCLD1iuםZs"ݟ}w4T8P|gF; ˑ@Zs[Mk ~zrysfBk]$[2U>r׼ы,FR܆85d̦f`W]45Q DNHlq(9N/e?^-ov8Jƒ10 )î|IQ\3qfw  v]i:x=|;8OA"8I2d2[.pT#n$oEatoXap Pő\A``%e+Zsnʿ-/m/;BY?-GN-5)Di; Y"]aʏ+$^,+ VMP8<@dB9a &G{qLC3@;иn]wI;4^ s){cTȦ7"}Mɺug:#ϙDJ+٭; FR 'l`=8"lkMǑ[*,~`Lo$1|ďZS&tbSwT8\łU1&ꭱ.sU: .i:+*+o A9e 7MhX8[ k^J6]NAajܥ밙~I*loB \ n |V ~*8;F]hՆl޷ęϖS Gi)+B,It_NbXp7q Gq‹m to?!]Q05ormCP*-m4‚p=JRQ(hAQjyco ,ƑjE-Uڑ|TI 󇍊G_Cv;uHP$gTj KܝҪyzR"aQr#ǘP٫XV2oP:4&(pDg :>LLXV;(Xz`I{~|M oH`]]? >KP$$W]`o>(ht$koC7pq[7fW߮-"g~9տχjh0/qϜP]M Ky%t/ް#C%;  BCP㸔h:7 ]/4~澾z ⿵(71ns;YTLX%÷1?w%Q)>$Kvg+诬\hɔ-AAe1zRߟQ%Wb)1QY†iwߵ;P[d{9`(E&Ec4N|w3ÒT2.gV\Zo7W4}4l &Ԥw ^C],DljɅh~iyTp`!I2z;N);e,IwHhY~~C|ޜaEŰWmyʇma}2}ˉ#r[^ݵ FMJ_JX&ֿ!hsA76W N MQ͈o'3`gC0pN$zM6Lt3_=qr$"^7OZ~18Ey&c 'lQw*Ke0pV9.^d0fF(PNBGz\ Z@_SF'hC[ؠ&spu Ko>{ GB$?h[ԓT[|KF(D&TlW[3 َ0M]e,8EǜҨj%:(5ò `#? m h5"rHJ(X]xSEv-8\5FARbccf=H@ܓ ι,$EX+^+g]FDhi/3.lLKʈ\s͎ E/P[@·A-rƚXKgBg7y]2zڻAPCjCsNO|9TYb3egr@:9f7jCZ)4(l+aܲ iڤ 9i`zɕit.+v:H-mJ~%x8-j%+^Zj'Hl 0.eP Y< =Q?0r^i7]wmgT"!^pWs0T*ωЖX?{.ehvZc9MMˀ#pN,];Uu~z(60KJ-hfҳ|S <({j ҞZ73/L:$Q9YdSm Ѻji!WbySXijR2ҋsD/(;U5}Ԇ0cfAbTR!ѳT8B勹uUpT4ˠ^u7^LQ@ڿT<~N*꓋_xC1#)7M)-3mOcEu(7RM+۬|_|x(5!<'9ؑAPË@Lgx3]׹LY٥A"}he^fIc.d#+X(?g|2*u Jv=CsרDw@50_ˉ5caqaYf﬈Ğ"΍{½Rk[|g< /)a{sWVSt|NpVKr|4P@ȹ1l6uVtUD\yM^Ӥi~0)7%RYZԻإ@Ml`S?s/>J2~Ky8atZL9k )"'MZXIǬ}M:|QagQ"}gŕvsP 1j[ܴFky\L2i.5gDl˭zi.[nzd%׉Ҡ 뽌@qzRj]jkS܀adz!?~ѓ@#ޓĕ;l|gB&Ppa}oQo/(6/T/lmJ#gI՘_΍KL11PCeNÝByf[i6LD>oZt X P'C^Sj)lr.%Zp!GfsBIqFO"^ea>V(hȱ_d ^xɄOo0pI¥d o}REع>x*ȴ}R-&U`7PSM7s1h_$L.͆"Np!~{ϛ\ "0p>aaPrax(:mLz >u<0~'^9( UEdK%H0UF|4& 4۬c~*:2ʦ|q'I=,D1Ӹl3 q-vj .K⫴E./MAKQEvFޮ" tHUne=Ni1 8{zzX-س:9#"Xכai"󋂤GV6޻9f]Q鰎ImtNF  ?u+c*ؑ]&K#|MA VI"`9ydfd`M\U7p$nd0:Q 2] qڅ*qU27xc1׾g4uǟ12~{YlBH@UDlVF 8J Fy\%'o'ZMGtC^Vp-qo{Gx9 .)p?v=GC+q-&^Y`S3!|жFB6{Gm7vak¦aͤT5}N%T׶'䏴7q8 T @43 v6c,SLkvv i/N"ba `tiK =2?Ny"FȕA7L'~ _B1'jPw$d&g4xafQO5Fw9T5Лޱ X~;NKfMC2ZtoKdp&x`J[qdodZO؛#m0j,%>//ƽ3KAݛWI|:Q"njysDŽCPaH=B~2 T^UoF s6LJ HM}K7M9VWj 6,vTq}$\UD9sH#N h9qEJ0g,UCpY^hC#m&E]rplϺi_>{ r @;o>h"ȋ k=OpwD'H=:FNO)y ;ʹ%J AJ OB eN^*-t[u8<hiacJ$vx8i*'pdcT7e}7䪸ND/ʏIe;Qʵ,l 4 y^r7LQ \z0S-7K!`瀌rNw(PDj|]]YDŽҞ'?fU LICttfb[A,?͆QuGTW?t! ݰG ``Q|()uu}0&΂NX !Y8YCDOu]+aC73~0fbvNn^ڄtVv~c2iپc$!\ Hcu6[c2&18QFZ&pu@x!.:}1dg" gCFE A[X’vˣ=jbqbM8bupŌmFIYeFٺ\=iy Chak"){rc*Xp _؜BZim`BjAgoM߸3dpd0wa"t$Ѕxlz۟R`T9 0j S>X.m)2'Oc[WOz+E۝2{qZ_LnA/Osa㔂3?7<+ؕ10*EqGLV{9v_wkD3XH7ߐ+f?ɜS N;[&``U 5\p(C3Cj<ÌJB~zh2oIxƪTuޙ JRܨ%X4Iܲ"i4B[KXJMpN8rg9~/ل!|`yY!uD<>VuЊ ,•8 Z`NXl<3^(s9JN @l@-;YKv5vRKȹL ށZ |ḓ/R?&Cԉ/Hp%ސ*ҢF\j:E"&n(R'\ms_Gg\afofd~SͩBW}S\ITo@(ix 4.}Ӹh8UHtXKKVIKe>ؗc3\OȰaIh2=E[(k#:DRxM: =?ux* &<9I6*C+_ `!mv2XqLSىG^W&cjG,δALtG,Xζ7wO: gZ؏uu8CrqeʁrgnزH 6`DB{ 3Exd@ ⲗ2W:&-CИک +p1dsws: })p dޗ|p糊G:< B `)'u῕j8UJ_wD"4j]xZR5i[mcc .AGLJO.Vbe"hBҸ:rR .\O௤=5XJ;X׀l~PZ[؎ne=P !]-Sjē~D_X҈Z4XY{rEw|EDvBB>G>n!TȂv^ yjXdgI)ɨZnU%^b 0:Raf'@7!¶bLnVJ]n0QH|mӧDZfӥ^5PP Ys/l o{{" \?_E O 9o9"ǭ;E6[8;4 ]%r[mȉ/`Ac3'+μk .83sp6oe1X|?y2)'ɚw)Dž3L"ٱi锧 ܶ\ob!X_%z溻Ab_d}흽S ęb 4n9ڋrlc J-A*ieݫO`q?i`*D Dڹyj%r0+Paa}zU0f;Ouk6.ws9ʅKϘ$7==ųFSWaAoJ&>_(jz+&C/tuf4LxxL_0Ce6;cDS~>Hõo30IJ?CܴZҖeYsػۓʼn;w*ÍZАOWB5XfZ"W/3GO='RIsỻ7Z/]Q)&1$I=ej"?r $EbWT*ڡvXedg)ඃ47 ^g5fElo*6\?t['FxF&EU{Z|#s-Dm\64Q>%FH7>,~7l"b |S艞T#7(A0]eT=Wn:' iU%WI %b=<կMY'$V3xqQlz,1@e$ CBjbziG'p"cF$"thCD [!$7 n2̰0ܹV05/(Ӌҁaz[Fxʐ> PjŤ;1ضf_S?LSQmF]Q|XÖvq2:|\_[?&,*J+A2 dC=q G 0:-=il0ND_M.1},ĨF|bʺ{N.D|qn*W}jH 4 7ʴ:Y_+>mf5l0Zy*[xPӼZ\2'ynX8!Nt}4g^ӶJI>0ʯB6uV hhCx! e=b E_z&hhĆJ) di"d:?,^IsAҟ:bdO r%rUJuCsW>ٹ,fYb~K$'!K yB`+o;+ػY8: (o6R IJ(!kb)6 jϤ?o>} ǟK]Ǩ7NJFCENc/0<Ѕ%O'&>)G 7+xx'&JW:^<>$ԋf{KMCHmc!&x3f}Uph aB~mu*v|٦f,}q(x/^EU\<\.\5DAqmG:Y?B-n{WLĿQQ$856 C&n]cX/JZʀTL[NoDfNuj5FZ>7 Me62U-֒8bQ/qFm)<$ԇK6;d6+A#.dN'(e YBt1KLjyM`ǹ[c2۟j~(A>>CGvaA(pkz%PM*=T^t `)Wxǔuv<@a L~|^(t SϽ:t '~(?lκڰDVQ=Q iv>%.e-MzH$E/Oะq9tːd!a2*2DĿ:cVuRj׊}J|2ı^iG2|>J^XwڲlvU攺qr<Q\B|AAO)1vzM#cƕkܷ5_9L "SVY0| IaMBgI#hJ )°ڜfuNrCPXF-9ɞ7V kߋes5: wXn> *E6ەKv {ev'×0eOrK {먓Y$%՝"ێ2m&{+b>lqG̺i|I'׺ S9uq.q< Hy`VbzK/5=ݼhΕo:te|f" `Qf`gyl37#V|,nHQuLؽ>z'>bo7*>;˔@Eھ)' ͩ:}w^;NRLt/ןS+IL)/&e]Ep)U60@P<7vtrrġ~v(-Q~ՕM .;"jw n6 J&IBvm)Ye2n6w Lh2fpCUW,YϐT2bqkcjb5~d-uOd‹%xNVuF>uhZVl7;^+k~,jڑWƘ;2e:AD=?V:ws,>Hhe k-y:6o {W&yi).1g'M2yϥ샩StVq]2Ol~zޞfWR +n v$N8,qGe.|&.սEk時UȔ}z* aBȷ {$~}jH/y."6D{H̦NzbHR .2LO6ӄ*ߙ@e;ep}JOdjդ=o U;_כ挐eP'I:⚏] ?.e$ QD6Uff^!30Qµyݠ\%PFuU&]ZYV93'p媽O?FVbhSyczS e5 +44MRq?yP?8Qi"?; 74)r3GU"oOU>uaGWEׯA<5%5nJH03֏k9*PX(BO\*TN)@ڡݘqWE{5BЦC'٩`ezT=G"4ʝރh?#}L͆!SMFo:pNm㖋,y%-\v|wUe1Ff0Y]DeDeJA^,Lh?ȷ?]^5>0bHQ{MyHS*Yk|d;ՒT#?`ixÙ(7s| r)#V-#a7e N6T~])B'4FOE:R e~yI14w#T.SM^t1i )*%136o(IӌG SbJڞJ;yUpixܘSČA~c|"xLB`+%%خbwZT8a@qsKhSєPYWh=C}YnҮ#a{3 =#Lύl@'#[Ngx'>!o ҂8?'y~ƎI9tWE&>fAh) .0 UAY]6R`?nՍ(mE>XW% 0~aWo!@5eNB:ͭ )v uCP1^/5zF/8!蘩~;5- MWoފ8n5nO^vЙ"-67cV0] 9s7ϡ(HrK[}}7ʣ+s.,.MxS+"^8dcy7r|Uk|Еrse_eG(GZEZ/ į 놷@0M /=}iDcwǹt[MS:T=s3 ;nxiab PU9DߦU74pRSAJ0^L#DghyНfv-}"> *@rK(: \NGoly:A۶~S9r8oh597HSyOMD¾1>@bno:nlvJ5(ШJ[ 7XHҍ!`Emb64o'Sa[]6R?bziV"Z/n[ KBI"ϼB2@HTW, +eaY:R j̓,m?f ݟA}GUQbs*.E(^ U*^G_%=k,Ae-n.QDwGxgs,EܶT 0 !Sc6P%p =l5?lc QNJ,HrW yo{6=yjRK. Á 2uw]p%=f>޻ d4ԚS3G5ԍ-?@'C5j/_g#Kh 4}tm'J*+ t7,Ȫm=޸!sa!hefy*&@|Ri0nӥ{fגOKVf_)pw%2ܵş6su?;5-S GwSLǫWv1XX/n{(4K`;Zw\ħyN%A2Z><Hh]Xy'k7*0'uid'\R 4Sea:g4CիV\^tI"H}-ӑ$u)m1֣g4"ETL{\BioT MCk%u AfG"^m@,}~b\-H;Sը}</SdQS"D [-K+c{m6 &Uɗ>@\8цmFŹ)=w/^-z|~o@#DY`zzD/6!Li4xE<-W6}8|6ūr6Ǝp|Bqqaֆ@3rw)cbYExД3&9&G@/[ojʱa3fyOQn==k vg5 GW]UF,wMX6;Zҷ$a&<x5\xk=}ڳ$u5mlRPv6Ry.d2l-Ŏ;xqEzA d]Ԙhk\qҡ|t@kf"TV m2k"盛{L㹭vn6Hw\1~T֎Yg}tS83_E@CTS 0n YJXiGsV -auop1ϙM`91r<6O3QܔFKąZ/[[`?ݗ_wŭu~^Knnr C'f612C}^#Ҍ-;XD 1ފWQrw+WMiT^z4TI{`~^!op-ql&-cSJ3c_Kq )g@>?3\`th.)-a1;[pYq0~摲VD Wqֽ8@tún1jǵ2>8׿_Z `{F=C=貰2vfjnYopw;/|edqzt_VF/2$85Pϛ+9/FRQhI&`+GYbkPKsw//ʡjj Qu(6B G]&i=zB٘#Ga/\4,XJS>* e /^R@Ꞅ"P9|i*n2AgxN(/٣H@ g»RqP~7(R? 1 QLjnzL)ɥyЈ+Xش*$3zq{{`Գ'w{ȅfeh/z/&_g`ELX@R,Z.&`LKF"(IO8vD꤄_Ϫ$0+zЉ1i9ZXI/NdTQbVf19zY'.x ?n)<Md+bnKrSo^:H.?4d^f8WFM`Ru])D\Ob69Nf]q粏q޻( 1@FVg|il  :֍ K/M*.& %x )6Xhaɴ'?nl/d8eK<:xj^V ocɔ\-TψeJn m j @͜w 16(b=mg>;Cד [4.#Ys\nӅ7=~X^g/KޥTGzDY7Qҳ&]$%m..ʗ 0A7lFO\:\S)\gdvg 5SLؓ]|GAR$gUg$ϱLClxZ//$^PӾ%݆"Q*u?0΋:vX'i,O BA%. @\kK{/td`PDг!EnpACl){IPPCږŎ,IRa|:ac#[un6tPz&Q qw}S/K& [u+ٌT1LW\>oJъ=k40@wV]6.re$ğ\,6/݄jy;}ۨ*-=G2MRsTtfw># id e1usm?9WӺʻYh}o_ 'th @05Nwkpk\yʵo"!I%Fv'ۑ Э&?w@0.p;I|C#np+iL%M6vcc9^4aC߹s Gb4/ Ś) ռ!ʡ*-rLdѪCwN1v"jˍoKs^1 ۥJ-7O\S"&$Q*բ7F\]}U$rd ߫ԗ\mSH x\z5;[xŻV-ǁLBkw3t4phs`l0{eIWmk|]Ҧ bHH4n vBTrH8ij(@q0[$,bSLB9;ex~շ@S">޽Eś+ȉC"'Kx=NDUؾ j廁9Р7դYu/.y7p.,KK%Neヨ7صj&M xnF݋.z!QӌC{BT]zxE~yȌ}mTܘCx[;/n Ѕ2{{ķ!$Lnus#8w\'рz~>]kp0>g$l#g*vNU_Bi-S@c98&M~Q]Ləm{-R'(f@4w`uk _Bt7%[[xTHk=M n|Mt1&=L_S.RֵEZ>hMb9Nj2=?Tu@\{gq`6q]2X^ iҜ%➤Q{mE>YAy+"1*QUm` 9@~ug;*Ͱ':䐷MXm_0PM9\׍Qq_b |O~m0),j󭈟nTg^q~b>,SuU2eSTF r] 1H;/`=WtѤA؊5#6||-3͋ޯIȃahŸiQhe&IŤE 1=g>/> ׁ̿3(n`IE@A Y]*C,@cH=N;wdQnY|$DQ! %r=V R!{|'Y=u=9SwS|OG}ApF aIҲ2}|4*yQvmfiC M`EU4^/ȷRe:ШȍP .;U v5`}%O^V:.Fs6.T8t4Is%c{oQk~d7ltK=\FI ](܇#Hn1<qj@PB5?"fz'FZ桱IGF֌E6:µW{_)0]a/Fy P`8ًܨZkV II s*8P=1_}>$~іm#5Df"Mo0}=[OqG q<@jY]`5%-PشLzY/>ݣR;Ze&r\ c B2 (ԗuj7'jd[{cl.3ZaFxGZ sh_Un*qݔC/Û|`= H4yqk~* wౡZG USfݕ|eBt6зUI'ԃ|@[ՠ"~;[,{{d &(Qٙ*K6b*.{H` &)Xʁwx(7k+8R(Փs:,%\z @ws7 (ql/MDb삆 bPRG9S=ÕYW `|QrYc*1"r0VߕI({Z"QFBůƴifH9oV=MvVT%sGLcM\:lvN:K r+{,_9B3n0ƱԞAo(Rű ;o ?1*GS /d&-fwzZ4ػCzѯ,v د翚 ;*eDsל+C Ù ,n5:B88qX .+Wj-30֣(ZFMl̓*֮Q!vqgRDGB}yQ^Ε^9`!ɵ!fq0)%h+QyhUr_ap9ޠ9E53!aă sl:J z$x幣*E#Nc4 2:Fսf4ĵbvvhFǀ2N_,>?v k Oޖr+*+u?a ^'x4 );_wv5 .8h)#uªBc `,P|f{f=&זNWן:VcWCve?H*.y OcoL TU$TH6lc۔D/YQoKgcH$֛OFVl\EVSAH|6T\״ΜT:hNVIt=W`ܐbZFƃ}\C`7vqO o5U T>]lvI0CJ_d". cx7hՔL`ZBnwT''^ DI+?Lrn70T3"؝[Fio"/t3w!437OLpe4buV@?mᵷDVu*4ͼwi4>`A:Oπ9A'86â! ]c;3afkꆒ>FnI{*#5#*Ohn(iL؝:E"2#M.tYh& S𑐛9!8"QRV\2Q^ZӻgFTk-i`M F0Z&hֺP8X^#+LZMh3IwT(4LYzӥ +9VoF̺ۂiPZk@u'C)&B|O8/ QBd,όZejTi-;n';G EI2)LT-a8sn]VQFUV!P' W>҄5cssJBHei<3 'u;w?\.Kv5(+r|ujIv-1'<]d;ƾ⇽"evk7(CyDֱpd3`ßY öԅx4{ţ:Xe=ҳw](@̔~)%_$7N๼qM~㍬v25lGnrW5 5k]])rgE-,)A7Ed m5M~2^_kiS늿nXoӇ&˗dQdF¯D"ƻ<6"ޥSR_98ݧ# *Xe9'yQf.~*TOAYBڊDI S7Oi2Al8L0T!qgb-JB樨Y&n:Ϣ$?_!?JBҐdbvb^9jt4n3q| k5JAmLZٯ5T |.y!^`C90\-O2-+^>9h&1X\h2j#k:edXm 9]@7R yAU}P&zv9%[d'sunɥؙyc~{IZD?aySAT8 v#p ,Mf꩛- h}3p ,k n ~8Zmi'΂KڠS=H,Ib9U/v<0&NnQb=D$n{&H2 ?tT0,\[yg-ڇ <蛆%᜖ Jk(=VW~F2)IH,\0 ^nf9ϾIRtVݤ_"Vy` S?aW|Z#H. =C>18gV\~=GaPp)O5 S൏&| #euYZڇ "W^?͆ix-ɨK@/Nh>. ,gdzHу~Tp7'P$<9SGZ3뀏6J=&EMC,Fhd;Icp8#xP zgN`HOl+Wap%1!~P>s B&hw  ̅YTWͨQ1ia6ygSSg]^/jQhKrH2yfnAZ0:Yu # 3[m 5:ji\DS409.c%$Fcu<xE ,Mm}׺W&Z3`r4ADIW)i H 4nD, pdE0g"_u[kc1 G좷^d&vHrQ25! (*n55~S*úscAq ',ԱL_|#P^Ib&؝,))uOyP%?Z-:0na*"\3t:3pAa]E@e^Ge+/d9TTT%qR yHbg{ب୹P`\qnA4\0 s0I5*3=R|]N;n]l+7-6Zv~t{iL[F~1n.~ZO)JY;u*?0R ;:MenS2kR 6VJE]t?v`5>\94EңڙE|W8-8~ϟBL-Fx1<*1w/"E  I20ZB <$ChӐgƝ#tFCxs}$hre/@=af.ljňjM'\g+iבK*Zc,گ2%'FR%hCXa~| 3?{QHtU`XG̋H5{G:>0.9פK CLLg X&>zL6$I yrljGJY%FF`"ZUX,|^TV_f#d*U oqJKEü@>5cf#VXd|s~J8d$S3 r~X2܂QODSFDrR{ \K` ۱vڼpJk[k%L]{twU}b W<fv~-Ƚ|PY~?EQO}vS.^3g&8O=QҔk &r4Bn2OWMgX~~Nh&Iv63K-"40iNWGlێ+p>g(g%hF$1wo,rV6d8T%R>[ޛN1sK`~WF(G!q'KnjNj&䞳]ysyJsyU Ҳߌ~qQ @KǨzg#C G#u[*!f=)SiN0E qiɄܢh/g5=IS9Y-zu8"4ֆAZ~o2⪰p~ ܴڎRL5P}zYX1VXHR*Ftֈls5A|) D7Ma M.$x4 Yiӫb du$$:&ȊP(l&>p)t>.ߋhT}ՄG;0x76(N^G}^17-_YewMTXC\gF(oyO~ѳ@0huj Q܏9JhFZ ]&y1g.gS4uy 2y0+CA+ f&v$At^4Q6yy~KpfӅD>*]a)sr_[Ռ=%U8+܏3UXa I^.2zt%/ =q$h6u  8K*v˺Bg3>f>AId`r)Q+3PATB/C}8qtܖʊZ&Ƭ7tR 8`sM+ŘVw* coݛUJx(O<\v+K#lYCG*i=2?d&tؖ>N$^S?sT6Gn Kt#m;ZѶVYâ2*(Dq. bG%OfZ&{gp! K.4qB Hb?ֆ܎dWsw>H3(s G\ː/5[3/uOB 'X%.k7װ9}9~[?5[^Dŕ% |TFn)^&9#źطtc9WM(&%R5\ B$VP!,RHcLi*Nl156\eOJyF0 z}iDⰯ F/?vB @{A9d$]Cc?CXDP4u85_y%㶪7'썛RV*WP墚wKad\%K@7QoFW+,yWvh2@P-]iAtD*qʇis#iwy&h|S ܒWΫ*"Q.XE+U=b%tsį&ʸـܚY.KpNZJ2j1O {泌os鐍''..ۢN335l9(ȠdVJKLkshHqL9QϮ5KXGý{ ʹWxm MRUԫz PL@`HϘ9˨=2sk\:TZ0ըMe7p{Cwri/) bk0Q5tشFyڵ}nv=R%›EiJhZi \asN,/Bv m|VTKvv7Oy FGWM3dRq"c#.yc ,ȿ-hckmDSޢQhrJH~jqukqC֌9A,C ύa%`Ȏ8P;IuD+/-Fj6, b:N% A >^M+t@PA-3ĉUeY"{m$r[8Ƨn sS! \E(kؙM>QJׄ9xG֠ٻRF-M/ZИo-v˟4Ҁ^.l׈$qn+l;$[Dn}21 Ψ, R_F{@5XɐUaCd!"`'-y;d㇒$B)OMk t (hPO8#928'a#ms9Qlj ~G*aHnfrԨї>Y96ڍs_6 ń<) Z+ZXf@@\fVX~i٥'I(U%4Pӏusx޿X$uR-i[8$ȸ}-%{[c)Up"yyln !e'7_׸œSe=3''ٷrl3(ጿF/:HPo\M(8GL<(67riBn8@~^: ; JSlt xr0 #usaPE)ˢnAU3,~O>^ PY 5p Lҷ|,t'ͱ:}Nm0'go}0XQ'2>7lCSAv_0Tcپy68}~ACv܆+I@qtt?KF).1mO&q;Ȼ @G\HڈezOHY YJ60#.# qnћNkev.~쁔E-^PL ,ܞRSs[T<`(3Ϧ~4fǹG]WUUf'Ja- JW{(Z4x[D} }{q/C/О ~+,|aJ84vܹ'C)m1)"-@aKL"yrp8{tC̢R|K6WiZҹ[m{/u+d0E8J"+N# /6@1liA7 EjS`c==]؛8q Nw%|`~B».7Pϸ=ng2p\^T!HBCebwtvEX6<+$v8;DxSuwi?2`- ⁋ > T3⍵gFEUZ2O,pR/S3l'MK:yhZF|F "$E&Idx[IV3Ȅ1[Z ;m69[Z}šʁբ2paļ$l )u2T[MXzH;>;FㅂRiK?y“~k$i[fTwO&О'֚^H´ׁ%.DV}vA? \dEw,è}&ŷ _qLa$CJ?Vŷ/"ۓX#"&uM)5K A#QQDoh[2_^ L|/QH 'º8UnCڂ5|qQ{C֡j^'ZJF1qm;>R|q2x[|&X-3KL.&,c]c5\ɒKk *{ωl9S^K MO|Qll+uM2 0tQ0JCKE*8^JaswoawVi7؁=jO8@6T"l^Cz'~q<< zQFIUvr12/ N3BR"7o;ҴÉ"GYp/ZU:;mwu6 =K=90ώwU fTp*܈RfO: fֳ\>=o{pP4am p + }!MTΧQ{v>f/[5,Lպ*#jl.rsX;9A_Jz'`fM t4Ybr DkVޗٺЎ8..WroH |o)[)x3_b q],|'A}ޡ#e^cA"z36kõ"Ji*MoW~=ql=t1!.F- )ntjޞ,g( 5fTӄ?F#Z46PwBV'9uʥ?ޝg h`9zjeLB;)Cc-hՇ3T3_JluYڧi`ݹ|=#:l#sp5?2ǺR+3Ddu1U$(",̊}}˕RcU6ޒ. CX.6\ZT~MֆCf]{&/fsQW^>JLx^KحT6_\9vg?0Uیju$=lvto+c3#*)ЅYԫRV/tZ+[`d5^?!3=ol6'!o]`^-Y7iDW-!%sj^cd+ؘ({\r5 ˁOu8FD^bw V (T׎w'i+IY9puچ{LJea\ k>!,DX{,P1p~ItrpL }`F==ObA([`vː]qB^TOM8{Jy5[c&)۞12{%C꥙4xE.YG^Ǿ>bZEs"kzKС83.T!_Ny-"wpO}! z Eэ=mZ+.9T Z`jR먂\)Ѝb׏ ̉̔,&M?1{p,'eƴR _ G`+qFHD|<Ţr^BN1fG}?-Tolf)VpI)H`-u#t$6km~#Dv~)T@wYn4jc Mc;c5qZY yxid ~>0ZION;WrՌ`̱yǧ,/YtXP|&!Yc "hΧtѵjQxƐ>uZR=TcVJ ۀ*CrE7WuC(Z6_2<o[$ң9ޫ5dR8Ie27C2Sc{\Czryꮬ"vm$#G1yHKq*].Ec zW& "S]❾w?>&+|̫\#"V3Fׂvgm!zF_8zNeT ;،`-R6< H`@&RH#$lgP0W/@U`lxCS!!L[G1ա,ݥsc@>ÅV0 M$dH/HI ulD&v2daa W@+ _EFjThZ곦gYRy8Pe:o&IQxZ*WU‚0Ũ:c5kT-(U8ҋxEV(_g"YVOźGj*l8dKzg;wPXkHQ$";9nG :zڲ$R)'j0f'y-zS!DOnBxbtW8o}OT,Y Ԡ3!aV<@X+3@ fo2! [VaI|#,u׎Ăs@R8@F12R0h9֭ ԣ&a^3y,77`Aް&? >G6WƷcs~#=ez WKLoxd[5r'S˦-ˌz9)RS9a .YV]|e:)†ZD34".^6LsL5(OC #N 7 (%5ɍR@'3WWzIȖv$^a{ R&ŋdlR%L|ӝxėKs9:v7Otu&g&Z޶gC\I-DĒ@y56$ vi @Vcd(]scԇ_aG30ۈ_ D{QLKHE8#>]nb: S8[dq![Z 7d(טw^zX:&Z8$aBsI*@, | fb?ײ3wEUP @8P ;oгɁ 9\u fhQnI=ap)PYT"~9!UD)TY-ɮu6=X1M(E|.n&yAVG6YڒBt߼LW@ gV }\dЮ_Pې'=1Q^83'{i@csWֱu N' mY7)L"L4Gs{7 Ť^1@>ԓZDSlFylNl;aD<.F(8dα5Uըe9#H4S'a #`GHC?UƱuBnbG`͇jQyd-k>7(C1`s:T̲߮Ǘ:d{B]vPDuIfm6%)1Y^GOtsމHY#U ]H{ φr} 5G~j!SOQC͂26]T% o`㼼Y?ҖP ƣh_l m7z[tT_gW'o2$GԆ+I:@[#W1+h$6XXHN_RFyg!ӽh xhJ`ԂA7D>5Ɉ}/9!Г ۊal ٷx:o B]o-xR(w$fxa]1[ }dfE{M} 񴔄ۋOEJBl"Z6Tʒbd¥g,A"@x~_rG9+Dlٴu$) Jv*zŝɒ^EҤ$ ޼ |(0 g aK5scII@;%ԉXXTY,<媟K0Ah9 UOP곴ws(XP t}%FvFETn+㥛ߗ+B܉}ܮ oj%:"iW/%>\p44΂{ qJ}lP ;1gJ2ҁ_t5pVIRh/'2 $ ,67ix"𢾡oKNZB=^`+Zki9IVw- ݁{WDLM18S| *2/I]B.ϮH3{륙]6>oDt&y :MS-_J>_@tNydCsY!(ѺD]2"^z gHtn0usHYj"j{ԏX)z큻!299:?(̑[`p(r\>ܲ[(!;[♭(z@Cwi "8Og+c_ 5Gc~Jykar`ꨰ ,\AH 1 ˖^)gdQ\ɓDW,IW ?x'2M Cs2 VuP`wXn %A7 }e (Зs꼒[%$hv0͐+) .dVh-/$_ȮSXs'p+5RIj#2;`UR8lB uf&óaؓp$ ˆ'&/1QD|+>Ӻ[fX3W8 4D[lv% U軸psuy7j\hO4ېy#V:' X V766 e#g*sɽ6ӷ[b6y N~0ƍy >; }$/L-csQn$`p_J{[ܶ*Y b`'w AԍY;ycL^nϑW&ɓhb3ubx\z2ض>iIi$}PׂM_2A13̵I(AK6㸟5ӵ}0٭qՋtt'UE',-KS 'k!,yZى1 TK=)VVkgr0ZPȬ$ Eo?Y]A6;Vd}"o Dg,?)񛠉&et6=/5PA(LݥhwM(M&~>隶d 'Ud kcjŸĢ ǍӚW N fxKqȾ.G%}]'y |}`M$J[ҟ=&~XfaY[j*gU5^}Rq۸u ds# ŹEw?ޣY#5? TRߗD%[T|gJMǮx( ǻv[u:3uԈ2ShV:Hҩ)ycdYNf]ns`5HESzC+PQ`3qaw*պ8o8^aZǭ4_/&{O:r@'ˊv`82$݃`thzKMtB[ǀ^5Oς ώQ:VP67f}NN ʉVzÿ;;\]tmX%Sw0ĠIt[՜-y$H^j,'~4N{lăk7Yخ'JʤR7WOh39+0[.4,,ZROW>*^ L3CaIP<49r"N =(2iV< jî%<^yOͨʇ ~ |ۂ>yyޮ/:3ß2-Fta4MCJ]Ȫ:qB/LdX[?,ZA~gm[߳CbB)xv[sJT|&q: q{АakyNfb,2-u7]׹femwk]JT?Ac:3h󓒁En%Y+%[˫| S*R,bK`hK3UoWZYSZfñb9kVojTs[1^P鴀-p4]"?(#[mlthn8e7DiP1Ę1P ǔ FPRpKA>'#Ÿ`WZSZN4S6IvˊȤ%~SC:a5~AOE-/jV[pWZ](>W2~&iө+K:yXH7z*̌E]h!1 =D$ xt m&JD.HSK-ȀV}ұ:1/P1%v`]-<,؉S1RpJa6ً߳لcZ=BuONS/Dz>Q-8d zO!m*~OBdᴹ- Nw =Hm|[bF䮯Y3>u-KeW<(BUX <&ՕWϟf[w I9yn|2lT߄ۢ'WCzkgiPc<Ԯq 4cH^x 'xR-'X$~ bp_6ƞԌp%EHsRn3< ]Пimeų!ܔSn 4^pzvU਩;ێ_@>3+0)pY ><'aM о־4F} n?) C#RC i3"sKK[KtuQؾ3Ɲ`[|Җ!7V"WNb|]i:IAi}tb3wmJ5EQݘȜs孃[〞w`}+?E!]}*7J, 9#mA3gPҫh4s'ceRЯ|&u$ѝЯЖI{E0֞K~u<uF)=S&铁 dkO:CW ͙ i8BiEGnzlgnR3lUG() ,w~D55Sʄpe8te3uܡ1fXax;$ ֵ<ځJ,3Y^fy q+وrmw8Y}h/RZ e3ӭ`&ӲHFZ&{!y9f{z/);G(*|#ٽe=6 HK{XvI όKZ+[z7U$G&D3̲*r;/-A+_ޝFziӲ lRCZFNMt[v %#Z ѫ}re(j}`QrƷO>o9Dh]^<ʣbD]x?^|"cp'MDoAG1OEeA;TUʼn]w-gpb C!" +Y3ne fL ĕ"}fBH.P>Y7H /(B! 2[d ϛrfGA]'NiA^Ģ4!͜|Pe= (uj/T1砷q]7x+)2 $ZB9 7uu˳Y_ dz%ǟ`  , _fl3czA!X58cݱ: Ov8l"c-,lw^vw+[a+sSqLruM*ɨB.y11y-43KLeYYH5hWNb cš.Z>QEe w(E ,R#1u e_NMx4qebˣ%`vwjVVӴ_q.t"f*n s18ԋ/|sq[m 8 n. o* bNj/;sRcYsmJv?Cjܴ~{6xOV4Г'N1 z^V2BG1~B17Z)q o׹P_ 5.CBGRs ُ2ee0y, } +]QجlSZ~M!rzpA%Dl[w;B:dRK?x7k3̻fo*x f2~WUw7lL j֝_H55`ȫ}Zz䨐Y#4LTf{|Ka.yT(e4oBK~9 xO:KbQ~~ p ʟ( 6|vgmƝs\,1r ]T,RtטnZ5C3Q>T/".ҙEmH) a$^ *`"`$mg t F2ے-^FHJx{i@qs>_aE(3LCm|uq gs hxFU;0qʬfV)cnEYT:sf['d{Eo@/=qgJ9v4,Q@sfpO؏gأl`6C+Bf%<_dc=?]w90VHVg3Cʃ1J;0l*ƫ;=opф$+G:a=mY_/)$OXuo$`FcJ= 2$2ͺf2X#~ʕt:.\jf5ZٍhKK2.l23 zFw"-AR==Kw;&&C:A2T ňb-f43LgX7:3+(751msK g%Os{N1;#;Rʍ~&=N'*^)R4T:m8deO -g{vCALYl2q pUq+ u'Y%hՐ;L |[>U{WvNZ~OF b(NСv\ 1X'DיCthA#b{4{p?Çj,Xd_Jo,l/x3Q}<*L^̡q4p]v|Yg2ÝQ&&I׬)(TQŜzS$6@pJZSB觡hBЎLVꄒ,zXL  :3wϢj7ԓ"gHCi}:A4 ;d~ٔŖ[;;(h( =6I9`~L񒃡jcwω\uў\2{yݼq33`D Uh!f1 Y}>uH,U, M9!{@%wBs+9fO^;8_⾏E<3s?- _\@᯽ '!% ճny:2j@]9}M ׵Dcs`j08z5JofKmjpuUȳҦ)M, PkUw(a.oJx欠svڠ3r%t\aq-L}s,NEv 1gqJ ]9 a`$. \33vk>'Wy-JPL~^o55w:p0ƙ8=XAè/S g}V>29^Q<ꨬkeJ/ ʈ74s7U 4(̃^gY9N] 1!uŴcjtbXo?LF]NBMYɷLR_r/w3(s~.'%"=b t{qu-[%_#b>Sۣ@&-:0-UzĜMȗ@Ag~!)5K$㨯ŤRϲJVxޣݍDL' VLZxZn{aPQz\4 'Y[eE=?Ek'o9> $anh4E[@P*\=Uޕ!@D(c ?mkSGأƱޖf% ҭ= ~;f 0֏TjyF [[ =/ʙ":E ݙ!_n-gXSWaV|-u,$rE =.}p-,= #t(1Pwq#2PCuiM\/s{Cƒ#)Ē9Fh'iV^{eGℊ`BGDk|x z@Pک&G}Pݚp-/vq_lKd>%ӓ.۟E3lf,?&CJ~7NҐ蜆mv BR|G+7 l y),Z;QەMq=ф `F+g>! tޢepV0O;9͡퓀vBZϑHc7-j 1ԫ"N4,;|ی>Bpl1[]4$ev`nE0-)^kڜO@| 5t;_6Auݟd+EPACs,p/ž4,%ThYs,BL(?aWick{Per$I)M(Hc_i}.ߺ[sm\.32ך_*_#.yhwJ_ W굜9,6hOwl:!9l$ALOޑQ2 .թɰ\i-^%1[D*5hrO#0 wy4$y(s.z2p1n2=.]!^0 ,Agtf=bc@MI=.w| IF,l=!x>p..X͞e*NkY,\2<# g`< d[ ) ULzt (cѠ"z!jBy7l3ƧruP4שK/C iy?ˀ߅s_Uy/,.ʇתny=[Rv$!L`tx[έ؀yJނ2\<3&k8;A(dfu DKÀhXy6 vϩz F{l³jς؞ bz@.TH\+'LB}FDh{ich!*hwYX _ykBR%.5EĝYa6_csϋ crű`RL!5<γ-0 m cE˃#*zP\iY#]Z6u;^R ARwF4 Mkbbϛ/^Vq!pŅ,lcTX2@[aT*: ߾:11n-LZy-Fy35gIBVP֤%ֵ.^lp.a74 ?q`zq8xvL;7p_ǔ"IrF:!,c3,,٠$}.Cm}NPVLXҞߪ(LdJX3އw؜Z {9+ {>;f~Woc8*\ 4]zb~CBU1;2smK-A,E-X=ri20`wu=ZZ #sv.+'^5ɮ~1)<ᥔx7_+J鴻[*tm>A͑ʬ#N:ԙvNs5,0 QsMb,I0,"T6Uq,G/ar쫥jG/s&DT_M <]r@x#r{WPdη'QgP@Q<3+]L+~M7-[p]WzّzzԲx'ppd@zW>a>\~1b2|]VBaŷzyRψ^W;mi,D`3Y^vfNJ }3F3!ws! nB"J+l%??+$kTQ˲Ȇ^#X&\[9CKy0#i _ 45D Tm5ÃpFlp@!uWouo>q]Lwt9[-.cH6COP*|Pv IGdіzh^wcZ<&ObX7Oym^:+67&SuȶrC-&⪮0&j{s=v4j9cx6W5bs[<6J?oK tXBB5e{ ~Pc(Wh4Ҁ)zpeɜٕ&6d ̠HǪoshQ[Z'Z`sx(? {}uj)OKT}t)a#8a]a?0 GͬXy}sXV 3qrJD-y$Pr||yCأOtM՞%:KwweH'?ƞqΒym\bZso`>^dm5Jb ^Q056Ԅ)%gP1Q́i^I2x R'~q?٫3Tc٨|!׵aodknd,`NCDoi;^lvû̒>:*g"u)$+AĐknܥ dz$}Pi͔n4oT7i G` _yw+fS*nw.WNN&6Z\JnsƑG뒒$i$q\OA)4zje`'݈ ^(Ylmf,]WlH N>=l : k*o ZRiQ@gڊaC8bt  }ͳubZ$kۙŽfZlg:!n#EF5iwE#P\=hZw4KUiivAX(#s =3~9dRJ>+}PގeNsdivtJ!QEi9&P -T! W7iW6`#f#{Er'Fl޷>ߴ7_S>t~ \Pj^ NmvK*X/=ϘAg?i6.Xܫ|*£Vi ˪|(QU쵤x.ߞKv1><o2Kb&c{8LcՍmH-Vx1xW%w7a`Fy FkN)$O=ۋK8=;`y!m sW,:VKy W،D._PImxjU^%#D>؝g<X0\FzE2?уӳ`?s'Zqݥ.bjAnٖr6[d==`#"9Ge>.yĚl,q]/F[1CƨP%:/Rv# &|2΅Q_8Y͐ff3A8DNeћ̞ݐ8D5$ԎnRXsg(īZԤaC2gvQ|8[S5cb.Ĭ>a=#45?4TybjE'mƊZ3C[jo#[:(KpEr1u6]o2PJC:{N,Лnr6 4[|%Ob3NA90Q搩\ه|ß}x.%^(!}P?~ŻHX_^iЕ9OfHbq8w9zV6F9iC5g.-;N <hV篜99k~ +&et>="b? |;P?47ɧ72)Ğp;J vɦ9iلE ABQՁA3vBPqh^Iš#7ݞqb+e|۽2{Y=e*ЭNR)D2_Cڂa;da3.qY_{Ľ) a+k\keZh0*78l-&&8UF@N'J/^ y\W**֊Ll /yN_9rB#h?~?IWu-B]X:%I"LкaĴl#\M7"sN :a{b "s zg3>8ELԶ^w1eU%gx Jъf'໇k4B?ˊ%dA;xBf-í"%ϔc,߱D6A;DUduβ Œb=(U"?0D7׼[-hHs^@ʄ4+ ph/iŚ@lҒ}jWeؼZ!"IkoQTQ?ߡe:omoɾk]0ZF֓Z\p-(kW6!cO;9LX{W3w()_rŪN#w(ќCڏsV@T V\wB6_qk*3 ؔEJ 8¸I~l߰E10MهK~OP_ۆfnbpj ; YeT Q ]N-Gxyګyey-_{bզ-#6%J,[; ;cEщ+HfKvt~M#Ӆ߄S,muFjZeXuꀗ[ .hM-70SvNo>D>@'Je؃uq  oQ'I^i%j= D$喛49fַb!Sȼuf^'odG ^JQ> [ԷNҨA4Vpj(H{L3׆dcl"JCl(׶ulfo8=d ]zSȕy wn^,`%Gau{'gt^i_$a(؜A#z1Z3 .<. Wrwgf?C)J-<pVZyǶ4j&Sא&'y>A95lyӜ<)|zFGN3ScXh \Iՠ?%(Tb1 0w _K?^NJJXB"cQ9Ow]v3pcb&'{ K'!x34Nqj \lio3A9׬`-H W%g$l/0ц6h/%2(h("$OrO^ՑQ<IZ^? DK1 ]Au8pF>gJ.]f27KLIA?ciqߪ1S #wf}(9<`~KAXH'u_ÓEQ_2؛}``H̿Qq+u/LgkLQ% Մ\?a])Ü _E kh+U> mg4wrO.20C>>[B=r"_xomc5kU`IǿشT*ԧ4]"4To/SDR#cҽ[T}z3Vބe2#R?OUT/1ݝPzo1%qJLś6[{Kh3ŅTO|Gf&f#E h~ du|1R}&HI9ԀQ6w3毀@KJ hb W.mcK`wI7͉$/-8`$4 M}2Tg$M+pފy{ˣ5kJԽVWGt~ρDs!ܸl;~?^CҘ]"ᆤ[2kJ1|Ј|w3M5C=:<@`*F/|2a;,])`EzWErC5Sp"xSЩ)H|' IJ8r|Bk1ȡ[O,-XqkKypvCM%Dd H2`.mcAf%p?J4w%V^nۻ&4K\;> Baj]lD)= 02Qrd<&_`` Lيணki|a_ec/lNNLbFo7,[Set ݜ4f'[wn$`-(ٿJtBhH#Ҁ$jw_#}yi(Ukq26l mf.?kOx \͔!bO1sSXָ 1n෣#QзZ)&l4[OAGLӒY`E3 C`q m+jh)=dDD^jtH14.LI[]N(b"q+&8a3| N,v]3OC(Tr7쪖_E\t4Lٖ1%L9Y5ȍQZ;=u:2irnCa5m j^[ tŕ鞓<\򮵚qb2t"HuecTۖ+}jrih{[bj4z>u&\~@U!/G2#elt \qyT*\Z Pʬ6<"7>\9Թ7DQ Y 5() YbXd⏸nYYUZ عH 74 l=ܥ I8DޏPI~_AQ'RB=_ 溿;!md<$4̝`U]p|)elӀ|uoe;m93o!? Gn<X]q+z~i/XiH4dK!?`z=_Rˉ&OwʇEIspŁMIŇ,*Ό)!sɤ,/wd֌|E- Ԓ Jo猻0Ƿ:$R1<?[ Glzx2!uC1<pu/[HToʞm3 V7d/Pf&>vL$}~֗e$%#@0876q Wڧgy[vrttL ,D"r)+_(bZ H,zlN܆ϽHq 8b0Дhx3AL#E|):Q"l~ws݄5?|3Wy``[%A_^SR{ g]2 .U^2'`:N&sj`=Wo[kM IX:.]W*)2 Ho% F_I1n:~H /2aH{g} 3"bX^>&5@ʄ0:sJo!xTiY1ixWm552bQy!*c@.^8FR0ٍ oo̓x/(HyFΌO5H"~%dXZFAUlXdo򣓵P'֜g|wne\8l}3~XUjy_գ{ {5QGт F eirC(sT>aS7}I$BxO4fO~N㺭 L*79\67ЌIЏ%jOq!b^?oIٟ.]DRS[ϒ7욻;od^K md>T>ͲJXY $ +"n k}R=6{LփV yU]|u̍/t:\NBRې8uǓPZHu=ȵH(gTip*$xEET[*r(h+J.J'GZwPOLVEXΫ~cRA!J]C&t9obv"Ç QU3Bu2)sbxlAM򋢙bY34'C!:AkHPQfb;DԄs, 3|jFKv%sj{tw@r_pK|-' 6 " 6칛5@/cDo*h ]$7M ֑RvjWj{W"*O -r@]\ʉFxɯ,t`K4?FOIZb6\c'cz%dhVR@S)WU:hamoIsPkre/NUe}ZP˦?Ю(K RϝcX?ŃYD-4ZZļZo&(VmOPG(u32FaX O=(Z]|#HۅIjDYz^QOf0/r:.HWW{H΍ mO4dلƈv#Ms3!;SM [l/ļX_G:tTU'FS~&hm ;,Gݛ #(N>㷫T| ,K ZNe~lVBt;@5:ƧE)p(u־H| Xy:s'ݏtgyVYLM#BC!V@G`0Tɸ9B +*A&mϵ#=:P8sF{ѾVxe% 77bSIwbS9+O Ԉ郓c>5͑/iU> `ɣ1{yi)}=c wIMuzXOvZ H #mX?Cy؃ 4eʔW-b'nx̜PmVz#) ` 3'":䝕M^r+f`ySA6͍1s?s`ƞWN`g$O( [+pumA ?rC.7&2_ei9Tq+FcSJp|0j -FlT_-<˯\F |UIP"'|T[~8u!!(y@"܊8E.Wz_WE(!EOߥcöMTsBeSj&O QJ9")ՌKQ'zϞ#qm?Bmq}މCߑUv5&R ɺ\Kuwvߥ)J CGaH)b5܎n|rcw:&C}+oD-A:X&ZERx'xȞ9t*qՎG+rh%tIQd@n+{Sw.!|ՔS%+;\}ꒅԶ|_ԠmY#ę f:I7REdx .1|U=̾WagtE~?\,Hr*j7!LjgJʔ'&cR7-"FKp30 ֲˮ/Hxщ?#u-ގOeZ&lzu2>R N.pQFEPydZ ,kAt 2ß*T |I ! t*J%n0yQW|/5db1 wG^ЦuUtUv2EH =rWyYU IB;r}`$o1&0y`՞t&ϦQ|VF)E /F_qJ'3M9Rm +yOvznoPS=-&L33cg`~@1zd"ݕRX>N00aŹl0ԣRL&8"LuS/S.% kǺdgSfrk TOBp@zS'ƪDYW'~>/=` )jYʰZj3IB_!ϩ_C~PelEo)GaJmD [3T[8ܖ)]+xΒF,I\¤AbņQkD)ţ%/&9l+~twb m 9Fn2WvwFԾZIR02ϧLa8! Ut3ml2UMYީ}aQri ̌^ Wid1BKYMK8dpwX{ W E8OP\2J!n&L(2}Fe]YvF;rvPky_fxNe mHFYE>ZiW¯mƝXg7Z۪ , u0oie.#5I"@v&-U/#v t(ȼn^p4Ԕf 1DĴUCz$0n14'nu)X} uphլգܑ~5)?sZ$*:ҟ')cnZmFQ&ʻt%o>AXHΰ'Ν^oՑr< )>Zehoݷ1j=fe_ 4*!c mUV=Z=Yjj n[oID3 34a;;vbPAUJ85/6cm@*S c1A0LO|9C"sTrk_Ⱦ?T [$'қ["}~r$W7WPEb>[bSci|kws+:ɌƼj;pWU .].,J`tţwkdcd6_;s$?7DeF7xT_)Lj a1*2EH]_Xv> 3rIMɸf 3z~/ֺAz$i/(ȄLbYE\`}-G2c@e=U?Q;z ZI&NKaζlZTzBWopx \*Rn/W%Cns !\%2Us[vV[lJ)m`:\"0<9r]_=Xe\E=u+;6wTYFN B̃w)-+wy W2.qlF"P# 8[ڬ> 0X ZuCpR4j yR~+@ QI3}}Td&-}53x6lL!)N>AYbK!EK@_(C!<g〒q#;iNda9wdC/#CL -)+z8ͩf0m=1r/AWT=Cj"(o~KAP o pIDwmQ?hV+]B1 P&_`jbIZA=[qm Cm6qg~ kLSړvϊr[_P{L~-~*5> U^ ;́km%&JrrÛtBKW}G3giӠDP.hk$ܠ7ҏ7zJ3@gElė7Nxq]9i38" [uh~{3g!f I4.׎\ fNofnjƹ&XF׹Z:((X0eRUՎr]^Ͻ?xX罥;ƭW|fPa̟1^=ajĉH`rYd,V @ ,@e9SԲ4mѣf/t06ܴ>l^?xtf"!.Ks|InUUu4'e=[#ŏ㶏.-uM6sSc`bk6&O\ІBA,׋r e*%e/P~enj}_^g|rʐM0Ao\>^Q Ivf:?sBDP~OlsH,{9%nu"U Dy a*Eh4ᩃ (BhnH8<P -)~Ӂ@>dIHn%y{L2EjuBi#zed:[ [8԰- (ΛokTBYapCX}͞Hf-z}zLɉOߨ,=ekj`׳b%B2Uu8{,nXKfcN5L hAKqz0˾SL49KF7?<͋B[ hةj5SxD7^܆VvQL>Xq=:CQD}!rez V(10IxbOmX-Molb`B^Cp[ܠ/|^{Mղ̴4 {<11&9`%Ȓ}e&p)jfwb3wGdՆQy=ֳ58pG]1xa+=@?M1\P/4qm8`lj քTt9:nѵ؄,Mt4B%$Vd;pyD_3Ijez:FVbX_^Pݫz{+;]l"YO!vbaY@ O"at`/߯iR6y ֞}:T #e^dBX25+~{oK9$0 j{ /e~ٛ)s-l II#_asLlݕ#B|D6H'DvR\jԺ=/gǽwNo*7)1yĽ QdK( RPa-H.в`~U@޳OaJdW3^!b$Oޙ =>v6gi >iY0+f8a?a(61tTFJ _7eF_!,f "ON(z>+s~v ւLTVHKl= :g~tZnDfE*'IQbWm'Đ(PXmcSY_~{pʦ*tϺ?(ŏaem(Oʠ @\sƁVp2[\%%Sė)e6_(q1k!1{a"K2b I'A ;\CCatbȺDi AV@D .s$ҔsuVW8 uC'{L\< q_n~-,|GЅ"[1``*eG8+G!N[`|1c5d8ѷ=6dR&͒EOYK$, Z#P<|A!c~H9J.<<$˨n5p7Jt'rN\ &tpM>=NvV~2 ^XK12v ]}Ov)yBs*> D- H|.}ˁG+=܈3tҝ[vqKE5 FoGU4&+@.nDO?܂C w˿MYIfa ΀,eB#QSFDFR̟69)쟾2{׾8zB G(V Ň[mִN0֨ab̾L6a Jk'C Ea 3]tKv(2: D?^B[!j)qV^Qh g<9d+|A(4E:LR)#/^#AHFhߋ-3WLȧvת <&嗷%VGeTԀ”x8o8- 3 ]&Zj_,Y3!>XQ/pMu78gyx2e>pF @E_V0׊+Ǐ˃Uxc3E!m6dS> -h A-t#=')DGi'ꩯ} jv:Qvxxp-w3&jYGCG+WtI|G"BwL,dPz,ͪ27垌8{(R2VZOs6>n1*/G˺( cc:aw x3JiI<Ģx.~.˱9iٞ/ 4,68, (HmԄh6@Eir~0V{%}Kh/ ChuH@jVei@8 3um5{a6Cje^=idkRXe ⑽x^C i K+$ī6L#^. F'ׂWAEd 0$) E$w;%y:|7p\w}U^# :ɵ{ ΀RޟꢄX0WFؿǴLNHD]f1s+g89 |1mez!@>6.:"q?D)= [™ܬi 96'm>3؍QVP~dkJ&0a:+3,Ũs҄Ԉ ;&}gcS GIIU< G'^zmPcrozFݹ c- vuK$ЌRW"JEm+h4IYǤDGͺ.ّE,6E[8IP$z>~ty:D]`!:cF́ҕC/{I3b=۱lC3 w)ZšrGwk\dNe2߀Qg";t n|wrɛñt"Jv]|ZZ''`{-+cnDLV"V&$aRDlACdLNP!"wC )&RO4|U߼8*M@Oj\%~ilh4 o^S]X6-(a`_ނ'7EiIuФ ( `]%UCKE5}P$XL Õ7*s\DRt7ݯpOVxn9FUAHka.ʏv.y2s> e-5K;Hɀkj!-?;5~gI+ې+PbS!ˆq$N1^ZDߪzLQMQYĢ]3`F ڳݞNNo=s2OdH -sJ,kեn;ʚ럟7ıN ~16Ew\iʿ܌' ;OXf8`ɡHϸak o?³4 Na} B>$*+rUNBΆرcw\Rd:ܼaJQjiieOC\nzYspJDzTPCh5Ћ-x9϶ m7ķ*vᬐҋhe9dxa0)g|VT=§a'},BX + .d "7ei$뉻Gz4bӅacӅƍ,xU#6P/G? ,LSF]US)O8y%)ѣ^4^ DL8" VpMOs7.ؙNg-KD&Y/D*@ :`Cdqsy68I)\J70̢a$1; d5Us6i#p{mdmaʤmF roRmPS`pRC~t*<$0XpmL$쇗Tu$HGfCdө6%t T(\OF 5BJ3W`lm-q|s#tҮ G.~tO12ح8fΘ{1CTm_MnV)M9V>/ޠN S\d/UÂY1MƾgV!nTIy׀uK ve#J3q2C $dkBXf. rܺJ 3lLfgu,jJoO>^ĸ+ޭι{Gss7+o:Lnw%=rL$_g_VB n5,> /zH` 񒒠7 M ?8fHJ'P Oq^V?e C) T魏 5F(@A=r{&Ɛd\NK٘ND(H,T# !"ܱc)+Gu:rX葴s᷽Ե[f@e>'e|4~nq Ĝ*D5cu+ m+Qo*t?YH7 f&8)]R ͦΫ@:Y.+*P9N7Lb\{zrT>3^YW6CǺnu&~Ӊ?)"'pCel隮=vQ\F8e bo)j:1 )aYMY\`5v;cuePq-C]2ǙC地<(,teYtp8tonA6mtDoΜX,B?ttRDԁs& ai Đ>9]Ɛ EF`qpcx["4@ _:#m _9[n̸eT>m%Mt eBBaaW9R-&t=Bb!՜ɒ2RCb\&3Roy8c$cW8hA_6Y1-|2za4v\$-q%(;=euV#6b9SFo JAL?~ ц^ 71 L!2I[޴:Hq^@Տ`f6ߦ`h[[Xq 7R<Y[w܊ 6 эW].#7=/a_aܒBcByVzDr [} zRsA<쬵p 5j *N/ M'/fM!@'d͖Z=1iCj"? Ͽ[acԑ_^r@-?#|E̛^1תgF#(yg+^~OR Ai(V7kMqYA\i9Fil(_ Ok SCO8$02xƤIcpд.tF< m֯~F/hmQ$CIr)v,ο:1#RLOWfU>;޻_ t/TSSZRX:n~ WE ,jl}y9o*I$uT rM$(0ƃI_5 mnJҰhLԜ# |<:p@Fzq?:;-TJ >sq1$35]p5Wfp搤eSQ|95H'ȑ$f@-v['=;~H;ӐqiiTOe=~s0  @vgY?lՌ!ݩ+[K@`~}? 7R(g%*p9 A, -;.M uU;m糣¯!cI:@9iR'CV/ڢ3eDS]wc缀u¿ N /I ZwCJ`ytL:,+whB6 [At9jզiy5A{_kkպwNkqIŗMLc= lj_6fhj `){]K$7sIˡ|>n-W9ًxs w;KR6ZF{dG\ ڇ+[ۦ1'i5)pMXQG~σ!)tCwĄQTg:Y|fa9q訤 a'(;]^=NX_nL4pZBZT^݌>nw)]k7BU#PB=ZH#7* A6Αm)37R+>h$dL)ԚJ#/Y, U`R Pz?YKPgy9ZgkGO>`"e}xr&+tl*1KK~e~G:m%#Ձ MeXg_'.ypozhc+憌1>M{nu$,)GЬPs""oD9DhO:6agt)DbNq%VhLWQ1k80/چ$>"S>%Ɩ[0W^ցUև!x+e[2 %B#Z7Y?Ϣ鮶8B-5`m z, Q¸ CZ.@[}yug:4ΆQgɁ?sh -Ȫa;6 yDK 9WѤ5-n@sWgQD@i3=uReyðO:l7?)QRI1`O<鈿4Xh 8CBԑ[\$n`o̚@S\=MF@Q~'C +Zx0aɧ~?nlfE/ \D]! MNn(<+\^0]t3Ѕ `Te=4xUv"Hp MyCQS:PBH)GL 7W92Mk~N?+F bJ,ɳ03#>ϩ,֣ =ro1JL!\>5SXGd&u20To68g5͢n1[nQƵ;:Z>D䧉p9m;}_2R[Ch\R(9ᢿEjcOնҥZ~ɱsɦRQ"BaK;`mR`Ύ2Nk=iq'yGm?~&Q7 &-oٟ}BsEXm?\NTqp&({OQ^l^,+C#krr efp{6C`=84 BLDFV `Wplhp(03|g%d08 ѨDTXӛ/von\.|ƪ,&Vyİ3:VCk\Ouy~|rF2AHCP(ްg2'[t/si\omZVN}8 {J!DŽrGHf&UC:"莆J| 4=,3oB Q\*2B&&T +*Cǵ4:bzT|ݝ.oϵ06t9EBWu[쇸XJu~ h9<AGgDx ^n8!棴UWD ? P0T&񰓷~r %xM%rטj#g# h^J!B9%H F9е>W8_Z,{?f:R\փ nj :/UrSsZVaXSx oSCM^O,bl[YVԯt]K-]C ILS.):1\jKJTyCƅsDQ`$g?f^!&T׉3.CNE5{v/>G)L.\(RFw~8r&zrxp2D~'\GI[V -@y`r6_+ GMtg'ĹA5옱bcڐl?36@~Dz$p]GiU;v(:<YثG2.7Y7s c xu}3J"(nb4ya5m +  m~r!xOiz" "Lrŗ"n:>geob#l?-J6ivbZǐX1&<J;ƑWr!.'Fmq4L|%R NY XG[*O8WSt  yUIYJhl3c0vfYXܣ|T-{:+ /vs S<'Ӣ0_BT!_P2.!9g dj;q|fdPryd{KK=ҕ۸ 64< /\l-P*.Ć.|%w)2rȑf7i\I9mb{5I"Ո=Wl[! B3n@LO#VHE[7't ?̼kh$D,c;l2%syaFDutz? %}:q13 qSGbpp*,lte[O&Ixckyല*%W6ЈNfN'H$U1Ik\)bT#LN̦LC"Ј\#cԊŔK<8{z ڧ\b^3x}̒}wSl_<)s~i2fސ&۱ȍZjubK5cWگ2 SDިL>.SBs9ɈJ;6%Wfu-h4ns8[!(HS}OУzjAQjZ-EqK:'JfA^’A"ClPBx+$28w+k4hK悶ƞʘ|F@n~؊bAYʩ-Yh[|,aw_%Uy7cYtl[9x{oSRTaFc]Z y@ zQTj͕0V~ޱPomNq n imNSnLj5ȌkoDT>!O[Wni#,xYUƸP_Cku9 ^HV nC6pEz֛:ۘղ20tpfrdȏnƍA-ثNZSOc.%i"VН5fk"z:1dpRk1<^E%l|><LgtJ!*S~m*0G;3t謘 0''MʈV?丟֓{me C9L1_1YMP]>NjD/'D;d=T6$R| A5gYwtּz} Y4jl3&P $c7ci`(傺TXoZH M1P_OEKbe'1)f\|popQSDy777M^RwvۢN8O>LWGYTBٺrRrVǧ0 jfBfn\髗u8\c<ꤴq3HG-9''t˃L|Nwi; rw[,b9\_YY'xIP~qGy&6?9U3:bk\?e7xJYb!e)Rœ%T`W 2n] T)g4p8FMH ?qCZN^@@}8DTNIX2;{؜Cdt&nuPkm|e%lMAO( aa3%1;OBlaY.;9Ӓzo E"3 Es-D $M\Ӎˑb6QeyiIK*|WTgX5M3wo|PVƝYDW/hx1_iGG./s>|4n3h%h]V.JMu̧V$'^<1YMh~@;K vGtP=Yƨ@6E`b'}}.XՀ<@; ;DžW;+ZPߕLZM fMno[ؽkƗ?!56n  c+h1h.Qmb-S73sMfxfQW] _sڷIJ&38TƓ3E! FPPo`]aLGciQo-/\|%Jo7-h\bj0 6WdRםNJЋv Hi#/ep`̱:8#b}CC{%/KZŖ8R+wӵ]#_94\x#`Aw@&7Y4g-6B詟=;~4ᤣ5&7}H@v"%9zNV;[e8"}eA6*~H%rE]qd"8<=n[}gA>;0 kWaXzM,^^~TO[9crWlns pW>[p$ *.*5t.CX!c53sJqt1G&_3s#yDʂI)9 l;]&$*Qdj#6t!.q{bi7 pM6xQRHcPWSB.'kPh4X[/:N,}~sOF~@/jdР7je4h}5J4fF;bUBU{thjL`N:C,i(zgN%ďಲ&@Х1chObE8E,2"` p)HX|#6݁Ec2y /BDMԔo=||!>]EUw^8'*(PPZ@CŃfg'bi~j[@́k]wfwׇvv4i.*:ŭB:B >)Ep@Y7 M8TxьҪGW`n?R?-0M\γ$j&Fߟ2Ӛ@ ՖЃ(}UJjOe+oV oʔ/ppmuRhmp^zi9M$:p |3Ct<h7>8[³ٔ=Y2HtP@5g}KWfHI;V[R 7P7sǼf NkW"6,z6w}ivQgdžq[Q0eZpx~z}݀ȸI{nW@YKyzDl= kj+H- eb#v1 X:=&=IZ>h؇zEr*5=+֥޺O);LK-&= 6ܮEocK;<ᰁC#aeT†dV*DIPav@&{ךEQHTBas%Z%Yf8 (3F2KaXOvI_-O8T`P:Vejň0\CAP8wh L tbҁ5Ōq,RFf$aP v.maF7ti& ^&nȰ}jz!2Y+hG(dO8D+KQ$?!+lC0X8&^R @Tee>̕Q53o+{:87[&ⱥP<?}}ltЃcTؙA&v_Y\y$hgp ӂ/U^H:CB Ԍ{f6Ikcdty I2"tLU#'ɟULTI!7<ߎnlaQ윶 cӶ?Ht>MaJY ~:OԂZy+0^ M?N(m|]S~G}x^=qVeJJ!dok&U3i#,e$oHr.Jn+tݩbi7)dj/56TuZ-k9->Q5l 6'-i֌tC =\k, B5?Ѹ/6:B ZSVyoIH}۟5?*B1CVQj[]F(dీPiX ׭c@Qjtn:c~gUYZ(Óz,)q* 7=z gW[BUTyWk&p7j Gg{z=Ka\~543 <(GWu8$8GOQQw/[ 6O?[ U7 *̺oe8a#ICe!J'9}ȢSyc+f!sSZfnEGQ!_khkctUN,m@At># Lr]Q.qU3@L9OAH}R)5[{' O Sh3ϥvK {p|N/|3V[2bӛ >OAD:V Ի<}=&7]+-3&` L-Bo :֥ݠ^2NCqp0} yo2CWXa#4cb=0m.BHDT=t8Iu7K')Y`۴ƈӢpGh&$a褰4$P@>Cs,Xi ;s:w狁<)wuu3KrrVɀ2{#Σ6ˠxj5uOvm4Imd 8`Web~T[2 ѳϩ֚iRA{Uƭ;MjդU 9.l4[dE'w`'Q\+*s&ʨI0a[|։t& ޔX%XWlj⛦ ++Xirr nEx%E𳼾s)z ;4"ıOE)CH?j&(Nނ:Al̖7cY@S"~*')d68vn䬋TI(FjKoJ )\wh;O_S2t!y.j,b:! 4,y aӸw6r7 󉿀$θVOHS77)i&ѡJ\n:]O̢?^<'g%2HGֱGnhQwa60%p' B38ʩ~̳v˗ˋ&%㈙I}|3M7 <=v<,1-jtȲpUF m44=<_ 6%U(P-091𵜚<qI"wTWO, %Dmi1z'ͲlП9:ɐ&4VӬdPLT+8zU{K\dՅ49=/ؠQ6.ό.~p߶8-d?]i;n9gs航@ub]Q4o&LbqJ uSs:b-MiD q'n*<ƛ7ōWU{ kࢷʠvi)f;}=Swd爗f v+ 5.Q,~֧ ojrcO>Pv5CD aT@uBO/\꼘jQq{skc=$M&bIihh u~-XQ;]"g;lyR$d' Yބ"(438?K?>?aP\,6}Q=e>`WTbcAQ ^3)$D/>\߱tϠ0WMIF:iƬdx!"ӥK`w9H9 !ڻ{>)8~Bwe"Ȩ˭t!L"=)i7;U&>Dϲԍ`m %Hݒ ^Er8F2:цes<x$+,pHjtdx67* {KL5^"RuC z "c[7zS20wV 3˟ C>y6eG+_yKu72C q0q9hECb<契-2Svg0Pl#ەӰ5W#/-I6jrYVd!jW]$.Iن%}=KQGjs& X}`0M~E#Nc[q(&{ʋԋY4 ŚamN51}kِ]=?U}렰uN*;󠍛b-+!EbsN!L@Qbml^@?׽d8>M!;3)l:6(ȶAס{r \ \sRp(D VB 4}j4=􍷍z\0^f 90Z$XʶKzyB1Kn %QZH^kY̛~w"As^EIcdCg !]ࠁ;B%GhӺYotnl_Āp1Ftb }rdĄaӬ`15*Ka٨14,:XMJ&a @P3Q̽L;)+g@ jZ qFVKAL]$0 _j qE1ѨF`\|E j??XfT f-=Ol_w?%8aABo-w-`޳δ| \ :Eg-(ONPA n-qL=3pQ浯1F!qyR M&?gՅ^K>V3oj8ڿg3Y߬1ڡW>)^)㩥P@!kff(Em3iiGvکT*VjaS}$l9a#?YetB{MoD}eDݓ́C(_>%1G7 c.ŶiV2P!RO o֍=OF7WwFmPm"nBQksX #ͦ IŃbٱBd=$TwkЄ-P{+7sD jO+Jb6{ߌ@˥YU_Q}mi-|l#*7vɺ\qnk;nlOUt'9SC/3.'MJz%X[-\޺*ImqР\@:n=e_n"YdU.ޢnNyOz2KCv%,39 LΚ`$ǻZ̭-XƥybmI.k2 %~F(#^ۭ q.[va1 *'C%.4so ۤ+{[=I-θ E*X^ӻۋMFl:)/BiaUnXc⨒9rdr3f^j*y&\(ȑ|[ 7ߝgNKaQ ƢI N QK>scAd׆T+C*Nҋ ="Bwb tW\%2Mu2flؙ<ѷ7DNOpwnliɾ q1Q]lX8(C@eyG,I>Xv[L6+o9JI~8ߨe} ['><ӆ;j!}~kH}ֽ!,l^{!6+1ђ9eTqO3H"f`}gXS\}*8xSöGgMÊc0yD<ebgHy#IJn?Fރ֊\v.%F' BZRT'YS ˄d>hM1 z? 5jWD^Xo( K iSo -l@U"S SOOiQIK` =_qc ,ث+@Fő,HO{G~"@qTGTK#=ChO? Y0 _U|ʕx*ioM'SBBj7ҕB17A-q2,i)gdnH[.f/Gb`lqPpGes6^=N?ݤL@iMVMBw[nl,dC@ (:wK1D{1=y6o&[OU"܏ґG#;P4mީ#"%u7m ҍ@}v^3)DB؝8v(c=npAF.-OUV=rV`M UЅL%İisl'W ^^G=Wt!YSdOEf+h^׳S"Ws*e`k{`ְ Rj˔Ș^A)& >#$AIS%rT{nω~#r&K EL[7ɟ",OڷCH^j<%*YuQ@/T\rtmr+; `kOҦ̲]9"l [{4qUԄB.v*<,N hj('wL Y[zYp4<6fæ7jnZQW7gl q(~@otCN/u]Uֹ(@pR^uS,Y)MZfAykC3//qAZ =\`ϝ\0֩\A8{Ot_z4뀽0gUo4O^On:@X9Lڟ``W8!4/\|Y ƴ>@t)53??gRADJ"G'5f{5m [(JLkNa+ŢcZ21^}>=9F26r=/&bO`庛ܴ~H ̐q =Kf~uh>CƠ(h%.4>d ,-\]]蚴b`gcS<뛗׬PR!O!oS-Caô:3kncJ6# ɍv'V]^TѼwL7.0,̴5zo5O^1r0e@Wj´!Z-ДV4 ϤPeδ93 hTOҡ,o^+_nv&5=^ebh&4z~\t۳2@\S?79W|6yz*"L]΄bq:%۬\.ڏut|De1?$6[D@^q SePǶ^[qwo%Mn'2dVHl3zg+Z>l )n}S؁_F]d]f iP9 .z"^ #W:ۊjς3H#I g Bp10G@izbzofVdANbCHbc&-pA DG o= E  }O)DA7tlI?fr  k#R< %8B_I9QjF= y6Q~vDz 6' Tfi52U!IWJמl3w -0D3!GNFFɲ"Uvr *V q"SI 8>|yR^p)@tY)bYlዥ182h0gY rvq֋GNeu!?$U(Վ + uhxҵ;P}aO[ANfK@iQ3+}WWh %d͡l]lOI?Tlj3 *K!3R 3(\OZ2LJd>[mpBv @l{z7ղ4ԣԣStzT׈M?@(cFzZ [<v-X;F$ < <';,,wa(ͫa7uD֌}Kqn cv+GŢ/~A#ŗ@TLv85"{qsJV8޶R+?ɔhбp6G5ڷmְsw9 #@7I" !(5"^6J!-$Ye ^:\ZCEȱO;!c%XFɺN뤥?DJL83 UHj&ZwhM'oy XxktAFu@a< \<;ܧbm^\P(xMQ0wrD֚ ]_Kc  -U -KdܲFMJ{׿Bv&vk>.(S}K iEt^pp^urCQź]]DhYDai+3k ZiݍƬFA?&y^yKlE %m 77e?DxA1#+yVM^fNѦNMWlR:!3Q.4Q5GXv.1oty "/d MH-i^zhQ.]Y7+ [eШfit9#(]hΔZB&+#6c\3B!#N"-dK]gL^ ƺS^p0ՊI) ڤz>ˍ pzՓ\UuqjX[:9$iV#820MIbქ7Xpc_ITwQbH;x)E֑Ǐ_a[&X2 ozY&})f'2+!j eK,,V@ǐʊ#Kx <BO;7^PʆhQ7+rA͚@țq%Qt/iԢAFm$F5ڿKS[mowDvUkP\ڇq*:C,_qyc'mclcjq1Q7Tmgxqr/vk@tWyd U991 J\xtvS+G/rȎ>Y') _XEST($3MOa#WҦL#2 ۱X6b)\Q .Q`BOkL'lM$;d@s9hߦ)G37ndl6cZk0ф~yax4@9SDLk$~|a:pM)1Vm&5cم{+GׄU9֑5ρe}u[]AÎ xZ˫p/m&m҂Jq[V̙Xٻ >@*j͡y&JSQ_A;xx_ѲL쇙c0QJA"bSު)[nK~nJ`FZ 歕mt^t&":8uc\wB+Û0Ļ-PD%H8yC'?M6KPPR5b:dӣ"n6#-@lI[!T2Qwz/-sy7VKwT)XO?_IIh T4.blm<6 3CH^N+#ƌ >n/r{u`_-]eANɑE: $p-nsS$T-s"\׷*I|RTBj/+[ NȖ}J8Ly8j4iZ- rpTiVIpa:s,@^ 26itOh;jMa% i~Ngp3)txOflPY-5<(3iI9Ƣ.ϔ8vx¯&igp̢ZrJ";Ӣ+F@yޗyO'HoXu2I2UU0pm&s=e׹XfME%5%h59KȵIBvjQCc}*Yα [ w` nѨ\KY*[x6(ڄy76Y@doiZs?ݝSU w ånJ9~ʀ4W? 8̫ c$T!WS蚀,RDdX[Aؔ՜I{/QsH/iztX<꒵YYUpj4V#Z K| met1Щ+]<̽4WGNCոAM+~>ؐG ˘#( uGkaMG^uCMO K,Tr ܝ5p14h}l,e$4BtZmh5 $3.#C%;$IqI<7HWp:#f Hf bR6 }v"̛( jAQΔ(ҒZ@N ٥\Fi#&;ޓ]XBa!ER`тI$?x\+kP*CV]7UW?Cc3`w(u ;62ݬz'1kv].ac&AW=#h9"@G9 I٘aob8ň@ q8o)T-2xZ)]p4(:&U^ b箣 .Fh5y` ˼>~(uj)ٸ+58+)` /抳`(8qطiJ'j}gЍ$O꒏f(hHB3_jjY+X֌J3H.b!2|dfd0}xo3DLѱ,`\bPR=!ڍNÝ~*񮬸Ca͸s1RCG}T`%턁=*KtoX =-bq81ӮbXp#j6/Ug0a =DYtT@mx/L!ڢBzPY'7uؽwE}g2óPzA1{T/W*߼d$<@m4 c(Ζ/2\ [/3n U\A6[ßlAGB9*coO(Q6 [%iD %dE:c~H o_D\+Ԅ+ v+ k﫯E&3MA"d5L|,DIX|GRzKŮ9#;^a> /(_\Xpnv3dm"~k$ 4'k?JGWoxȂ.Jd?v^kTT# ?i 7_xAxv0>G;IOVZ9"OGua6E,?#%0j~:3G0HŅVRKk'۸[^}>Y0]>IYd\Q7pds`cae O=V7p5n6]YeY[T 7(ݛza"LJf`P킳G! ag.KJuE^܈_2YNIvZ:č?SeaA?nF 3e%jv?D <RD6jP;~(vv"nwNtsdu֦O ߻HA|~j`\P^NHMI%;Ҹ&Fa(r0*fhG',l(?+5Sth oN΅9'UvjuU{d|N *4U){iܕoަOpU$kn{5 6ǁIs"џ6xgFؿTsQͷe W!cczږ\%V#2hްjU/&Wl0inPҭq|nfKmL>Ehh~ЄzЎC+O*+|H$4uo z O<}p9s0K R$r=+KfQCދ2x$c8.z88Gװ?ƺ<"c2F`y'A'9ed#j.ρ`;< UtAb(Z$J< |hd_D״":[',i S6~ l'E1i@A鼂s=8jgΨ-+XgǺ29+OsRw·o(mExn"A}S[TT` }Ǡ Pw$1V#6QH Z,Df-?3 !oA ^GwPfZxۆ=| 6/Ypd. ʨk#=0dVxEQПQ^ÖbEFݟyJO$٭'@i\d3LQa,lZ3o_3!55eߍ/k˧f?kΩӣ/ +"~1x7Y7+}Z(!)/q:nSu6us np{sN'g:h2w'm4^V + z}n($!_rAè:PD12ܺ -6d[kv`Ԑ8G<U# ߵr w1ZfG|O Hҁ=o&McG8$y@]73;䊴4h $mo)Ḋs#e0o.yW-:|oUNR>&gKsw2:U~q_SSLe qMY.V]{(?ԡM%SגG;|q[uL3c| #~PL%xQV#8>bͼv&Ƀ/$8<@kqCPc0Og#έ.${KO[29@OʐA]KuVW8iR)yud^MT%̞<VVY-u9^^ƘT1 Z^o!ʡ 6>0֚pl 6 寔FhN'R~DsS p뢉]2S c#XUKmVywk4 H峊,IIY#A0t.Q~[X@hŒ@0L ֋ BZᔱנvB} pUW%O>'@z_ 9Mh̼{Ҭb,h\8T$" oEHn$JJ*>oӍïůM8;m*<5[t7Q1aO0~hlߠf-sfrs, z x\:2okPZضUѕ:pf"F;)]%z?>V tL"9:e44&IZ)$IL6T@ĵutD!muɡia" nA;\INp<W`R48F ʖ'4f5JԦCt.ژ} I eK0ĵM(I@$Mƌ;A̾»G&!E'cd|v -1G-:9mvbshTSjrH]eV0 GA:s&p8U,DK)&h+35^AA+L04Wԁe u-@:[b$w7|JOvCOn0  wpㆂm^T9h0(J-!ohFR' ~W jaww08+?Ăm8/t OM]QWE[ҦyR]E*美>(︥i@ e.|/4 Zd$Y^u<2>ޖQ UFN|Y6St 7~ WQ%r(m/1깖!0c~!=k=b]>ądF3[9a:<[x3gU׈4 TdWWu=U^{oBIiY; 6%F T0nQ`2 L:dʹBӵT_4N'h19':0g>MH508aB|(U[ }ZBTߥGڬgtc[Z02LT~PCVDp9CXX fv<%c:]/veChgM?ø m/J4h-ӂf{aL8f4(J Ou;]`F;i lf@fZ1c3  tJߟz#*Z:(_^ӡFL/ǎ=,iN\#tڴQ7J}Cݶ7и˾Zzx n: =G͵Ci VcCJc3P Bmaǘg}I2ƚ+WqWOCb8Q\zH"(hFGЭ:TDĠ \"`kw'}lރ}3HDիfh}}|:etyY9:B=3?p4Zka1=HZkM7> E <+ #V1u2y:XWHxHL/}Ak!%fUEOao.;gGde~>݄d +\a~>oX M\}%bm)XٜWVbh:% atב\\CB^*r?; uN3uf| (fT:.}ޞmv`Tl/E[g::2tn~^RLZGj)LbVHM~_K;nI'Zc='; ;8LJ6 Y*oץ߁o@ڠ/uV>e^M[:Q< wz/ZzYyk%<SHͯ%w2N =]P|J;Hnj(NG\e(֣%Kmm$(g4X%tIlzg(O,n8XyZ%LxP߻=&o#ظM*T޹<:2zjˉJ'$jgL%c f0m&w} iY^pk OY),fJ¾P?Z$噥_e\"䐗Is/У`gh |5AXD886[A`f ׫!Kc:B! - -| 6 R a l dKŔbȒb<\\1hݘrTҞxt Z)ofna4$S6Xh`1i @.9Jl# &"^X^B{ o+>JGz!+E[ o|%C \Mm܈2d@]VHS>D$=:ʅblo*$J90$$ &td0V oauS?5At 9}? KsX5vTE`7nיyAS$GM=ק(cnEmMzX˕ |$ַ4,s;s .Nn(#ANBFY BOWM?/;k}0*/*ADX71W͈\0 (c&td zhTXD">s?:MG^|?OR;BNo0m7,Kf9E!wP{[1 ZUjcZ:!2#~i91Osx X-4ҸaO4"Φ$=TZ9278 @EB{T8cZKB9BӇ٦l%C?-4}_:9ȯ 1 ToG >nR4ꞞYuG.2C8%Zo']\{d&dR{JQC&mC+G%τ2 S-7/A|m (lMji 3 9g^>S2^2O(E"R# o[% : "5 1;_K/SUUZ?S"R4g@]}hdAo(%P;VHI i))Ƚ!z#4j. \iL0oev`6C\fO"cj`"n %FC"G9)o'[S0%AHG* ζo+r\d{\q\BE6Tl,`,Wu I4#E|zkɩ<%] kSX8 `:JF*%cr 'e2+ʬХ{Ҍ[{~ӑLDs !fWD$SϪy0C$$7f0ѹ;o*>s1WWS>f Ex#,,Qf-CX4GʂMq5o%JR:}b(W% ᤇ}3*8ʱ=6|+Pk2K59䠂ݤlN'D :XoG$QM \|8:cd%Vѕ[mR tr9(iRDSA1ՁR7/q]jRhR=!\XŒ^ߴM. PY<rf@Dli *PF(8BdJe 5׋l@HvtnHԈ7+i7,-1sOv1pR EsDt/UlM]Kqx&TUL%u͎ w>3q3mD(*5o ֵQThGZT37톽݂@W_4Y)^ @uf[L"oIܳ.JqVRWk 5jNuʐ5nӔL|z̪U#ѩ)#V|sͪԆH(,9X >UI;P .u½ɑ0e%>O=!< SXY W]SMVFG 7k\otj>C[Gq\O_-'sq#p|\[])dL%m>p[ %M@NsH#Zx 'L-HckXF@5拧-8.udO"mG}aNR5`=>wq)(-XMh|9˲ߚ%@UCEUEib YLƛR^-WF $eU "yv!OR|ΛupOVv9N2DJޝG}yr 5]"k]-@[Hrߗ-Ϗ^.;˟#b 4A 9dYf_Z!z2'9!m?)t<#s| ͖dMð1+/5AwHNE5fpz7jSOԝ8G? ^:s6Ƨx6y7_`mƿzxf}9.ä i\JR#j,ܹFAy#7`Xz9̋DUs$v-تk`Gb6_cma1 %Vi|q2K?i SbS`oð^sELTÝau;YlS-T5ԃF$e&>UZTӨ똓O=#|Z} _$+ab5ڱ3㻍!w9֡OJ;W9đ+ dxjV)L41J9'7v^,Ӑȹp;aHzArVGh<7xO6j& 8lMz!T2&fU.vyn`V-aA E:^&[Hx>wsI􆢴>;j% ux\<ٙ|Vz6W""x]ٍ-<;SV9#~)ٙMQϊEDG %{A;/eJk퓻yXgB?%؞.TYڣD(S@=R}`&:iAC|S|Xnj>)E({G5blhC0Hh W>c֍sxĽi4CQ+rfdMڥFIǼ ~0Sq>+`NJHL02'6q_\Cs;- P wUs.$Wҧ+[Q?thS O&.)H`8:6݀OiaoL5rUzU١l3W{;2DrYRLUA `\\;:鼹-ﳗ/0 $&>d%f_(,.nffhrc9p|] h'}/{S4ꇰAt#ӌ_fJqXiMTca|wH@ј~ew 2=A&ZhW;fWWKJ=>x@Sk%C iM#D.{VU$O7I9ze=5anow&e[ diMo\D$EbϘ] tT!kPdJyn(7saMR-6OxC.tUAӔrSX,>f+umْyO)B3@Vi-MTd8ԁ͜=ZPF5 !4*4m:9=cFof.+-rkF_$qb-n+ +Ns{j>HXAMjVz"w`Tlk9Sw)!;Cm`|^A6e!,YJ6[~;Q CŸhkiDŽ*˔Y #\z@e ])GH %0.JwU,( iΚI5crJmBz\F)B-#ukLC.EY' `acs}\ɷQZld!xGPۂ'o@KmA!>, 6pqu`A1 pR]s`Gea=}4 XV3{]aʘ*-ύ UBdUضUoj#Wu41= m^Gbh,f$.aMhCJޡP,UМ S]N>m#"?ߞvm)wyqž8[, K@u:1[ObsmeN\~SiF~U)ͨ6ycB|OsJء%s]biY59X_c}G1a^Z}͙eº,kskݙHx/A8iի4]2Ne외EF,(kmeZ LbU">=P9h'p|u/՛B&ƸKJvsT,2tj&՟;(f]ʽ*\~xZ78fv$'`{hW=kJay2&ms5y3Nm|Smr/\›mDd- vOCuw_/xCMVρ.YHK;پ OBZ& C娵r 6 Kd"-wfwI#A=)af[`b&Ir5K3Aj8DnT%"-:z7Gm .tR'͞+R+&F3lLj̥2b +;( _aoIYXJr9F:-c <ϼXהz$׊ v]i .sXYJ([X=r]mHh4r ƶW'x⹟w g}'~N -Q=>(mV3c[i:WѪ9 tj/oQlU,XOFAKרP f1aݩ.JazNEYx$0eb$;\0oQ T9[AϪ+m$EN=Ͽ=D(JmG$;Pn\|r5a~ЪNN">˿ V؎9Q;F/?3m ߐ}@xudIi"!WC7,8c4 ]3&h%۩.g`߼y}ӂs :xK#Q郸 ]=y p@ҫSrZֈ(,"iLYeRxZ? R 9eI{_lBB@^}kﯽլ b?6DDjZ;,]mue+Lè:9 r_Rui#CqALT ܸlN|nh=>Z_.+@{T\X8$Z嫀i 3m^#9e JE*+#<ڠӘ!)c#k\1N+ 35Xȕ!>x.P0́2Q\4 0xhdN -TQP> !>Y2h$$-ƦHpiDWn~(.؈:Yr^s ^V amb\r򝠖6kdmo@MO'5\aDzq2Mnv(Q{Z~"T ~5C7/l؃fr1ohTog1ˊ!ucLC]@yWp9q(?1Qrhh5&ddl@[!4({S_ɘgA}(,PaK Ԯ#!3юͽ}^$=?=&Jm`!'#!7G]E yhá.Ƞ^{S+͔0n `٣OmEmUNe t7Kl2NJ9tV 6F˞fٽ&Î@,!BX^}."wDi]H`WXm`u3&qi*CbrHp_3tC> xzJ"^>Ogf ex0a b*ZچvH:RtXT@z"=v7rLr4/&қ^T|"H'泥aSK+-?5frW͹jf '1~=XwsR|E^\юա_*xI=ҕV-kz˱K?,c~nA ;jJM1 yTqp؜NX\$fq޸[ w(hqg P$rr4/>u  Fuwv}stKL*5#B%ŀWePf3282u8ڶKZO잪N[V,< sywwaZ@Qp_}h[*pz.;zz&$ZpӜ?3!KW0Im \L|!'nqj]_HMi NF{/UQ8Zf=եr}t JDĘ兹Hݧ*)!w∀O2 :.ٜ12QD\t#oz/L]\FFu- T|.TDx‧@-! .M 8˭P}$ XܹxumJXN.5ńSW ϸ T"w`ۓЪU4X03Jj֬xN*(&dž!Bح2 6R 7s-} k %CFR&S6߅/uc+\lt"*0I>Jŏ9j&1]I 5\ ;-\"rO-f.B-so^0FYL}%~u80Ac>@lA`VB:v_(zҜȏN_eZmヅH( uv{4Oi  ubzFeUwu=;(:bEaf~9I eOGx9`^I=S.~Kzk|0_Xk(&}uCEv 5oBLjjOr*4c7XliQ!dsPm0`5Ȉ\}(*@"@O `)_F}ٲf7ULE];q攪!\x`b4 ^u^:BoEʇiZA&VF2ܜٗݵ<@"Wy }R(J]F[^͇iVoRO1:|ʵm6-j90>~av+ّiW8Ly1#{WNJčY13j})H rȭEy{NP*yHmo3O3"5u ̊&[Ϙ>dwO* Q1{LH_.CiKVcu7՚ے>rq2D*cS_+Ih*7U].ERrp9?"iI xZFS&'o8O5V P?C[:?n>js{srIEWaj~:N̢O-ʈj5D~ }}n1_ӷ IܴXS'$/y <[* ;-haKEȚ7bQ%gE0 4 J|$jm*M U[dlܝB51#lmWۯxk@Mg䛞z?"En.Sa,g6O/U('PS( 7P#GMfDF]3KMP$ ,A`Rg|Y%4Uhb5i$ i;A悱X^Ϩ_/rWX:ymr'POH+7~ޱIfZ,Fׂ5iD iEEHkq7/y H7^xF}L-pPXeF7\PM2j8_o" IfaƏo!PcG;ȀMGSI.ؚR@ _tS 25,V*wM^s9{3!}7@Pq P{l@{{ljPV.k۟")g/ ٠SDYBF8! oXl#7M_O^ri|ؗJጇ983xZ"A :.ʇ/DoE1%KVpX: [ UݜV/(AF ^f uEM~713QYb99w2< ^+_L"?"U5=K0$6/w  i3ކty&FwF, >hc{><IcMP/%ߺ9zj%iMN oVz"AV5uDL㳯a7|ل1] 6Ϻe[pYtC4cjW۔e%\4}κbD[`>t5 u/Pl2ȱ%x^08Ym&NP\va^w\^P&cE&&2eL+܀* kK'weMt>2‚@;Lԯ{iO3P0zhzJU^~ #Y4{s }]"V&+ GGNF p';QiR-&YJTvaމe34g!5QF-)@ d!svYyY\Ɏ|?k$Ha}_,qxB^vK]EbX^E)/K >kzUh *dX$bf|^Iާ%Ԇ4_&*UBaMv__*?JTJKY/7О/".LkT;΍5xCY;h?AjicGC<)ssB>\:'rv.qxk/KT&DߛGm|Ztrspq͋__@9U2`EWزI7ÿ_sL;X+8ՕoW!əp0N`:-_42Fbbz@,Z.6$6 lޔLC ٖ>xF<( rCY:V*;EwmaN ,9V9W&2l (3aQK= ƈQ4^OHHAМ2'tuȒ\>^D~P_Cf~ZC{;! thG^OT&0]8قS.qٴaq1V{5[>;GW1p l%ɡJ/$ӓ!VA/i~'/럲 /5!ɏ6\,Z:r*&{SqUb= f.ٯO͓PE$k 4+j[6XҟǫVz=PgJT.e`*_3SEqL"*E2@1.!KAwc9G4M r`zXYL5^mզGZl`%Е^Ѿܛ1ߘҜƖ> OM*xoՉNG %:W#ef(䭕p?KjW3-X _.RCű^Z;UL8=h{ĒE LwS&ўP)􄰥O#2x. 5βNx) V=љHMoGVm,]D"Pk/״LM mꈤ*2Bf6m 4F{JQ4;>hbt ~~/lwh @AuXuO>)mB%8H-$F `$,;/V4Dwai1.yw^/Aɗ7Iڲ gXcB}#Y T=}=:jmOe [2c#Kʁ÷M{+D̈ڻOuyMp!Ҹtt H~DTE7(Bhp LʦFHgIU/)%D^l^ "<<m'tԏ3M~"C @#s/ۗ*O5{J,>Ӣ+X"iHQAz҂K}X@ s P/YP"r^W*꺳ԫ乹~zo*ަvd&pmcG_UAVy\o[TCyq@\&C]R Gk]b0\~ I0j*XH5-ۇ,n.Fig4)@t{,-/pb`WnMyфYv2$Y\xZ_ TsPKN4ps`""+i3{_fO8@>ɤfz}T*nd`\KڿƻlBZũjKХUAͽxs.p^*b0=}W{3h36' y>+@Zl>6Y:ɍm2 1.7 $gNUKe3e s779?K!Io.h,Ӡ9q%\~ RK&lqx.<H'g{/FGs[&e|e ro4 QZ~Jh mUY8yĠ*g>Ud y~g)h^ >k$؄0} ҥ0+Ia f~ºs2BR4w īg60}>qm6"qawt~ڍ ZZ_ۖl"J7Xl,m<6Gx;1 MV!{dW{KsC ˑkYk|`N YVKtbhr;P{m:yAUPIӺ*QnUzü8y*Ur#Q *+\BH@Ukr (]&= u#O[7scdb0՜E$jf)tyԔ!8=L98k:;b9hiFv8&zCFmi]$nRazorE|`~NLڦ|#/q?ݪ fU;d=%ݙ'&\hע&t#ݹ*MHB6 Vc«6Z1Û5\^ԛJGݱEk%Yѥ#-քݣ+yJ|ߝN+G|:mѠ\7 NQ|h /QSRaFFɷ&bP_˘I> o=;s:n.6X)T4}bIo]a16n~O?>K6Yr3YS"1爻s& ,ث`'uN(]hG^"mmI+HP}JXxr0lօ utT e9@.j%@`:Zdn+\qf?6ѼHGOxs"Kūq|\]zVe֜go6wk cpM~mEVM "pUs[$cPUkw(-fpsՇ& CY!Mmk!5n:wʼtQkY Ȋ7-@2f7Yյ6Q2'o @z=6B[>Iၣ2v zȳȊL9u eSf|k?pЁg'p=8gg]ڍsɜz}KK`B^o^ۋ\uJqMKfq};{yY7d^]W?0 z>j.R.$NpG0m Z")j%SSV_Wݻ;/v Tގ[d/B Qc;[яTwhc3/n<4^Co y)>{ Os!mB_3ycM۵B,)q&:*a9qÍyJ&+L=/ԇ,X.n2 $b1s愅UHie/e҇ b 6g',jd*[; ebvdxh.9GKwIۜxs8^NEI?`)ΜEl7媵ћñjξv\6Hs$!jqfxrdT}P‰5^/ٍLCPwUG &Ӓ`jܞ{̉Z(Vs %Ο4M84zH* u6Γo}dx ߖXc8Z ZrI*^ݧEdmZd*J5*˯ԕ:/a{T 1_V`ŬXbv8ouN42{m}L3bJ69\vem8׋{ /KCBVUA?D.S~>X-;w|àmhAhU)LLŗr:Ӻ ĺ`6`Pi؟ ?/a2VIB] 2 AKP-;@ @=DifeY24 QF9|6}rH<đ"_v#o`XI }Y z~e.!q9Lǵ+ "4y̅p鑶5-Gt+H]_4<My aL-gO]?X Q;t4k: ;+{!k w\cԨu1z;  XȀ2g6 oS+鶘3B* 踉fc8-34; g'+IX# QoʗBmWQŷܣɹm f%iG*˩Vpkyq˺32O -x4mV SN] 6=9˕TƊ0ʣe 0[ҿY jvgbޙx7'`"BBBg3n 6l|Z[K(_p)nAy%mP%~:M^qB=<]P7ltn`m2odJ S:s՞v]j:l`f }&90-pwRBlJMΜ$]a?2i[dz {]rRkf({n%JXBV"g # ŌLTVk#C>^9b0H"mp?!ȶ D51llju ˤ֓Ʃ=NFxyb6_-lօ_IJ+((*f9_jY /C娙GDq%TϧkL4uaKq9ҫeGBNAPi `GWX"wm rV? NWB-dZQ'tsmI}!NFT" k $Z]}}WtuH(IZTɣik3;AK(Ќ;ķ2ݪE]}',bj[ZFȐM-<"&T@v}A6HbEA `܃DT?(md^"j\TP ͹HQ(!|a@~F+,?' PC ů,h#QL)G{GDNəCSyIYL|{AQ!%MuCvbh}X ?ꔦ]e%s|ZCmzjj@,09O"pLiav}h&Cգ7Hl ^2׷#w_AU(Ȃ)Y Ҥc= UG-T;^FDKFSp_7u6"K0D6L_9HO)!vL?ꍤui0n/Y$yL{IsKtsq>ԡ*\ ;Ątu)&!8Al;mKA܎fW0<gm"xUa ^OÜblV'Zgx ;"0{iœW1 Qy ;:UGMt<mLB=:gpxS}x*C:׆ً]5+5| V|d^ KԌ^Sq!%u﨡A /Q[t-M9v2w`&5x=D+'6z\vlׇ:k sFfn)CHJ#}M?Q%FR[jld.->h<Ǖ~׃`7~~z1]h;ߑy`1Ƒfٓ5&uQQͧjKAVd|2W:GO2XrQl%P9P[iw>5EtF8 D3Z%Pc8ՍpahnnypQLjS}5%`/⮶[˘gh5 bVHjKxd[N'N^gf'2^FVvɁ\A a0S i,9]Tե#a= Ēץ!WLapi_A-}6Z$z¿//sI_o);SC5'ssCv=F_uN^-3I4q?4Y/:EoM= ]N zdԄZ1`#1RyZϳ3swP2Cr87q}['=!ՍuxfW~[0%D_4N؉4:.4+Q$FN[$N9'+T@pP%9hGgz#m:^!_-.#6n_1d. z!4,O_kWKmLZD?C5nБk:prXt\AqVw (0b'"Bb-|ux#@K+B7b J݆L> 1 M;#.HcgKmt]ԉm5&_IU,A٘xMyNrNDT25r'P"ʥ[*ab3%Cd*>&kJ_AllLJ.!탔صD7`>`T(diķg.ؒ9 Q4$FE2_$xSy0a@#!"K<TH!$<EC8ӻG2?4d©ѣ>6r m箥/Z;@rcJ,h< ԯ2\# |cӣ7yW~?$ 3RuxN߭e3"yIȓneX) EYRC鄺v\)AWQء\gVV AnsCDb)d fU9E!*t/x2t}n%{7Zy[| xcgE%.4nT9M(BpT3d/%iʓs'|=hЦ+]ZU@Q[;P`*0S9US#tG\urz,6F-ϖ#G*= ͼ9t{H;_9ŘnzѠhɪXDrXÊ"ʪf (,2^ jK-v8IYJ2}O(-(#}W /l.6QQZ @k-b\ႡޅjB ?:iOU G%<A׸C(^4_?Hd=h|i0vWBA2Cĕcݜ/@A&>2'&0\\4X$ *)h=II$\uQGHɊΛ ɻV>e"pƓVؒ}}…B;|+NprމN X_ni0~yz蹗Ӕ*+l!þ?T|uʜ!ZƼ|&UIZ#?ΪUўnP`jra 4PuV] LlU?6ǣ6]w!KhW<@/e?㢐Tԍ# lhL9078Z6p"CQLwBfA.B8c+$\nE.,s.3/Їow"3u ֫A"N$8M8ƹouplmP^Yh @q"7cZ6vVNSlZn,8 ݿ RspuZGƚWYO;GJFCF6h#WMUnD)#(~nIV-!'h rnX 750hhP8.i#VfIJbԄ"3v i|1iU |FPw)x-h录PQ,Y)9#U:^K0t0(.VDYNҐ_Z8ǀS»K58 8}I-8ѼSt;=h wL$H;JpdPԦ[R:D9|"N/@Fǭ؇Uf&]qr1w*ITC]^)YKx2Y#lLPtOqS.|σ rΩf4I<#P5)Bz"(.xe$ʸћ%i3Mm埻osWe2Ƅjd1@Kcz(-τ=6=S*}r7}=hyV(@?Zl\з?g'W,fMzh•%qW`$98^?ax6X#wI1z,9<&!IaUwpvɢ&ʻ#TNkR<\z䷦ ѡhFL!t54.4#3p1 x%YXX"aü' y'>3&h贬-!-}{7{x6E覆^~U qqi)ZSKxD#˭0 >0UKk64D{O^Ӝ͜lD\(w3 *|1.߮ n%vz~.@'WAl}v2Tu{p |4ĊĎ_-GcGL ݘC-''u* ; 87!aa;V5o I |nC͝*=)͌i$,S8MzNQI1W߃l#r#S#u"4AXFnSZGe!a_w㤵wa2kˈA^븀/ 3=)hid~?V60;ťgʶ#& Tu`79Y:SKMYc7F򒊜/?~\bK#XMkdlce s'z>6^vX+ă6=Y,fQHw(Rtw+cB<.ɣp W+1 D>#lҁQ DŽ?6|0p42BlzQfH|Խ ք?tGPn# 7<0eV\ꥮ],Qe y nK_ɱ^D͆,DFm@)Udq QH,}b+˔fжʡ$!|^auEIjW_UjyܛhsR#FmzHCLJY3w||A9ƒRZ{@ø~sKJ9`XRx~^ 6֝$CLGg 5zZ8;8!FGLGU"ڄ6RoGa~0GedLڂ)H'@b&wsa LD`1=x'?ˣ.^X=Mp:B4@\ `ͫC wmǢ'&w %iPg-ݹëU|A>+|b9zˢI36poiM;GvO]釉hSFb[ Pj+J܂Y׮toݒV[D= _l3MŹo?5F6(d_%oD["pY":kL*+xwm[J{Ss͏x RN臼n9nSYh'*/X:NQylF26bV G)gcHIҵdٝQU%`n;N[snJRT9ڨ1*%~^qd ]JYhGM^9){+&G,Ę9M7CN2m:!MuhF7O[|]uneF\ ?#N ЍǗl!V! }g_jT'Î.Y4z(Ϧl.c FNQ+q$$k`ZI٪"fQ&W#-,Vh>tdzqӟyIMPKX8]/^p#3c4/6k@/޶ Ԗb~ܜ l=A'Y?&=R Tw##sPaYc\8ȥQKE6_|  ) ie'H`!Dz4Ѥ?ܔyM~W)ヒ"oeɣ)e 23ʝKf ʔ;(HoHf(q߅k`(#wӊ>(.,: w1 Qp^f[^Pk$0PhZؑGšKje>,O==`<zx ;ێ-crq#}nn t:]fpGB-Sjd0P?@klfV20dŦn-Ze6QY8o~f`/NqJX1műy{u!JK^ {Mj 6c%k(&i Z+_sxeezs B"pQmˑ%Q-=K 6xmHДh4.#ҹ<5nD̠zq6m]1t6ӕRCPiѕ'ew\I.5(˄?5F0E>&N/ ;~N)I@ Hwb@|]ߍѬsνX Cd>BXU972B^M|Y]Hj6z-bm aHa0(Eihm9MO?v~Cp6 %}vx'J+.\EfHw>9y`Av҇%^e cp[՗ӢU$$UyV|3#Uup,U^̗f5̻XҍK:ѻmY-gkp[qHiE kɻRk񎣣32uҎH-z{n+…Z {?ޓ)2[`YӾ)aGYviuR؎[!#,J䭬VmƗkh\6ď`o׏vu)M_cIGXAZ9xmt]MP}djX9M*U TaW3s\=^]>U06D""nPh@h9u-|}^ژg{G3"i+ւhԓwCn MX渃&5J0=S@BͶ6F99ȅQAx i"eg=ܭq ;|mԀ_ (8 h Ɲ=8;S /V~- .R$W"yZA+W1nדJQѸ*=4DV 05=.ǷB$!VU3e-+ۍ Y \T@ MotkeQ啊T)Qv/f|ʻkrt޳`^,(zu}o᠜Ŭ20nIg"!<]W)%aU\0 (ُsH7-!?jp1M?KUp%+k˞Tr<nb60RڻP7Y50~@nmeVzYo~c-GRB8QPYj%Ur@4A+4X'I|1ot,+/O&eW]| (A _=~85 ?gܽH=<"%vYs6)d2*Eq'x' yPjׂ&3JnΗ%Pfzϥhˎ K;\9"Yџ&3H3o FV?C8Sm}YZ{olb)]i OPlZy_k3|{ؾ5I'\*USրNdZC譯Oұ!ϋ|EH?* ic2@T4D&pFqW1#j/3]<9AuL}'{dO MUUE[o֕y]Y ']BKOd)YxDSܮ5l]؞NFZZR{!>'e'UOBT*E'sp#TrcG2FX@oI`"tY{ _j\I΂*++DtKՂv1"nS,+AhV7/οQrarWelǽ=V,GР\ ?l3G|ؘ}l<Ȍwfь,TkN<00=IqŠG5GSP MرCFG'+;1vG'(5X1CL*E^ ˯b/><})0u Z9/2ڑ#!GW?><)k/=Q\d'Ϙ1#{*d-TF@SInA. :;5m-aXZ5>";dPOp`NSUmr;6‡rIV^(%^1[o̶y1Bmn5#iu|̴}2;/6MgebŮ8pL]swD\}ϴ9ZzK\x/laՄq6f qGJb[ ,>_NqS;qM:=C_ʸ+0X>Q2铪Fҏz/cQ2S50/J04d8MxH̝rxF^]Oq1cQ0Z ƞvG-CM}>k[?!S3V2X5"ocQm>>Kt~ 2hWJ r >Ω_#U-E>n8M`NV^Uu]Rg7O3SVO=ךɾ+HV2( 4{N Kg|W@[{+TIP9VF$ |nPJŔ̗ZFW$-*&r_h*N"\!V0ʺery!mQ1l`#,nҪނW#1kƌEP`tTO1d`V9#ʪoUQc\1=^gvn}Æ' E M?pώGڀ4evbeJax#p^ԫP=`XN 7q :\=x<`kFFeҟ;랐Kk}bb=VngM]h}>&Ba)7L c#g edƯ9SX*~. 7^,tm+ S=4mT=XٹߦQ%8;9Pm?WHyu爵 ī1mB$Yc%ʆ5MYs~.>q'6${7{ cOV49 } K/d|kX޻I^b67YKG7#o 3"a8L=/bԭ6h[dl*O8q=޹@r|9i~aT`;YfBA4/B+Wwz9A[i?lrpk(0y(v'ӣO< TG$mz 8HՌ[M z<{w^5ʘ,$9'bp Pnl H..ZQVa+&AmӸ*K&z! lPSdt_Q2n<& 82m?|\,r(懶iӑHoQEԙ iKHՕ5d]ܑAD- qbC,]GYiYFV㯷p벷;!r%րNwKJ"PpR@S.M/?kOw ^.ŋ&?eE[otԨ' #vҾ1R 'GOuB&ep^ ~{"!,y IK~iRJP4vƬH~9j@\&`],"j]w|?!Eyp2QZJ ꫴ~uSM{٠:2Vx: Ȝ`M"ʆ>0̓g{tX̬ pWi%q$[tD)gR~0w3Vy8gjjq;\p=7#%J0SW ,X7oj򣝊{>ϫzw)6yZH["ZM+Mp,ʭMrdXxRvR+ 9jF*fF΋XvlYh[Aˁ-G }B 1L:X~UI8UL/S`2n11玄2(iLa} UwӇ4xmp>8ȸa|aWthc'߿l+v;ӫn_~H oSӘs3qQx{EB*2LDKSIyt2ŐpBW ČN[^@DAvpAbݜ4̓ +B Zr[fԫH̴t OT?/coeB}՞ꩯAkvh}B;: ̸ ]W6Rwl9L{?E=,sYg`Piz<JRo}/<tySn/__Ba9nҥ&Yh *S)TXpHFI^'0hӤ1f$Z1毮v&jCn}bW@sn\")F4>;v 2s ꫸kX (.bsc(Xb U,'FL1o@ iuGwH0HY觴3yp#0yP19Mx dmbtI(ڊv(U:#[O \h1Qحk]A{#SV\CD^[n#nADxl4ACLf:I̋i'aK}[y%RR۵+e2+ ֿG$y=?_oAz <'ؼx5 ծ3FI{} z@¼`ɮ[?H/D^8'v%%uq[*F0$ajYg^0exҷfrgLjQ(sik=]p~[L4\(Ky?;$XcKypSdl V_biH\ʕj8$M(d~v9uR*e{ޔɂZ{ب:PR+]kPo/d,l6}abMdΛ=qcnBg(3?zLV7T>zvyKd˼20W4r轪8jk]aH( rH|b](;ul؀,iK{łPԵi!x`<ϐirm'%Q:ZhT_`孟׽δo18PN#oC0q !/ĖZ"?Zن7r8O"C+I7-My$>qs@Y?H7ʰ6lNFM %Kr)~'HӨ+ :Z˪#.j8uk0ԫز>m={kI9QMI\IUS1R>QGg7\izRʆ!4&Bfd)pREdҜbD񒣢xpG2vEwD2o`u||( k e5S3%>(K "TUrl%O#1”_K~yOu`YjOT[cp8hĀUZ\}[S-j^1'=0I19$G3ع) ^"Ec]D^oMh 'k~Z 2PPt'aP,M*,n0c\sĆ9(M 6* C7mZY0[ f0*&$ gD/XŸ梿R?ٻ_qҙ|e8 +|&- ShvonM'xvuRkfogLC+r"f۸g/Vm=)xIEXdf-{}; `>:hE9wpD(֘BJ4wNW/?y9TwNѾMeO@+o,I PcEnD gs6Q66h9̌1 5B@O)jZ#.X؄4}ɠ[MR=B*I x uw!v+fw|˚Ʃf׿ ]-_X @;6gC3WRSe2od'5}iLiX^8wM~0L/XHJ;<{ԝSO!-[2 "P3yV!PhlzPڮ0ecraW~tJPJl!λ2C)<$Ʊp!l@/5{N٬ݾЪT=cva YCH]{_= !FԨQS[Os;UdX{l``0W8j>]eag+y`3[VRɁ8xyI,gGFx (a "}P*v!`ٴ{[SBQE+ =Z}T(Ir濥EB+Z켹,t1x%1X- =|X`yrܞC!ާn͓s}{S_/tCHvy3CH?_*[L E{Kۺl5&QeW=^V9v^7en5$OoޮDMMxkbˉi[GO9ƒXN>IQh*10GFsO,0}uN8*%b(x.pi02!ѷ(DI=oHt ?g)sdVbwZ\9Eȗ]WkX)Ҽno:S|jcÎ܋G>Sp7"~x6]W2 xeGLT4fYvgJ:H-hK $7oPEauv{vһgR#&!ǒ6JH4xB'NDvj`wI+YhL+|>:2M2 OZdO2rp';?Z_HΙ/ UKUdIͅ"Vp Iw6?RdL}iX&[`m`O\`𡻰Fqp 3G90v!B뀌h4aǎ:e+ 1"GFw{aGEFprVXJ/`mP\gy3,s[K2i8<&9`w\Tɦ⿋Q|4s0}҅!{fLg5}5Ga{H`row1`f,U jQcl "uciEg&w4$78]p(_MޔF ZH(DTj\~F˙uNQ ٢[! 6 QI,ɟ36Nc-|7Q/Z8_<ݱAR[HӴ\ǎ$CxK0}Z*w5J/R7ͺȿ%&O]9ĭ !.!P#8vQ_>J?tLFsG`yN7)PF0'>'~f衏` BG!(5Ew@ߤ+17__nkmF'{n#~XaM~Yq͏d=0!#J"/PpF{iL3NgTԸ9*W[y/m9HSD1wN2 rZ6T[.,_4GfN㏣7&$oy.zަL/vLT02.v=%Xx+3Bq|w"}XE_i1| Eq9Xo#A~bhLb1ݢ5z4 w, ΐsŦ4n%72VTDn84z9^NdH-D `j0JgPShű r)^{`ڝ6h =,-«osKJ&QZ'']~!1vCuvN<]zUպb=xf1QIWN?gZO+w،;Nv-Cb?ῶEeF\ܫ{X )%+L%0=?*>d ]5t%$i$ ~GrG[nI \W+(῔ϋhs! d~jXe gRqۿ[=I! jZ56^ņPzl(J"LhUbMrB~Ԯ$9Ŀmo+YG-)h^gl]rw?яu6pso Aٸ@_Nk';C Iax#V.4[_; ᆜbƣ= h1ʥńV5䱃}ZW^RrCHy.? 0Co:6D"5HzMí4Nzc7P5oB P}:L1>hi;Ӵ'¤]42 }:|Wl|' ޥG&MMb73LH+̫9nN{Ճ*Ev'=֑q lɠA2-EC>Jw]N~ Cioh-03  $?\$A߭u#A.Íx`ɏ7|IFB39ge08kU;R#!=)'HM>FSV䎓35nW ~`ozr""|g ~A)FlD il}Iu[ CH 9M\IÐ⬈2\YVN*[r%jR5&Kn5 ,)LˬUH}WwpKa@2gՈuKeU} 9Lh폼w;ʕvDS5ʈyHs?tSbnDeyx$ &.ېg^ mq9x0%gHUF NR>sR>XTl6'#ĚP3-.58.jri$ӆUsz'g.ԊQvkB&X\zP̖,gFkwWcu>Hp'|xnSjr`҃ z@S(c,wK1[o <wR6T5vy YG?& lxdr(ImSjKuЈj+l6%M(/#J #OYF"K?Q"zޒTΦ#_' AAJk3IU>5I:Hy*A#bp\04GF_[ ]ofJw!RxȾoRJȢ4O?0+c/7qhpu@@_ǫ>á+gwŻj}V1h<(7p]za}bڀ36,h@3^qgc,n1[X>ymY3Kcꮁ߶vCE<[g6 ܛ"zYrXpmĵ#K͛u|ɸ[czmpi3$ q3t?]qc Ħ)G 䒥M}O~O2k/kvD?5t3>^&erEݐId8(&^pP*09(N޼V%t"lgEGRaɫ;XX%s߃w0*8P]%籞r~p%uw)˹t0C_SI^ no5'Θ6U XɄCeûc}N.+"abb#K2"a`A& Bs^IU3N>:+פPplV1d?_r"Ih)He:j˼ۚ]e\ /zo}2 $d.J=$gW!cSeD ] Znq &6fv{r9$,H0 R4!A?pa?Y1=Jcu/ԊմTWq:2c& Lϣ H ;_MZS9[TXwOfvVw@PUW;ЛIwg#-TSVLi\_wSB]A''Ec!8PΠ{1eRX7QqMS RXfӔl57ot(V we/s:I]Xh4e|muEɫyL~L=QQ# 9 %:1Opg ?uUw# cwOfro;!ֻٛ3qq[}yKV/:^\)3 T!nz> A T6D +4j'#2\m6^mqYCܰ524kл cT#ȩpeNFx@[U{s"H CD ⓐ/Vcư/ UŃHSqђc`Gw>FXCPC$uq,w!޸;gdč֩Q6:.7oG ZQeC6@19gOi\]Y!i&WgPɉG/&_|UY$& \jAe?22?`;ujK9%zTYb[t#]Ԛ\=P<'_^uQ:5P\BV΋1=?ޘpMx,Tг>DOqZt92%XEŽrt e)jrw>o 1.=6)?1â^ ))v'd*Njm  иRK7 Q;r䠊? j)o^G`42uHXJOڇwU)w_;@fÙ ) ϘXDLI5W="9Dd3UvjeW{ڏ, gFתYmqo`e 3tuo#g5{FDz{Q; YF{^OXcEuv|'NgjrǝJxUVSn llGoIJ6xmGS>O;eGװw)h!ًIF`*/ ;de}<մws(qvSDa1?v%F(Txzh }k94k_Jځ./*GUCXʛ$4k<*œLvbO` ,3tM%9|uu1BjS |>C0U)#+|A|F6TL)d. e"5 =i%Rܖ/E~s5E,,YbcBgxEnjfO tU)xvߕۏ'6 ˃ '"w*c࿼%]; R} [R@ANJl|x4^S?qg|<0v%y4ai FwJ7D~OQ"{$8Ɲl\fa &,:ҠUZ$T|$G.N{!WĊ5۲yq/ tѬu! jFxpP&sQ=QVRPD85ựsy'm4aH.s1/WDr8kERJ x 9nק'CiRwl}R gcZQ0Z8''j ?W ɧ= .RXoPUΰdDͣ.N&jo:nuSnYR;gZΘ [岖`)% ЏqpE{1ĉQԵQvP:]^NglSM; i$֤bVP::fpv~m!.Pkgނ*ki>bXy:Ҭɡ&grxsV +w,] /iոk4#P(gU~Cy®Fۊ4? ;m!v6=,"&@yπ1/PIAq߫M0'dZcsoMP;0aGՔYY6<_OxDkoƹ]ւ!3-W#4PKbЬ;t~_ {Qp#OWE g VLpicԗdf_!\]PTaM6OWlmas敌Q**]:QEz1y[?~aG>Kqe[7.T 諽-uWvSȬxgm%+P^r<)$HxϝɖROXQ9,ÁSFAf,ފ";+tJShxO4m؅UɁPP 2]%'?CdvpXDhR x/}=yd:Zn}ySPh?]i_|ZdZ|ה&h%eO+)vr 9dIu7.#}^XDi~|LvuJK+d\ZA:V9ᦤes>s+وSnI[5c7ðsBZw3@( 9=lN/E8A8?hdwEPAI"e%s0:09 &5hjh) d|c@x~3plYlTt!x/ yݔ  -]YPϹ AҚ{E@p4c(mjȺ*PqTjCJ}^WKwbwA{UTg/}ĹBJz[m:פ;q\0ƇYh;;4J#uWVAGl`}?4^$gJ P2H(RpuQUI;2oʗPLҰ=ȁz+;-=dmB$JxY#?GAj5Mx/Qn^(#}iTGUWع\^#ɥ, I;jvB^"u^eg)^a vv?⊟ ;:hZ [ \ͽ_󓫖׆Y/J\j@*Z-Rn2> ɯnQb$RrkF+kKia{}st7I҆| )ݽ+ԅ~lq8,qk-)xjȡɅX}&. I?Ubr7BNE{I(v.|6##xEbk־dn{FzUh yh4ش7vӤ fyѮAjh)]^"Y֊UI\C)c9V_sv ֣Ȼ17Ǎ:!S=?l;IiAixX>ocB]]y TI53DMX ,Z&/͚Ԍ>\ITdo޷{Pڶh Oq"3Ǡ.˻N@e,k8S-јzX<bd#C_b?Wߔ&M#_UtwitVgJW,qzJjMT>l.v_HA3ڗgpY-+!~W@_0wB~.*2U2yH= Eڰ~e?h"UFg妹!Xu xY˯c]`+St}6?Ug%T{9(wj (b:o(g x\ hU-P]vt̪0w ;/bI?$eqf^TX :<ۮ^@}і<&/AP?f] ZV8Em{҇ܢhH< 9V}N+BI- BCt|}BW\ŪUƑ:8;5FSA2Q+5H*RS8EL/ϯ2.`h"J4X{NNmY5^Ap+&e/*讁 7\ Vp,I͕s=f ʒ<߶.V䋲`6,`U}I=@붭U~N%T<+U(dhă@Ʉw-,хQªe$'nIJXG#@ B. fW|$n9l9EN$vxdbblʍt G^$E;m\TZ=ߵL.Heuǁc{wnizw[?'!'dLQ>W>HP,!pf|x.̢u?rR^;'Jpޟ=X"؂BܾuƾA buس X|ujXǯ߶OSMʊfJ_7}p9nwWpI%b0O0S!Af8Գx2puHGHguy2MJGO$h1T-BgeV ϗLp@۔`-8!T/@ F4,Ё6Y? \R t7)-Ӧ8_(ʛh_+n6Fa9 ?yhÿc+)}z4b:gSG Yd(,5yٹ/hN7_7-Rɻ^PXK}U**lDt^~,MYH eio=zɭVŹW,(9Ji|1@/jև9@W M.'a#R糽4*J|u?ېT~ETt_qyT 2>+giYjp$*M,sUyՎʍNV;BFIE7.~d~-9 %3"O.wR@Cm4['ħ@J:wTd 2ǁ߀LI4d,7{{Ye!IiLoff -z;M K>Eq3DŻ]yݠH1uԷ6[ cBܟ[Vщ2+(.Wp](X %(/Ggux)5%FH?Mp['UȲ=^"z<aUZ,:\*ާNv诧A/w {*ݦ%t&tN*'8,ƞ~xI+Cs`M;HR] dk/pY $ȝ! elT$n-pV+mje[-oH|h-vZI@尼.m"!|zxf_/}@@}]h#>AZb) *[)a]ֵkmf82F췢 䎄]Pb2岳9 l%k (࿴QCҔ=QkmTxO_{Fk#93'k {ΈP^AN0&I)x"؊פ蝳ЋKN'ű5۩_%ygX:ޮeIc9bƓ㎈6UWD h:pWr9v>.taFDe#f5T#Kfy EGXGUbpŵg [ թ$]k{_ 9Ov'ݻv?$h$4]q@RKy襂0 Zdžw#l}ۅ33Ds^(&> 9DRMRخhᨓy#7k>1י֫c>T>ֲJ4*%W@ơe?k΅wn>9 κ:kh?:G&|!ipr'ЏQd~8J$'4EdݮY0:&lSHzrRЊO[kd|ps<<}DUr\- C!@-d;~ܟ@Ѱuc׭\JU~9 q-jO_h*p}XkXG슢:<PzYa~%-YWl/M "@JlA++3̺;/vP!3hwxv9mBc P <ӂHЊ70xs_x--|4Dfqvedͪ}кTx!i70l9}o!s89ZJ&s0GQ튽\vx^h@y5BȄ酠} mɇR(۪68W!s]ɽO?|s V7y*}ZB4ݙg0ƅ%hP0ZFEJgJ %!quضoX[Jw(nnbYW5!;qD)PD2CNN o6 /y2o1A4au(FNғ gl:Yr)-Bcp % /]($'S׃(L>Rz8׽a0ԁXˀ|I3[/'>d3ÉO"y5HgM@l!afBb&\lnL#rWrB c/&Ğ>s6 g)#LHr% F/ zrkP[gx>hUn?K;D_t`ğ~^WG_J㖵,E | -H\=^Nόg@fd *h21YoDcǥpȉRݳNI_@x"*11Ý'Téc=! ChnY=ñIsS}̡"40wxaH=ı+&i6mݽv awC ebR^P2ܰT̺8:$&Ίȹ p/%?ÒR Pօ YZ