sssd-tools-1.16.1-lp150.2.3.1 4>$  Ap[_VZ/=„V_jI.j 0 qfg#tƦGߨZB)>pĵN\ˠ(_m>dqH)1Xs/cP@ ~hXۨgmU>6|skPHcwf`I-;OpS в~g8ά%8&oORE,ы`7Ɋ4E Fۃ/wʱ0,v鷀x)ݓ1N˷J>:^|Hd8bcf9ccbb9b1fbbad76f339fa73df8a4f522fe5b91039b24bd2068d6ad04f4c42738809a49f1085e3d90004f4fb153867836f9bt[_VZ/=„3eF^Kب^oٕ%<p>?d   ; 0B^dl]] ] T] ] %] ]]]  ]"0"P"%(%Q8%Xc9&c:-cF<GP]H]I8]XY\]]<]^bc5deflu]vTw D]x ]y ,zTdhnCsssd-tools1.16.1lp150.2.3.1Commandline tools for sssdThe packages contains commandline tools for managing users and groups using the "local" id provider of the System Security Services Daemon (sssd).[_V&cloud112 openSUSE Leap 15.0openSUSEGPL-3.0+ and LGPL-3.0+http://bugs.opensuse.orgSystem/Managementhttps://pagure.io/SSSD/sssdlinuxx86_64>Px  P 02Cj~Oc:8[*21R`Ny"Gwl< MMA/*d * :7qA큤A큤A큤A큤A큤A큤A큤A큤A큤[_Ua[_UX[_Ua[_Ua[_Ua[_Ua[_UY[_Ua[_Ua[_Ua[_Ua[_Ua[_Ub[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_Ub[_UP[_Uc[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_Uc[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_Uc[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_Uc[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_Uc[_UP[_Uc[_UP[_UP[_Ud[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_UP[_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-1.16.1-lp150.2.3.1.src.rpmsssd-toolssssd-tools(x86-64)@@@@@@@@@@@@@@@@@@@    /bin/sh/usr/bin/python3libc.so.6()(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libldb.so.1()(64bit)libldb.so.1(LDB_0.9.10)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_semanage.so()(64bit)libsss_util.so()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)python3-sssd-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sssd1.16.13.0.4-14.6.0-14.0-15.2-11.16.14.14.1[*AZZ@ZH@Z%8Z!D@YYw2X~@X,XX@X7@X@X@XN@XGX`@WWW@W@V&@VqR@VO @V U@U5@UU@U}lT@TTq@T6T`TR(@T9T9T2@S0S^S@S~@SSr @ShS_@SR1@R0@RsR%@QQU@Q^QIQ,QQ \PPPPAOOO@O O|7O\NNw.N7N2N1O@MM?MM@MM2@Mv@M6@M5M LOLr@L@L@L{@K9@K9@KK@KKjJ@J@J ckowalczyk@suse.comckowalczyk@suse.comckowalczyk@suse.comhguo@suse.comhguo@suse.comhguo@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.commichael@stroeder.comjengelh@inai.demichael@stroeder.comkukuk@suse.deluizluca@gmail.commichael@stroeder.comdimstar@opensuse.orgjengelh@inai.demichael@stroeder.commichael@stroeder.comjengelh@inai.dehguo@suse.commichael@stroeder.commpluskal@suse.comjengelh@inai.dejengelh@inai.demichael@stroeder.comjengelh@inai.dejengelh@inai.dehguo@suse.comcrrodriguez@opensuse.orgmichael@stroeder.comhguo@suse.comhoward@localhostjengelh@inai.demeissner@suse.comLed jengelh@inai.dejengelh@inai.decrrodriguez@opensuse.orgjengelh@inai.delchiquitto@suse.comjengelh@inai.deckornacker@suse.comcrrodriguez@opensuse.orgjengelh@inai.devarkoly@suse.comddiss@suse.comvarkoly@suse.comjengelh@inai.dejengelh@inai.deckornacker@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.derhafer@suse.comjengelh@inai.derhafer@suse.comrhafer@suse.comrhafer@suse.comrhafer@suse.comjengelh@inai.dejengelh@inai.dejengelh@inai.dejengelh@inai.deben.kevan@gmail.comben.kevan@gmail.comben.kevan@gmail.comjengelh@medozas.derhafer@suse.dejengelh@medozas.derhafer@suse.dejengelh@medozas.dejengelh@medozas.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.derhafer@suse.deaj@suse.derhafer@novell.comrhafer@novell.comcoolo@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.comrhafer@novell.com- Introduce patches: * Create sockets with right permissions: 0001-SUDO-Create-the-socket-with-stricter-permissions.patch (bsc#1098377, CVE-2018-10852) * Fix for sssd upstream integration tests 0002-intg-Do-not-hardcode-nsslibdir.patch (bsc#1098163)- Update to new minor upstream release 1.16.1 (fate#323340): New Features: * A new option auto_private_groups was added. If this option is enabled, SSSD will automatically create user private groups based on user’s UID number. The GID number is ignored in this case. * The SSSD smart card integration now supports a special type of PAM conversation implemented by GDM which allows the user to select the appropriate smrt card certificate in GDM. * A new API for accessing user and group information was added. This API is similar to the tradiional Name Service Switch API, but allows the consumer to talk to SSSD directly as well as to fine-tune the query with e.g. how cache should be evaluated. * The sssctl command line tool gained a new command access-report, which can generate who can access the client machine. Currently only generating the report on an IPA client based on HBAC rules is supported. * The hostid provider was moved from the IPA specific code to the generic LDAP code. This allows SSH host keys to be access by the generic LDAP provider as well. See the ldap_host_* options in the sssd-ldap manual page for more details. * Setting the memcache_timeout option to 0 disabled creating the memory cache files altogether. This can be useful in cases there is a bug in the memory cache that needs working around.- Updated sssd.spec: The IPA provider depends on AD provider's PAC executable, hence introducing the package dependency. (bsc#1021441, bsc#1062124)- Remove package descriptions for the python 2 packages that are no longer distributed: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config - Correct python version dependency of tools package. (bsc#1082108)- Correct dependency of sss_obfuscate command line program.- In an ongoing effort to reduce dependency on python version 2, the following python libraries are no longer built. Nevertheless their python3 counterparts remain in place: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config- Update to new upstream release 1.16.0 Security fixes * This release fixes CVE-2017-12173: Unsanitized input when searching in local cache database. SSSD stores its cached data in an LDAP like local database file using libldb. To lookup cached data LDAP search filters like (objectClass=user)(name=user_name) are used. However, in sysdb_search_user_by_upn_res(), the input was not sanitized and allowed to manipulate the search filter for cache lookups. This would allow a logged in user to discover the password hash of a different user. New Features * SSSD now supports session recording configuration through tlog. This feature enables recording of everything specific users see or type during their sessions on a text terminal. For more information, see the sssd-session-recording(5) manual page. * SSSD can act as a client agent to deliver Fleet Commander policies defined on an IPA server. Fleet Commander provides a configuration management interface that is controlled centrally and that covers desktop, applications and network configuration. * Several new systemtap probes were added into various locations in SSSD code to assist in troubleshooting and analyzing performance related issues. Please see the sssd-systemtap(5) manual page for more information. * A new LDAP provide access control mechanism that allows to restrict access based on PAM's rhost data field was added. For more details, please consult the sssd-ldap(5) manual page, in particular the options ldap_user_authorized_rhost and the rhost value of ldap_access_filter.- Update to new upstream release 1.15.3 (KCM disabled) New Features * In a setup where an IPA domain trusts an Active Directory domain, it is now possible to define the domain resolution order (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names). * Design page - Shortnames in trusted domains * SSSD ships with a new service called KCM. This service acts as a storage for Kerberos tickets when "libkrb5" is configured to use "KCM:" in "krb5.conf". * Design page - KCM server for SSSD * NOTE: There are several known issues in the "KCM" responder that will be handled in the next release. * Support for user and group resolution through the D-Bus interface and authentication and/or authorization through the PAM interface even for setups without UIDs or Windows SIDs present on the LDAP directory side. This enhancement allows SSSD to be used together with apache modules to provide identities for applications * Design page - Support for non-POSIX users and groups * SSSD ships a new public library called "libsss_certmap" that allows a flexible and configurable way of mapping a certificate to a user identity. * Design page - Matching and Mapping Certificates * The Kerberos locator plugin can be disabled using an environment variable "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the "sssd_krb5_locator_plugin" manual page for mode details. * The "sssctl" command line tool supports a new command "user-checks" that enables the administrator to check whether a certain user should be allowed or denied access to a certain PAM service. * The "secrets" responder now forwards requests to a proxy Custodia back end over a secure channel.- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to krb5-common sub-package. Address bsc#1024836.- Update to new upstream release 1.15.2 * It is now possible to configure certain parameters of a trusted domain in a configuration file sub-section. * Several issues related to socket-activating the NSS service, especially if SSSD was configured to use a non-privileged userm were fixed. The NSS service now does not change the ownership of its log files to avoid triggering a name-service lookup while the NSS service is not running yet. Additionally, the NSS service is started before any other service to make sure username resolution works and the other service can resolve the SSSD user correctly. * A new option "cache_first" allows the administrator to change the way multiple domains are searched. When this option is enabled, SSSD will first try to "pin" the requested name or ID to a domain by searching the entries that are already cached and contact the domain that contains the cached entry first. Previously, SSSD would check the cache and the remote server for each domain. This option brings performance benefit for setups that use multiple domains (even auto-discovered trusted domains), especially for ID lookups that would previously iterate over all domains. Please note that this option must be enabled with care as the administrator must ensure that the ID space of domains does not overlap. * The SSSD D-Bus interface gained two new methods: "FindByNameAndCertificate" and "ListByCertificate". These methods will be used primarily by IPA and `mod_lookup_identity to correctly match multple users who use the same certificate for Smart Card login. * A bug where SSSD did not properly sanitize a username with a newline character in it was fixed.- Switch *all* URLs after fedorahosted.org retirement- Updated project URL - Update to new upstream release 1.15.1 * Several issues related to starting the SSSD services on-demand via socket activation were fixed. In particular, it is no longer possible to have a service started both by sssd and socket-activated. Another bug which might have caused the responder to start before SSSD started and cause issues especially on system startup was fixed. * A new 'files' provider was added. This provider mirrors the contents of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose of this new provider is to make it possible to use SSSD's interfaces, such as the D-Bus interface for local users and enable leveraging the in-memory fast cache for local users as well, as a replacement for `nscd`. In future, we intend to extend the D-Bus interface to also provide setting and retrieving additional custom attributes for the files users. * SSSD now autogenerates a fallback configuration that enables the files domain if no SSSD configuration exists. This allows distributions to enable the 'sssd' service when the SSSD package is installed. Please note that SSSD must be build with the configuration option '--enable-files-domain' for this functionality to be enabled. * Support for public-key authentication with Kerberos (PKINIT) was added. This support will enable users who authenticate with a Smart Card to obtain a Kerberos ticket during authentication.- Remove obsolete insserv call- Added /etc/sssd/conf.d/ for configuration snippets- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update - Update to new upstream release 1.15.0 * SSSD now allows the responders to be activated by the systemd service manager and exit when idle. This means the services line in sssd.conf is optional and the responders can be started on-demand, simplifying the sssd configuration. Please note that this change is backwards-compatible and the responders listed explicitly in sssd.conf's services line are managed by sssd in the same manner as in previous releases. Please refer to man sssd.conf(5) for more information * The sudo provider is no longer disabled for configurations that do not explicitly include the sudo responder in the services list. In order to disable the sudo-related back end code that executes the periodic LDAP queries, set the sudo_provider to none explicitly * The watchdog signal handler no longer uses signal-unsafe functions. This bug was causing a deadlock in case the watchdog was about to kill a stuck process * A bug that prevented TLS to be set up correctly on systems where libldap links with GnuTLS was fixed * The functionality to alter SSSD configuration through the D-Bus interface provided by the IFP responder was removed. This functionality was not used to the best of our knowledge, had no tests and prevented the InfoPipe responder from running as a non-privileged user. * A bug that prevented statically-linked applications from using libnss_sss was fixed by removing dependency on -lpthreads from the libnss_sss library (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for an example on why linking with -lpthread from an NSS modules is problematic) * Previously, SSSD did not ignore GPOs that were missing the gPCFunctionalityVersion attribute and failed the whole GPO processing. Starting with this version, the GPOs without the gPCFunctionalityVersion are skipped.- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-login): the latter has been deprecated since systemd 209 and finally removed with systemd 230.- Add 0001-krb5-1.15-build-fix.patch to unlock building against future KRB versions.- Update to new upstream release 1.14.2 * Several more regressions caused by cache refactoring to use qualified names internally were fixed, including a regression that prevented the krb5_map_user option from working correctly. * A regression when logging in with a smart card using the GDM login manager was fixed * SSSD now removes the internal timestamp on startup cache when the persistent cache is removed. This enables admins to follow their existing workflow of just removing the persistent cache and start from a fresh slate * Several fixes to the sssd-secrets responder are present in this release * A bug in the autofs responder that prevented automounter maps from being returned when sssd_be was offline was fixed * A similar bug in the NSS responder that prevented netgroups from being returned when sssd_be was offline was fixed * Disabling the netlink integration can now be done with a new option disable_netlink. Previously, the netlink integration could be disabled with a sssd command line switch, which is being deprecated in this release. * The internal watchdog no longer kills sssd processes in case time shifts during sssd runtime * The fail over code is able to cope with concurrent SRV resolution requests better in this release * The proxy provider gained a new option proxy_max_children that allows the administrator to control the maximum number of child helper processes that authenticate users with auth_provider=proxy * The InfoPipe D-Bus responder exports the UUIDs of user and group objects through a uniqueID property- Update to new upstream release 1.14.1 * The IPA provider now supports logins with enterprise principals (also known as additional UPN suffixes). This functionality also enabled Active Directory users from trusted AD domains who use an additional UPN suffix to log in. Please note that this feature requires a recent IPA server. * When a user name is overriden in an IPA domain, resolving a group these users are a member of now returns the overriden user names * Users can be looked up by and log in with their e-mail address as an identifier. In order to do so, an attribute that represents the user's e-mail address is fetched by default. This attribute can by customized by setting the ldap_user_email configuration option. * A new ad_enabled_domains option was added. This option lets the administrator select domains that SSSD should attempt to reach in the AD forest SSSD is joined to. This option is useful for deployments where not all domains are reachable on the network level, yet the administrator needs to access some trusted domains and therefore disabling the subdomains provider completely is not desirable. * The sssctl tool has two new commands active-server and servers that allow the administrator to observe the server that SSSD is bound to and the servers that SSSD autodiscovered * SSSD used to fail to start when an attribute name is present in both the default SSSD attribute map and the custom ldap_user_extra_attrs map * GPO policy procesing no longer fails if the gPCMachineExtensionNames attribute only contains whitespaces * Several commits fix regressions related to switching all user and group names to fully qualified format, such as running initgroups for a user who is only a member of a primary group * Several patches fix regressions caused by splitting the database into two ldb files, such as when user attributes change without increasing the modifyTimestamp attribute value * systemd unit files are now shipped for the sssd-secrets responder, allowing the responder to be socket-activated. To do so, administrators should enable the sssd-secrets.socket and sssd-secrets.service systemd units. * The sssd binary has a new switch --disable-netlink that lets sssd skip messages from the kernel's netlink interface. * A crash when entries with special characters such as '(' were requested was fixed * The ldap_rfc_2307_fallback_to_local_users option was broken in the previous version. This release fixes the functionality.- Update to new upstream release 1.14.0 * The AD provider is now able to look up users from Active Directory domains by certificate. This change enables logins for Active Directory users with the help of a smart card. * The sss_override tool is now able to add certificates as local overrides in the SSSD cache. Please note that the certificate overrides are stored in the local cache, so removing the cache also removes all the certificates! * Invalid certificates are skipped instead of aborting the whole operation when logging in with a smart card using SSH. * This version allows several OCSP-related options such as the OCSP responder to be configured during smart card authentication. * SSSD is now able to determine the name of the user who logs in from the inserted smart card without having to type in the username. Note that this functionality must be enabled with the allow_missing_name pam_sss option. * The sss_cache command line tool is now able to invalidate SUDO rules with its new -r/-R switches. Note that the sudo rules ar not refreshed with the sss_cache tool immediately. * A new command line tool called sssctl was added. This tool allows to observe the status of SSSD. * A new option local_negative_timeout was added. This option allows the admin to specify the time during which lookups for users that are not handled by SSSD but are present on the system (typically in /etc/passwd and /etc/group) and prevents repeated lookups of local users on the remote server during initgroups operation. * An ID-mapping plugin for the winbind deamon was added. With this plugin, it's possible for winbind to use the same ID-mapping scheme as SSSD uses, producing consistent ID values. - Remove 0001-build-detect-endianness-at-configure-time.patch (included upstream)- Enable PAC responder. PAC is an extension element returned by domain controller, to speed up resolution of authorisation data such as group memberships.- Update to new upstream release 1.13.4 * The IPA sudo provider was reimplemented. The new version reads the data from IPA's LDAP tree (as opposed to the compat tree populated by the slapi-nis plugin that was used previously). The benefit is that deployments which don't require the compat tree for other purposes, such as support for non-SSSD clients can disable those autogenerated LDAP trees to conserve resources that slapi-nis otherwise requires. There should be no visible changes to the end user. * SSSD now has the ability to renew the machine credentials (keytabs) when the ad provider is used. Please note that a recent version of the adcli (0.8 or newer) package is required for this feature to work. * The automatic ID mapping feature was improved so that the administrator is no longer required to manually set the range size in case a RID in the AD domain is larger than the default range size * A potential infinite loop in the NFS ID mapping plugin that was resulting in an excessive memory usage was fixed * Clients that are pinned to a particular AD site using the ad_site option no longer communicate with DCs outside that site during service discovery. * The IPA identity provider is now able to resolve external (typically coming from a trusted AD forest) group members during get-group-information requests. Please note that resolving external group memberships for AD users during the initgroup requests used to work even prior to this update. This feature is mostly useful for cases where an IPA client is using the compat tree to resolve AD trust users. * The IPA ID views feature now works correctly even for deployments without a trust relationship. Previously, the subdomains IPA provider failed to read the views data if no master domain record was created on the IPA server during trust establishment. * A race condition in the client libraries between the SSSD closing the socket as idle and the client application using the socket was fixed. This bug manifested with a Broken Pipe error message on the client. * SSSD is now able to resolve users with the same usernames in different OUs of an AD domain * The smartcard authentication now works properly with gnome-screensaver- Enable internal testsuite- Update to new maintenance release 1.13.3 * A bug that prevented user lookups and logins after migration from winsync to IPA-AD trusts was fixed. * A bug that prevented the ignore_group_members option from working correctly in AD provider setups that use a dedicated primary group (as opposed to a user-private group) was fixed. * Offline detection and offline login timeouts were improved for AD users logging in from a domain trusted by an IPA server. * The AD provider supports setting up autofs_provider=ad .- Update to new upstream release 1.13.2 * Initial support for Smart Card authentication was added. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. * This release supports authenticating againt a KDC proxy.- Update to new upstream release 1.13.1 * Initial support for Smart Card authentication was added. The feature can be activated with the new pam_cert_auth option. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. At the same time, only the long-term password is cached, so offline access would still work using the long term password. * A new command line tool sss_override is present in this release. The tools allows to override attributes on the SSSD side. It's helpful in environment where e.g. some hosts need to have a different view of POSIX attributes than others. Please note that the overrides are stored in the cache as well, so removing the cache will also remove the overrides. * Several enhancements to the dynamic DNS update code. Notably, clients that update multiple interfaces work better with this release. * This release supports authenticating againt a KDC proxy * The fail over code was enhanced so that if a trusted domain is not reachable, only that domain will be marked as inactive but the backed would stay in online mode.- Update to new upstream release 1.13 * Support for separate prompts when using two-factor authentication * Added support for one-way trusts between an IPA and Active Directory environment. (Depends on IPA 4.2) * The fast memory cache now also supports the initgroups operation. * The PAM responder is now capable of caching authentication for configurable period, which might reduce server load in cases where accounts authenticate very frequently. Refer to the "cached_auth_timeout" option in sssd.conf(5). * The Active Directory provider has changed the default value of the "ad_gpo_access_control" option from permissive to enforcing. As a consequence, the GPO access control now affects all clients that set access_provider to ad. In order to restore the previous behaviour, set ad_gpo_access_control to permissive or use a different access_provider type. * Group Policy objects defined in a different AD domain that the computer object is defined in are now supported. * Credential caching and Offline authentication are also available when using two-factor authentication * The Python bindings are now built for both Python2 and Python3. * The LDAP bind timeout, StartTLS timeout and password change timeout are now configurable using the ldap_opt_timeout option.- Kill unused libsss_sudo-devel solvable.- Obsolete/provide libsss_sudo in sssd main package. Sudo capability is an integral feature in SSSD and the library is not supposed to be used separately.- sssd.service: add Before= and Wants=nss-user-lookup.target correct fix for bsc#926961- Update to new upstream release 1.12.5 * The background refresh tasks now supports refreshing users and groups as well. See the "refresh_expired_interval" parameter in the sssd.conf manpage. * A new option subdomain_inherit was added. * When an expired account attempts to log in, a configurable error message can be displayed with sufficient pam_verbosity setting. See the "pam_account_expired_message" option. * OpenLDAP ppolicy can be honored even when an alternate login method (such as SSH key) is used. See the "ldap_access_order" option. * A new option :krb5_map_user" was added, allowing the admin to map UNIX usernames to Kerberos principals. * BUG FIXES: * Fixed AD-specific bugs that resulted in the incorrect set of groups being displayed after the initgroups operation. * Fixes related to the IPA ID views feature. Setups using this should update sssd on both IPA servers and clients. * The AD provider now handles binary GUIDs correctly. * A bug that prevented the `ignore_group_members` parameter to be used with the AD provider was fixed. * The failover code now reads and honors TTL value for SRV queries as well. * Race condition between setting the timeout in the back ends and reading it in the front end during initgroup operation was fixed. This bug affected applications that perform the initgroups(3) operation in multiple processes simultaneously. * Setups that only want to use the domain SSSD is connected to, but not the autodiscovered trusted domains by setting `subdomains_provider=none` now work correctly as long as the domain SID is set manually in the config file. * In case only "allow" rules are used, the simple access provider is now able to skip unresolvable groups. * The GPO access control code now handles situations where user and computer objects were in different domains.- Update to new upstream release 1.12.4 (Changelog highlights following) * This is mostly a bug fixing release with only minor enhancements visible to the end user. * Contains many fixes and enhancements related to the ID views functionality of FreeIPA servers. * Several fixes related to retrieving AD group membership in an IPA-AD trust scenario. * Fixes a bug where the GPO access control previously didn't work at all if debugging was enabled in smb.conf. * SSSD can now be pinned to a particular AD site instead of autodiscovering the site. * A regression that caused setting the SELinux context for IPA users to fail, was fixed. * Fixed a potential crash caused by a double-free error when an SSSD service was killed by the monitor process.- A minor rpmspec cleanup to get rid of five rpmlint warnings * Remove mentioning of system-wide dbus configuration file from comments. * Remove traditional init script. * Remove compatibility for producing packages on older OpenSUSE releases.- Update to new upstream release 1.12.3 * SSSD now allows the IPA client to move from one ID view to another after SSSD restart. * It is possible to apply ID views to IPA domains as well. Previous SSSD versions only allowed views to be applied to AD trusted domains. * Overriding SSH public keys is supported in this release. * Move semanage related functions to a separate library.- build with PIE- fix bashism in postun script- Update to new upstream release 1.12.2 (bugfix release, bnc#900159) * Fixed a regression where the IPA provider did not fetch User Private Groups correctly * An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. * Several new options are available for deployments that need to restrict a certain PAM service from connecting to a certain SSSD domain. For more details, see the description of pam_trusted_users and pam_public_domains options in the sssd.conf(5) man page and the domains option in the pam_sss(8) man page. * When SSSD is acting as an IPA client in setup with trusted AD domains, it is able to return group members or full group memberships for users from trusted AD domains. * Support for the "views" feature of IPA. - Remove 0001-build-call-AC_BUILD_AUX_DIR-before-anything-else.patch (merged upstream)- Add 0001-build-call-AC_BUILD_AUX_DIR-before-anything-else.patch to workaround bad autoconf invocation- 0001-build-detect-endianness-at-configure-time.patch Correct defective endianness test.- Update to new upstream release 1.12.1 * The GPO access control was further enhanced to allow the access control decisions while offline and map the Windows logon rights onto Linux PAM services. * The SSSD now ships a plugin for the rpc.idmapd daemon, sss_rpcidmapd(5). * A MIT Kerberos localauth plugin was added to SSSD. This plugin helps translating principals to user names in IPA-AD trust scenarios, allowing the krb5.conf configuration to be less complex. * A libwbclient plugin implementation is now part of the SSSD. The main purpose is to map Active Directory users and groups identified by their SID to POSIX users and groups for the file-server use-case. * Active Directory users ca nnow use their User Logon Name to log in. * The sss_cache tool was enhanced to allow invalidating the SSH host keys. * Groups without full POSIX information can now be used to enroll group membership (CVE-2014-0249). * Detection of transition from offline to online state was improved, resulting in fewer timeouts when SSSD is offline. * The Active Directory provider now correctly detects Windows Server 2012 R2. Previous versions would fall back to the slower non-AD path with 2012 R2. * Several other bugs related to deployments where SSSD is acting as an AD client were fixed.- The utility sss_obfuscate uses the Python module pysss, so add a dependency on python-sssd-config to sssd-tools (bnc#890242)- Update to new upstream release 1.12.0 * A new responder, called InfoPipe was added. This responder provides a public D-Bus interface accessible over the system bus. In this release, methods for retrieving user attributes and list of groups were added as well as objects representing SSSD domains and processes. (The next 1.12.x releases will publish objects representing users and groups, too.) * SSSD provides an ID-mapping plugin for cifs-utils so that Windows SIDs can be mapped onto POSIX IDs and/or names without requiring Winbind and using the same code as the SSSD uses for identity information. * First phase of Group Policy-based access control for the AD provider was added. At the moment, the gpo-ldap component that downloads the list of GPOs that apply for the specific client has been implemented as well as the gpo-smb component that retrieves the group policy files and determines the access control check results based on those files. Future improvements will focus on storing the GPO policies as local files and mapping the Windows logon rights onto Linux PAM services. * Added a new library called sss_sifp that provides a simple synchronous API for communication with our new InfoPipe responder over the system bus. - Remove 0001-BUILD-Link-libsss_ldap_common.so-to-libsss_idmap.so.patch (merged upstream) - Provide "rcsssd" in systemd environments - Ensure sssd is always startable by removing /var/lib/sss/db/*.ldb on package installation so as to avoid potentially cache format incompatibility which would cause sssd to exit- fix %postun to not erroneously remove sss pam module- Switch to libnl-3 so we can get rid of libnl-1.- Redo 0001-build-detect-endianness-at-configure-time.patch to be -p1 - Add 0001-BUILD-Link-libsss_ldap_common.so-to-libsss_idmap.so.patch to resolve runtime loading problems (http://lists.opensuse.org/opensuse-factory/2014-05/msg00181.html )- bnc#877457 - 78 Configuration file /usr/lib/systemd/system/sssd.service is marked executable. Please remove executable permission bits.- Detect endianness at configure time, for use by Samba's byteorder.h header; (bnc#876544). + 0001-build-detect-endianness-at-configure-time.patch- Update to new upstream release 1.11.5.1 * sssd crashes after upgrade from 1.11.4 to 1.11.5 when using a samba4 domain * SSSD pam module accepts usernames with leading spaces * [RFE] Expose the list of trusted domains to IPA * If both IPA and LDAP are set up with enumeration on, two enum tasks are running * sssd.conf man pages don't list a configuration option. * Make SSSD compilable on systems with non-standard paths to krb5 includes * [freebsd] pam_sss: add ignore_unknown_user option * MAN: Remove misleading memberof example from ldap_access_filter example * not retrieving homedirs of AD users with posix attributes * Document that `sssd` cache needs to be cleared manually, if ID mapping configuration changes * Check IPA idranges before saving them to the cache * Evaluate usage of sudo LDAP provider together with the AD provider * Setting int option to 0 yields the default value * ipa-server-mode: Use lower-case user name component in home dir path * SSSD Does not cache SELinux map from FreeIPA correctly * IPA SELinux code looks for the host in the wrong sysdb subdir when a trusted user logs in * sssd fails to handle expired passwords when OTP is used * Add another Kerberos error code to trigger IPA password migration * Double OK when starting the service * SSSD should create the SELinux mapping file with format expected by pam_selinux * Valgrind: Invalid read of int while processing netgroup * other subdomains are unavailable when joined to a subdomain in the ad forest * Error during password change * configure time variables not expanded when running ./configure * RHEL7 IPA selinuxusermap hbac rule not always matching- Update to new upstream release 1.11.4 * The simple access provider supports specifying users and groups using their NetBIOS domain name (such as DOMAIN\username) * Support for enumerating users and groups from trusted AD domains was added to the AD provider * The Active Directory site discovery was made more robust for configurations which use multiple trusted domains * Several bugs in the LDAP provider that affected setups which mapped Windows SIDs to POSIX IDs were fixed * The SSSD is now able to use One Time Password (OTP) authentication configured on an IPA server.- Update to new upstream release 1.11.3 * The AD provider is able to resolve group memberships for groups with Global and Universal scope * The initgroups (get groups for user) operation for users from trusted AD domains was made more reliable by reading the required tokenGroups attribute from LDAP instead of Global Catalog * A new option ad_enable_gc was added to the AD provider. This option allows the administrator to force SSSD to talk to LDAP port only and never try the Global Catalog * The AD provider is now able to leverage the tokenGroups attribute even when POSIX attributes are used, providing better performance during logins. * A memory leak in the NSS responder that affected long-lived clients that requested netgroup data was fixed - Remove sssd-ldflags.diff (merged upstream)- Migrate deprecated krb5_kdcip variable to krb5_server (bnc#851048)- Update to new upstream release 1.11.2 * A new option ad_access_filter was added. This option allows the administrator to easily configure LDAP search filter that the users logging in must match in order to be granted access. * The Kerberos provider will no longer try to create public directories when evaluating the krb5_ccachedir option. - Remove 0005-implicit-decl.diff (merged upstream)- Update to new upstream release 1.11.0 * The sudo integration was made more robust. SSSD is now able to gracefully handle situations where it is not able to resolve the client host name or sudo rules have multiple name attributes. * Several nested group membership bugs were fixed * The PAC responder was made more robust and efficient, modifying existing cache entries instead of always recreating them. * The Kerberos provider now supports the new KEYRING ccache type. - Remove sssd-no-ldb-check.diff, now implemented through a configure argument --disable-ldb-version-check- Explicitly formulate SASL BuildRequires- Update to new upstream release 1.9.5 * Includes a fix for CVE-2013-0287: A simple access provider flaw prevents intended ACL use when SSSD is configured as an Active Directory client. * Fixed spurious password expiration warning that was printed on login with the Kerberos back end. * A new option ldap_rfc2307_fallback_to_local_users was added. If this option is set to true, SSSD is be able to resolve local group members of LDAP groups. * Fixed an indexing bug that prevented the contents of autofs maps from being returned to the automounter deamon in case the map contained a large number of entries. * Several fixes for safer handling of Kerberos credential caches for cases where the ccache is set to be stored in a DIR: type. - Remove Provide-a-be_get_account_info_send-function.patch, Add-unit-tests-for-simple-access-test-by-groups.patch, Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch, Resolve-GIDs-in-the-simple-access-provider.patch (CVE-2013-0287 material is in upstream), sssd-sysdb-binary-attrs.diff (merged upstream)- Implement signature verification- Fixed security issue: CVE-2013-0287 (bnc#809153): When SSSD is configured as an Active Directory client by using the new Active Directory provider or equivalent configuration of the LDAP provider, the Simple Access Provider does not handle access control correctly. If any groups are specified with the simple_deny_groups option, the group members are permitted access. New patches: * Provide-a-be_get_account_info_send-function.patch * Add-unit-tests-for-simple-access-test-by-groups.patch * Do-not-compile-main-in-DP-if-UNIT_TESTING-is-defined.patch * Resolve-GIDs-in-the-simple-access-provider.patch- Resolve user retrieval problems when encountering binary data in LDAP attributes (bnc#806078), added sssd-sysdb-binary-attrs.diff - Added sssd-no-ldb-check.diff so that SSSD continues to start even after an LDB update.- fix package name in baselibs.conf (bnc#796423)- update to 1.9.4 (bnc#801036): * A security bug assigned CVE-2013-0219 was fixed - TOCTOU race conditions when creating or removing home directories for users in local domain * A security bug assigned CVE-2013-0220 was fixed - out-of-bounds reads in autofs and ssh responder * The sssd_pam responder processes pending requests after reconnect * A serious memory leak in the NSS responder was fixed * Requests that were processing group entries with DNs pointing out of any configured search bases were not terminated correctly, causing long timeouts * Kerberos tickets are correctly renewed even after SSSD daemon restart * Multiple fixes related to SUDO integration, in particular fixing functionality when the sssd back end process was changing its online/offline status * The pwd_exp_warning option was fixed to function as documented in the manual page - refreshed sssd-ldflags.diff to apply cleanly- Removed left-over "Requires" for no longer existing sssd-client subpackage. - New patch: sssd-ldflags.diff to fix link failures due to erroneous LDFLAGS usage- Switch back to using libcrypto instead of mozilla-nss as it seems to be supported upstream again, cf. https://lists.fedorahosted.org/pipermail/sssd-devel/2012-June/010202.html - Cleanup PAM configuration after uninstalling sssd (bnc#788328)- Update to new upstream release 1.9.3 * Many fixes related to deployments where the SSSD is running as a client of IPA server with trust relation established with an Active Directory server * Multiple fixes related to correct reporting of group memberships, especially in setups that use nested groups * Fixed a bug that prevented upgrade from the 1.8 series if the cache contained nested groups before the upgrade * Restarting the responders is more robust for cases where the machine is under heavy load during back end restart * The default_shell option can now be also set per-domain in addition to global setting.- Update to new upstream release 1.9.2 * Users or groups from trusted domains can be retrieved by UID or GID as well * Several fixes that mitigate file descriptor leak during logins * SSH host keys are also removed from the cache after being removed from the server * Fix intermittent crash in responders if the responder was shutting down while requests were still pending * Catch an error condition that might have caused a tight loop in the sssd_nss process while refreshing expired enumeration request * Fixed memory hierarchy of subdomains discovery requests that caused use-after-free access bugs * The krb5_child and ldap_child processes can print libkrb5 tracing information in the debug logs- Update to new upstream release 1.8.93 (1.9.0~beta3) * Add native support for autofs to the IPA provider * Support for id mapping when connecting to Active Directory * Support for handling very large (> 1500 users) groups in Active Directory * Add a new fast in-memory cache to speed up lookups of cached data on repeated requests * Add support for the Kerberos DIR cache for storing multiple TGTs automatically * Add a new PAC responder for dealing with cross-realm Kerberos trusts * Terminate idle connections to the NSS and PAM responders- Update to new upstream release 1.8.3 * LDAP: Handle situations where the RootDSE is not available anonymously * LDAP: Fix regression for users using non-standard LDAP attributes for user information - Switch from openssl to mozilla-nss, as this is the officially supported crypto integration- Fix build error on SLES 11 builds- Add suse_version condition for glib over libunistring for SLES 11 SP2. - Update to new upstream release 1.8.2 * Fix for GSSAPI binds when the keytab contains unrelated principals * Workarounds added for LDAP servers with unreadable RootDSE- Update to new upstream release 1.8.1 * Resolve issue where we could enter an infinite loop trying to connect to an auth server- Update to new upstream release 1.8.0 * Support for the service map in NSS * Support for setting default SELinux user context from FreeIPA * Support for retrieving SSH user and host keys from LDAP * Support for caching autofs LDAP requests * Support for caching SUDO rules * Include the IPA AutoFS provider * Fixed several memory-corruption bugs * Fixed a regression in the proxy provider- Fixed systemd related packaging issues (bnc#724157) - fixed build on older openSUSE releases- Resolve "have choice for libnl-devel: libnl-1_1-devel libnl3-devel"- Fixed typos in configure args - Cherry-picked password policy fixes from 1.5 branch (bnc#705768) - switched to fd-leak fix cherry-picked from 1.5 branch - Add /usr/sbin to the search path to make configure find nscd (bnc#709747)- Add patches to fix an fd leak in sssd_pam- Update to new upstream release 1.5.11 * Support for overriding home directory, shell and primary GID locally * Properly honor TTL values from SRV record lookups * Support non-POSIX groups in nested group chains (for RFC2307bis LDAP servers) * Properly escape IPv6 addresses in the failover code * Do not crash if inotify fails (e.g. resource exhaustion) - Remove redundant %clean section; delete .la files more efficiently- Update to 1.5.8: * Support for the LDAP paging control * Support for multiple DNS servers for name resolution * Fixes for several group membership bugs * Fixes for rare crash bugs- Update to 1.5.7 * A flaw was found in the handling of cached passwords when kerberos renewal tickets is enabled. Due to a bug, the cached password was overwritten with a (moderately) predictable filename, which could allow a user to authenticate as someone else if they knew the name of the cache file (bnc#691135, CVE-2011-1758) - Changes in 1.5.6: * Fixed a serious memory leak in the memberOf plugin * Fixed a regression with the negative cache that caused it to be essentially nonfunctional * Fixed an issue where the user's full name would sometimes be removed from the cache * Fixed an issue with password changes in the kerberos provider not working with kpasswd- Update to 1.5.5 * Fixes for several crash bugs * LDAP group lookups will no longer abort if there is a zero-length member attribute * Add automatic fallback to 'cn' if the 'gecos' attribute does not exist- Should build in SLE-11-SP1 now- Updated to 1.5.4 * Fixes for Active Directory when not all users and groups have POSIX attributes * Fixes for handling users and groups that have name aliases (aliases are ignored) * Fix group memberships after initgroups in the IPA provider- Updated to 1.5.3 * Support for libldb >= 1.0.0 * Proper detection of manpage translations * Changes between 1.5.1 and 1.5.2 * Fixes for support of FreeIPA v2 * Fixes for failover if DNS entries change * Improved sss_obfuscate tool with better interactive mode * Fix several crash bugs * Don't attempt to use START_TLS over SSL. Some LDAP servers can't handle this * Delete users from the local cache if initgroups calls return 'no such user' (previously only worked for getpwnam/getpwuid) * Use new Transifex.net translations * Better support for automatic TGT renewal (now survives restart) * Netgroup fixes- Updated to 1.5.1 * Vast performance improvements when enumerate = true * All PAM actions will now perform a forced initgroups lookup instead of just a user information lookup This guarantees that all group information is available to other providers, such as the simple provider. * For backwards-compatibility, DNS lookups will also fall back to trying the SSSD domain name as a DNS discovery domain. * Support for more password expiration policies in LDAP - 389 Directory Server - FreeIPA - ActiveDirectory * Support for ldap_tls_{cert,key,cipher_suite} config options * Assorted bugfixes- /var/lib/sss/pubconf was missing (bnc#665442)- It was possible to make sssd hang forever inside a loop in the PAM responder by sending a carefully crafted packet to sssd. This could be exploited by a local attacker to crash sssd and prevent other legitimate users from logging into the system. (bnc#660481, CVE-2010-4341)- Own /etc/systemd directories to fix build.- install systemd service file- Updated to 1.4.1 * Add support for netgroups to the LDAP and proxy providers * Fixes a minor bug with UIDs/GIDs >= 2^31 * Fixes a segfault in the kerberos provider * Fixes a segfault in the NSS responder if a data provider crashes * Correctly use sdap_netgroup_search_base * the utility libraries libpath_utils1, libpath_utils-devel, libref_array1 and libref_array-devel moved to their own separate upstream project (ding-libs) * Performance improvements made to group processing of RFC2307 LDAP servers * Fixed nested group issues with RFC2307bis LDAP servers without a memberOf plugin * Manpage reviewed and updated- remove hard coded python version- No dependencies on %{release}- Updated to 1.3.1 * Fixes to the HBAC backend for obsolete or removed HBAC entries * Improvements to log messages around TLS and GSSAPI for LDAP * Support for building in environments using --as-needed LDFLAGS * Vast performance improvement for initgroups on RFC2307 LDAP servers * Long-running SSSD clients (e.g. GDM) will now reconnect properly to the daemon if SSSD is restarted * Rewrote the internal LDB cache API. As a synchronous API it is now faster to access and easier to work with * Eugene Indenbom contributed a sizeable amount of code to the LDAP provider - We now handle failover situations much more reliably than we did previously - We also will now monitor the GSSAPI kerberos ticket and automatically renew it when appropriate, instead of waiting for a connection to fail * Support for netlink now allows us to more quickly detect situations where we may have come online * New option "dns_discovery_domain" allows better configuration for using SRV records for failover - New subpackages: libpath_utils1, libpath_utils-devel, libref_array1 and libref_array-devel- Package pam- and nss-Modules as baselibs - cleaned up file list and dependencies - fixed init script dependencies- Updated to 1.1.0 * Support for IPv6 * Support for LDAP referrals * Offline failed login counter * Fix for the long-standing cache cleanup performance issues * libini_config, libcollection, libdhash, libref_array and libpath_utils are now built as shared libraries for general consumption (libref_array and libpath_utils are currently not packaged, as no component in sssd links against them) * Users get feedback from PAM if they authenticated offline * Native local backend now has a utility to show nested memberships (sss_groupshow) * New "simple" access provider for easy restriction of users - Backported libcrypto support from master to avoid Mozilla NSS dependency - Backported password policy improvments for LDAP provider from master- use logfiles for debug messages by default- subpackages for commandline tools, ipa-provider plugin and python API- Updated to 1.0.5. Highlights: * Removed some dead code (libreplace * Clarify licenses throughout the code- Updated to 1.0.4- Update to 0.6.0- fix LDAP filter for initgroups() with rfc2307bis setups- initial package submissioncloud112 1532974630  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]1.16.1-lp150.2.3.11.16.1-lp150.2.3.1 sss_cachesss_debuglevelsss_groupaddsss_groupdelsss_groupmodsss_groupshowsss_obfuscatesss_overridesss_seedsss_useraddsss_userdelsss_usermodman8sss_cache.8.gzsss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupdel.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsss_cache.8.gzsss_debuglevel.8.gzsss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupmod.8.gzman8sss_groupdel.8.gzsss_groupmod.8.gzman8sss_cache.8.gzsss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gz/usr/sbin//usr/share/man/ca//usr/share/man/ca/man8//usr/share/man/cs//usr/share/man/cs/man8//usr/share/man/de//usr/share/man/de/man8//usr/share/man/es//usr/share/man/es/man8//usr/share/man/fr//usr/share/man/fr/man8//usr/share/man/ja//usr/share/man/ja/man8//usr/share/man/man8//usr/share/man/nl//usr/share/man/nl/man8//usr/share/man/pt//usr/share/man/pt/man8//usr/share/man/uk//usr/share/man/uk/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:8509/openSUSE_Leap_15.0_Update/8bacc82a1ad637fa2e00c9bc8a328587-sssd.openSUSE_Leap_15.0_Updatecpioxz5x86_64-suse-linux     ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=f83443d80cd410a4c76cd354122233bfbc2ab330, strippedPOSIX shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=aae811813c8292d251510ca8fe87b2ec2f1decad, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=0e26cf5dff51403aad65d851c60a2a6cc3f62c8a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=636e8734cac157675845933f533f9f5dfcab389c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=625dfecd42465669fdde1b8cde96921c921b5335, strippedPython script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=e1acfe7411781fa769ae14b3daf3a72773f7149d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=f603796b9d3be8c5fcb1ba8747abc6a41b52a12d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=a0a21bd67ff084bc47cf30598217d8dcd5ea091a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=31269c134e2751c636629824cea7d8c92a2c1b9e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 3.2.0, BuildID[sha1]=25d103745548a6f1b9a20e8d5a49285f579de6d3, strippeddirectorytroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix) (5BCQ^l|   R R RRRRRRR R RRRRR R RRRRRRR R RRRR R RRRRRRR R RRRR R RRRRRRR R RRRR R RRRRRRR R RRRRR R RRRRRRR R R RRRR R RRRRRRR R RRRR R RRRRRRR R RRRRR R RRRRRRRR R RRRRRR R RRRRRRR R RRRR9Ukĕdڙutf-89049e8048880d8d9403b29618e1c221ee3615273a15c8d5187abec9fe0fd4e81? 7zXZ !t/b] crv9uկuK~zƦZ۶vWCᑤu^+ySUu( @,9CcM~HXSd ZbӵÈ'U-wZhL"|$OWǍiӑꗨ.첯߯9`om/,@g0OݣO-ܴjzk R腅s]~Gy y,D8' (&@+QS۵lFjspEx WdH- ?3d2ogxyUF)ܒw `Sna Q׉]>#᳁n:^G<0XiE) XO?tLmh#!CV/򉭆Ox,׫hX}1 JF>=8VTw [liy@&[q/Z{߻MJ`6;$"~2|50C.N:CI` ॽ7[&eWҰ&*Ja"7 L ghd^5YA9%Cا@-6Z2UY&MD8Kyro\wz`厰AQheWKJP|wf!tR(b,AAzH0B$jh=H•E3ڶ`aV$ Ģ~7#H{ƌ*V퟊|Ha[FԚwR{~,-s$%~v*ݰ:U{]~fIgD;UQǓ%p?NCƒ]6>loMR79kL`ٙA?6Q86sD2laY x|X#H'S[o7w̹=E|$"qw+0 N3XK,~C33궐y Z_f V[~/a!JG`дTGvv~ʌ7C蚞,gM/pN!H.OeJ[}^ rL`;l9ֹ>0YƊpݛ2%׷ +M ư]e44eQC٨0SxF km^x&BoބY)+Gΐg;j]csGwfWn' eO'$_0 jtY)҅FUC0xk"jV,gzβ|En,f#yf:޽=*4",g`4"Mn2^1]Ҷ{UWIJP6sG48[J8 8sjyW4:̄/ z}dGؒo-aޱ ʩЌʟ w9@ D 3N4J}Cs~ \:T察|c D",f^ZU#!$ ӮeS=3(IqjvE-G#va-cԐgnVVZ.gNaO]BRЬ-Z?Y&v^%K}(bp`鹄p9),\SYiBZ`^F҄:,`d# 'tWq[NY( ]đ?r fjT:&qGAfNB{_4ŏU1q_iox`q M9q374KX4T"iGtqm%9V>BI}l앃#Ư#NpZtjԅڍt](H~-k.;((4O0*˃YN8ifmyl8E*[x`z;lod.dːOo^1 _L{i-/C߃v=I5]9<57uU.I bD7wi3C}!)̪@XM_9&sHκJΌPXD_3`׊Y )S#>|?풛j><(z R)n!xBP*ZF9i-~6G)yѤfg!QMB|}n\U/>S}AuNkH)k[ eP5Y$ھM}#ޚ0>*q5r\^1$M3n,3U$*'j vXiɗ+ ;,YlJ Ͱh$ %fd%u?|>}wv4cFdԴPG38_a>شKA ,<Yk|"Lw xЧ?ƠI0#JZEQ#$(m,`‡SAs^1ΐ}+@+CԝFjǪ- Çj`O.7jKzǽ?s~L簳z # ,a~bC(i> e[ r]ä:!5,pGxH‰(tn'O 'ױ:׎ U%sF5JşРFJ=+h"Ղ烉qs%[Jlq3̄Bnp̴@`7m"PԴ6vh[E]Ӷփɗ(;Ufk+&y0O)rn͆sgCJ7^rCC-cސH8fqQbz06$1ܖ gS|kپ;t3*фC_~ͿԵr(+ܲhpX2]$ bTJ] ZUhLSSZz+PR3L&e,@څwBQj {R PI0'y\fChT}zC BrǞ] Z"E[&¸Og:$ 42v̑.5P+fjQ( 0g93b8enِjm]?LAm 穢d$ GO!CNXu)(9 ͷ= {*P Fqpu&rֿsQ+ n>.u.Wd1>=aն`1B1UbOȐ:9`T@fB&yQ)4UafZQ?8_qͅ6`2:γ7X*.s!. HSÑV)YTyNk1BbU;:ͱ$PooXRs m(og@CN2-]=S3z2g;0qIV'4=T8u56K"嵥RzH{XOn?#֍7AOo)MƧ̛,Vs"-<#4@ex(\MG(䊥r2YYRs1W1M=xSfj&PA!A*gFHboZl?$)D2fp7T8T,ΑYBCu`l ́Ir- =js kW1M=: ]RIMyЋ_ku璏NǠ6nI !a}|f)i9ɷgX7%$=(Q8wa lX0YPd>cOIHcU¦ܠO›8z/,}b-N 硍f:jl`WW*!$_k\ u'iS!7Y1{U~E-) H'~Q0WۤY]/&OABb))OE1<PDC6\q!jȕkCXTQvMf^6±TZ-'AP3$/¬b8l?ͭUSI[lu: H t"g٬;[hf ' [T'ﳵ/*HIƞ_D;W?Cكq`gYqSCtA /FMf`+0&^Dr%ukF'xx"5}񔩗[8KmQVtVM:1;"%S*1 vOK$o?a~|oHx%Ne#71s-A0R2Q`Z;.ݿ#UHq1@UB{=Ϸa(Åbe,S#y^GN$i !2]&Nu3=:̥H ~x{Q;" EueG XW^F-jAaUƖ{!53U,9om&訴~K)YY., ,CCl>tt9ng9'ؙF6$$> +\Tj2nWK/ 9G [s}xdp%IɝħP1 XΑnC{mb )7k%Yw%H-o(ʜeuZ+-®УR {bWXhtW!SdLrtd}77'A.T&2 `FNmdL)̻yf [qeyZ;oXwQRRZJ>ʟi$-qvr Ҋ 6kF0$Ic|XHFߚ.[GA S}Y`@ 'hAO<_l+xT ş >am h)$i{^o:Wf wkF,j=dLP"_:? BKj,N2[ED$8 =`ylYM8QWAo}Fk!#odÔ-*aQ) ~ M5cy*_cdqMpIdhTc˿[`Щ"gnT{PXIocec27\qa5R c,xO2jC \J~UFP% f "qb'Q ~w*hcAVd|%2QS _X!]XCj-:35~:lZ/kGٙ3KF\P~  &7V2ɑ>G~uT?ez{ ;}J)1,Xp~l$pU/"]EMn0 (D f1v8{M{itlb[_U(جy@IrEhrVBK&iqY,S .OKSˈn 3BPѦ.6ֲxw޳ ueGi*38e@|3 C-JKchZ#wYGAƖI!\6TM5%Ad)u۲|K^RSb%$݂>j/ܵwIw9x 0"*9C Np9%T5" ks]h[9s;nSt obθtPnCZ!9,Îwe|T<c7߄+L3~Z0!0WSr)N;-/{e [L+נxƯhOQS4bˁ%ly0>9Z:j#mdR'c,Dw=ĦltKA8Szh#Ivɠ )P1C"r-((㇕HJb8bV.!ܔ뺃e UܑiaҪ1CA,C4jkBcAߕY$(vh3t>P_4sTd~ =!uFWBv3"=[Em:;M..lQ5XSUaAwjJ߰A+6%(-7_Di_$PJh*E_v{fذ=>+` Ol?3$G&"\ {R0qm6.i4f+GN&;puy 'nv9?`L ʽc2jG $ tV @Yp !PAD >~5utsF+Ynೡ^/IJَ@?8`;'w-1߸bFWNIam%)BMR~ۨq3H+ﵓN*ڦd0ʕRں#B¢Ⱦ]b덩_ǒz4higKzN]L#j Oh~ ΖZTs /2T휌T(J1 S niRLB, (sjQoUԈ-7˅ ܵmq4 Y!PiVIEN=^|/yn\BT 鱷~4V}4{)^4QEOhi% g+hE ^%uNo3`newrqʺݳLAH6{m?.ZG,A@ [Ms/4hw_t82tGPp= O&EE.#,͝F> '2e%Yp2@4]; ՛|qz]Q7& nw<}P"9kOw舸z!T6O\7շ/b6.5x3qf1YiзJ܀Z]#vL/Pi_1DzVΡ7 `S71)8NL,T+Ezsc$Ȟ3'}aTk&OkڶeS׍=,6U3~#>f9q\˚ q-hv 76? BIQ&vbzK|%|1Z!.,/狒FdMDvɍ協 ,`-׹TϣI]G<9=fB$_y mH@!5`JXOU[QP/=C%L Wt@v46T44-e"gF\_#-_ut."hSCuJZϮ#1Z6'5=BdyU.^ 2l7<7'JFi/nO"A) vRwK].e w9#Gj]?4oRM1e3o􂏁=ćt3q+sqs 3G+Ξuc`?2Ѐ9\-=e4eN^Ox waT:! e4>ƪ93qIP 1?4bHJs@4(7}r_E9ǭyAd$q0"@iX6 )W9)<)JdQE8s%1v]ɇŃՎvo#`I8#0m#|j&0fhUKڇT:,w iI/ A]<)(Pry|mM;f ߾.b'8:k\( $Fr02xTa/DSwE_G7TY`u3KmX$GL )A絪@͓h0lRf+!n rLp0VPPgktN͉Fzl2ێ%߃qZD/l|uWnx4Lp5X1szҰl?[~P}3rKNpg-pY%NCF4-:p~l:PǍԕ%Nq?ݑq-r-,dE/ri>^ȍOn޼ev,Vc0F6=.h?l`J!) p;I[Oq e,<`>L9z (Lq"ξ~W^1/$MāZBh0e@)s:q E"ɕKeɂ-=o~ZJX Ђd܀?dZYjbI9ˁ^lȯeo}440'sK3wص)xޠyU\ r׳Hu5('gtSP üÜ]sg܂QI tW/|tф@QsE&vk~敖#j"t'5%psъ*zFg/Ft<GA9@f:j!^v1C3`=(]FB *u;vCtn8J06TH5l q_[^db dهt^.(Ǜ4 UcFځ`xǼsꍲH1CJ6*U>f +c "%$4yt-]Gc5nCb/'G/>sQ@bwMz8`Glycy(\aYڥO~U9}[Q\m:G4ϳ|G(4#2m5˦3IUP(8Aҋ V yٝv)Dzܘ2ͮ%]w ,Ĕ  Ct6eU? qMFB'wx_UgW E>βyKE[&v܋gJa .'vLK4e_xczb3Jp5؞ QN* 0Nլ勦QV+MGlݾtr>&a80(*!K^uNֻ$1I1?̠>p騗ˏ&:8m/-.XAVsQ3D;'=(CKWa5 +Pda5M&5 X?Yf]=kͦcK 1qk>'՟z.d(u!9:ّs 34吚Mi'SwWL_](ԐE6lOеhwy!zm) GܑwGаIwTT;ts Zr=PŀoY6/[ÄwL ac( Qpw4SJ"tN(7Y<" M]1"w$[[}d>e۹Hk[E:^߰Z#q.zaXGïHRPztTѣr֕+o!BL˚)P[db%Ԕv鼵Nmwg9m 8*eJʚFo+OKxfwLprj jc y!ZG`''Gbe<5h44kFi"3j[g JfuԼ S!S},zڥ癔1e[ x874gIRX?K̇8g"kŦVw(ݱ NlrtV( bWu+2UWB (*X͛ ddh6alAB$ cty=ӴQ7@-xk~g]>'#w`mDIvGYAYJJ1$u.{hmj|/h$VD[٢ AqN0wOQJ- U&}kSP|8e !3e_ԃ:Z1n54zLOvȔ [ ]>̇ 0c K=uQ ƗQZVbЉ⽕kzbt|lTU]4TSE h`OCS%gjD4YEWȳiuόAT% rEy$faM9CF%z:Ґ֫|áHr 짆Us:T;lؘ|7|ńl^ 4Ex5L4x%t»)M>֪CT/?b e(!h\>3ڋ/d+DlP ~Զaߚ{39۫^׹nwk#F ^8dk('yp(˕;˟E"RbbmzF\+!#=~ +iRr*DWLPצ(Cҫɟx5R{91";1V#_Ve "h ogȝ@CE#zs}>G -EɌD>Ef 24/tFh0!gj 3ݤVؐYmҠTFGp/m] ;MH-TѾ3x.cQ[vE[]IҀK@bb>KUQO+сb$`QPa@,ɲo82Fy  '~j:z~1>YP6ox{\n0Js( V>C8bmHtI䈍DtKJ@"7tqAՃ`8L%eSe*Y8zC}7k)Tz j4L1ِmk_;ss #`-cX[44pMaZeG@Mq?` ď9dgffނ-j\KBH}g)+xGI5T i"Y3,:9D M_ɵ%0)ySEiJ߉G+$Keue]C(t ֌>hIAR5co2fڎ7 s@$mH{:ٛij@!Gګ|z*Qg8pE>|rAk+?~Pnz|%ޫ >DQnr60+'>5:pQs[2:@!Zu(M _q r{xi>_vgy=W`S4$e!+4EĤGdD˗hTɲ }3+bgg"e;2` pFvP#01ZatOmxw{ZZ/DC( #|cHU0ﲐZJg!f`2YZ};n =A%8tѸ_*G6LX-֠.V@xz?[>4f  M{T|N4Wz*BR "$A_ YMCfr-F#=4v+ U)6GzGxa e?s %\tPKYODιw65<86O فKa݉_5ۺ;?ǸyGZ<R&s,8c24:~/fw*Aޮ?iaxyеTms+oI| K#%r̈́Tʟgb6ތ~.$0@F7txL1rLm!!"8qA΀HIcKZIZW1I682^qӾuvS%+xӋY%*oZ$i 7ZS7i什c wʺjR`ft@ gzMp.5 -r)H 4`u=t+f\ VX G6XBd5@!RQ6[(Ϥ}Ϙ\U 2MVX7Mj-IiCKdh|[V;7g4f ׀i ϯM]٤)BT6.GV{4FJI.gĒˆ Hc"h>,^$&[>~_>܊M""*4yUR ul篱[[]mQd-*Dב͆V-7Rd&aqU\ftbGbamE;U i O10W -4γ10a;3;'Be)Sp%ywx*Qެ[dv6x( ^dž] A oxW4l _}cQXb5$ ?G|VcVFM+cVE\mi؄LFD{^8D.B;"xѹA6onOulZ@18 (Ž=2IL\r\88|:8y/(04Ѷb4=x7ߔ@E<, jY%([c@3RoFőIz+z4/$O*?w&0_eJiCB~9pO{n~y5C'X@!Ψe$aa+QѰWb$43Nj(iͩ%ވPd6y- S!B_QĻ+fX6+ę۴j9"bv+NѦW{gY3@M=}-bF/ǨfSȱ@ L"^~_ ă{iI183fWyf`r˧O~r8c=S/٥kk׳~vacpFX5+Kg]qH` O`f-kQWp'~n )mʿdF2T%z.ÌTQ9-mJ~n`qYBz& $fD=3rZ.̑P}X:7M6iC^AS/J|=EueM>l/LrV.l @NVă!Մ fj(F a"¬q(|2obuzmgΝY1`pX]':Lj"4XɛHgZ~$^v?ךFym$рw{5UOZ s'd*U8Ӕ R^ĖM}Yŀ.N% 4=uf lTݕF*dtgXkG<Ұm{xڎ_Q M[VKG{cYAeyh 6cbT:@K[ii)Nn 57֛ B;F!`S+\ IeoJcٝqPl.z|ici ֶ~ ~ӣ!iO݅r'W;p!o ;8?䅊Cj~ PCRBY'F5ٕ^ ޏR} yYA((޼ Kӎz5-]V-G{:(-Suγֈz&\!6&Ŧ])JмYƬ3㮄@w°ymP88P M 1Vc|ɖP6qHDWhbgh6xr[;+e¶NrA?8 7xE; u"v qfԬk'&>~| [^4NnSzkЙ-@iύV;{lN{t*&iM,Bo\/?^߁AȤcQa=ͫ_;&IJ^ϪwlcҀ F_д{}<ՠs0mُ⍗JkSYc j8nn7m'NJnc/py&v:1 82 CU^i}sC}aTk_[)W1_% Mo}I#͘vM,}ɀ\MjeM}l̿'3FaXf2f[ iL2omQsـ&&[YjEu@9}#ңZPw?GwV>D e1YERoq,C_rKB2+[)JKa}PRNGh`s8k:sQ",(`5upȴ֎4!m&U=k P"^h^V8>?PI{+/661c@1AvB0?Y.5 j };ݧ ObKs(1G#-SAn䤜SNXﬢDЊsD{?8LFK&@E,Gw ~S;u7)84Уn·k'E=&D`;΋ MlRn ? J9G^3>Q5:)ҧ=݇ՉRED꫌iش6spF6g(|k̝IWfCUG 7б9rȖ;DCD[,p-$MmC_ϻawM|=*Hkn TdRҫfhCcE4X<F/-N$#5Dg[sd[4j&U6өIaډ0h%oÅy3ienK!~˶˩d.+a /J"urJ\0G*3|1! _/~tNDZ4ݹxӳEWWrc`w5q9*yL3!qitN6aϪ g? $EFA#hB"zg!Qٛ9<Y( [&ګe7/s|=gou>> gNfI'8KD/rwYm*|Y )$6w^dMg}y> UI-wJAv4*_MOWcU^ׁnkM_Q/;Y'jGs1Gew3K2mA[P!4pV?uf\kTIi %۾7q:zoʱJYVs-!; G9nE|W=izvt^34ZVIPJR~6 ~Ա=xaC~p]UsJӣmb%<󇰴#i<8 k) @HF4R%mh+0=\@-ݥ X X*Oyqs씡sz* x " G4iK <! 3qs0S2H ~5FFf]i#=)m-=)!8ԊJ=ZđG#4eK#hH P,,̜:ҢgY !, ˌ5T$ FRq!LK=$6"k|.p |j*ij=S2Lzt@*fń[JkpcP\^W@` Fuh/AoK!(*ĝ"$>!d~1 tPF%[;vY X rHq#jglw9k4iޜ99|:m;D" vasT(ҫ$7Rh*fr6[pMI锲1F/ wBօ}S~0]kJk> [d;+-,c(W]p56f| !v'OyXn.w,.RcMF6fMdӄvx 6׽ǚ.1ySOIB&1v]4 z̥}ʴg/HqWgI e7Ag`BGKY$}0&ݙev(6II*+:G,Yi229f"6^׿V3$B;Fwn[r'e|nr|7* %1j$e}n\ (ti fo"K PIU^/>~jДHb>[6*V˕e6g=RT/l{n\gR+sFhʏ1^zwz)7޻ ]$L>E+*O"T& 3 гLQ|)f"&WI <]RzXRFͮ77mܬRH*F1 PCS$w<}d`". ڵ_R| ~¼*Ef&bKx) -ίl1m+aJ#58<6 uC W(EP !c![.:v>lwHC=LHn$Dz')6HLY_>X૩I慾KX)62A91x`Ѵ{*o#I&.CaD ÕF>"Ǐn@l p|q`oVTwg FUGO2U~dYɤSCTM @@'ʨ>ȓT"͐iK^ƜdwXa YBKu 7B&%F$hkIu|(=tu0 Ub8Rw2poL93"tRbDlɰ{Y 3Rdwoh}!!Ù_Ћ rQtm^l.&B%|>hsJ^>ü妖&f,K`"n' 4rmLw ,@kmkRU! ㆨTϲY h er{zI^?pn Q5G5١͎4G׃<2ډ텠apHV%b Avќ 4qk533T54 a􅶒it:rRMlҀ8; K=Il׀w'A\Aʋwg77S41KX@z?axP`.T YX+96Y:.Vj`^ilmQ9@7ӊ ] V%ҹRB{)>>V4p-l,]lH(U6GQ`\wm#, ~s^(s>&A[/7P1Us>SmlwS<*>TzJj.h nޮ>ZC k:D.Ԛ:m i:Gk.qZG_ }F)kEBvQ,ӹsGox;ڮdnN h*/Ow󱒱%s{nqY3&x/nbFA\dr%,NwVdnɓ.l Xo/i* k ɠ?>:eU@\ӟLlA*ڤ"36lu82]ZJH/خ d#%酵-HJiFA8Хl0Ufrj()=] `ͿvK}}ƓBO)Q)=zrXgog4w9wsq<ѲESĥm_`њM4-@#'Sh5Ժҋws&]f/mg%uJC$9F!Vb g-5bJ00%3j3ZaS;nǑ簨4Y0GFS@ʗʴِn`= qlK?9,w@UJL⽢p}0$F:e``E?~"ٚ_ 4ÍkM5-OD׋a;s65mV(鱒A%#T`h "X@|Y!$;殏I7Y)gh d :{Fc|m^H6s99RpDtK[VΝ%Fm[̥G ף~? Ry.8\5ϵ)}j+,d. $Ϧ2WUy[sVMŖG ]|e=כ>;)!0}fri+ʤିۘŠF|9PA#|aDxЪzk 5KnO%> }H{s]DN;[',#)~CyB%”gG뜮Olsu|.1ӔA)'b[;̭vxShߕ dn9KA./Dzy, XY/nIyk6ߕP1}5/2y8oXݲ;<靚)"K bʵܟ-,4J#:Q+P/ɞ2͌Dz.2T` Ő܌ԡӀ^ o2 }>z땭LXf`6>?q^Z:r}w$墛ƕN~3)hDd^}0Yg[$uA28Ɗ7ߔin?}ӬI uY@qL>rVyuW4QY|Nq_wK,OveYg_qe#P+o`z19--׆U͔+F꼊U@/eF<x%^Je91"SS9w! §NNo 3ɦep P)ϗ`R?2u3革]*S!w / b$KR'@RzO $X4/ eXT$[O ,g~RAHr-{.lFeA Y.A=jX{e͚xe~殓&;h|#~F}3caGP:1u&YUpw/>лNדx9/rDN#T:Zf>/+p@2Z2R X>ͭӤQ5dL}^fz }Sc=ak&1֝`M*S&G%}J-嚀_%ym_1s'/J39X၂1@Ԓg4gҝ 4H@JT#Cz` ?ԣ?AǵoDjGw}y>2/p) P*HsCOݘ/Wjx@C.zS3 T$̉)R^MG\ U*T5zH,d6!$ݐ9whFZ,?XB7b"Km6Z5n Es{͡ʯ.9R|8O&c7BgMG;"o(?)m|v끗zeR\^ e^C!z[#gǃYGΘ ohH2᳴+׺쪝(*t5A:ߥ v8ìt+78cF;7kV>.|zׄ'BnAʺ8|.a>d 䪱~(AXMGq4j~+w(rI xed>(6߱oI/H3XDqClɬL<@Ślt,N_VcRI{f=IhCO{B&ﵶz@igavC"r"_Oe@SbI"ƽ¿˹qL<[uڸ抜]ÀHUdT@",V۵_~E4'\@)Mm%CZPd1'Ÿ=I\[:G2vLgPhleŀͫ@r,;NuEևV ՝:1%o1@YA/0Oat]kX.9eUN%t{ 9Ӻn 𔱞pUmgń ]SN%pGu;*S%=q O|]6r5״S\>d-h%';=M;<@Ġu-z'hHWލ/(wsuZaDkp˸ f-ɿMw C^%ET .>V|A<(+8Kb'9F"\|*3@NϨlVaOΥkf^^~Q_X}R$?0 eItDOlLjnn+c0:L,Sf´+v\4zm c~P̹76MmiuFHI~h[\q92 _puZ KBR3uXQfTqeuSWAK=+}]60$d 9O5 5fŀZ釭e<" G(:ZvZ=֊ Y$@sP6Wyl4 EU =j)һNW \*}<l4/߅_s enHJkn($W'-}(?.9}=kd2aG݋bďfk⫄(MO^Gg Vɹ9 ҵ+|FR5h2y~I8"7G5w!C̪GHNsIt0Iqn.m2c6Ac`')\McXIO*麿@8H@ZjCoB@ qE[#" _MIyW2vw}ksݮPX,z-c ?1'ȷuBk8ك֮MSNr7uk]ޮv_4&N ֚@'W M2QE}czDrKj ِ%ӼT)tX*$L4a X@h [oǨ*~%fg{b+KqMɺ>'}ͿkJ.UB_J5/5+`~r"3aqh~`ҘC&SIIH]i4brUDPNvYe-NЂà?.mK4 .ȁd/;CMvbwڏSo q-9q;S5|V>% sKZ];sƻ zQ<= jgX%@|ʼ^MԘDK BbirŴ2}D`;g;e\ ΜW4*J}a 킉{{B!U00(\sT-Q@)-?V%,S"SGwNbdɔ|j_#{ f"P03(u$]}` ^+*_@,A4H#^_j@QݷOVK rjB!֗Vp K{$d3$0vv>vIkkF iL< ?DNJšbZh4#@/eIác\rTsm盘11=|`TΗUA@]Hȋ[`ĉ 0z܃+#U( 8A'Oza=n;*PCm@dIC۩G14d`n>vG\q%޵oΩ.W"B}V/GXBE&H'R`\ns;z#"SnV{$yZ*S&Vܚ&^/P}gIܬ$C}%abWNiTc榾++?uDܿ$)-<~kE7c9SDPԣvfyjq Z *q?öYE0RU?"#,b#jw $X5p=~(aT"\5&AZw2x ]^XM}MG.q3wZHLw?u Vo#wV{ܺjF_8˲ev'rZ[x^iXKpM9 ]vO!l|8؋6 h 3bͳ4|u/E*-J&.6q3E4\kA _9Tq1;pxbTsZC07s7WKK^&U̠ <&L+ `id;wz Kni5)IDʬ-b -{)?ҎoH~J!L8[CkI8poi]E5DtjfW.T%V\)Td*, ra1ל,*8̺_MU#HEp5.n SSUz )b ,ά8EC.=]ke`Zzq+ TGV + e7pQzqƵ]ԛ݃A7UNڃ?rQ[!蘤?iڱ] p^KL;BoYyv=rj4k (^Xu{7~I ӛÀ?nm0瘊kkǨHWo E0G@iMv&e@tL2]PyBX,Dj~"$fﵐPt,)I!B-nr+oHK(y]D $(TEw/_ I5'|J%9d¹g ٖ/4ٿMS_~'@m7;Œ"٣p|# $b[2O6EqU-luOfQcnXIpnWGJ/Ʊ{ro#R'_&mI\,)yKbI^ ӎC*Ƽ&$1(@}+;eCX5}L9oq :IQE :H;n..EoTmh-9tExbresY 5d$ditwR͙x`RqtpXT8]H| >'T`5rd5EEQҘIPOLz*Oݬ.vOpvvC( ̜af>%/Zy7|S1տ'w$aU#WYKv$h5RrE֛u5)GSvdբS=PaK,*qeBqͳSZAkhg~!{Jβ1BKXG0Tڻ>ly"A)$ =' +0Z!ii]"bCglAD(vҨJ8e;\/"*U~?[NKKX1Hq7J0x Z6K}B\. ζW|{R8kKay3 ;B[NwW"YOJne&QXVVƧ]Q7649`ߝHr=+A[)~tz*XQ'ů5,'KжG93 p6r~[6_V"{XzDsLZ]{'sfwdx7GrF3K,QBmooƹVbs6n#"lC{iLJ'4 p$AL0F'??M$AsfzzQoH~m*t±mL&zjQJ* n6u]O:FM!r`i w>w$.T'唑QVa Hb[Q=cS"?)_ n|J[N>$7JBwKsOU:k6ze,M_O"׏klS(USaTCIʨ "}ʐ,؅+>аy{%x߭q< suL>:p̛G,hOEIlG0Øϔ #+1:t^/gP&"GuA5P(힖d# tWu[+%܌8OߠmEhZV|>%A.G:kR~RNa+J8 7f@ʣTVLN s'T/r$2O39VGNG!{G Vx˽b` lA> ".>i)hnge& j\VAzӕ rw|%Lg& 3LCԝasf rͭlAQM ~@YO+= R\]pA@{ef pmϻ ՖYJvLg6{JzH` ÜK}U]2ˌێF523-y1]q\ ar6:Ҫ;.ټj%gu+{\Z{?N|9?gR.3{Έ֧' T-6WIA|Q\$&XҍkX2 A㈟N6^lb8 6" iZ57hr zZf2G,Y-H[?7Jԭ2J%j(/HbimGgB}t_<޵Q;|VK/s ;0 s2k(ݦBODI`۳6ՆG ,Q#lc~`GXlD@ !d8+mxczd`to< lţZDE0JEjCzEAg>W_dk. 4ַ3PonXE$'b;$$g*C0I'/,}%.g/~Q>o5{4dhj.@ f W$+2Fz4ڈOOȡEA_%z{AN=\\5B bi"oQR&RQggÎ 2QzHP IU-\m_{x0z? qE#{+ lOsHtcD g}]3=\DfqgyywɚےYM(wS*j֋>#Ӂ!(^1m-Vq>m՟A!X_ y&?o»^j?UPNBsb,}'jܰE`Uןv/oR3B.)SAz;Fkd[3>%] `2\ک]Kc!G *.u8 9 7TQOC$Q!yMD(n #$^A5!ʥ|cV32TJZc_M6DradZ+ӭB 4$G`YF$nZq`dy]YM)H)|>8+(OZ/<ͳ\^"=7)G~.e,7j5&k K!;(wH})?xd_0Zk0nf*aXK\C&N:J ?.<:)ľ_K+5i:hH&1V1W b/34qaIcюv#q0Žӗ8 opoeX5Dy/Xl4ebpnǡgxdi\/Uݞ9 y+sa5pK||%mw}.{tuv>DkZEg덿DkFH1> Z42-jqIr5FZ}q%uYύCki`(_ ]v@3W9^$RUfe"ߋ-tC>и=ԚF}'IDLY#"t`&H3r!堾9W5IThjrDRR |$͛IC {75;~p0l FܝF !CxY ? Ṷ)맠U A:K|H[KlRN\*MN͌qqU0UFZH! ]tk#/ݪ=WLZm#cvx2'G='L9W{0MXs:?G%5LȐ&:R6 [\lr23D.ǿ@6ѧ8sC7epR*3خ_T[w3S(\5{{GCYHE#u}Y1cH*y_b9%մ* Kə#pl i*JYG:wW7¶+wvq0Z48l2vec7;fi>{}[\+3#P!N'쓚kn)Hԫa ɺKˆkSu6#+|sWbb 8*3$Vs H.6H8!__aO'@nJ`-9|$nt҃qb-ZgMؾ3FK~w-P>iRc478|eh<2 -D,SشA59UtXz~ gTr ~?gee2g:BAb3!]E\+6u4g#{r;%[Ꭿ ?p& Z<稤֠CgϸĢ)nu;>&"!Kٱ+py@2##ѷ;Uț& h=)b:S {Ț {p˳OivςI/t•p] 䛆1FO6qDEd }5rEng0=MBs^sn.NVe+=jC9)I[7arT ^M>7%bt{*"\^dup>74 u\yv}wC!/k3 Fex"%ܡQzKJ2#D:\kZg¿Զ=E}3j=wHz&=nr0{KMCJё^ tƆ{c Yk(5/1Gp6m^O3nME:R>fDWmXQΩV AǷ!I/OaA,D4д b&-[.P8jag)<7/oxZz9ߣqH.V'A⸒ (,=/ݼ dHRĎk~˗ hf1:e @ (+h7Lr+Mg "2Ұ_܎xnP.p #(Hzq1n?m7){/jĢT[_| _b̠A\+|,":sT֘mHVvdP\A' "?\hz/%j| RQY'_FI/nԿ_tu ,ܻ)XSL9l:$4 1af4p}#ӥZ6t1 A8O"*- K@?` f}Pys<1޴p GkO(~``UgdCbB%)d >kD  Շh `\eph]U^ZHD+-R<Z;Ϧl? jYHN8a$}n;Ewn:U#8f6}p]`55tX@<" DY_f* tB D!-ǟAKT$47Kowu_|YS]vj"S;eQDV q1YsV" 6?3_LZ{gOШO i<(49|{ȣSQT.68.e ߷ɿp1VƊ pvNؕNoN; 4daX5χ TkU|wA6HFRLiIѓ[CV{l^E_Tyfj=[8wH0mbo}q3ʰ(8Le0뎰?v⌢~RgFn`jc}vջн}6M.A?Θ'(ӆ/tE 5ZIf1C߻rt3c (Y``PSg,VTLO2&$ϰ[ϋ[A?8DZLLg(S/&?ZOb))ؑTčv//я T)w-RG;R]x3e{Q5>)6hϿUpyiq{=-RnԽVF{#ue.[kgd| Ъ‰V5mw& Ud#M%͔bt"7:˿t5mҽj!61bDXK 9_X*&ϴb*L1FדcQ'F_%i0W$kZ S7%l;M.X-HC!h{l[( "z<.#4BZқ%аX˗AF*H u?C{ v0?=$%BYI2>?DЍ0fVgLi[{_r1K{k+x_6쳴\;PrT$oe6XA4/Y~H tmr1~i(9֟ʻ!y* A1 ֟b24(?J~`b .+eoA([""勚\BD{)9yKK]Sj!ð(St}uē.Zsr[6R 5k/f؏ھ;C&[ɠ'uчdMW3pHwK\LW[XT\Ya'9><ֆ;.Cƿ5(QA]S?DVXԳ4Zq zH';jV ;{[;}1Bۈ(sܭ+~R4z3l!d'hGXD--'Tv'CQDk9F] -jpWH.ToD卋:Cbh8ك؊AGIJ@vrLԘi VJgI߅k?)/Vx%~X TN0w`qt(E񄵏L=:BmXIVO3C;uér[m(>&v|2h/NXF\NkCMv}j:ZίAЄo@]U\I#{͙_ aVZppÊCd??lF/+K!fJhi,~hk/0ee&_aXpiE3)%p6.VM)JuT^υ;g?7./.fs(<#Ӭ|ȐZw#z#Bg{i7z5oL纱g$ۗ_nF5fJ&6`y`rF],3Wk>0!O(N<쳎5w$%3`=wAGŞǁ2-Am!<e"Jk1y,cGAGP]k9V_W^Ũhn_]o\ɉáQAU6{,1&BFGoxV"x%ڕNI_'z?pq}A7H3_ P9M)c}ͤ};=yY{Dg<=lMڀ 7DTx4J3)qm;z5:nq z,1*Z \o*s?fzCCC )Ev'BZGYQ Iit/MÒhYdfn,Q?>0nDIψGĕI^"L87>Mܞz-ʃM#*☳I]y|c'Qı+1€a^)<abO( Þ=h(,ԝޯ1 (|y?<̩֐cՁ$tM}/Kd $GT? ҮҁͲhK,+7RM\r.Ē,k&ha+&M{g~Vɻr (a> |ܰD]_Wi&E#cs["(eH/zF{ݤhHZE`o2*Ɍ˼ېFPyʫcѴlcZOXg5":=Fo w#[rR%*nx_>VO}GK?4>]LZs+F nf9]3;NkHi Gd =8V U%q4b(lMnnJCGϚFHR>guc-S7yԨa)yV?KM+߯I/I"-ʁ2Dv \Ƴ{@JƆ"zAbDu{ aOB%K^c00bz4PLc TKCT~{ia~={<2'[$/CEeȳYtWdQqm `xf&\W)^{sTnjFR;~A'oy|⟸عհׂ+ % ;S>rn9ž˥ }Y~}đO38}(rR3_zf!x+ospGb-SRF8m>\Kkh wVxMdx }\"NA5/ ֫7|"5{ E$rkP]4zPt=`\ Xm0Mם5j j4w<]-; v|y)6^~n",p{ƕ~ިF]D~*|]*ﱯKGnJ.]N-ӽ0IԻZosH~®|ed]`I;z#LwLacKr[lNײQ*ʸΕ+"v;hӍjflc)bF>2u?׌m+" .š2ULr 沐())Qӟ'( <`26b1@ˆR<t Ozf)|-G퓹DSUXZYQjV6-3q Pn4TkquGqi;՚ aVi4k0pr:n[RF[J(\~ɉA~߈/>Ze4)N7_ mDbYz'Ƣ=f,uC~{cav5Q·*U[Ja2ſ 7"u/fe=&Icu,(rPDzoom|| <| GK(`.5*I_<]ȏ@ Gwϯ@lfZjR R*Ĕ0jװ͒UL‹T HgwP4s>;Vo,@)oaWڋR K"1I;^582-25i9!S"tQ,~\4n1I/2Z> .04QpS M. gg ZdJX][zS~#jv1HRRWFWu1"Slq{)BM&Ր\bUt Fd2K z KsdtpQ ruI ?%Ѐ?ilODK/fڌbLLH??4"B sȔ5k`shH,4 {ʏZsxB2 om߸תìen4ѹG'=ީ]"]nea0VlPFW5<+qgl| $_Aޡ ,qC7)gWB 5YcR*_rl PC(5 JEAf5 ZW~c<԰DW2Dk&^ V4UNR13IORRS~iSKIVCiۄ$ qѴWxag3P(sl#х@+=[ \yN!JXi)3#[ĬnI =hhQe,XЙ5LndC%PcKuܪ bv%o{ZֽXP/cD,~"}{KlpTڇg~fPEO83j͟km^J~*j3*CW9KvD}6R%M#ڽL 9(ho ~1hDKѤyjϒmf#d6 Y&;[gw5\Q4kj;QUVIePFluc6&Ӳihtfro+u«h!"N`Q[VѦ~LMsi>MZx-4(fO );wJMG-qZ+ߒ@29)^3c+ĚF\|Fb pP0xT:v>q%wLΪOÅa7QxM!M56E'pe4}d$k"#FA<Ы& XؿM~QKy$߯2TԿ{KUd_bB 5gl} 'baᯈBLh/pDŽBG<˚茧W>]'? O =ϳ-c>k\Ni#Ӵ,{x[(bXaӥ~ijiC&緲E:<b%e4RsqĐI4O˦dv8N9oRR])xz(_dC2׆BB,uV<ӡvP)`DX |G<s!Pb *>>|m"7È$K+~F՘+r|ֱ$d HC6f]1?BI EPmOMyYfDhgӀfϕNx5+ ۹/3MwS/1lvۆI']N,՚<,!3*-v!%hʈ.OeW!8ؐЧ"&$ ?oCCkr.!ULAn3rՃj4"lxtk[ x״+G,Sveܼ)s5@$~4oT*Cg{_2 ;IJQ®>뾦8/ӱPm S;+eqJcF},3["AzeQ7ZY*s6Dd@P+DO3 V۽Uts-> Q7};2Ig$%KoGqWE@FqAU_Jj {2̷FeYRTг,֜_Wkp$7L58Y NqCO[ˍLƉx0(Z^~ wCwR(P:óuqq!?~,F"O[Hm:A@Y:Spl(ڳџ`KW(Hfv$bQN|V|7k"YR J{ 22T]"[-;V7r8APɥ8J8hm2|y YZ7nI4y)k 'v3dǩI5E;|?׾}Wbg{ ?J)u`i}ѭzgJ#Zk_BB F`tk)NI@+*N4a\g~rt5#J*H}5 Z֣1xUHʈ/G8߱Iǽu;ڞϫ2" 1 \[P c@X\oc =t4'4nGt[ί9=i%-9ޤQk~])n,,3iHh>?YYG^ȂY*g;z(D̓wȸp3اD v~ZA:ч^᧠Ùa\6Fumgơ< >dfe58+?ؗ^?pQ73Fai5i;O4RVƆ{ud w'eug3TL)B=4~9xVm./ktf X2,k@. kut#\%*;bv7?vV*3(c˂j7΃O\(Ԗ]mZ(񣟛 Lo4:dp3rգmšOJpMb1I ϥ{"gA*_?^IA+Y岓;e~j=sa'و#G` A"{un˔"` H ( o]Z"$3;ԩQǬnekIǀV %YsSpe͹pڤRRۛxK0^0&*!g\pbN" 6{Y]s :|ʄf p_ϖBhW 4 d0ԆLOwBSUQ{+qv,DX]lrݏ + 䛡9r~N|go C!k}֯oD5h\%w!prOLKSV{VTǠtm? R7 MEE7;:_Cކ< * "XKjZ/쁛G~8EI!BeoĎKR<߉%lqn;@]Wvy`q;t'[gͧZY-LZjr^;u{)SGH<2`K\Wp q/j!O8`W"zR]%<$Иf;wBC K'aF˳*ʁI{|D7 W8Xx|\lŜ<{jzT OVS/W%z=78m@zaO_]7[Pg*ѣ#o%%@S]5' Lu臢 pٸ'wNԜ7 H YP?('a%$ZJ޸>,Zx?qlG&U}*UQ*"Ӓ,q@B{WޞWn&SHd]2S;55E67srZ"=Q4hA vsDt[rEO|׫4vuHP a'tn؈5KOOb p8K = }zT> u\(/a̳yl# ը@owcL|Z-'U!P uE'qҖ{#Ԣj_\D:ڔ&er@@xa|c4{!HәhݙPr/n293IץdNpBP+`#' ^V  .w! 274QI X͘tLHAG ++WS_L7 51rB\uz@ H_g22Nys>r2?!Uz܅AV2a%?l֠D C4K;.ۦbsZmh[U؅|^>eƟ+[dQԟ G7yq Jv1N =)'o> !'GY]@hL.GJY|wjҧfLnk#oְAqJƶY:k"yvƐⳈVEuU r nάȎVak2,Yd9Lca:d0ӝCce{q2S?NЀ+3 n>A9SI" ͯp8mKn)7gl[ YK"9LڰE _ ɘa2_= ܕ{U6<e&.Ar$Bd6QpN{4.j8s$i ;=u(<דҚI'{SJPbֳwxrT߀3܉DT\VZȲ`|LJ:?"X CۼPJ0gi'-SfHgv ~3: cr8ӻ8CC(j 2eH"?YiZJ)=*1 :{S~UnI%w"IJRm\ּŘ-COfms`s堘Zl-uk{$c ܘgi|y703Q=vZʨ bSxrrQK8hZ5o`7uDc3ˇGQ':oW±&ӱL JME6mx?wzǃ eB}X 2g/N}e" ty|[6 EB񫨿Jh.8"OUJzDtcNm;ـU-kNlo2< /d0Xŵ#{S'ݶKp"[* D/lJ <,$)O J /7;C}VxG$.Dgdb RAAXd}gG̔-v ]< q h\|WT!\KossyPB(PO_}r?q|aaewh9VY!jC)y6.3paكo <,|T,^|I}>1S!#K!jpZL`?zW`3AXG|yLC ?Y Vw83 RWʇUp&vAV;GlȋBGvl ) D❙s@cԦ%.јp| YY*䐪nJQ4v7| sg [pѕ9IbYY*fS[—j$NW(ئe/CUH)'ҏ*K>{6ruM#扃P x-qUQ$.xٜA )΃\ǟ+3?hѮ95oF6^Z<9nv@Y+ ;/6wZLeVDu Gj g"Bl_{JŵA8hYu.z$?E5bE?#߁4tpL'`~"#;;ެ? O*Ns&n-gV9*"ߞr)\i6# ʄRx"oN&R蟊EJz295]$In2/[ȸA.@sgLFfIN@&A932 г`Fԍ#m9EYy ÛGAGUzrR9(4\cp,,{:oI;DQ3V 6gyAvUF 2ʚU Sj:Q–3نV.. 8‰Ӱ660y * ID遦H Nb`,GX5|8SUR@)-w@k{;&m)e؊J9g6g k :*0T˿iFB".,9zw¤<UXeq L XT>?U_n׼弭/ʄ=WcKUOÝ~p00 I@ +?d< ;žvpphB۫|@'щdh~n=d+2ÍoJijDsnGۙNx:URI8a}8k'R$FDj{Y!LCmw&I5~jH$ND0r֍8*s{bp]]T*ˋzN^LWa}hr庲M8^"|YǠ[zr@i?_(B}>=1ս,P V\UR㠵WV4Jì8㜥4\3L-ۯkwr|8}As!ƹJ $e]R&eL\`|=|r7WJ- dVMajgi9ݔQ-/5ܫT4S"+Џ0-K,ӺW4g!{P9*Z+1zT1N-iKƕ3=t^r帅j6]g0CWzePG5 p7lWN!BF7LJ TJ|'<ɹ> ʸ󲊯ѝCm^3aʨtkxhF& 5P[hBQTst{0_e.Q3ܠ`m*='œx^ωf~Ìn5W]]c r]!JQzRw}廟XЕ?~5@`cY sAI ]gJsd+sZ% u#pexa$~OΆczoHU+G0VoV؃sYWJ`} "zYM6[Ro1Rkbyd[!`C_ vHl2r׏`vuҬ%#4X)h53 0ǾP達9[An"GtR ?">Kid,4=oid 5lz ʛQI qb?ꜹZz}B;x.tTxӍ [?]2#X3S[s+y)AU6:i<g'٢ ^*jXzӽΜmSPJ_cӉkF<gw~dް-L@o->5}%6/s2Qڵ耶 n8A捑$m8\~YLB{/-OHE$M+9?|xPbWX貴Z0ܴ/GW< a(u v4I3QS&R xhO l}1\dpi*"rfa8(@&RhXx%ɲҫo fQj޲8-_.Wo\R~˳<+B?\/GjH Mһ:>$gi=)`g?IFx3yY9ćr ~6V2G9llWE!"K?=YRgjz= jzN¦WPڷLJO{1w5泎n*Ƀ B$_aαuE$Q# FBU=}| 4'|ǺY+R6%u;|W?;Ȧz'ʐBRWl >ݨR󙊢҃dfF Fd7JQ@Hg?PB:\N>cw錙!S/S@Oo B/^&涊$3YKZ(iQ@Y"pA" rY'10 3 zTpN㬽n+p*\vo}a -7X0~a~=,0?{HAa A4 <ٯwf)QX| _~"TRf͆ +,8U?{Wb@ƒƻt['E¤AB)zjԁkP,G٭&+W u}z俟0!mHf?S+N]fCcAԸ:|9ɖePENuT 0]{Hŵlg;-l5V 8 N*iE!"W_B8/qύ^=vj9t4^IjoSsfYb)טT^{tv˚>l$Ӌ/ȿ&iOoGm1/I,ǫ15ۊti! ):^@إ/12 OEoq7RWHS [*I~6 KLGt: 3u4r\ u>L^2FzyKfP gJ:2*1Cxu4x~`4ĺ4U9aU8zc2"yx-Vm8kCO W{1"~ը$ R Nr=m٢Xww;S 81i6oG"=p5H;Z0QeS8\:L "sb!0!1D$(qkgtFfB? G'B_t tLLo1 !50)~g;ݦƛ)~sDRu؅ʥ Qmb @5GltM7r\)jas%tO\Nu;#sW|>rz..nD7YbkgjuܚXȭy{J7xPУi3dvT*\b%QdTg(#Kv'TјslRJ}hfy44߿kF1]oK`O5qFxF8 ur WMzqU <^[(cn@nIR!!+1c2iBJD~iU~ih#/\ⴑ:*?]J[e)M:< j^fSQndXK7RtH2JrؾpH"g1in5?C` Aq]4oXoăѫUOQ-Ę;ҙE<cTip N|6nDh3y"O(|!Z>? Ox 2R?i^@_]B\8*ZF=t38'T8myF!suZ+ 2FX :x)oYz0:KdRU~\Y,w:쁠5(JYW<)?X= Q'Oy&w³ûEaf |]_cT1"/]bG̗; f76H9/RɠSՕAc]R Ǔbh G n풋$bZ݋)xv[X|4N3z\{5qz4( 첣vܚ@zrLAZzh0\Z&%̓/(/Z >ˡy)xn@5S9RĿ*;'DCSa"HIƊ\$Z5z[QK݃@B*;*4ȃAݎSS(^ϳced({1F[rQ:S҆z݁. "OQeĜq.Յ~5kq QxEψ4% p{rC.NAEd~@0Eq k\6Y <ȃGxn2fG)V Ȋ9Jtȏpa*5vTbGj?LvrRNX/朥;nfָWq/VGv?T핉F-O,ZK]ˏ_={SV8$vj/!`tNJ`ޝi{(º&46g\0 ZI^ryJʩ\y eK[ɎPK?pMlXV!SB繣Gȫ… gow1] 89xˆ$[=wBX ^1Z% : |LQZb`HaWt7@lIC2Q*yx [STxX0D!|U^]>~y݅NQp sue 9y]i\acATun*k1׻V!U;$%i;&V"2=#|yvޡY H~L';ξ~#U:@t)WU{o(y;.ƽ#id6wIc_3MvnjuTJ;iVԠ0jr>Kc7ְֽ"nXxBC&2ۨi4h#+=h,jm \qL8rhhzяԆKUS2__P]@R۝/[Sz|~(cm-YS֝uMympȏ!i!Wf!Ƨiԥj~I"qz w{q]gM'+6a$oqd4bbPOV}K%g Ushu &Iy1,9ƒ&V3k_@ Y4᳏ŖotYrDjEm˴͗m_>nndt?JfZ9i@-pqr罽0ImlL#L[TҠ+H@'c\u?y,R E9c.-8SVϗ[-VD@^]u FAQL9V^uyB[-NMFݭJƛ!IS@"s)U8O 6n=P^@#:_jVWYm6 OY5= I҅%5X+ |njl%/&K+=0,'L|s3$2 GZJ+"%7/jaIsLs]^Zb-=׳ \viU=@)x}顩aVܙATėZ4)I(bsD BA?Uݑ*ޯ o3Yir@OWq2T}P%QRU1Q{Pv/_}e)mFg/d3o7sUV5҉sŢsC}.+!~YȽ⒖_lPpz2:euiՋ+:lrM9s)>Blz$Ww.,,z~Vk~e\=?e@,ٳwk:$TPb ]w3bh"taN\濢:6>Fm* F`5a>5wEnf:G[뷖b ໬ڇQ4y+opCDŽnM T=2QZ@}5|A5֔a"LUѕ 7 Qyx޴M|s0ÐV 8lN146߹#Ha-@N>V:Wۼ/!8,\OgYA?9$2Sa`|ymRLL;S<35DdbVZ%ZN'g,Zq8o^H;uщnW;bbb{Zͦ)3U$ۑ. dN#3k+ń~o]LSFu#Ζ;1զA~B^H(/ѥBpTx"Pek@ V/1 1ep[XR*I>ƕVPRʟyĝMt:s(<{I\#X|z2Q#Vbrhv8bw;RFM]2,aG3\jMp05\$M}pvN3(;kG+Cr'~* a.'Nt;#n(oڋHt0DWt O}Uc}COHD/D^L"Z5\p6Dk{Ѿu/0,9'X_E4L1X8G5q2#X6M}|^%~w U/^cR6r{ҏko3;u=gk0YŒ5߀(x6g~t1W-V~GO>dGk{ӽD8j)9!mD4̋0{kgnIi꿗]a \F-x@aZ%u/־ $ $ AnjqjBB.ys@˚Sr㵍IЃ vUYR{v s]HMK:޷6O"_fY%ֻG Ap/;Nwn|9w(#M i$r r9A0 xI6OC)֑cr!R 糜3_AfØEsUܜ̴ _MKlpMlUu33PT vMKaEWf\H[Y{]F7::E#@* >!cXCѓRwUd {9z34'B:ç2vjz JQ|=h%`]=n^!XF_~2T%3zM໚1n`,1yNc & =!RIAҜӄWQ-vՕC2(LtQLj&U)68\?*IJˀ)=B2lq}aO jMY*Ck0v.Y}4mCPl \+IS1ď12' VgN1Uxx8݌GūPy^ 9z`CnW 1BPsAվ%K.mq]+R#FrN,Q&hvYoX8lbAWfCSN{?籠uoCxth3 >݃akyn/[;2zcA Ϧm+,hk8WJw~mie&tq1,xkm_,GQ pb(3>lSD Mnt>4I#{>RՑ,&6y!o\PINUt[ݓ' U"gPyHW)H.P!Ӡg1 .o <36~V!|\-a}ڹJ?crCp* 2TZs^J!6`VlʸfMFJ^>UD&Kd6#bˊ{j6AY>1%1@-ͯ?@2{>9)grEv O^ct Zv)1ݕ:SU6?Xw}1Ov@ٶ{=L)]bC5Н q "(!"Rߩ$e9 ~/ԉ,se}0j8жǡU5FKn$Cx r$Ibf Sg?;׿Jֿъ{ȉz!Wrk˟Q|볯 SRҜbQڄ F5`_spX<|Vn3M*E+A.XX/vItݢ6oUhiuBC7W8g2 mhY Ǜ a'vUX16'9[K11Ϧg.&&X7qTluM\.+6=/gEv@05N#XɴZfU)gu|%,HNk:qQFuA2cf\oGrdi^K`X7g۶DB)3&Bk;L]q&F.mDsvodɶN(r)<XbH%]Y۹NXW=` vL 6NXN3z)bfFl_ :dᚗn3nkdoHy,3)p>)*fXp0<'m2 `e8Jz\n2B:ɍ!pqYQNwa?NQʹyÜ/ 6H=v5*P>HgV9/7PzR ]e+xYU"G WufFj滤)l7mkC{5H1‘׀Y>kG&Q>(7ZhQ?/wT/xo8S#nlgžۦ^eG<\8x=ѝFN\"H&ŴX\k4ϕ 艤oc#ۛL ʱS}5/t.X}h#}^b8sT<)6A QO-*8HVtwmy d,U l"ls;h8;9y,jSЀnH"b>-TC89s7U͒;?pq^@ͦI-.X,ZwM:": p>qxb #)kdbh1e +UV(곃q"9JLߎ>l3 Q;o_bw՝֨{?h)kD`]}6e_;aڱ hzڣX2U_:Cdm [.H:yÞP&,?N9Gvn3iŊ2׃Kz\9q?B[UYm#!ލGdEpe51Tqd+8 yӒruqq dXuLڔtK($#XˉvOi {S'uVAvewe.ЯR6 `zx+>)N"SkeEg˗lQ? Fya@X!HwS]qZtɁX ՘7Gr.T00jnNHU(tR2M)߹kel͕Pku95z`m/]46jP#Ghpըm++ VJ#hGIE~=QgˑیR*8-Bֳ8@~UՐ'&EDEpux]ߎc?B2X/QwUi2N8HCf8Qa st]_C=dFO"Y{ nOǓ쮍{- !ȹ ٿ6P3 ucF_7$O_d%f̒ªMK݂EPbol` O-pi4$dw{Iɿ}nJ4pu F>sYyrc3n@JL V6gl^gM{i1(/BYMc>/\^HVFOp~w"( u5K9>ĝ4`D$r띍"t [Ux oO> &U!rtDKq?&-ԅb?>~5ۺ[{:v)]"7ѽJ*l^z1 H><߄|jp͓cDK"{[xE˟DӗqԘW,K`,sSCqDXk_Xk=OB qOɳ龂LD1XyP^v'if+0e-nBD|*VRv& NeX;?YY榣ϦT6Slƛ;MTW< sQm}&!'L<)#XaޟN–@i[_{Vc©eqdlJPT{N⧠S/ @PRgBΝ"]yw; /l"Hngl:c -1bh(;&@eT)k9rΜ#D)h"X~@zNZ VqEĞCY  R$@i]\+]Iu@5#b=yDaN'DP%7on*!S-WoŎ4kqgS@OKw<\jͩ!/")8|6av\7HT%P6D7Y[,˰H=qYkECsh&8˜y2R2H 2K9+ïʮ@z2w thO&Ǻ94hvQ1&1&LSrF HhZ :hR"ϚNOgB9ĉg9+6M赾ljrƊe!_~f C~Z%>9H5C0X7ZgI'`!^i>=й3u9`\&ib Ah@|l~9NqI+%jaȄ{؁Ma #M3%NJ- I0&l/*;1e~E"B安.v>&wcs Ι^+Hj7fjWEm)^'X(:VmWXhwdbV((7,s[_̴&aWJcWAڼ@(}u Bv<2 sNW9Of\kò0qZA(n]iS|`^AnUuS)TT+>А LQy<~&_ӝ6Ş~.Q_|f}/DOUVŠ' H.OS"E{Z3{.sMOS@洠=b.oN@]cM~YIW[*mD]HpLkQIVeZ/;6]rw>XBz!E44 fN,_詟8Y~pDZ"}YzK7ȓ,xiMm٣2\<~qvp>eo: eJWC/hn<|?Vc=7ԅ _5 Q֘XinHh߱X4`h*2%BcQcp`- ' d_8iqfy.DsuH`\*]3NT!R-87ִ3#[ ]if,7{!cz27+1'OܰGpޅ  yGw_%A{39!_./ &0'TV&D_&JUӄunUZID Ekck+"z8r"e3m-  *MLW\_+y!+tjtן1hw%덂lB W5ceK]\ :h̬ex5 bNb{MYo A0:pq^p =SSqg<%+ (`H|i(Nsx0`ˬd5z{lX4^liwfZ WSI֛FՇCz*&R"R1b sqtU>-VVyץK-PyvbC2)r-`r#WdTpqkf1ʖZSa*0N#X*v:PmflCv͜ݸ\&##S7=pu̠!GҤk{-L %wYUi{K[8;"oVQŒm .~'AU0HL˦HW]|Y14JuOTҺZ->UenlK \ZjIAX%QSJij\+ݬ,> ^7p~wD[!I_&L5dۿB` =d\AS ?\`G?BH`I('FIL r$ 3ohY+R3 帜%`)%/â2 / z/ dj]Gw'RMVΡ#^aR(B Ci0 Jvqy57&`B)J2NsUNzNX ш':揸7N cXYeFQ%\1F3x| }0F"۲G~ř>cF -6"* y?=AF@)'e~>ĠBܥջ_ sy byzI̢xJTB#jE=d DavaഷП3g9sJ=cV|p]!s6[EяH|s~S)%dsLa`y]* [nNzJ'TP8|8^D0v]C i-~&%#aٜ4ONzNg66Bpa Glj8:s| 6n4b# iEGӌqY~C"?eW X?r毲5F`L>*a8Ѫk",\-+|]rdYV* 2j%EJ|٥+rc$s+Sx \b-}^؊Á="֍K@yZ3˞3?Ncۑ$IIsT]x>pݓ Am }@iU\v6@j `H=u޵#;ӎWiuxrta[[@ 홐UPtUt2Sz4fpxcmIM[<šxOUz%Ij1)|r=tnkiS%׫awqcȇ4:rY'&nY_rÅI7`Zڸ~ӰItx+n4>+ H6G! 9P$n@d1 SN~֏P&iKR}w`LH?'R O==9mLV#3Q"1O4:8m m{ʑ+cv">g9-scωZͲ>Jb]c:z5=Tb8:rk$(kP'PiEl͢ AſiId_w^Sjj:0!4 .vz|#]6l)!V;l ֫|^f3>8l!.41J͆Rmg)3D(q;(0$WMVQh#Ο8@rdRb;lH ^>b 5>ߖa,tkO4E I7*@w>)x1|/"" :׹մ4(x@ L*]$#m4_TW.Z'-.726O5q0H =VXEwkpIu@_M"F`k[/tb G*f?yRic2)QV/K_)A>:Z[8*E4[w$Q31lNze^;GRe+_b 3xxC3̱{3ck}p} 0rQ?.=[HK UOCwuA`s-@"=4syv Gkd5n?@5g-jvAu l뮀xۭ'Wq;fn?v@K))%# (VR;VjMQwP* zlmc|웵xmqYEH@vQ^Dk/ˍ8V{NKU0R:!a-nXTxhMX /d϶"p!ߋ%qn+i|xAugͬ@%Y]{$mE[T\yvpvX̬&_MTA6)Oh ;2ZļC z?Ն`!Y'i\5]h6K|P/ yJ-"?#H*o=:[wٷ&y,Wխ%( P⿲bmw"uؠAC+֟^ 3䢖йk[do"QǸ WZpaI Ho|:T-J Rv=0-/!z*}{hy"<Ɂ pK- i"YPd{fmƪEVSDlmhU˵#XwW"`W ݌aUiYdUܬ EH:Gqޣ`X B‘DPq )%?䣯f{; Pwt4:](.K6-lv7 C>?c{9zCٳUc$vhlﺝO͇uE|>xRN&3̞$|O ~V6pS'-n5sYҜn[?8Ÿ=H`lOxRDSJGi<dF=T:a[ǾsEe&T(6 MӘEG SC@YY =q=7dE3qJc1:Y _>K@./]4:/5 հ$D)1.IF%bd4!RV81}؍=v5X݂F<[60E5@`oKAp"qw,^рRZW'DQHt[YxE)ZТ~(]h20VQNq=^=\蒡R2˶"x6O' `T$-|Ì`r - f#FDOv!Q+`)ts&(W#L;^*=! C'ZFaal4rhzm>rx%jZo'v"@{س>(tb1[ĵֳr5acCYnyޔy2h v֫c9KhJ1?VbRU[Np i:'/i8Z A+Ғ#v1pZKڒ@|Ź vNA*&Oj|J#i]`-~_k!b^U*$ )aU| `%io(Y٤(,+`8sӊ7(x؝*]nu3!EIź,^=&23ES?mVQvH9gUq& 1,/ez@nE> 9F""C&!)&!JA<]S>42۹OJZNfݠ&v̾:s._PoQPlL q /NR񓓰铎~VSO2k$CM OP2ճzK=r'4#eWQξeEz1`D653 ,>d؂7еw:Ry?uNTtǡN ֱp),B:8d*sc3`=G'z/pQdvHXfp-݆78GB&8ˑgGU['}Yypޝӫw!# ztr.M17VkdŚy렐HhKqټVLOX>(@OQ2r MzwW; ȯ gӔY!X6Ow~3| B.NVb._*L mz!%4h++i NE*Xne"$[DzFBv=G:;"_ZAu,0mt965Ikx2@}SqK¥!xZJJJ9rnFa+M:rtuSjrW Yk- oC>#U5 CʕFDF5M<^{LVEgd?}qzNl3+U }m n\F u9d$]ˢ֘U{=3${yo=~[?r*+Mgwu nla6?Mugp4&ѵMةۺPٱvfE5(BTzX*n=O[ckKh/8 Hm+H7>+SAm{=_y!l MD 4"?d,_n}Nn!-Cۥeqi:$@ΣOQzXlEe&>4?Q,TTb+ /%B'7ѱG|Po_F6-jοs"8`kOzG4i(Tqw,T9UZz.^8x x?t+ Qv4ۙ}rGo WSܮђo=\JxۈLS#2ƪZvĹ8f{8AEEoXϡ<܊Js8ɂv$ں-v$uZ1S0H;7vηnF7G]K+H-YCv)g0`*>dhhFuinvJ4{>8T~M+"qDO8$۫6zLH"ɻGNFgdb+Pcn\Vo99ʀ2_B1 :Qb< JŠr+7NRzgJ -=~lr¶@g<#yWfA_;X̆*$FK2Gz YӺ(X^_ Sx/vH|S\jImU6c/F:C/SyU1>8115Cà{҆x0^DB(b8d=R1wyrٱu)K]=;3sg~sfFnQ0٠ï\ZMKr#^|`bFk71֑t{ojx)[A&':͏^inHUL4PFBNNrw'TfQD$U\^%VAc؀eK߄'A E/j^Tbt)z9w<(܎?^<2f7G' ɂw6*^Q̏ ˚H▝tCEj\9z3ͥ>Z{_kCM*S@XxLEi9?4,)+EPFUoy~ !b<;\,n_DP\wbz`z}Qt91K瘭e6?;q 6! #5!ٙJ9E t`ģwJ֕+X "{!ܽ"AHH8cu0󉣧].6#e w{WNZ[{ c?E5eTTKB! \-TYKZ,R.Fpjk"$'KnO롼^aX> F^٢G.CfõbvRr+e=^Tl>M?J2(^|x&)R <{uqx{뵞RB(}ST)?5 ? vJ[jE[ٺwpPXJ/?!+AvPsc{qK<N"_yKq!SB1H^N$79.$;󬒇VʎGHY; j}QƸ_Ij,=]Ys$I=clEޯZD!;硓ؼЏ[.۲p4##sؔ0 d)ء9@DΔ"X>>O%| iY XB>rV-D#pRb2B5S]/0M&K-8jZSe'jFȈrQM%~K_#u݄Ԝ/S ^ OT|Ӎc$9A()6I| Ǜc-DuiG&ɦfCZ:7k%2㼻]E/ʋ&=>'jA:InkGg_oa5T[JRtQ"$ˌŢU Lz /LHws6Daサ*cGc&- B e.ŗP#zE|뜫AۧYOK nt4hV<:bxR'EE (CQz.͈P6->XcFo͇(F^Z5LTFkwsLQlgtmz"M=o\ ݆Q(ⶉ4gQ :OcC0q\X~>{$-\6EފA"S]dzY~s2Ii +vN9S?=JQ;G8? !j 4]KVAr\EhIU2kT3lH\X[D\j%<" mݢߧPE#ԩU(v˜7{#X$(cL&$2H5h\aca6v:Oa_Zl渂V}d|y<صb^x>rT{δz؈T6+1{qywqJ" `\9"5}qIh($6mpUT].q0,eM)`6ATqƅ PŔ|2Ӛވu fgiS,10])C?k D/q/o2et_Rd}O_@e"LP{Y}Y)d&+_fb,,FnSX~3 %Ue(͏wrHZ&#ü+*|?A6ĄX : x t{dK"*sܯ$C`ch|F} _!p x5e P]/"t&w %ɂ t8=5Q2/8 +j̲ -Ė~r7SlJCJe}`7nE@р!GKO*0``X(xk t+QP ?U쇱lns2gjqCp/OϨ t)?;]vlW H5#Z pq#GN63g؅2p2;VR 2<SgRDoʄ7r!t&0,+:HAY:A Nvj`#J vƈ}gԌӄ.TS<:ʀEDi]YX>gWu͠ ծQꕍ۷ꘃK93K4PȓGStBp)uy݄}cecxx࿒:f ̎ V^\7ސi&P"`3Ϝ6PszQU xauP>ٔ&?zn(ύ[ehOL&!OAyicbݠ/g)f^]0c-$# ~\t!"Bl<ּ^+ t@)ie;A zlfG#q%W/@bهp֐;ݾtix+SxA?., zcʺ="Z:%Suu+E/:}i(ȥC6JK= g%7boBjMFOU5HS> In /=.#&,q'9-񃖕$KW:s2ެ]fLʛ?9 &dL}0r kQa8)D6>NJ"CY")3po=Ne 0 Wu-w|ZWș. vH:Gn4YyD[L*KNҒ숶\NN8x٫"NHD؎Opr[la|U ~?aG}c'hsu~[3.H Xગ]wZm/t#9t:%BӺLjicGi`̻g6?F'Gcy o/O4Yphcxf;`'rvFSL .oE{2%K:;9 V:h=Np7K2KS+枳J*_OoQ٩bޕqAfћ70?i؏4$NJ ʪl TfJoleeϕviU69q'*}?(/qeϵGP`d,liģ{IѤ=WnnU^nH8VJxålcT}%D+d- y0y{M5OM`Nf 9^rTu<mLAjY2l-&VD뿅QN?0l@gQNP)VPuҫ@Y.ڧ#^nas%3ŚJu,4Zj 2Ia;,d뮆PqZ{] ɑe?~/QDUCPV}8h/X^1nw$G d:Z/z_; tV8rGXz*ӫhǔ-9ŋ9>'g1y]@:Zy՛$ O) 4\S-FryB6+?PjyR ~<濹!`9_65S hVouEFsr)e-Iyd]H2O3ēRs&)c{b%Ӌ Qk r CaR#΅ [ղEL_*rHCmGC5]s^O)3֠"_T˜4rXFb{ O:Nv]\ s=Çm)Tұb-g=7. Ih>gn§20+n6O^nz"1w2w]9mP ::p2 "uqɨccOfVh hfӪ*d$E|q\T_n+;_7c>0D L{)|ŭ6_LVݧX۰xn3IskCQmEgJk8aQ2umT@C* fwٖYBM~:O`Gyů/NC.3B_*  [.A8ՌWf0gU2%g/ut\A/޿ ϸTwGDyܖ ~QurwOYgZvDȩZCBQyCS܈+6%9d38[Uf᙮ !0fg ~ˆ9>.y`BK Nꙵv!IԐɮ),la̼y[K^SCa0 ͹`xU'RMMO+hhO_Vݼu&+ZmW@AK]Ři_ʠt;pObCWlM/F2guw8!_#0Lyzj4nv[-}s%=w:Cg"U kNQRYs늆2ɖ-Ø. G;8؜suEB+ۄ6}X)k=ʤ2}2QXOd쐤fi8azcr^pט 7v(>rcak*ɄRGY)'`ƃXvƆ6f\`8ՖO%s7l:W"n2݋wUsո'STӎoj6:C$j$O j]-Q0[+`C>T #B.ᥤ(oO͏"ϰܑkp/kS/PhL\?Q9FlQQViJ8mPz2:ɴ шV|Hcn5#Vę%&@Ιoix޺#E`qţ'K?\QT;d |i3ZE0z]\܇97ׂS~vxY#̟_켰!db=Y?x-ZM%4m {4Ȫzbԙ>(ZQPFSЧefg ۈ~.d{ƅ9/r_ܣ4Ľ@J\77n- ʮT_X& b1ŌK㚌p*05t4* iB]n!gGB^ԍl5 mW?f_``SA*_"ZiV{ck.\"M MBы`[t{WN''hdSQ %VhJq)C?,j5zJCIV.LW:"`oYo9.gһޒp|8<*p>Qt@Ig>&t`{x nm#zf!D_Dc84ط܈9sM? *+yB17CGatfdjT,{/gY z/Q@t߸!TԖKXNs}#%](Oy#d[00(f:H,<.4OT>&Y5 $d1ahL6|]W"Ҹ4iB<%/B<8t,KaVM9Xby<;jкq+zV\bT%}k9#}LXV y5gu% F3]cϖ,cMS%<\WNQMCٝ7B ŗGqwTӼ=0soD"z~Z/(Yfy1np6?ҍN:^<4S-nAuo}G4Wy)r'ӵ7`{YNzvt xOp+A-\/\1§"Q!]4zr\̯Ȱzyj&ͮzy&=GXprmDG}@=Y,ULe I1HznjB;I[1(a\ҧߣ/S>';;q#\7ER'TV tc*@NGO1=pH7}#Jښu۞g=Zx߄O7Nc 0l\OkrS0F vlR SAPg_ {D@nɥtyjx 54 D` +G?a¸b@H1FBB{~U[ݢ`f, <&:ೊ=mk߈n0notӅ=@٥ ms \ϊس#i]G<) Ɇ%tyd=D 4qrڼ A4ǜD)$vh9v ߅ʽ8Z ~ 4 0֥AFHC%ם a4&]ݸxp!Ge}w0; QHЬ)FkB%&U!לsæMog_cQ/h%K9D "w>D =i3xuTh,f3 ݜ+}5p16Xd=,V*[VUnfFp"xi1uJS.>^=\)yv9MnDC *4Ɠsn%kSEpeqFbby%bakf2^-F[E)~Ҍy" J(ٻrn=iDѨ`m#3Өڋ2cȃ7 óu Ҍl6wJ TH@UHg9qe/2{X8j=a8@q2?b')~T%A^״cb͉5ˍ$uݞfjpޣPL%_9vOi*TKؒ/xhJޭd5p3w.ro3p@ ,p P/uq.+^MѻV$MIANɑ U%QI LQrTffc!rw C2;s貴] M=M~epYnجe>9+eeOhp17+*y=-Vbr5Z6} J'{bY#4Ŭ+zJ\޲|s4q/ďthHU6809>^,J4>{PSXWf bAeakcw+݀(XBFķ ;y` Da59x:Ӗ>x}j $bG?&#jn&o~t"=q vutCr6ʛĢ~`AvX5L10`~@ &vp)u24؈3یE/t=$% {#O4k9u.Eu;r 2ռ8 aaYrIʴy=?q7+_};߷R6a}?} T1= ~HSt {Ly[V>L 1Պ=kNhhLf&=^hJ sE #r~7W;w9paF!O&`C ^r\oP Ke*sˌ- oIxʪWpȹV {|L>XVFݞD@P7,x||jjCt[M *J3;Lh3kO 4?ˠQו+UK~Ta⿎:A]%Ñ5҂h怙 Ή`n[/J E~_IjE2X̘Y$1'^HJxL1RWK2NUJg:w%-&S)8 w<QKDߏ) ȮX{g-c"6kՅqxˍן C=j@ZgtTJO*hcH: 4 Y/{?Bg6\1Q;C! /'CE\~# CG&݉aىVǻdD.53xuns䍶rPDzL+ԁ>`OesҾH*P2O$,5Q`WGJzRos ic}eWXq[aKamdd]-CE+8"-9n>ܮڣ $}j`IS9Cq nزKҜ $/@IGy~jǮ>'N ,}4MQ^|O=4:~Y5Z{Ԩ Bg*Ԩ̃+q aɃ!PW?uX9H \+ZpK2$Cw5__9=BYj':T{a`d6Od:\ kBh4LbDuY??&e{ȫDײ-09MkK=? ՈamOXD+҄!k{v[rԡ !vn[OO#Y2/nϖѦ'SA4F#+kyHSU6&9..5ԭb}aAxҭ y6 @1lO7a6h& 1Vg}'Xvj5T6 }BRߒdDv8lo[x6!TL4emkz;'g IrV xOoNh1h۶tyoz8.[:#hkG<^>v{/YJzg ~ULw\\crinn Zq voHv)˘q{?ٴbTԒY`)$,cYl:j<"c|,U6Ic5Qj/q73#n@ЃkvCp 7Ѡ;} /xw=/1@6ѾFÿ$eV/4N.I$c؅6Jx Lp;Zk뻨nE#>Pm~rkǪ i-D=GtR2XUQ“ l,MPI g(͏`!LW$rq_I~HZi@w 4rhxŒt^d }{yQXm5 ;MNմeL9 F|N]HF^q sۀ0x6Yaf;x C34H&.*iTv(/'ⶻy:Uc4%mROBoq5M< c'#vM<傝3\UZfY8SopQm\K/p鴷3`7|6ZMU6q4H^zQSy7,SUAB, њ\V#q Y> NYqUni|ʯɕ*6D.=/':0ՊtfqF;q̅5w@-Ҙ6D'Ta:[U $|җ] GzvG-N +wBڃ/ZԂ*itCt@VVW"+*]jMuUF)[i[,D5rPNQ$j`7Gv.O׎xܓBl*eA.=NmE$CRQp^O$~l$Z1ߨm*8PY'6;q_6IHm8F*}zCW8Ρ^Xǽ8Q+]5.FiRZG}cIIquC^3Ntq3I;WlY9ı)ɝ'd? 2 *!ס%TKTxSIB(SC_\N)3"@kw|>ͼIճ!00N3p4Ovҏ \eA>50 fܿ9Ao;'݄nƬk\}/>Eyf`v͊HSUcV'ip:+ξ> }qQq"JA/g6/O"- ј!GL ݯxTYkU]|kā5؇ϴ0&"nT O Vkg@ I^=R7ܷI7:Ǻ|RnգEBs!W\;1ho[_1Xxsӏm WL:V rovߑ;UMZ3yDlv$*&څ iL5 b  L2dngd8`̷AXџ B4z6dqχw ZD"vv<*58mjb&zD*%GW#b1Cq6ͺ7? h@ytOb nTno%JQg|%~xmzLvt LHrK>lQp:ЂDzvf\C\A`{۷` Mz C9ri >|i͋0lAW'9V'O N?p LZz JvM3Ιp`IUf$Q K+ X4sif3zq_d ש.N~9L,iYl5mk9bBJf|gC$O~STijEFBT#Hm6{!ZyAђcd,5]jzo A~SWiOH"oMut+HqL\t8EDiZ+nܧ 8H@kpu>n2 Rh&NWSn4\VtSZ1Յo&IIDZ 5-{KWW-4k_c{E?g{Ȫ *%GP%~Godޜq |;e #Fi`vVuӍh'l#9 jZRtVG,Dĥkۧh EnU AwȗM;k*]gF*&ja7v.+-[M~6_W`l+f]kHU;~I 9ߚv܌T۠4[(O^2'ͱ2M %^'7& &}ڭ{ֵҭޚ+$Rv;x s)0E`.ɞ Xzzl\) .7:c S&;:5M@_J$zt: /5#Gbc]X-fEQ4L2zihFPLwITܣk"lqZ;'+vc\\n?R~oi\1fx`I6_a O @A2#83Q'bB9KyU01F;DIJB3~@wݗC|ya !8o%O6TRIl9Dt<5~<mΥhRZqN )fhmSc &U-$UIyn x6s\\#XQbOL}XO͊ eꍄw7cy&' L~]/sb0t[ gPѬl!ngEl5r _ u}*-zÝ8fgp1. (^5sS|ҏSO~fsz}Ɨ44"qߩWV-.GO]uer,k3{s2b}:(dʞ*VFZ|`[(߈IitԦ3)kvt慱oFSZkUL #v"~{~飥FQ- 1sA7^1#oQRX@ɜ!5lW9]zrɒ3QFI;/a=]wUWR֑=;𛢡U\|tUx/ *b1"盲h6 G8vĆ}Z=9ja4mxxB"0Qnx0%uB%N ,g!ĐRάo>_] :13=p/, gp<%m )ưO5Jކi[GJyZ^"; 0HfnF_3 a 5z1.|a] ա-P=U gsbW“\GD:EOזGrv~ZQWRje 5bĤ ɜUF=,}6ydz=¿e=G,={Qi]=Srkx󩄂I[lŀ$#T>Х^/3}T(%ǯcY}OIyKNaudw#}&z S2$Y nwM1Lals*8t[sS^myL|7 ɵF]V[q΃[15F,59KU]/aX<I/=kP7DBsж$}va56T]qEKvaMG/{xhM3%@dreD~(.s=GEvM1X\1HԶbr1EqVJW(U3o6 s yK(e-  v./S;Tg_A?h?.q|Ky-,Kx۷vNe(ysKԘx露ryOb-iX!KUĭ%$/^<6Tk# )D'.$_r̥c#OqbIh)5! -Z^JNs VmrZ {2$;Ut9]eHlWp뉸,koia`W@xD;֑8B[-/pZ(9Z++-vf/nh*-K ^qN"d@+4PMO/v04-B;0&3֛IlkaƱ?DoʡdȐ/~Mϡe1]9dpie#`Uy"q騌gЄS_hCFNොA8/Q qOj OX++aƒ4N@5e*rʏQ4H=kMpC2jId-¦H W iEŏ>Wiό ٱQkǨ=>E.ցٰk6^sI=F;^l^Q-+n UdLc%ǔHJY}N\ &u4͛nq^ښq>a8ٛ%ͱI;c[y71E{]H7`<nԦ-Evt+lRhREZ S)=w Var@B xҰ>y~je%iݙ᭓HC֘ghC'S,G_z2M_j2]w *jgk\@4kU茈u~nGM(ʺm'볦d:UVtU_zĚ{k;4rBz֭9jdl7kuKE3CF0t =Q7$LTZT2{ABI3%*!bӞR0|k;9yآ{@10X?g щMg삇_wˌ{.?l)^;S=eUc~ܴL,[[4$8_7~M9P_ !=fNS55P{bf?^WBP= qT[/tuI5̀a>l= >-^xiPOI/$B6]o2I`D;۞r?vXk[?@}RNQN_nН`)!V|`UГvMӵz$r XopΠ`Oн'8RKǔF!.z$x!YiDf<*Py=a}{)@s,LYr.Eni%_SreKgve 6[ xb8stv ox>Bˠ%{NJִ>u&]9kf2%E 'vµ`C2ܪ8:>1`zRÖ&©})"ba. 2Yq ~l .B&{+/I DJsVeG1O[g)UM]ʾyaRU%:t $:9G'=ԍA5Mj 7qM0v* 0NT226]80T.ό&I'6) /*BrݲnQ9v{(ԙi,r 7˰' ÕK W{g/K1?7j,a'7`૭SKNM${W~_VwU W'kcu!J뼸[(&hX 􅮄#5&(a)V>0q?Ɛ~ f32LEڶZٻ XPv.:we ) XJ@ĽoP6B`%(F~_].5LkO۔7 ;H(:VlEh%NvR B[&@.֪RjIlsID"J&AJK(tD=5#b"ʛD6njau\iӶ@J_!?ZT}kx[NU¤Xމ^W'ÙkZsݡpc/]p&b6w& t3,<|oѥ dٱkExá-Vj$_g:u qx]; ѯ]m }< 봔&mbN7("C`H&"j黁:.vFz$l > ҽa>%`9}Aȇ$lb5j;{2dR#kڲvUG5,prʄMG6^Z( vWj{49bY8#t*wkhWd/qױ"Z5ת"][>,O&dAZb$iL98L Zr ," Ƀ,ʥŻYzmG]txMrmhPi[*dpzR +jqږR%X[5Ƃ)HJ!}}3V*S@7ST Ll6*cyI~<#X  }-c7/ {JV(&(۴t}FwQ0aP ?6M)un!m_ʈ8 |KƲ ~o7Jӹa+%K3~U5KoR J3Pߝ{Q Uw2NTݜ=}xIH '[*,=ҩu ;V!m+=4ͷẺ[64^MHL7|56WQ$[ ZDqYs@eoo~E6 3Y=v5yeP6 H4oM٢Yh+gg21aۢҋ&4ZFa_?ҸMVC̑5k$ZvCh!s("ik+hq ] t~=GjfcLW_)Nϋr% ymqN]jr8@UsD,(y*yj1 fk-^zt;b怦㰦>wlLHUuo=vNnog]2InN}j87 ^gpЧb{o.p,?rB+h|#oǗq<Ýk%Yy h"3~x2 ~/ xVx1-Ofogtd]jHT&`rC$Oo*Ica^գ 9bN6")cd!(򳽡kf1=uFQ*?}hx䞠~ ^Ɔl`й+",+(}yaMyn5N T\CP!VnL\3E: 6d8BGN)K@ zJ)J y73xtAV݃+r!i_Ue-!u]ZG+C.:M! zj!  #~Y- 4~r 6E#С86<[Շ5bL0 NVrGt$[kZ<퉑bqTBo@TﻖrLCq୯;A ڽ`l6gGwlԤ]kΝQJ*B!8IvR-q"p4h篟]~IV Yb6uYI9|@82khHlY7՗o/1i.bޏ!վbr-7O1b>Tk}LM͈(H/FjrxѴ69LGdau5Jpk%'JzOeN KZn멡#(Jm'ۖҷ ?R e_C͢iLwՀuin}x$L+ԚI,;TIn@@z)"MJ m0Zx3wt$;"W}[SItk$S#];CM2U9}g'eխg:1G I\= G! Iijm٣?5)3鋼-0[Ϗ\+ ;I N9EZD32&)j3ݟ I.P).+4%s122C9͌q4fGAMA{."`"7D`&(jfW5w)0G7RFZIU]q7[\K%W[2(˕ۉaa,hBӈ~(I~y@L θ 9yѲ`"{6x >AZ" {?6NRQixW|7 RZGEȇ9`0c׫lEڢ43 ;%} # h_FDS.>4V,]@ (vIM -X97i9ScpgaZ+R|y6Cc!̢9h!^xY`a7u1 /1Lv_wºX~⺔8=mPVrl 7;;&I,6M4dRb\S+j b)PHAث23fTNRnxCA*1%& D:e؀IƅWW`?sp _J 0d6'&}1Ҿؒ2;۶TI9?2 7昇 7HղȓCvD}] )EbЬx-:>dkmQd6dN(/H<)w~{F4z ^YH)",uJb1pqT(#"ϙP!TS8E/0&~&h2sAa7Gz(HyO Ȇ b/SSdoQ{kŖI-.%Ci`s^Uo 7?E1|1DC| !aZme]TpRَW4yX:e2)AË?7Vc~sG߾YÈe2{437EZQӎ>/e51񵥴A?eJ=1Wa~S  sjW,1rdPZ q a  rިđr9/D/ʃk+2R3)$=Fq,sp3pjpΞ]YWj( B h)CZLsǾ-|'\4 d+NNZTI)~qP%sGk)!\]%>__֞Py$(N}j_*'I o9v7h 0eg-඄N/zW)oӏ#E|-}TQ !`Bq)ckҼ3Ȯ,3ʽ|;\gOONٟd$#N0Sw|אJb`tB:~(N0/1' Okf1Qu,"]p9@~/%U#dl0dOu4fOF4X07 ˇ#b[oμE (MLUL,"-GPdɿ=* :}@nN9) 'bG5H|C/]{`YQj)Ĉf,"Nm\y!>(vwFC$Nſ1mSd},]w찰lu z3bJ{AVXf̷T@6!_ K\ivC{2)]CAx}?Osмa4e{^N 2ʲ׋P/ò ROijz)jܹ`.Cssn2z j:~pZO|<!4L/{]ƽEm!3[@I:h6XbG$ (xuhPO͂)`AȄLwnﴼ :.T "\aLKҠKMd.KXE1jx\)K; kº4Ơ |`E>vsUB[,\5=͉w21GG8:GaSTy*h1v ݷ)칇 t\Gu|idp%mipbP{D=Qn}qѤ )]6+cG:?T~O;lBj[G33ܝX:ː ļY!erPY3~xnJ R.͟f֜V2,L Pk2NP V|ihGDSfc O{qڒ2lw|Cz$؞y }FtQپ ݵa k=s©RH =يPpT8!]h]J;xf<`+cؗ1F}+vӝ *}Jq.H\ , 4Ō!$l2聏<6/_}g _b%|)ԁw^=O&~m?7=!(a0eӊE!:u3Tiɿcf6g*U3wny% #`FN]1cOEUQݔDNZxR(x6X64k-zد sQ;Lc}F4o^Ζ:} ?h9/@)npְ $HY(7;&|&L>k/k;!@jh%u1e+ ǫe˦A BPUʧlV #~boBYELV q4 ' "aKі24-Ꮆ sCpG/墠)ThF!:i]A9mу)SF?-d;PE,( +V<ܖɫ(wcmH^w )saSu=>80@0|.HKCD~<s,Ϛhk'${VW8P'V# Z &)6"6*Z['SdfٷgN~2)VY B0?-g)0y3FF}Yv{iY,tAꎔFdl:XP]4gx( z/qB-T Xvo zm,+H)Op31#fY+ =[Qzߡ NcU ; 6TBfOGG.X+7dwju&Q˯Įq~=fql30pih[u(Jb`䵩DV?J[C`m]%]EwĪO5Ck{w97# ރd zIAK@IVQ_wsqgS3Ƽ&iSg\^(%ꠇ֣U%r߅Ha^RTQqsʲWrAw& # ŃcH,` G۞X]0L+ІtzSQ!;oGL0-͓i=M,]Z#i$9v250TŤ1%B&ZsPtqA,Ѡ=)"n_eϐ+[1o@u#4}өM,=Q8)]R#E8H [XO}v֋Z*crf]Al:U^{wE'f>DLOZc#,Y%6+y{҉2ʫ~w=nR л) /A2c"třjy\qߨ$T*@Xp*5 V\7Ph;B@\&2ÌA9Ӊ:koLqWfdbA^ӼZ3\YQōUϥږpq;=ɩMCH.-<+2}kLaϳɣr'Gi\1j 3}CX;FGvxY)a{ɊC؁n">eb_4|haRS} iVѯ X􈣳]A~6vcZ輙j?&[eЌoO(uzvԱ، U= F]>/f׳E_;VaQLP|2{F>K#z #\Ʌ|%<)E:Onz>ٓh/rk7ڡm"2ޓW:Ɣ4wF0>p3HIi9V%B~пD &]@rxUj-s[^c7{jw@}z#Ӻ[Ja;05!f@=TbTD[ cUۋeۯH%[Ma)+<(T{w7o ڟ#&uy|=}{FZ'H$|鋊Z BP=Juӥ/n/-(Rw 6'}̪Q_5{ r숶UCm赩=ZNKC=u-U^W+l[oG=yT){E=U,á6Nxx/SWqWl(v&ݛmJC'-oI!|oqO)Ӭ'ԟ9o[$ZHڡDyeoOk"v"gnP3h6uշJk[AfN 1e*i.]? wwM#f:|(A̰")"BIZ6rHYxԫY˜,Pض j|o-olNQ6#9> L 43mb;`o64)IW<,h'>;;m<?Ei׼N f*pz@Pe^gDL1T,2|cM,rJ&ܩ9w(W Սq $MVpsGѲFԎȭRc|GTI LX@e%+hdl0UɈoT瞆7Q8OӔ~ݏ/ؔNbDF?s"*cxR &[Pj33 .'#Q :+ I6IĹW|&llJJ}S|H\i,73IF++z}L>j`jBFGV(ٛPdj49 &6iWR`QMƟ;7.&WH3up:0ZKbrP[ʌY0"g9dV'! 8fA“0Ÿbn/#@ᓃ);%!b툕z@*3voff=bQcp| QzYOyPf %#`>M9wz͔yƥG:` zFrfȺb`~UJEXQxW}ӯ_e%g3N8/Ig@0iBƯG=U@섅sk2B_.x76?ZQ\F.(4=_Il/m yIZ8 bӍL`g:> sJdY|Z(tޢ=%B"<,~7a~ķ0s`vk)ؚq%du8ջU_Q2hBuJ- V'7mŀhuL^i9B='~XXF'k| GzSK*a/Sasݙo':UlbMT pc2En{'l L'o(!]n*ec'b*%}TsWs~8Ysۺnd sn(mcdT҆N)nm_P[S* dgrd柟|q_[zZS\1݄`O2=# u^\OU0tHejILee4IL|W{!pɥxىIWmۚ%Яrņ?`lb5x{e^}dzb'qS&]sg6ze_evʆP@5)Y u 2H&5$Ҝ_{C;14(xLGN{ HE?kS}ă9I4'v:Easi:\trvBPxQ k< v =R^/+az=S.QC7Y~/~+!R!7eO\vYL bZ4RkJ R |].`<81#-Gy"phX@\!}p2QWoޙ.9u{Yfp. xYKFe^36$ K~jMD `nC9MBl]c5JSPPSȧs<d[L92}-ѵ2mGs3eͲIHk[0EXAJrp-޺ uH DF~6Yʆi{K>RvOdZmG΂NE`ۢ?k=Ix}e``;1SDo{!G&{擩CYrv*z@)o.<ý<679>K (̢,6 Rx,[u~3$IH%o066~ ȈAeFR,Zf `S4Xҗ <˟T_F+}3ebѠ U[܁cM5uuz "mSLudդ eBwC)!M:W ow'xhWu<8#t lbƥ((#x") a~o^h[tcҒ Sy~ˈg25e&Ɖ^O׵gX^q8#*i]w`aT:EhW'2?qdd(I6ƒgX9:4때g&BDg>((:֨,AT>ԑ0YG^CVLeiGʗ C,6.2MR6iB ׻wmTs&GE]iԸƩ\M%IiR:];oyfT'@4N .X5^\ԏ J ^跌uPitT*%Ҹ`[7\$\щ%PU\$Gf\Ae4ۍzݐt0VGյӯoL.,n0S!ͪiK}̪XYIJ^R/4`2mPq> ķ~mhXEmZX&!V|(Г <1b^rU1:Tls9pΔ,8\Hpcz8ĜbNB m%=rl.P,($29>w)k6s<3÷}sΔ9]e;?%qs* y)(:̨̪ VU ܦu|qT?4*Uqw^3T%}R*h{9Se}lWS e`Xo"2Цy6Ќrlɦ5 %D-. 2k\4pO$8*8(Rt"M]]~qqB0ж6漼2$88܏Jɬc<Eb%şrQ{?:;sG+&162 00Ӂq*Uk Oi{A5h2%XFUI>2 {F{w:'U@l_n$LͪUËZy$ oيsoϚ("Y1lleoA&3,@GN7Q7 䗌~0J/zPm'^:e&r[McTߢOi fov6K *n"~<6!閽xe֘NUUAҹ.uԲ=>JW:Hm@,, GrL>((Ș%${~bޛ /J5RwlaIv@@-d~I ==2LKELyv}[l~8Wޠ-Q?J>]6;WfbdTH;VM+J1B08nrv\ePcFa nT NXlG>[=Y)^|h|_Eq;w簀GMWbkmr~99y@+)޴WWik3NX ]صw^+v\|6 p׊r? 3A./MQv: Fp Wgwy+jZt17 Jq) fK)MNiF2tjTrB]i ;_+!8\Un+Tu-$#b h]JA](USnydrfo* ȊGO UqWwN@bu!qV?bp|gnxkvr݂t(,S?>fXy殤ӿ"x"rBe-W3%=[/.|,C %Q }%M4z`.ۭ^)1 #Wuo"AJEJ8S:zh*#u6 /a}P'޼uFy Oc5`tZ@Mf:I.cMe!hoO?&;A7(`콑}'~ؽ5VC*r"hGgw)Sc}3#=3O@`v0bp'فRxEbP`B4JMDr }2r[Y!M`QMuY.O H.Q}C*UҠׁ't\ |X!p@5'̠ģ.,[cnӛKo% ˧/'b`ǎ֫YFITf=;+2d} ]H"[a.`Y6P#ӧHE\$+1?^7#"LPN;O@5j$! %S'[8NR(fM.jJl)Js&zY&Jic& X]E{y,S6qb)L~B}Më(2xs{?d'T1r ]u9SuEӻ$}wkRf$:o ;^Z8w٪AfDZ3b%6b+1Bƃ 3SUhf]Q+(áѿp< ̉kp1;K8rrnalQsD:[aq58@騇+ @fy7ҽA3ޙ MS҉/5z#%YsG@:ԀG.SޏoP8c7W)iһFޔIp@&Qǩ55t.xTv;{RxMˈ͂2BE[(1KKAK6*]CYwexz!]+#5H@ˍebV{$rJfF !5a61ZP6C2q&uk'k瀇؃p}H`j;Mil4`ֵɊ\=> PH*"Άb@IrYm%yh}_5('>> -Cqc>TfYT{f7\>b&^ڥW>O}e]σ>-PcJ%U(X.B 3 q\gD(Gw*N2Pԡ#Y,D_B[O5%s'=SBK=/^W@ \_x:]hJ v\OB `MtXPcݞa v?>Y}_Tڧ|]^v9Y]$'V0?)XP!'=M MMߠB~n7  i<Epfli$+Fʚb sK+x3B.HZoxS<(Sicl D?pfBݚ|i?R^<$MU8d] vُXrP#g2ύzE2M'C/ sʾ0 `Y/ Hvp!nbdR Z4Xӽd߿2za9 {J[ b Jy.& H) Ԏ칡 $u!t[x= :xdnJfn,o[miz {WId{>ExZC/(eh7Q$쓺/HGƠ`"8IO܏m7<ù80Ͼ#Lo8g@e( IkX 5=hTQE)WsҙzțGfFJkMס}ZYz֊iŗ5 kr8PvpNNɺMF$E?P`P2Zo]1 ` +RXC-g!ՉfHFw+BSUYYl!gox0>f3gV=g_pXwɻ\%0f/>ь(]ry&G}~F4rG\UWݖc!"%=;,%p2bvkb"g =ԑt!ԭR*\Wd֯Nt =AzSELQD@_%$=(s{ `5-2>S݁ (GG.,tj$m~ l{#)U9J}(?\;]z(N3ax ?n;&$Um/}w0hźoZTWλ1Ƈ.[޺__|E-4O1hֳ 51dǓAwmSCʑ}R+O f[2F0,["L&Y>䎚Tun?9M1_ݛ#@wX0L v^VzCdl:FLK 1%\atl!w ߘ*9"-yY>6}g8{+SdeH~ MgM\{34_[1xgcLbuRrP(A5j7UɕM:?wm~wU'ufS5l04Nw +)"b8}]ieoӨIu(!EQ4֮Gqv2- 4ny`}0;? )2"/&Մd(ˡ!мF*ɖkZ@ӊpLjIEL*ϗw5^73>"%Aeth mgdݎ'V[& ~PTHk|>xnρY-lu>%zN]t#"%UNC2,#s!6uQu<`+5o M:llj&~6^,ɒYNg4U}+LjÃ$r$Jf^~~y'OA2~) 4.@/5vMfj?m ҭ+{QG<,sp߫`ޙC݂MuKj=UIc޳̟9 oX\F܂ +bBLW`g^{ј>.1 LfQﻧmTC+k΂xuM49WN1$L#O9JI+:Ob_ljh=8kBV5td̤}?veA0VjIoC+ *Y' E/Ҷ-[8%'^s1Jҕ#eFƌE:'?GGQZHBՎX ~L!/Eݐ2$qMex0=[nFK\"Z‘X3VrGĮ>ݛsr{[@nG n´B*2nb#׵cr(2[ZRY}8 bmC<9`Jh.yU02.EYm rzh[?OBKJUTe.zˆ?HgaG$dѠC|X7Vـ03| uU8~pM-LQ*䝛gC 6d#k RЉ<\~D׋%1y7C3F-ldwI_9҂Jra9Y}i@h?ы%t ITDx1 mNl]X]%P~as?iZCk-ҽ<^A hsw☍+M8O1xa\E^HT8W=-)z·nEeéں?LH?sXs5BԅH|W@ZgtR}r!]#N"G~wRXbEǰ3lg#mJ \b]tgw Q ,2AA RPdvz|_ބဗX|L#egTRѸhۧK8֠FS/ GCs͈@)>}lb-Ѷ^LVPMdQ@ϟI:WNyXlt۬~ MuoYI#?MS+9TJv1٧\RN H-`IOTH4i~s"Вוy aђ`j򧗜_Ú*y(#wC.$a,w^Z%_piT' (Q㻢pYeYn|WnʨwzPF A`"&нZYtN䛟t9b ﮘg i$%"e;>1Z0,%hH(NGoQ +@ɷj= u޼&D>w Y94s #y|S'sl8r`ۯ9x ϫ4Հiʗv80"m2TdH&v !M- Лb15%_FXS[@פ&8!f9Nlt1쟘9jy(إi<5~0_2׼1ar#Jsn*'}@o簴 k9̽0tW^JT|\\Đꍓ<HE=zaF- 7LQU>,f0PXfk)?0? Ȕd#L{ ۂ/w)Af'Pτ-̳y ldVY^2v̻^1! Wҿ^&Bxk (A :J/g_7"#t<8^>֮&4R(ɫ)0KNW@++H{T25>#*ǎ?'#+齔o-Me ^t9y8p(An8tҐ H(c,^oSE|YW8a< X\AnEsY%^odмY~CYDX$97V")ץ= %qBhi; &U ]kIQzqcTi(aYSAV-^x>{)F8w⃈+Rc9?r|j5iju\Z_e)Ri7jÚۈ0[]au ole Gq ?,.iRuɆmƕ&+ր?9k&ZgzDC|6f :qfSZzCdw9T?=(G.{7ku㸃^~O(E8 ,ѩE>-$*B?bvjVt:KkU+A# JrXmtXlre%`obX Y hjaQ K]ϥB#>=QΊqՅû+"<5=## pJ1KsA0m?%n }.kpt_H3Fvs `h:R'GoF)fZn5tRxАtDZ4R<;iIO`ev*8F Z=?oIGϩJW'Ut?`|Qo練5-"wYڶ'ʇksjD"TJHL NeҜ7(se=qI l OH_..q=yxi6%f.o4+3|ij`O|ˈY4KD uQi2zCSQqM t-8udNNP6;2麡f `hw_ 'qJNv|Ǣ}2>8?ݞw*ʮBpf3 %D)<ݹ7L>=bC"z놸[P.Rݠ:uY2Mn?JaI,UCZND/Ino63cx^GЀ3I+ bˠ_ҷEtQ$y yzdiZr)iFqJp. 4y(aD_ S!Pf`|r #̈́W_OR]wTS7|p&-%c(J}%NyU"VV*/oCMq/ih2.!ns7tuێshs~Fe~7|V70{;t+>Tkn|4,nOƒ!h@K9xѬjJv=Yd@ӫԪr5TȗiʧB][^;{xj''GVrIKOgD=_B\AdB_̺4뚸 sfа 6R}c6ΤOhI^Hr-w,8D>qD]/M7vHʿ ٷѠ漶ೠuwvjgoFSv7BW!ZȾݮL>::Z &y4L+eYPz5Zg*X=wQjt\b>{\7ږ.ujY?f5aTOgnd0/FkFu⢟[zNnp?M׿h&VcAԲB,Nr{4/I&UB/s'9Gq]IJɎCF_z:+szt0e `c?]O,f\fKV; J62X} 9oP}ʌ K7blX!lڗɎ.PV7}DM4d$$i+oG#gt3#=v7.(h @I&nħ L";j`[T]N:%e6kUmy)-@mb;[-{Js%6KLH{ywENXO KFp4r:BO|}쳸d)_+510dPw; Hi|$X2}a~y%NZ-7D;s TSx5.;w|~t!!&poݞhԉt:k؄fBhVۀ %D.{?k$k}*ʋ\*  wi&xTӧhSbh@(1Lra6 nŬ0V>O`ux9:xecSTT]. -01w*[Z< dm]t*YUwj_]3nc93 Ffb&qKtft:>xBwHAvMsCA.v/5` A杝bnRrwIGE$c%\ʡnOJԮ9GbI@@Qе'˶t$a8]hY-5\Lўd_){Gfw ,AVl퐒1_7JuCJ<`2l5 ;?灃cMDYNr~&&:FM}6]Fgo=8ď al?<zLzFw%٦3ik(h|kHQobMC?9<+*Ev)j`!oFD4&SX|+a֥{4-Τ^ޔ+fJ h2_]!&aͭ,ʿչ^H,\#E?&A,b6Z/{o;P|)$O_rԏڟT̬Qbth h揮_95QykԶPx:!n2#lߴT_d%]i~\KMPdĝ%2+ؽ(;NOzt[*bjZ͞hWaYX'>$41KZsS+_H瘡 12>y@Nk# cJ 4ڦ9`aT3~T TpO({ d'ghۮz}6%+`ػHj$X@oL(?_LpD4cN$pyEG@nv+ dIēx|F1Gr65wS= }A<j3yEùzW"KBؔxeX~l&1b Vu7BPq"hʶ,h%pST@ǮIɡ5@z.(gMbiі! wɀ*/4ZvP#Mw-h.bdH#TAZ#:BL<)"iM^4 kORek/ݗWteT@R]/`:H084_jubqE^-(@ 䩴<%a ՏW`oYlxX$rE]R bYBQNny=P7;Me#7?UTG}"YFڤcؾCX`1R}"IفUTV#y:SLaJ}p0#U-*X4z䮮+U?ڷ@?<!+=6đV^ArN% 7?lkI5&amDbtp%Sח{ؤΨ: O=-wH)>RE00p )5 eg sozUcM/ Z@$⌺Pc~_ }g@`s2 IKDaj_ZBÒ֔}jFzN)˜*fI8 Oڷ}<_qu3 :T Q5%pu|[ Vgw${Gv H_4ll"sЮe5lm`e4VrnRky[YTFsVupc~Q[x ek"*9"}c@|Кm$|aR2W BR ^={mXp kRc:獶i_Q^A)^/#v6Pgh} ɭOwb+L#.]BJK.h9f%epI 0y L ifN - k!lnu\ܱ) CJ*dd-)JPpUW(/QLI޶|wtQ;וɔ<4_|b݃bE_koB @,UWrTAʰW!ۧɻq ;_ԍxUIo>q|ñ[%s_@Ciٻ?J!r'Kܢao*&2 њ -?{- Kt_?f"6۹@+iLnLj#Fer#|HMhEG0{g#Xn֋i]V5maC@SxP"/!>6|cyW/{k$wHT\.-o_aMWnkCq 2IG7e(<ѸGl^ /tZӡPuT`E(ە~3bSX`U ipOxY$zl=/bԟ`@Jz) _•dE YYji][SJ]/qh7t rcH7o0-;!/xK)xtosF ^Y~w ɏ f(뤙oM\ :]Hz7HɄ2#~R) M.)vp/Li1 D8-e=FB o ëz-De;%;`E!5 nϯzќ Gd sY ǬДj> sh )Yn4IIjǞoQ~@_C G*Ŀi#j/t!ob_Gⅺe0dݒJւ/Hs!ȱ%K}e嬭orǠXrv}/M̴ņ:g5YBLMx@(k?A!Ty!52~Z2S WjCHHe74E7_VZ# g\߳L>C\=pN0kWJi@?[`&@z[vMCV;űBd$*w:k,ZKN zƚ .Xqg2^ 7i_u\61 NEBMS'/'hcRy@}NPM|[!߄bQ^P[[g˰<4-J[s萍A5hIwSnRXF~~ *W|>jbbcPzNEog!N1J(:=ۀovˢڗ Q(U̐if_iu+rc-Ms՚8t&爃#h~M [(Y Lqs13I>1>=ᇯ\R8eRt3}O{L` ڊ@@5}Q;V2>ͪYf~דF ~2)<Չ{>$)" hEsƸ&<Љ5@@_ {-82r%_XpJd)K+ոZPq@$i0q墁+ܫ/ Ғ=`Bh;ŇQƱ;{=Hw Mc"y {ȦiRg"HrZ"TʽDA5Z7YU6,zrKg:DlX6h>#UUd8fC9_:pAk[G3 W >FI1xNT GqH5zZge';G`KE)9N{Sn 8h+lEP~?C/#c;ͧS21NkK\`(.Z8"of/Ô[yb3m!.~bfDz4mq^kh3P[ٲܞ׵ՔnM\y^O)N nk!0~3]%m}2Y7JG@R0Tg=lT5s*h9 ?>ɕHH uƩӛvxc͛p ja=Z YqPXw;|\zKqbv'|iWhaAPth%Ls=ɓ&*6#VȴwJtnw{wk|%vlL8/%mĹ{`MFѮ Byj[C֌2ʼͱM3Y5NmjQcl+9zsS?=LD$iج|n*,"\oˍLw{'; TY」L2eIMB5dIg_ZXzVPZ_k&[js/!By Km\-5r5&8ݨsKgd&%j>q^i0HUt7U=#״>߾/IfZx{9&.@~~T"YjFsVŞX _@6R6jeM6 70FE;3e'#Nn]0rN2_n\C)SbE+X D{!ͷ 'ߪ;5=A$(w0:>e S q#o`{>䐰l:RTsLUʩ:ڊM4oO"L@ʬtAȩ0Sx"8[~TQYC∷ە^}OQ.E q~c9"nlH'9Z]qUYӫ4mRdī=Nn#QKJ6R`+ k)Bxvl_ٙy<0-U) Y.3DURMׯly~ Kz"Ɓ0aIJ{u$_E3zШ -(dyvKG(mTcNu哽4_Xν,;K^Z{9U6^*ׯvn 30 m mj~ l׺g;:N|nQB "]'S\ T56%&n)- ~@f%5 Jعo*uaQ8@!>c pL޺}keY 0Qtâ˽!)Y3 O_ɶA! PoO"G/q02pP1*;%!n4KO(udݸ_y61KrD렚Py\lmxĕ0{bs?Vz(__<ż}/p53DgH-ÖN~ɵosLd< 4z\'PSh1m;`y 42$X>G%N#>Ǝ[s7, kx'9\}q "ѰDX8Y&u:+R56m B17LL }-Q&&e3@w רɡ_2wxj*ZcJ; GZg `Gx̟RiP-XAg#(=M*[3*Hė/7GN{tCW☮msQbpdm?L] *XO*LYb Ϋ uc3Ն<1Q;W qO!{ޣ5%/茞 PY5'1ڐӭXb! ۣ7Nr!O/f1BHx6.=7ks?)vw^- XIx밍B%{kopԎsSX04fIqڹVQrރ=ıO|3#,XZrp_" tS/vy=%\궓LꋞJ!~֦^ؐUUu4l}=Ku@@'9}So;j"/ظ+*֮T!R7g˚ϝnId/*zS`Nx4,1~R K>ݖp1v3-h-Ў|n7)(۰hIg<JtӃ. .T?[*5뢡O>KyퟕzAac}uw#Dzeg T]ms3z F5~\yg{D[u*Qٴ5Vx:HL͖>@N?V{?|`6 HujX,;jPt+Am/5]89ka<{E,sHxJVqvYdJ! ] ee"&kAqx,**.]{ײ-eQ-g&΋/@$D_7n>LqS EЧBK&z΃'GrB=A򈣗D ܮsrfErS`K} we1_\x͜Y)2 mtTjz7U[CGS>#$-N0cܕ[L1.z|E%UV,/cJY_V_qu_qJ+d&gF`R5sZMoi1_vaʓEVjubI[gN!F}@6cLta(X)ݟ&j?}W lo!jC;Rąy#ˈ#أN>Pv 8m v]kyr|VA)c@@:m5}L374 (to^ Ue R KqR2\O~r 3cu6!NQz^1ހB>؈CYԡ.caW}OPLers MEz{VX3Jd#U^Xf`zZAbUd_Ļ (`$5kVk_Ur 02ܗxC}X̅˜1=ݒ oєJzوj6I-bΎypgh2{qyIr[* sQHȂm/ ($ (}X♡XYVtv`f=.#/7LZչ ݌BQ7C}1*4O%RS h5E(+F(I#H+K}6T'&D @]CaxF%Jvhda*d V0 z#*T|#Z $B]yaQf|uL/9$? fRḷ 蹜>=gX~J#d5]e;&~m>epƜ~'ݛCw!unY4fWr@ s<=fs /sbo ?HAUCӔgi!чF\qeNlLk~ {]>NDTmSB=O (ҀVvdD2~u/VBQD|IHȤpmIowu/ }MM8}/uNOM8Oz!SY*iJA⃛el+lQ(rBex7^ T'NT\q]l!I=on zg :=\/JAed+c7N lmOr>bHShb륵}(Uh 0uJi?ƤFB"&md2Oy!:v ;3|iaf@oz*i<^chڊ Vq.&$EdM0{] -Y]Mؽ||qXd BMzYů[8} $"ȦEDɒ~m=bvi8}p8vwOY'xخD?8(KBE-t4\A= Z-bf56 =Y -8e-<^0jw 26!.GNmL'$@`wjY]Xš֠Kmn4DHkoB Dnl+@o m8KhQ4K$IYjuhG҅夿1XY }F9bB.q>o1smCHhP\aFfڝAvZ;*@Ӫ [yq M'֮wO|wd;ݶth>/ 7o7;D8q5lbGR4o-T"hM"M5l.Oa0BHĦVN̬Ć 48z{.YyUbiqА.]E˞Qgm\x ʼK ؆9FgKl?=kj+E$ FX֧dܬh:RyZ3=w,E8k~tE'5>y̙HV"ٚKZla,ӕ%'fO@?z}ɴN&q*S[tcx T`,Ot950GTlv)/kLZ}Qʔ)sOR6F]彭,ڴ@#5BeH TiJwjzd;kgˈpv9 c|Ӗ?:\2* ,&%Ƥ$?Ccaܻd]ae)l[iOm"8khu[q~k/*6|/&Hڮ )! t9ᖊI:Ž[[0zΦzͿ!1έl7e"r2:'ŰU]=1+nE m<<ҦGvEbeF g1]Vo/n|P=O+hr#(΄b ͲdL]Uq}%oGze\g4 Xo$J[d,9n ]̖hT/N}#|ǜ^ta1 m0v@YJOpF(JY5k?e9s@ /[ONIhɈ9Zz*xq)6= \Ova=/Pp9 C9 HL2)5fi4ONn[tULr8GR+ A|Cɕ,9 d9,A~C`\Px Q4Ls&L/ 9ci-`nvevۉ<G. 4\elb, rXeņo"ƭP-,6֒l9O[f+ ѼK"{y6 RԘ dY _Nyt)ko !qH[HMbL&7}_VWR<5>بdm~0k#B0j~_B/(t>q/p+VhS$7|έ7n?sK=^lVCIuӞ(LD|9I2aQR6L٢5[UJ7J꒝$5K@a){Q܌Z 4Kv#^z6&NA_HԚ%9 ާȸ J(ˌMgUoK!^bɁЬ ;.F; &BLס3;wPv֮‰6X>1*`羦 mogjމhb">bZMVE# -0ZWB ^AV3naҲ8'5DLhjFtAd/j@(;[&z(gm, ^,Zfs<̇f'ze!oV/kK^c&Z^jkCНwDzhm8u s 7'`Y ,ORj "1p%piUSx""{&O:1id@>5gc8#hb< ;Wh2&j{? ؓ~/q%KhOFtfxDOyJEw 6F^|n[l)SꐳNj%07=>+K=`v"d1Q{P&jW"n&V(=#asQ6 0kem'۵Ӓb_fˊ# 摒X altOa# ?م$mvzթ'(e<^TaU-g r(}D#4mxkNpBꞳn{>tGT~[p+&]O&9]Ʊsb-?l7OndCjqW橛UӚ|DC';`Ne.} O:k64k ;gzv% ּ,ϘwENgѥBFeH`;_k׹T' eP%v[I='W{|YEfI64Be0F \vW6z:5$dsFu!۹jDU׼4O?}0 * 3HW:ĸ_ze xlZ[2El;&R}q+&R VH&>&=R*NЉ@W4ߡĉmY#%%#R $1f$`a bMZZ"ý.X 6ww(GN*Ok cDHק'%Ip3zpoُ%{N$$:S.&&Oxc{Jh&;1 _)܈MJNPT'tt{#!M7ߕu.ra&Jdz c#قDC%wY:HqH  ޟz4DzRFi6ux'M5^jL`Ztn_'077WJ!m :#eua%fO8wa4؈~DuB綏q`^^GbC9ÜCcxU.f%A8,̰e&"T׀n-m~pNzk4H,5>[I(B.Ԩs(9u|x׼͖5k{.'X3 tO w@eN۽!t}qu{WJ`=ۭ6޽kYk *6.vߏH,6Z c`Q~2qL{A5̓C_(Q 2JƊkV74PJOq49I~r2f>%W/X*=XґU\l{Bd}]$Y8ҟJU]25;m, MCD ~Zp`yE~xG2HjOm^yu薔ɞOAPېcsTF^xi(`VFn1ob(yn؉\l?[mK6vƱ6 \xN!{CRMų'f8 b*S`bک~DDV wK'fd*)JߝgLԳh[PueoQf0B{0Y(p0#„w΅V6T/pprl lUEx3V/ l7l9e&CSs/>t7eg x`D3sC%yDhžҧXÝ>oQ̸ њ(]SjqBkBZN-ѕ%bajUP};~Dm#06L=|g.,gg!]H.- tBǏulz"(T yW&r _7z.5f S3~qy9VB7љo!5mr|g /*ɕR̈́gU{T_OS J۔HǁXF%t{ڭirEI ԸbNۄzREOzCsvh&VjFt+<37T6uKSIQpk7-Q D{mJzJ)c--Ѫ& *8y q' dž亥 faVt$*JW@DУRpe(<A_XRœЯ2r ^CTxO)V9p~ >a.X.0u?X4{4hݩ' d ;P67a)vꡀ=@[Glnr')ԭ~b߾"]u>9Abd;LnPSU%B]\o,oɉJ#@o W ñLgZw$ϼcLi\\GYNǃp(4-VviS䰕G(>ط_b\u m6d㝿4s:6Фy\4Q0 \EΜK/26B^P3uᰁl,̀tcw{F&Y|jj,!>KMTd0z}hh4_ַ@jL#T#g B9~A7tNT,pd}`D=oJiV~u9ջ%ٰK4j*ݫS0 £jvsJmqL JclPPơ57Jq,eU >ы[:(\|q7Q65ȦLKie,-ݵ &oŃl\^C>=&O_3Jv^!z\FjTno!~hTp^0%x.6ݔ"}Q4 y7n\N,}`4*^&)2iO󲊏M `,VESmvګ *^ yG/J# 2\((2xHG^{d5dat4Fsloѯū^@誦PWֽZ 2DdLJhĥhyY‘?r]_"K[Ŷ4.xVyslL2=KB3NAi%i;/Z&1Le *-5 I!2&^`Aan-A hla`\ܬPkc}8{[R7_hABk/Z tLWXxN_N^[XftD0i9I?+=.o|mO֘s&ׯutaHm#*җ$}ўIl4p]=+?ϐQ=81ț QWKQVIJ8{j53Aȃh8N>5TSm2dnB[gp<\j?nO9`4;^ȝƅ 4MR {a2@%ΛɁ^31BueWTOMYR:)u_LQn\ٻ S^;\%x+W38LqI@%#ɝ>٦GH(ܕD,iӶ[Y:oWEVOEi}B RJv]s@ؔ;b[IO9xHo5PBґBWQ_*Of-wiM"p>n!P p`l3Do! nСV`Qm_I)0_VMV- e-[\Ip_Bƻdbױ6n^ǫ~ 4T[8SmO~{&fdTb g۞$]8ZH!Bc]X_k=wrw7\p} I$+D ˇJ *0pεj\5*ճY*߸f4$}`GIk`:1^'.i.o֒Fkh10PV9M A/<檘ahLf<_dG-N68m :/"LMdf,wb9rY>¤]BMx jMMK,,[K/ۂ=,.5<'nՀ@EKTWF!tow$ea ,ŲVRUBE2moGI b䍛!8L m9þҬ|z1Z6Zk\w2,dl!U0>\ҡ3_G j klQhp`D Ga,'Wz$uUf}Vֈ͓@a A3$߯ uFuRs #x+2Q]c Wu9jD`>@.H]n}0Fw71-=/L#';;A o'[(au@e2W5Śc}bov9,;Bq7TWUjI0dJ,|LciÅf^3z42QHkṮ LxMgBwljj;[2E\T RIq)ks A?&$;:1ϰRA*P8+j߳Hd>g5yN~퀊RPm}wYєO٦iko3%!BF 2;>"'VH0CQH3Giyg0+/4YN í5lUQ@VANs,k+TxC}ߋ򗺬hTM5]ς({ƥ9C=,e*,`V^6 H-ʗ\rmE‚ EyկI8<͢àQ& ux?3-ѿXk}7lA500οw#?–'a>qZ+kUڝĽ &@+9>_v"O3=gy*咇F)i$5Wm%]R,uY *-Ͷ4َ'!0Iɼ3"[ԴhUxg3 ;BJ8~J4-sg]S7O|u/ͯi#TL-(-0k#&KD\˺Ŭ<m-ׯߖvhn).. ig>@nv5ƃܭ(]$e&ku\P*gBVrf~vj^)^x5~0SGA0M2`/Ӿܹ ßoL|_q A MBn[c ;`Ɲ釯+Dʪ+[qr(Ǯ,QJVTs=uҀ:C-}r5ک^+f+pїO|ML(OР78!r숈q3F%}bR"81/BhʕD[S5bel"BVG`i F-ge2+.-(N'lH% g6A <ˁFʝ)ض/Y3khQ{>fRZ/H&?˯ل0UH]^$I)wZJ\Os'ܖڗ`J|~@knR<5"gMԼNܤ!bϰfvzB+!*HG9QΨ( :/{ڊkxJٺUضI1$% |!UTgu3 D^X1 ,DV͖\A.VjYUquદ+HE˲Վ4KB1Ko<1g^VE%|5 uŐ!FSGC72;,z, Ǻ  uM?4UO6ŀ~@3ߔ {/ܤ&g!@^lMΖpK}!ȇj  8˃l7%pۉoFBMd+{D_g;6/>,4 W/]?;ڤ ãk+?QE{p cctZs^yHމk1@RmVu<\hqKjCp]V޺͗ V~]k&w-8f"k YE6w:xO\\~ɢb'kxɸ~-^bi$N?Ot ] nu'0p,j;9˛TC\@IAK].h'!OcOe:cT>j,*e_6*wMp?ԫ|Ba3m#N*+ίVcK$m>B# 2@ `A_s'#7 ;9*hiw^|fuk|[\+ }~l&/r ;^K%*fEs2Di\T"ƈ!FrJ^,3h P:;ؔ?Hoh-le 8^.ak֋,T.C\^1>6R /q:8qjm f*9j-B |[? 1vpnmQohC JmpqLD%)l@1 < :$]~e ֪lhuFX 5HDjsz% C-Bt ZSRLV(kfdK'u4tY̽*@}&wFo"\=$4hN%т|(Oj7'Fl Ot\Ϛ}h5@Jfla:7Iq4:$+_d.@^&!&<̳@WXG $$slܪqC)IZF'sdԯGZW=GP-6xlUJ k5>i/-<ӏkʓ cbScQAg,M>(WV|<+wpt ZlUjS)-@2>6(.32i&<{mbGns94;7cO|{Z t[O#t+Owϗrfy m=_f@8ja,38(_oG4͍ 9"8hCVQ6Z!%A9 B;EEXwzu>=trO XbSt)r[kSE0; Ψτ|%jn?mZ97<#p)y\Y{ht;?H3UE @p?9-Bvit͠YW )`RqGHԚSK304> j7G( '0}S{bp tlW5%sq;M+6|/=z-ǨzdgǜH.f1%8lPW pѕEo-"8_^s^D+U3 3F]~4a+V{?J TT jM=V;=\Ӿ,:q|M/,c3=A 0Ok\(/2ji=y/\ _a2:} kѢ',LjJ-L=T"XrFUZ痄6q>Zx} wgfs\C\Yi$'^>V`Ĩc<6V\u6w.P&*\Ckhha,o? T4'*Є lHe_4FݿΟAz!{x HLM)Q=~I?~cb}cu rlw\adw={Nrj~WU^&Q.7a^H HMu(h`OB*j6٭yoSlуLh6{D*79/ m>EJF%_Rh9P˸AU{42pȆw?q״|JgCN({d9+84DYw&&'gb~6aHo]߲th!y0^ɆVblM8͓SN t/tBʇޟUL Cw3\k"ddd\+ua;HnB&s7a,ߥJ1|=M+#%WE95IJN>XHAN):y\=ͅڕX61ë6g% py]ֽ~!b˟T\ 9GNjcH.wC4{/d8igӯJͭ5Tہ-:T:Ie1rrs`=~yȬt)o)vƏ( f3.շxk534ɉ0 v ]Ph[^d":r†EZs,{2)J'7+esԁBjoZLL!.Amu/wTrohk]h tB4 `Kl@e҆iGM|,`޾lń;[NGZx )բ^-(JvCu[O ;MN3S Bfd-'I@/BtXZh ɰt<ކv4lL/2t^&++=boິzFJ'q55av-sNPDGAҧ#x&;aJHңqzK kNtSp?gJ򥜍뙫|ZԱrmyJX➛r(uz4ҿMq{;n1StA3z~){4nlq6+-Eec=,+; $oIh(RF+yZg ,HD Z_W.6J,4$ª^):PP j"B!F7+LeXD6=hK튇yۓwb() ni@$> tVa\U%\hlTб!_C=*p"K"{"E{{bHE؍I~a)z8\vAʪ!Q~ ! /V̔5YeOm h]lŰ8PIG|h= D$^dո,ᖾ啳A̗Jt+?ĒQ;u`jxE;9tUxun,!g.o1m Xoi~=DQ] R+uc v_". h|Onxˣ Ʀ.GiXy@PD_ ^C3h| ٦&/YƐK ><ɓT65Pbj*g-"PP?o>c?3њq`x7!A•`@nV*G; cfe寬{`Z^v 06ni]m,jwzAV³'–ͽ8QKשn'}4*? ;ŭAǝg|A,!>̟=yԧ;ubqڎB^/L 8!B0jza)7lsCB((WG!  7(b[Z:(asX@cɶ>I$0GFT~Dx ?n+t~TLWlkwT  6v^F1ۙz.՗leՐQb^* unstTg BBx#[#)qHOBU{ ^dXyg"754b4wQYo[Pt\X8C\ d%M߲aָo@8m=jQ=GJ;8˶DP3X ¾f&:JO/"w)@(g=ku^K%\Ow/V ?)N&)NkL<| 5T\\5I tjoUOC6gҘD'uA(0;$TUܼCK]~(=jS>Fcp=Rmup?d'#l>.FI*/=!w^AHID'W:"mYx7O|?HZ>t >X-} kREVݰ]. 8 <;ZkQr}eu%Z`J3(3}!_нr5M#}TZ6g HGD޿kǪ4~J nQW0rC/ku ͂䈶Dn(J5#>e`$m+JGKê+|RW'VD9U IˡA(Eُ|ϥa2aAKcɮz9S.ٻ4fգ}jq) e Z Kڡ18\O"mu ULWyQaqIwHdC qpMVO'M}烇i '۠p]ZJxd7Q+Zx< s)S FD}uЌI1ȩwI.OI$%rnј4#FaO/~U)יaYߓѐ+g0ev(!7 2> U_V H̊^"" :lב%*0=ulT"dDz4]Y*' dLJYC2 ї~% gy(Snls\:zhl)]~;n/i&YC%isֽXlNjvḧXzGR,אfP?l$_|皶?%%>"/Tx7ruwp-FD˩x_Y@ +1w-47ux5~d-.Y@i%|Th20o_!CBả">lʄ+ yM|JgP61-~,1cYkH vE:1I9Ղ:/k&YlﷻINpaaY)gI 'g(rw€ Fgar N>MȓTiωz (%l'판F +#Ɂ,6:ȖMa5ըiAs/Rw싥Awée( A?nd\0 PJC ͏9B;a[c";[->/bJ%}j< " ͫ` &ޑԳˆwS՚sL"$_ 6(cm sQ6'֎U_oO9 r6HmîwWdҒ?뷅&iMh?%@Ч!mjPZH*cs%QRQ$WcΏ B lbO. vtMs:$2~:hX@B-p[}áIQ7Pf>J"X7^|2[D mʼnqDۆ]4יÍee㧋/_U63*g֚Jf=l8+n33m.yp_γk:6Qa-w>SC0^2TK/qfB719qt/x93G-XZL"z|\W v$[G hwt eM,z8MЂuU9g .8 U{r bPU.pGk7v7 ۙ=/F2̆YzzsNF*' .SM_c#e!"WIP؍tK٧8jU./0T.yX3x,c1!nMFp8 _p~t lݬ0n To I>aVŽx{vJq:%Hז( d<:sPͨ*4u[%1=e0=5*dZ AʀRyQRh .GL+Tlq(s0jAJT AYS߶!HCqRnf"+JYhx)02w146 .T{xZcGGpG\+Yj5BIġ3N*Xh$1+aK"K2ԙ)3C !½b&&G_\.4&PkiVsA(9<޾D r]=4Hpniyj&HaDF|P}pd60'w*_N=L_W#ɤt{Qۛ>2 O_BRHNJb咻C> J.UշI14@Z kpڨ0صN [8V8lBT+=MDZLky05АL՝Cw҅tF\D:nqu1,+X#sp`DS\["pE>e$͘nހ魌AQ:'L1t@%߂u}VL2]=ܞ|V ׽t6nIS}#2* gqc9Ѡ^F+xr ,= !B;):-Vϐ’Oɤ4Q|-$C2y`HbRuT|@0lbhx;37;czMYZ;XbjqDtkzI~ocT^m@rV0Ꭽ\p8PFe,~Śkp|#ʼ>\tX¶RȜs o2|p) 0dy'p&Z*Lm< X$uѕI۰]:@ɽ1$f(D2i';9e/~|j\ykX|[``?1'<<3 !́5eap~ iӴ9[Dƴ"acoZMUtu$_ʳ(2@`zS(+J$>zSQ1Mi: BP[Ux}3:nmb{F(^9} U}%~ uXiW+P2yz:ǫUu1p )&:lW}fH.1uj4f<8y8&Ѩ5:E@:$׬ϵiм1'ݔ8 Z(amԧywA Y⸅{}kjK/ l+w[ W׬譽ϼ0l$6buvF:'UC[^D.,xQ4Z9\ݨ##Lۉ$a&̤Ah:Y[?wO0 ,% 0\Ged(A>e7pM4i Nvrřeac}'1ޚµL Z[T辔z9XX_3U02.hE_GW[>^=Wq5f 8 ;?1+YIokEXF:kvWd4\""IJvR!J+`T"0!YF;9kR7O%ߣmNi_QOLGH;Oi`YQ9Ra||2:ABlr)0~A,rS/`M#.9)[z@ljX|ljdu v싀@H'۾$L$ƈ,(0ti1o9ɥ죒PȫV|3`{ë;:-vt!\`Xz)-YGf޵j.lnTPaAxwIIPHV兠1ϖQ ̸l+g&R+Gᠱ4NPѪk#Rʈr|@꣙,Ae0KuҩEY%G'%Ht'QgIj:Pno`E܀9UU9Ýy Q~/TqO3?1_-Q xa_'k_ΡfXN5Nk5wwC]1#=Gy;ı "n~siMWq3ƷI2: q6@«%h # Af L~UCm9:h²rptH",#iSS3H&57?XP-uTq7T(S&.r=~s9)d"][TzDH~iǬ@cE @# R Fgn wn`&Q?Nk?1 ׫Q넽L ]31FK KhY&poCEe I-iA9zJ?}#CB{u>aKv:#!z0ڲn7ej5! @GBC{R  Pf{?neJ(*i O޷rxEA9[AG(ucd'oZSmOĘĜ;U9g۫/xޡ['S*mZ۱ȋJА# < d}f 7:+k%3 }8: +\b %SW I;'n[nHd)B-G^a(|I{@4>w_PnS>%1zMܷ4ȧ ډwG!z*Gt!`Q*# tl冃qL.)յ,weJGYS,y=+ɿ{j/*\+܆w8;t qLC}{T\?:)u+d^;]՞?@nF/q3J[zTMj'HR\F_h,/ئ(Ŧ}8-G HģL6O=OvƬI/NJ-:cђd><6EQ.+„~J%G2]!;wZZw񑿑Ou&P=n_WaEl~}Lj0N.썆 $ͮ.R]sĢzDbwK^%~˜5NeC #C`ݫ{ZM%b+$:uy<+ KKbC^|v`KmOaef'P!lY};ĕkA|7g1GeR v9|]ika@ z%[O<:z93^nWid7EK -IFm0[kD߸8x*|cB[xB Stubbl3D%qad,aY'[6#UaH#|8^ݹЎcq-8vdЦoǾ4C>R=|ӭܕvVB,L!G&c것/[ҟBT0 (Kݕy&%^fcAP1f, "i5* ݮxY&2ݝ3HTΖb@R$f :UC˥#` :FD9#, v^JزHy7_oYp`xo-U۠W(=$)Ձj6?yYY}Ɩ"c%qx}`wU`q371{s"" W?3Q1@oj 'CFc|0Dx>96_XnVnl*g+'L]N9p M՜ p ,u{Y=ڵ}0Y3 _ȑ"[ Z& {,4M4Cs~Ss!]=lD>=2e5>|Z) t]s6A]L,n5h+%D#% ߰- s֮u(˅ޗ?_ݕjRYa |Gx8L+=BU˥߼ŔÏA4)6QTXpa! S`#tjQzl[,1)ydwy֊Jɾr$掉[77QHy~#EThznY(4V|1{K+eFla%p 6kC`\kl2KSE0gc ,fָ)s']KGOi`_4U]C2i %B~s=vob9@ND׹Sb}}edB&-p6jq#n˂6U ]h6mgJ}twC4Οޟ1vLEv\A&N^vާL8xlo gpΈψg`ل>婿Ym[-:6&cC][ Pvv<٠.Ǚk4"p`]Drm{t>W> "NǢպs4A'Y}u "Dv Gˀr%9_Έ:`T>Ir,Dru=5l`)dm@$1@Ƣ?q#8':R=FAx[‡mx,xaNHA bLpT{ث| Uӎ8*dϬ,9h'D;/w!/2bw6hxe,mHBUH0-VeK#?հyv;iJ\$z53V>Rm ^-'#%@;gĨvĕxl{yJb\[7$POOz.x8ŝֻ+vؽ,2TIL, ,sJbG<|ϴE')`.=-e92qLAbehMcyCNqKZEBj?<{tπ(*+ "q~x]jzH+EդgiR&Y43aF4'/g؃ݙx'Fȭ%jb}C۳8鳒פ}c /q8gb;sq62K۝h`f'y:"ƫ{ 4RP:fÐ (:{#DXQ2 Q4IUyƹ%8AGڨេheDltqP&P[a½-LOts0e#IjM[n-'6>_DFPC~(`"l/>َ͊ pǶvHF쎈?훭a-u5͈lPBw akXH0g]H4帷ÈBR$ u+ɵ̕ԉ@j&9s茮y2D0t[?BXOvم9͋_0f[ö |BG vu\q XML۾q m$HA+ WMg4gOA߫g="~Q+=V4.x VJ;O1km knլ"a#*cd[@(h14_b_wMHAfSm5 hRf\WHBu >F X-fH,hR5&@2De%@0VP<;rvFȒ`6d'W H Q7X} PS r^EbprXRP muF7 YĻ9뵊>}± g ^[4b=q>/=z-Pd?Dtxj5g|B]7as,9LTmYs":$[Oev-]kOۡfo JBcPno 0!x̐Uf$Esr4ZA;UQR?ЉgOTu?TԘA[{0?Պٕ v2e}=gfO X0Z@>e g#LB:k;'Q򂁟 Æ0٪%_sVpХً7]ů._P+[/V]fسLnEa4cU>KXIɶ*AEXh9!@^:dGDzjo9LS50u넛 tˡ r s(yvG>[#Kf6м<*K\g=MIce70͢S~zNґ[ 6I3&kPl>C1csQ3Tg-q~Kڸޘ!a+A.sV5nڲ)5Sis좜 e;A}t뇽BӬ|h0cNUd}X[͎&Yz,@j ll1v*g ļr_3]W4>O.B7:r(sbAb1lz@$AƉ38Ƴx3{psIMֲ@4Wʈj2[,0ȰXYi;VʥĒ;yO{2-$]/|ЉankI`=kK]a(ˆJy/ $JAImtl6?9[3uᒋ -ҁ̞D (o~bxU+AmT5yHgiTX>;W`P~I_GoRF]|dŴ|2x3g@s\5RV_dj [G%Dq1zn5nj˿4vQ>w!WӬ*eID[H{%m&cl!"n|1r,;䚘/S5D~)#)|V'JEk!x_jy/9ο:q=}EuKC⺐@$)l!d4g)f> l( UK3F›S;Rˀٝ Zs掍ҁ#V~+<6&yS [ԋBԂ>h6 Uj@pQ\*+q}Q`Ŋig8&KLq5h: '֛j;鼳dd<.bg'L4GҞpʽ?(a7N)'w#JNW50 >>0ʇ\)l *6n&/n_S<:>ajzڌ5FlƾFبz'.Єau Ttt&R?cmRfAjRQCkV2yy@,+`\)U{Ҝ{{0ßGW>52q,/T38f2Wij](zjuG +k󥪱&S2Hzv˨n>gDTO$?ċ+|QҜO{}/N=dwaý c>m=9P6ZHG>*vd\O# #c'L? D Dcve͌3/oҁVboAs{ΐ⁥҉|^aAƱBtPu ҃8׍ /'ID!gGOpI3jS _8U䗪aDKiΓ+[`Bx/#˶%q-O)0Qb/ù4KAOQy%'r>-E4ø6ao. f8HE˙ȁ΃e1tb/3hW48!'D>鞞耙!:N6w;Jf*.Sȱ8 8gQS%t~ܯPɢ8+c2qWq*zn@llGˠTwz4e(1Q :˛:_[uLL֣=Edž, Qe%rq*(9lm+G^;y]N'j#oLO͊.>ȅ>9(7V^p+VU;e @2]`'fy,DG$ fWp_ŀls0;)ĸ6Z ^TEj][;~7hk1 f $ ӦJ9煌*uC-jf ~`p2I %Tdy5Oʹ\RN^:GTEw('Bb9dӟ_LJW:Q'Vcul1B@~VI x`9D_([5z09ԌR߲ٯ >{#:]/7YWp@13r6ZCP93)a[VR'u=Pq(skڱK(dG6 e^M-4 d}@ @8`6"SAzmkK?KXֵN̏}\5YDu8J @RYqB!':[c#ܬs-[?g^p4XTtTWHJi%Ȍ-yg+yH8 e4Ɇ&fk׾\#]S41M+0gWzdX;*gU`&W\/l'"1G5=-Z9iiWqZ8QAݡ;=KS'o)XlEm2|׷\V{mS/cyG%'zgyALO uGqoGΦ0Ptk (Vav .]x03Mp~\})qV+!qᬝ5ZE_D)A'5s4X z̢qi0qWL#X&/r6QۚԴsdWE.OYd!He5y?Oڿ]CD\Yo{KCԿtQ >%+*0歍k1&zEv5aDYZWIĄp 2Mx9er> `?^L!7G-"Aa3U M؁dHBHE 5K' J;hNi ˨BS`wJGz[t fIq&ϒx*aFmBf8,.Cx$9PZ6y1e|&M(R;e!-6(mVEIbÓ/)ҾKjs^(dOJ%yjړcuviU#DHL_jw;_fȊI$"KH9oksE=kAp֊,X\ ?嵫W iwL31< d{ĐqMB1Vi1 U^^c 86]܇g;-[AZϞaSڠvGU)Q Z|,c;_>駐I=E{mRVd {^o﫼kg_E8sUZ2u4^{g*Qat_jCg;R:vC})j5BȽ21@&i) =7)HfB~Fݔv S) о E& )XU*U7ռ&xx,,U!MlV%L<Ǵxr 1f0,B܋9Q1'Iy57W  몯__W?oWOY rl'w/½ [^YXxH8菄I1Y{ko/LYIxE=J~*Yi> D:2#m}ײ [y-TB$dZ2TV==->7n&H{n9I4w'.>e^ ;<77ɈWP]iWS38Y~.àe4蔤x)zs?XS_4,(k]ʂ{Ftj;1=@:Ĩ[&ܽ[5D]kz,84NBYÜtʙt$& —"ITu e[<0v-2;;jtXd-Vmr^HFKDr֥d7A"Rn0F \ .Cͷ5ZDN5,k{`PgߌH#"j_:dH1Gϻ_ؒ6[/.7Ku)*Y*%9Kȹvb"_̘|GxH+^,Z@Tq :ZLmԵ0_,tq6{Uzb7k,IUEv Sd(ˢCt@a`9XVQSCrпhވ-j'f+4&}Lu-_rs~b{F8#E݉L^~?PQ - 2€/;`gb{QrF.#3X/yDEW b# ްAxj-%=(x cdz /CW18T" p" ˞j#y A0q29}];0iF}%,t,Lx~?M v M48 "FtuRګC@b}&Sdzѩ K6`SXbkByoky#݋zEZ](, 4:<9jPpZ&-j̟8wɔTDn$VD4k,J _ JEp n}Zhfksa}.w:غ3. KjW^Xe==k߿=$|:4EL̍>5j (6fˁ%"61RCF2~hۆ19JEH<5ٻ=&)uL\/ޯOC^0挴3=59Ƀ@mannϹ@Ar@? 2JXO@Aj$OΧiIU\1iѰ ;Mv8Ğ ¶T|Qҍ([4cOHʐsq,_lXS7bt'ʯK~^bDx1>`8‹5s ӿWBXDqR|MHJ|8Q.V+=FI~}E{ u0=@"'k=/CR*]Gu$Zk. GDRxP)(@öcqry鱢 ~^ "i=ˋG{}',ر| O5aG"xHJ.h#qog$^td'RUV (r$Uw3+耧KHuMɯRHӾ2q&c&tS-Muk %)?g!ke7gCKY ^dz>X[K";ϛj|!^5(hu wOrϷ D %اip *F&eI?7Owd,TH-uFl~  WD9FZ"Mpbixksݤ6$A  PeoaV }&f6X&x>\p^L+ `$y0 eP)y319b`TVcѦ2ŗUfί_-'bLr +ERM`mHr1AdKMȹ1!Gn֧}?<$?kR4C?MA_%zqfFP'$|/R]Xнq'וTIϸVy0믊\}⧷sl-΁E@)ιblT q96x:_* mǤVȀӘQT G;tgQ:r ˰Fix&i{OU޴ݘ5%Sx*([,/v$lTk*(Z|t~Rև{ #+8=ռ?W3=shU]ȉk9E#%>~2OEEMU.SIgfKQݼ,TK!y y4S8rR铀$*vϩQMFPkq cGcT%c̤S2qJjF wF׊VƖ,!77W6UxǺ!W Q;" bTm6I֌fDk`à?m?`1__ vap z.rb}HJ<=Do a5 4p s=d:"{g܉ NӓYgںߺ)IN)_^[7Xc?Ļ&mZa,퇞x9t)OH-~'nt-hh^0MRc‚"a"NSw5,`b%# QkӃIqbse+^7 ƹїpd2t RFS&[YMWx'9moe 8B -Ƒ.#> h̊jb%*In2l} FJ&RZDi*EN̄|d$|M9*^;7V$F e[SȪik@@^1Mk $ԝ4Mi[#IqYm5)\t ZO8eY=G ͖:'۱Lf7Υ=vFp#a[Shƥ$磘NHMdr]i.kۿ Ћ; XQBsO5;iE:e4W$ :tOi :\@D'g x@ 1MH6]D,ťS|9 8`iv'ٖA)cVqȄ i>Wh8Sձ.J sC!kwO1bxn:Sk-㡂Av]*9Fh1>0BDXa s *$HСĄΫ˺[fz^C Jcbc|tTX&P 窗*TE v$&ŵgx<}wTwܐV%RaV&np' s<#`Fg1GLI8ƀl/"N3bGC% /^  NN3v*&/ɞǤؽHX6W-M=3@Wv:n17[5̦eEi.hfrVq߲z[2NE JCGմ[QO e\R 产EH{` .|*T7reSQ2iT2X75X251}9jތzJ!h F8r槎1EuCg ݙ0rĶl{g1PjC<+0 >W:5vd{>ittEĸJY)g mֈp5\ /' +OW;=:%崍5-%̵Elw -/5OC`-*7쿒`)- _] O@iuVR#o侨N0ˀL~BԊ:X[ṭ  9y\FMw0%+ft>iΩ UQ#xmB ckZ.3-{3\ k_eԚ,Y Ρ õ-K|Zr%ǁŁ>«D1?Asi%X}m7CGW)}!ӂi}ʯp*$XzR[ ؋OCi;FXēr:Q$k/̈GG牫ML1Hb<z@ѐ e#VOtxIL=O2ٙGvhԱBÙO28?^4$x3vXuyC{T3jWQq:* N$22h,]./Sʹue10`lH\~zzG^i!0=sIK7 } Rs˳ԄF=\_Ǡ}ǂKڮ5ebe{O6qxumTѸT9鷩U”O ƣ &Mm} nyY=6>iS!,uMo ߛ7Uv?OHho1'BI"ӓa^=;3R$CNegsh"備E#enLN6E ÄVf>8F|uj U˲rlJ$W{>7nQ q$JKfhoqIM;̍t_"!A8¥48Ĥ(+K}ܟsK(KtI;wo{<;Ĭmi +3RH;#PctFjŃ4{n|WGu@x{ѥ0={EJ/4- HW_-WUut YK*6Jt2MCB?Wh;0+2%pѸӄy\x,`jN#E` XEmGYM8yg73"gڼxKc:$Mˀ0C7a!Fo'_iR 4B>c"hHltExV` IT&ǜxc֤ޅ2tcv]AH1m=w1$q+CPo iz)MsugsƴZÈPgxҌB=]<t'йKzpP0X+ņw|o*3eU U_Н6~q0T'?-=U[Ӵpixe44>uA\ƓKp&MVr-L /IW%r5F11'6W! DK3Xe|ԙUe'H?i&Lmn7|-=թz8ȁJܲO3!Tp7CG2$T[m $DlG/ߴȆS'^3a$~cD4n]2xa Pi-xiD qʔ3#0Phunfjf!Mk2ecr_ӱ.pW⬾e$ l<*K}uOb@nI%2ˑ Xy-kй’5E!\m6:ӞÀ_HI$=o\oT bSNڡ>?_%bZ lj1(e!./N7)Qؾܨ~ ["[} JI*)P~_`4߂Z;Ž6u '^[>RWHt='Ɗl2v%2+r]Y&0d}z71m8/Ig{QEח 6}AƷ 3OdΐPG7H3, .ܝxn:XՒomN׸c]ӷUp T(܍'e)(Ѡ2馰q>_Lt=2,T w]?w#<4mXV5swK;#LFq*SrZ8-jSN.7}֓hŔ!"1Ev:(. M7`N[-uW#=j#uWaUyRgu+w&~٪2B cSYD5@|渹OF:|.af͒LKoEFն8oD3hg!a€<MJ@M[R4ܤjKݼ'2F7< ~"y[=H"u^ʞ|6J;Oo4~} IJ^Vbп#UiF1;{BU;^3~08{RU_(QaO~Y$QT؍F :]tPއ@WK&dxbn(zSAKgCH#^)hc%|N6<`rW@c&&;[`-`<ְ6]d,M0'p!mbi"L^`2Yh9N@支o{îjxYM 2g ty"]2C.kY"64Jɯ-}54]#=#Xg˥]0T׭OȒgK 7T 8SoЉ;ѵ͡>=9G=7%hҴ"G lIAcnO}bqnO%q !@to@lb* l!yf: ] Kqrj)}adX7NH;#_*^PGEhh;܇( [M9Co<¡Iϙzsꤗweqh,leo :֭*$CJǤΰ+qطwͩ8q:/PR\x3 O6"mFc%]_|A+\'9钝'(Źv7KݑrՅ€zkW`nIo;rǂо/,d)f1dL^ʎk:FPo7Ƙ8d(T3~YAkk^[8Q6o񃃎\4ǃ{~[2(#js0(`ty0hp#&)l%E(j ŌrH-i `| /0 TZDHt@c!tM`O1h5LqM='nde Q|X\53dWeJ8nt~i9b8L;}%^~例pz*Nz{q^{ L1}`$?ebJ;%8)%s{ y w΀`hGOeiI?z'J@a*&؄=bʞ.d:"ӓH}@bD Zżt{mqum$$+r߇aF_'[cF=pBJZ8:6hEN秧h%`7G7Ak*} #$FH_Kyԋ:eSp߻ NuAOx4|aY|UϑܨǩlQB yޓVH$|9f>z]R'벫 HM *"TiR R7)2;T*jnB"iA, hޘ}T>ᚸCJp8܁@ Z2$v}HiovA-$,nsPHqě'63~#6^ES(AS?T_-O20$g||)#oQ" Fsp"иQ]p[dl2kp5f/|92)Q6ll Y5u:;pbLBu^l WNTאac0uHVҼ_cȗܮidڦ~n/|'[Y,?+WGV͌gWVSm*ӵsW>cOiYkXPmq6vMy669G_tY:%Y'ѽ' Y1W#Ņ\][j|/>Zr5(}bPрfIU8N'CE7'iOm=daYn𙅘PC{~Do?[K2) mߎ/ \cչ٩^:9 |Hxzw+RBi(˩ x;zO՚ R㟻0PGenkӣs[*vN֩m iXSLBE*W Kod oHY* -[+{ت:dE[TQ|NyoŒK(z{ֿౖ>]}-fݞ( Pwb1*KUF:2߫$@20et GX2#CC@vqQݷ)2'|<1Qsp,]$ 1gq ;q!4Q9,'d<}M=c̅z\ ɲ6 $`ECŎۣ{cй^eDK {$`C}Nz8u+1_luP`؃}U"F\CALA ueՀ4Ct׿y<#KB#NkЛѽip>`m3u$NfFyOćGBh&](g|팠?9bC:/h:h^t̘4h%6_ɦj; ThCX2Shae֣Kvav홊(+PkIR)iַP qx)?E]9Lv^hk.E=t HGvr+E2oL˲`9 ?E%2 3Zaq]v?8<^7i$D޻6  Ω#r(;So*n>ܸ@<8.Dfh MIfd@b2V(?e $Ϸ<mLEx5^}7:NyρlZ?qoxbPHm7ݱr`t.#`WXn_tЙ4U'D :v;nXU0Rg8n+Z<%&6b;r\hr{fph;?R8hK-fKM[6 v v'g:cs%eΨ_WBȼw0DW^ QR/!F_XqQ.0k_ {,o**br8V:`f/RΎ$ߒ>r;Vs@LIX F,FA²f 8%e2F>M\^R\/k@?j"_2?ƔbΩ>+Ǔ=nog|ILN0$uEmȓV0Zf @Ng\Nk$$Mvvi9|8fE2"ǽዤ;Htê9Ǜsb5Bu~4Lo ߙ_2_vUݒmGΣ?2wF[&Bo [v Kڨq[jHpp( #N[@*ĵ' Y)rC7cy7!qݜOMnY_)6Ez3Y$56K?4^{Uf' _HG6 [ȩ{v_eҦ?gX/~A{KkRҿoG械jڂ>̦N.cqus] ]xtIFx?c5H4q%+#(k]t J:z!P!O%>O:WRբwe" LTJ%)bmş]㳻n+JC2A`B83֡Y/F=vf_"Q[$ i)E,ƿ@!}J^µ#-lwHaykaelXQ;faX&S/8 {Y\6]R_ėϨ'Mɜ|PyA~۩EP*& /Pƶ1Z*FX ǁVT`iwP_B>"F"ʐQ^R 1t.udS峱~F΋b!mtu r!+,j~}z'X_pKv-!1!N2n*B*oXmN3OIT {tH@d|fd+-l#)<iOEB6GSvvߠJd=m{¬_TlfdZRGg]"a6 b5V7v18֎&D ', 6`v:ȟZQ0LN3WSӁn.(E%Wc"ONsY@UTF$Vrzz]]C%󎯷)^|^XM-e_(d.;7.GNbomK_zBc:RA@| }e*lSƝ~`::\& T[Қ'S=4\hN$Vy+\kYF$GN-zjΘ:zЭKMu-1_sbB9 0xY2J@A|IҡB(`~F-Hx̭Sϝ._;.qK)`U~ܙ(6C(Y/6ƬPpӣr{M!BP)Hug9$ Oyء4)r{ O1+:ϫO)BaHu+OIL1ncf9U')W!l _9 "ה;Ydw>;s({&Q)U'oCW<`&m6!K:Y"T?Q]rʻ;\._9Ѫ3wfy#H?!)!Owۈ ÄQZ}D2_Rg8bk0mnz ԣ'ٷf ]|7D͈Xd:<|\9afegT wUB%; N7>hreeCPTOķӨlBѴ7oK"7CZfBxe(V&4e'ML^z9RݶkA;:߰7oR(HLo_%Ȓ;h^+͘18 :Zb= Ceg`9uWG x!d!k+)=?fst`Us9F/z9#bg}l܇+m?at7ut{pjbKsYm<"t6&",IdCPFF1˹m,5gJQ@n`)Qi WAn"T(4bS_'Wxv ec%v7n`yDT'i:wgPPcnAGF=Q*;hw=\|dr?ɳkﰉ>= Z/jA$1~9?Vor(?J8JJU2gN[.Dsf?8{ׄ趟\kL7T8v/>vV^ fgP~f2 6)Izgqiҽzϕ~ .<,)~DYz,3R׭֋ e7RҀE Zx*@\ĭy b5?jafL|_c{eӆQHCӪ`Az"Xzt6B?oFUa/B]|nCP)ˉbNԪI_p*6I&T'0tj]ye~<؂Povµ' y>[yoe+K|i!"Ga/`BQgCzI~OJHY1fUFr,$սIUiNB gB'-A *]b l5|9Sm6C]i{oAXxqt+JYE=c(©} !o5 Uڌ&Q EL\RuRB6=B~@naUyX4TOU4 (y3rgFD5X|~ mgN϶]Qc %М!1{-i:O4D CT/c#{KO#\4*0 GPtT?^q`*,kUDwQҠ(Zj\U<V\y^`kdhA1 R#֑lgu(.?Ev+ߴ=rC;2v`?P&uh!IrsIfoVrP9 \nkU\4!%۾ %:>R}|hqp1UI?̟"'9GoŐ1tWB+]k/c%`ut.袸<o|1νF'>#ص9t+*;h'Hcސg uo߮=wMdbP:2) l=\-l f S B5KZA^ļGm1=c饶™?%~ԼHܖRvos) N=t?R>G O"8TkC]DC("r+nVt[Aj?W#кhFPU^vS@ycd)d}v#(쿗P%SvQV7`]ž=H  Ԅc㇦+.]$\ѹ|F8AEz[$ M|5g=`q>0ks:.6 nwg++5K60~Z WbŐl4J{R@ ߽wc/b}gwhr&׃&043ڬ2 U %HR& HA3g)\f֦^# /|5f]1Y:a*][:q,A*1k=&,#  yqh)F؀Z>6w M7`Ec@*YkLJ rzS ;.{eb{Ou1uk>0! 툞ρMO+iBCO3{l0vk2ʷH73PD`p&>I76jXؾ9 JZW~vm]y !ؑhz9/4@ )#w5x8?;ZR$) 0~_26p Fh-'S\ZK-ըXX.Ap*N5]C)$ klZ44$?2l^v=QU(;<>hm6tt{˃C] .ҖW!**R7 uf^:= rz$lD~[^ׅKR߹B EY )ڐUVrζ^'M|Aq cp=C;9Ka/6l9p7Tz$+Y+Jjq6>pHׁR-%,P/aZ@._KQUݙfM- /0 JY~ZGNr7J2 dSM)AQi*JDn8ac7EY&suۥ3[k5N.^d3:5ں)tYЀqFǼQ38wu Е',YO.fQ9"Rg;PWs0Zf>&U)42yjlQՒ Mat}?"BY\D*;=6O?QlֽJQEyt$oV]?`de-|:Uӈ[yH0yS^x*ִ<ãe)5E y"J7 Y;^Eh zCxt]T_9&2627.Vu3WpyxXz[wCqΣW>0B;ZJ{G(Moώ ]8c(]$Gi&8ľ\ͫ:Kmm@wW9(rڌO[=JB0Ru?yK.l)$GUrEWQ?I;^ 7]ԹZJsṨ2ԕZN Y ^,sR*] c~$EI{[gjV/Ǖ%;Ϧ;dkW7AU`#] !$d $ c=?"1f 5mkJ{EBIe] *펞,}EvԶĦ't8==;ϩ^a|15B\yK3?ͺG3^"ת.2b*crK\Wցj6n[WŪ8O*GŌǡgxٿ8ZW؁O;R(p|ED'bpb^+Wqv/D7 M`,a!Y@/vPPJ8\  %_;Z%{h>-m{AIqW1,YSqAy>VDl.:Y+T10j[ӏ/*ab`2i zZQxsL%s:d0U@+{#rǩvZe7 "D;so(|1y^/w?Q迃.uNݮ0`"]r9] AjrI lҖ4c"hęӉ,ܯbwoP5jܚԤg;%hS:x:s1O:u0BNVrEV1x`g&+pbk)ɩ_B F7N Ө=wUi:Ygb  E~-OoګwWsTr1O3j=ƓIDRK`G 0Cl>{;8OMHΰRe.L U1OIg,_76p]\֊iOu,aj&f,`P[,G;iۄ&˩H xGq^WfҾo5N']8晊<7ԥS8|8"ӓC~q]BLeb`nJW֔^ #,eٿRZP%ϬgnKA[9!f y#^7%AhvBVjx@K;,z5Iï;Θ[vaeb3]F.Ըd(7-Oh$C%aorAq$2sS%P2[w+Qe8rK]+@|6r+,4oO!5%o+~F2^۴*k؋t Puc/>7/ǻˈhlK4a0^1P ;Dvm~\H#l[g*)G-"J%P8\cC?$Ě@uyz s/42 :F3Uqۆ 7_bHWvgzwm \ӘoŒԊ+fIw9iszDj& 4iDJ+sL>.>vz (FSt(gv@_{m<;#o,6 x$$sdV<N.bkd*Kt p}֫m`rHܲG@uX`AWx vKWn:N<[}aYB-}Jί~5vX~mIo;.ҥTn}xRx~/}72OjyF2u3Uq)+jڕ-QRc_2J&1=Wfsd? V9^!w[x#q`lj}kYGƕM9IiM"gvO:)WJ$}k{>;N&Vcw,+VXNWEnO;]/=>e!ö;O VXǭG}kWUXPhPEo$槖iHIl}O\7h^q*e3峦cw'U "%q4%z{cB sXJ;KZlq XQ}N?yv^͝|"U-9\-j $n33Xjxw"ԙ5{-jT>-rόLl1ఱKgil}B!!;+LmT@ey}[$kK,Q4DINkt#9DJx5IĪl0| 'Oxx,Z/–`am#bN^Ä=4v dk٘;Pzz1hOUZ3 +Gc a6`gt3qbw7-'3Y-L>;zOe$3%eE(- I.QP( Zxb%WsQ~֜q6oT hZÐ*X˳fg`@֬OF2\csc˫>gA:*Gtž{$A>. 3WA0踑-)࢚Ֆ{jTJp]/Έe`Y)%v] (J|Heq3Huzf콖3bmA}.3UɩJTo.؎>e 2J,/Շߢu֢zy~@`$Ć"iW?+mϾ~B0 עY LsNNdJx B+fxAmW)!N*_kgGZLqzQOInToީ4E 'ʪi:h{KpJ8ZTө@_v֭A&<1W/},K"DڻZeR "Vt45G[ '`Lsfht2F*bP8j%[~/.Yh՚T2Y?2?V>\{c@i চhAqgSN}5^#Ma̬t|U6:vJx VXd Էv4S{fB6QbE{+@=ֆ_HS5we jTQ}SP+Bd3W 늚{%m]ؓNH SNo>:,2ߣ)<$>p=U p۬jze2ȸxayiC˰MYWu ѦS3b$K|dqˇma"0I–^ dtWχڙ\Pؑ\$PPA3(1֪Y异uG1u>xyΟμ%{ք)ST.ģP,jK7Vp,aAapBFtyST'ʑeQv\ */Oxn$Iz`oH5qvhF#<8lY1\"Ѵo97qfj"K$;[cBf> 4"z0Z ZY60Ѩ SQ;M 0,(~Zt6#<$+נׅ:SށpM'/坰ugV5R"xGy5=yz^Dٵ‰i{?:՘,p4޶ w:7qxݺ*fWӶ(\iy ;6! 礻ߗܯ|xy8z-S $ӋR*`M+Hwiz)(5*|8`U=bRr[|1ӜY}N}y%?ĦqPXc= ^yi<]{(!]s 2CJ6QIGtpx,x qPR?r˩ lf, #qC?j xvt07U=ǷB+eWF@37ܙAv+˹[nj> .wj[ra^ӘiӪ#|&/h{(nsx5/mսG{k @\?YRSٙJ"grmN+xWPv]W0l8ϏDRp>Fބܞz 8Rr~ީACVti@h7/V95s=63t@oqLU]6]h(Q,Nbeag#F/q*Zq/p+pRvɀ\0H5_2ly8\}\a7W®k;Ԑwװ. qK OrQED8[LM4 *;rњひ(xK+VJ3<ۤCf ӆSFT)Oi̢{P8ĹNTWsVJ!>ԟ+Wq $bc88VfNrt?B/^'u}^;Ȳ}%ک0^3\d-.VӴgקXg_S! o}6GDjPj ym}C׈aʠBL3QeQEg%n1(HWeUĻ؛6[xӔtQ]- G%{8˜ObI0)IU5aoKeh\V_'%+v 5Ɇ//YYL zl i{#t22V؞իWƧŠq}hՑbp7;lقeUSWLHf #_VEZM|-NPQyYÚ~8xn+OU3QY {xAtrL=˔YW9Laf/]~GAi;RZ*j5s$H# 4-hn9nc Ɓ[I?7%]s@ mЂ)8&Micٔ 0tQ+E\@rɒ^@VzQhVIiTJEt[dv! {BnIOcN>H{u,k<$,1k qʽ[u-fHqYvܡD"6_edKm٬e{tjyXOʰ]>K5 ۣj vtwnf)Z.w&FX(tZN<,)\>e,WgQ' ) qX 3cwUEpR@=nб>e^')>4j,=4:Hq_DdB8+Z5  +b2+?3ftH>6oi nt+=ׂ(x+̡twx !%cWmm:A~4낕vL]Ϸ8^}qs-Nخ@JMwl@D+7TmX[}u{:q_yL(d%$761"7X1Jkt(uVyWJԻ.MSExЭ~.v~N}AZq.PgE6~]: gcX)&ܯ)ȸ%֟nUOm~? Y=u$?_%e%20k!M.ڤ/dvˉ5H*ŴA$u>JW]ZO2cυ3GY70FPBA^ 5օm_]#%J_|?JhGєoнEq.eАzH;j HxWeT6-px=>GҸdrWj؍^㿹ؙä nPs&΃Iq8{G10R!:-kJ1!а@>VĘ[&܅w]>Z?J .Pk6'n/.dOvkԙ .JO=Τ^G?>:${ͬ[@Ze]vJGhsFA'eɪh*Z)} )~MvNb^u8~`^jI x`#$w (f] ܣN$1-^3h$[(^ 6uj9? BVq"KT-+E G֊|0o)f%0_Sj=h.T)h@:4rpMZ| 5fug[xT'.]sZ9-DNLw8 rWk5@=h^ڍ;r v҇dAVXɊiLӡtŎUNkt}{}@j)t{31O_I[ᤀS?@D[ϨQx"n;(z qc?k5#p'/Z\=v^/wAor 름g^/! be-ȱkDڠrF$fur]Mԟ1Kԏ$Kyx]OˋSy 7Yح Īܟ i%)HorUO/$o: ' 6嗠?٢!D!QhN򭉪L#;h޺y"/w%&Wx WUʾj B, 8^a KRˢG~FGvn{̨C j/fQMXu}!u d$c 2!N$Zuou"RBϬ'PZOݼp26#u/LSf90vuD\O%c J-`m76/\Wf,{ZK@_cBix=^r<>gM>7XKρQ0ŧ2j׿ 3Pூ@LLiUlD}ۇY* 9LJMqv3Xb H2'U?U]<mA9YeOJV Vfq) {,ĨbQT)-llBS$ۡ癮I!}_n܃NYLg>_=5Y<" im}M^i3ҸgP]XZ͠c'g[l^kʫ|ߩqӞEr?hUMHoƗLJm%vBgVFf^APDD-Y溊n}PT!I3Xۚ["$Рg$?bHӢprla(XO]OM};W2*oRJW= +E] f:c;JC.' Y2wPC^{EM7/'+ծ{;\(ݜ|UbWgpq|z[&<O <-08RשsqFyCb޾=1ux*L.s1~fE4uf)鋝h8"ux+g>E4g;3o6ѣa-hO}3TUe=![ x%hhZZ(_1kR3hc=pՔW.2п $J9VfP,DM&U+PCz6HǰalLs}a9qDfvuK#&n{u!!Hnvi,3ǎʅ\ SU.OHWϸ8E&['j~*wpBah7K-⟐GN4{RQk1y;Cז !x~ />0EJfl;j 4@(zX`JdW?%γ,:,pq%w~-ҁ懼To~V3!_¨:wڠD.1@%mt@B$L]f2M4[7(%ͽ-"&&=(&*J# X/grȹ5WΞ) #b,'oQKu %ApWEcG}ȿ{aQj23܇ae,R`)GGWH0 єFЊ Su|nR 7v2_EAWTk(8,;^P\Vaǘ6Ζf˲YtK92my{쎅fgEmr)."+{YF~ Ύy֬Ы?u؀ByrLvA6.c Qx UY@1dV9ܔV{U&dBs2#Fk@zFi|T:z$l^nK3s*Gc5v8Ovo9o}#~'eC9mklpl}Yݎ9`45ԭ2+dA'@ ûX3cOpI#V-o -VllTa|55ҩpT1a{k$msIHOkzZ%hUi4kr? I/TY6R6YND9:Ru}bl*׶shWJ 5lp;R•: >c!K0 ($4m,%GD._8Ezij0Iu(xt)jR4ePuWܡ(5?ƋP|ԍ-?Ő+5w*8wq7jECfX"uNN<ꅘr 4DKVOi#Ru0Yhc5U\״ը s9䋶ʵ M>>kÈSa(AEʼnp *|vx6!c>VԄƀdW&\|'eqo0!^SV@w]t$ah>q/>ݹ8Wpv yCspi| LqhWtnPe RP- nrsq9H4:71;#vvl;'U:IeFc){z[+jX2:\5[,jh;x^i 5L{AS80 :zrCT@pp»;d5q kQ:ҋICLoR>d fcVԿy\(Kg:T>Xz`zPd Ѭ:D?dGJ=z+?8I#o15M.1fT,)lsMc uSt1ȨەGj֯KcMC $^p>k=zӺ @Ud`Ed>y08mcQfYtZV57j1g-cY9&2q ?y4cxܓ;)NJ|JL'h8%e[D^{Ovj1\.fJY``iZ0Ps1 Wm>q08_>ԴN̈J=ˍx=y5K`Bk`Z VX!cя7nF*[ V{+,,΁g$AiZe1ߴzN^ BBtK7B`R `;{$4%q竂{R !+c(D'ؾZ=vj6eBqKL`!nuNxpQ;X h84CRKg̥&^u2vam$j귆` |58&P :h_O] XX|ʺM-E+PUnJ' ڤ^RdV,ZMe4PcC։܏3G5*C|6[sUIY/#9v/)/'gK-)om{9( ?\j-%٨[ !$F8N#d]0ʁ˱5.lnO%@r]ްu /p+5Xr"#mGur:Lu6Oq$vAcd)& #NV,bӊp npPù67c,rh5`#̩\4 E5L$h. CEOS#Y/x3)Wa9QɬnfI:kx!Ra[ؚĮLB1bEKV_wD8덁"L UެK˻)s89B"ʲS&~ⴤ?3%@+vBp [65" \8^=o)y0_.?O($#:;-^z\YuکAޒiD;P8yPP2e_љGX;w:BMnCP>&fa\dY2T`9Cƣrx}Pq8wQA^(&M60Ii=vّx7kƭ\YWlkRf΁iP6O*NJvo#6G߄j%h;iFIOs^΂î-t&iiVR,2Ryj7 q%gWg5?>xЀJmMۓ JMy-I_O IĽ3md=RqsFv=ql;a?\~pz=x@ݢ2HOWtxk#,D=};<WQVlWX*nu+Dx^(Ո uF*]E#>߬~gШ&CzyU֗c>5K];.x?[;zplPQ츹\@-B,4lV? >hb!xc?tZOZ>G u,,hJqWcܴȾ;9V`cZ0~3#r#U_gfkiZXahJAhY:B=r CW |+ LtlؒE)vDie34V lA.:O'˝hY1H|#rJ^dqYkO6|Z)^Cv;dWȱ[}H^B?xqYsLH4ꬶ, S9e 8v u;JSaZ;)+Z&VwذЗW}a;T;KpHgӋ2Dot9Ciɖ_rjۣD0ِ5,^XS(*ͰA?,1Ħ _V45H:itc$q"]vXExU|۰6"6)zwtYALDsHTIqzRr^]& fzA@bt9"ehݡ.Aud瓷:M*q h(4әߩHeYCBcçޅxYhTjw3h=tBBJuYfK)Gv] gx&n IyQO­̐Dk @}t "7Ib5S'KaH=Cgʑ;:$Iѫf$3ް>cQmVʚH\2$jahR;xzgQ좔FvpvkZH"a()ti_E)PsHt/Uߕock1fʨ̷ULk4?Q`<)9NRMB!x-FΉzrpNl'~e@Se$%|ǀ췴mW]7$j !{0DlR{#mJH~R}/6A_W5} ۾}fAS !k\}X&>)_:Ax+$dᦴ_-v #e ~bZ+z +̰g;I`=Xa,_UZL0\]: eW,XWBX~H&".2YFqrtmQ==UǞEZH IoB^DIx{SGSȬ^|7t(cחIޢ66F*2(LdyCet9Ntn90D׌mm &Ҋ,%2"YS7%/*`6PM`]9x~uP)!U&.lRl\-Ldo%aQm52oI ( U,1!k[SD˜pljI <GQ֓40=CBDTo? Scyz^u\ClY{ LpYȃ/t/@9ii= NAW jM/+郄̋wUAoK(p~&35"O^H4@1B:G^y/0=Fk'l_3d5F[Lf\] X([Z"Y6OFnm`vjK6oAtnc7;UI d&[shɓJ|gyP&1 [Νg/u6$nZcD/9f\BLp@O }E^̨"`)Hn^δ3@VV4zXO]1] ϧmwGƀ=~"؍w0I=*23wO4F2\I\[NAg 6)ؼ=K7>۴8J̏ AJxKH5˝j0 J#rāT23Ķ;d6'3cHT}3n@YO^I߁;yUTI Lĝ$`Ok̉Z3賡ÔAg/˗ڏOI^Bc[1NLxP)x4..'0m$Bg2,Q~luF,ʿh .>}Egd/mnzc%2&6KvNs[~E pYҕ7A>_zJk ȤCL=g]WAX$C=hÎC[23{4zVUɬpy؆bG QZU3᧸da)Y.Zy=5DsܸmZ;wwʔ΃%uٝ^[)|f<;/ U.{+j`gB'.`¡q5v5 +dC;~\ yѿ=O}'ӥM@J8aW0˺o^YU̳E!4ǘeᭊ3s{h)l)pRQBlY"Qs)[$-8bIzQFէrفC,29 6 84d '&dhXڍ6ֆh42/93һ58TYy ہ{R}]OքlfgcʎbqPue=bͰ'tW` qԓ䝆fU-8SVjvζ6_%!}  JK9r۽ d?$rN6RHہOwgsm`?+.!"yWSޘ #_dL{*9ѳ ]pc_neҹrAbd7oeI~>g+7ҦyI".`$(O': ^) >I=z;]L>Cc^6Q@qN’x4Aݫ @>Q>ʝ* ==R'I*E6EV&H{s2tWP-Wi5sukyg T<y5|+yHպ 3#RѻNg"^g[ ^֬ ;4G|IYoy$a$X|{OC[$x/JE"pTLՙծO<[_A0_z,49YN>Nyѻ̎SZk{gsxmӮ TghkltuA-[~ sg"G縿 ԜDRD.fg__@1pg]>qٕu c,BVJ[v'sz()Q9\I؀s'8$%* DA6o<7e-auJӮJ"]Ur@IC  Jddk#4`r `3ܽ>svkYOU*%xHLz{#k۵@Ty)aCR&/^. v&D6fn'`pzc1qkc$VmM.eUTvdu ZEA(KOt&tT'By>m&p=*$FbxR;mW g}tIyWy̻y6EʂƃקX kOJcޙsޡ{M (c캎w Tez?B~. HI]ł#d䅵[ BwlU%ÖJ Tss˯L{vJNG,!nH ޒ`l_,Jl^A":Bnr:-m?ڣqigzDq?0>x3\P# 7K~+MҚpjg _ j|RRL&hNd*; %s)SO[yPk[WƈlD7DŽ#k==]]]sLr&EبvR9xM.;{@AEвRU e )-4zq b~* V+`d As>x)T@peVUF]GTdژ;ޝYa|!QB"g;Z3-9pڼWΞC\܇Cō į0VC3wVTUx %CG-_Q"/$7|ݟd/$A &MY7/\?(ȷ.z-y5hm(fe5yvɞ8hNtk/SK3ȺB_L6ZsH1M/" ^ aDCEЍ/'T0#.O^*nafwUZGcy\?B H&൓yJ~[rE: @(clϑ 7<؂C#8M-P,܎1rukgemmN$ ?spc,ĺt*?&۩Y.}t%NKEA#I݆}H6ԉF݌4c4v+P c)YA0W—bx4/'H|QFTDp_dͷd.ؘ更q.<2H/f~撴z LdxF5KLuEI(v9r=[TS j Į9"4=5,$p߉kYӱǡK਋}$LRO20=F{d)XP0<#=T휝,.;pj*J̡d/MmpŔX8hO;qKH<^[%|vaZ $xyxe}[`2JB_[&K#"Ejk7X 7 n^? ,D2ĭOS/] <YSX־K79]5Lc|5^> g Ct;0e){w-['M}ߖ;:yGq>C9 D1_}1 ;{8͠튨xcKaE[ͰaP %%+6x@KCY*||p ' Ćk4;e(#u9Uߠ9D0TO߲__i߷ab/PY*Ϸ6W)m4{;5,'xHuޠ^ Xw{'q5)Dz%p&g?P^ 5_9j)LHκRb:wsX}Bx]Bku fF耂Hފ[+0eBG %jY&1*75#Է9-UA<5O7|o)1֌e|ݪ׹-`AhX E|tVi?I %IW AkDx-W0,0IH45|d :Jlb,A2Kê(>LS)2nB-TӳC=;j(OR/n(4p%KV.&NA\S!,73q Ç_Redm\]pS SY۳R/E齐 u 5:?@R)XmK_D9{kV6 Z(~@X&ɔUV"#eT0ޯNb`]$*UE_J_s:/B$8+OA17DwALG4YL*lS sRF2aֲ@2y(dէM$ay/0]Ih8 {Ǒж k8pDǃɴe}U+Kٖҏ–\4^&Qx4ZM|tV&_=ILĵ`b#[EIk6'P!4"p1Lidh1"c'iFgX9T_mpw6ĐVIx6VĢJ"{kJ@q͗AD,?: ћ-ps=LL4P@m.Њ]Z9xh)szKS5BqlwEj?snb ,YuGo6koE|ݵgt.0MD<ߧ;[bs]|lF%sYJ7`7՛dH%+6hc%y7Qrs=J<XWܑHݧv s]/+[: 28w'9/|4Ʋ?@8jmn bEƫw/oaCR墺%n-18 ALn<QkY C#!#0t*.M?ЌFX ۋ(1xqE(+O,揃%_W@?"W?cNd˱[ȥJ,=kt$$=NoB0hwQw,Ȑl k|%"<00P9hsق|EW 1M̎I +A^3# ђ[E&:s1urX x_g׈&Z_M)e>wCP nXɾ!wegF(B݅ugk(+ITc AUXI=6Qҝ˙7MTjaFa_]xk )GV5BKMӖSϠr`JYyFܜĚFlv0MŲ`^ba8עuOrzY`v3;Rק J9SfNf*5dEq;qƪ*^iq8J7dߋ)^Қh '0g2`]nВIr|.!`X;iR[B}5~ҽ oJu)BF^H'MǫBb5Br}3 N4}$XUFTFNagBp[qD_q6&,(~sJN wҟ"KnwG ~&ϱug|t>"Lb*${|ZRLiwPOAj){D@oq~w}Q^G4xI{nGAƗ *o(%yP R-lQ'E7b >gY3(D&9HS2E+gN0zc:%Ҋ~lKH !QycIџr%zmTq+_^8A$!0){qϭ䆼vXN4d\ggx ]]atwA'GXteesdݻfLeT)_m /'@ *]+N<}PvXnNG_M, &YE*Qgb}dZ/4( r]r+ʬJyu# Er9!/h퍯l^ղS&y E>:z3N~Jˆ}ts\:'!"@-{"%۽HFGeO:-vIdA*|0xsꅩK|_'Zx(o]OۥtK7-B ׀_vk7`Vzwڷ8zyfJքHQ3&uK6»}n}#mϝj[D9$pCL"T%Ԁ1oq3n@ u.>hvwGRd^:׆!2w^\͵?;&XLL:%!hwt#&(E5kr2eA71A4xiE-SkIw\3wvQ7U=*gD_8fN^,+GO-#s,"!ud[ =Nݞu}l7tߓfa87>d =uA3RV(4]T}%%!J( 䊱;=C<,%]>R{#PxkV6C0-P^iP%LgkMuo*U8Έ9gR."a @ZH/ ը +RrmƁ=ojk_$k2^s<ϛ^J֦Kyx61*W֯*edϞ|:_Һpz:O4?nN5VH'}>l$HV=~8h&68'1iKNvqoxuh@#ԉq\t9 1|w ʞfg7 ^Mo Z[5Ob3`5wLmȟD=B͢,;h!dhs+e3!{K'$-Vzm-ZGQsVbqNfP7AK~(Jj3zccn'l+6h"_~ {әfwBQW?De,cBXi:s| 2 YZ