sssd-tools-2.5.2-150400.4.11.1 >  A cM4p9|pE.|H[|%گr5*!{٧6">l O5{XP 0ŷ#.Kp빯 3SxSQ,еo >+_T!HX8f i}R-Z6mY\{7 1P/åO i: ]R:{02hΝE^]I4<<] ($fG%%)|IdNM5dgZ0"/d8d3bbe1c287fcfdf77766afd905b96b7dbfd5189bc10cc16038520775e8eafbdb95559ade26814117afe738564245bafd6ad5470cM4p9|M9yQԟ ѿrE$4ax;~8KҤKGgeEh;?corJX_b-]?xq4ÃT,8 a2cR>_f%9@Rso?,R/m(Sіŷĸ7; lrZ3JɹCsa!2 }c[H]ݼ|H7’H])Nti%.%k jw@C/'ek! >p>?d  ! </ EWtzb b b b b >b b(b b!" b##&$`&(f&((8(C9)C:.vCFGbH`bIbXLYT\|b]b^bcde f#l%u8bv wbxbyEz$48>Csssd-tools2.5.2150400.4.11.1Commandline tools for sssdThe packages contains commandline tools for managing users and groups using the "local" id provider of the System Security Services Daemon (sssd).cM3ibs-arm-1 JSUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/System/Managementhttps://github.com/SSSD/sssdlinuxaarch64Px 0 -Ue9Mnw'Ez>uHom3g ^`# 3`|3\ nd :OkLu $ ] A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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-2.5.2-150400.4.11.1.src.rpmsssd-toolssssd-tools(aarch-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/usr/bin/python3ld-linux-aarch64.so.1()(64bit)ld-linux-aarch64.so.1(GLIBC_2.17)(64bit)libc.so.6()(64bit)libc.so.6(GLIBC_2.17)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.17)(64bit)libifp_iface_sync.so()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpam_misc.so.0()(64bit)libpam_misc.so.0(LIBPAM_MISC_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)libref_array.so.1(REF_ARRAY_0.1.1)(64bit)libsss_certmap.so.0()(64bit)libsss_certmap.so.0(SSS_CERTMAP_0.1)(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_iface_sync.so()(64bit)libsss_sbus_sync.so()(64bit)libsss_util.so()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)python3-sssd-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sssd-common2.5.2-150400.4.11.13.0.4-14.6.0-14.0-15.2-12.5.2-150400.4.11.14.14.3c1@b/.@b@b~ba@aq@a @`!@``x*`m`T@_ts@^}^f/^ P@^[^ @]}@]µ]@]@]@]@\@\\+@\mA@[t[*AZZ@ZH@Z%8Z!D@YYw2X~@X,XX@X7@X@X@XN@XGX`@WWW@W@V&@VqR@VO @V U@U5@UU@U}lT@TTq@T6T`TR(@dmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.deckowalczyk@suse.comckowalczyk@suse.comckowalczyk@suse.comckowalczyk@suse.comhguo@suse.comhguo@suse.comhguo@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.commichael@stroeder.comjengelh@inai.demichael@stroeder.comkukuk@suse.deluizluca@gmail.commichael@stroeder.comdimstar@opensuse.orgjengelh@inai.demichael@stroeder.commichael@stroeder.comjengelh@inai.dehguo@suse.commichael@stroeder.commpluskal@suse.comjengelh@inai.dejengelh@inai.demichael@stroeder.comjengelh@inai.dejengelh@inai.dehguo@suse.comcrrodriguez@opensuse.orgmichael@stroeder.comhguo@suse.comhoward@localhostjengelh@inai.demeissner@suse.comledest@gmail.comjengelh@inai.de- Fix sdap_access_host No matching host rule found; (bsc#1202559); Add patch 0001-Fix-sdap_access_host-No-matching-host-rule-found.patch- Fix shell command injection in sssctl via the logs-fetch and cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add 0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch- Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attributte; (bsc#1190775); (gh#SSSD/sssd#4893); Add patch 0001-ldap-ignore-unreadable-references.patch- Fix 32-bit libraries package. Libraries were moved from sssd to sssd-common to fix bsc#1182058 and baselibs.conf was not updated accordingly; (bsc#1196166);- Remove caches only when performing a package downgrade. The sssd daemon takes care of upgrading the database format when necessary (bsc#1195552)- Update the private ldb modules installation following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Remove libsmbclient-devel BuildRequires in favor of pkgconfig(smbclient)- Update to version 2.5.2; (jsc#SLE-17763); * originalADgidNumber attribute in the SSSD cache is now indexed. * Add new config option fallback_to_nss. - Changes from version 2.5.1 * auto_private_groups option can be set centrally through ID range setting in IPA (see ipa idrange commands family). This feature requires SSSD update on both client and server. This feature also requires freeipa 4.9.4 and newer. * Fix getsidbyname issues with IPA users with a user-private-group. * Default value of ldap_sudo_random_offset changed to 0 (disabled). This makes sure that sudo rules are available as soon as possible after SSSD start in default configuration. - Changes from version 2.5.0 * Added support for automatic renewal of renewable TGTs that are stored in KCM ccache. This can be enabled by setting tgt_renewal = true. See the sssd-kcm man page for more details. This feature requires MIT Kerberos krb5-1.19-0.beta2.3 or higher. * Backround sudo periodic tasks (smart and full refresh) periods are now extended by a random offset to spread the load on the server in environments with many clients. * Completing a sudo full refresh now postpones the smart refresh by ldap_sudo_smart_refresh_interval value. This ensure that the smart refresh is not run too soon after a successful full refresh. * If debug_backtrace_enabled is set to true then on any error all prior debug messages (to some limit) are printed even if debug_level is set to low value. * Besides trusted domains known by the forest root, trusted domains known by the local domain are used as well. * New configuration option offline_timeout_random_offset to control random factor in backend probing interval when SSSD is in offline mode. * ad_gpo_implicit_deny is now respected even if there are no applicable GPOs present. * During the IPA subdomains request a failure in reading a single specific configuration option is not considered fatal and the request will continue. * Unknown IPA id-range types are not considered as an error - Changes from version 2.4.2 * Default value of "user" config option was fixed into accordance with man page, i.e. default is "root". * pam_sss_gss now support authentication indicators to further harden the authentication. - Changes from version 2.4.1 * New PAM module pam_sss_gss for authentication using GSSAPI. * case_sensitive=Preserving can now be set for trusted domains with AD and IPA providers. * krb5_use_subdomain_realm=True can now be used when sub-domain user principal names have upnSuffixes which are not known in the parent domain. SSSD will try to send the Kerberos request directly to a KDC of the sub-domain. * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald output, to avoid issues with PID parsing in rsyslog (BSD-style forwarder) output. * Added pam_gssapi_check_upn to enforce authentication only with principal that can be associated with target user. * Added pam_gssapi_services to list PAM services that can authenticate using GSSAPI. - Changes from version 2.4.0 * Session recording can now exclude specific users or groups when scope is set to all (see exclude_users and exclude_groups options). * Active Directory provider now sends CLDAP pings over UDP protocol to Domain Controllers in parallel to determine site and forest to speed up server discovery. - Changes from version 2.3.1 * Domains can be now explicitly enabled or disabled using enable option in domain section. This can be especially used in configuration snippets. * New configuration options memcache_size_passwd, memcache_size_group, memcache_size_initgroups that can be used to control memory cache size. * Fixed several regressions in GPO processing introduced in sssd-2.3.0 * Fixed regression in PAM responder: failures in cache only lookups are no longer considered fatal. * Fixed regression in proxy provider: pwfield=x is now default value only for sssd-shadowutils target. - Changes from version 2.3.0 * SSSD can now handle hosts and networks nsswitch databases (see resolve_provider option). * By default, authentication request only refresh user's initgroups if it is expired or there is not active user's session (see pam_initgroups_scheme option). * OpenSSL is used as default crypto provider, NSS is deprecated. * The AD provider now defaults to GSS-SPNEGO SASL mechanism (see ldap_sasl_mech option). * The AD provider can now be configured to use only ldaps port (see ad_use_ldaps option). * SSSD now accepts host entries from GPO's security filter. * New debug level (0x10000) added for low level LDB messages only (see sssd.conf man page). - Changes from version 2.2.3 * allow_missing_name now treats empty strings the same as missing names. * "soft_ocsp" and "soft_crl" options have been added to make the checks for revoked certificates more flexible if the system is offline. * Smart card authentication in polkit is now allowed by default. * Handling of FreeIPA users and groups containing ‘@’ sign now works. * Issue when autofs was unable to mount shares was fixed. * SSSD was unable to hande ldap_uri containing URIs with different port numbers, which has been rectified. - Changes from version 2.2.2 * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache. This has been fixed. * Because of a race condition SSSD could crash during shutdown. The race condition was fixed. * Fixed a bug that limited number of external groups fetched by SSSD to 2000. * pam_sss now properly creates gnome keyring during login. * SSSD with KCM could wrongly pick older ccache instead of the latest one after login. This was fixed. - Changes from version 2.2.1 * New options were added which allow sssd-kcm to handle bigger data. * SSSD can now automatically refresh cached user data from subdomains in IPA/AD trust. * Fixed issue with SSSD hanging when connecting to non-responsive server with ldaps://. * SSSD is now restarted by systemd after crashes. * Fixed refression when dyndns_update was set to True and dyndns_refresh_interval was not set or set to 0 then DNS records were not updated at all. * Fixed issue when default_domain_suffix was used with files provider and caused all results from files domain to be fully qualified. * Fixed issue with sudo rules not being visible on OpenLDAP servers * Fixed crash with auth_provider = proxy that prevented logins - Changes from version 2.2.0 * The Kerberos provider can now include more KDC addresses or host names when writing data for the Kerberos locator plugin. * The 2FA prompting can now be configured. * The LDAP authentication provider now allows to use a different method of changing LDAP passwords using a modify operation in addition to the default extended operation. * The "auto_private_groups" configuration option now takes a new value hybrid. * A new option "ad_gpo_ignore_unreadable" was added. * The "cached_auth_timeout" parameter is now inherited by trusted domains. * The "ldap_sasl_mech" option now accepts another mechanism "GSS-SPNEGO" in addition to "GSSAPI". * The sssctl tool has two new commands, "cert-show" and "cert-map". - Changes from version 2.1.0 * Any provider can now match and map certificates to user identities. * pam_sss can now be configured to only perform Smart Card authentication or return an error if this is not possible. * pam_sss can also prompt the user to insert a Smart Card if, during an authentication it is not available. * It is now possible to refresh the KCM configuration without restarting the whole SSSD deamon * A new configuration option ad_gpo_implicit_deny was added. This option (when set to True) can be used to deny access to users even if there is not applicable GPO. * The dynamic DNS update can now batch DNS updates to include all address family updates in a single transaction. - Changes from version 2.0.0 * The Python API for managing users and groups in local domains (id_provider=local) was removed completely. The local provider (id_provider=local) and the command line tools to manage users and groups in the local domains, such as sss_useradd is not built anymore. * The LDAP provider had a special-case branch for evaluating group memberships with the RFC2307bis schema when group nesting was explicitly disabled. This codepath is removed. * The ldap_groups_use_matching_rule_in_chain and ldap_initgroups_use_matching_rule_in_chain options and the code that evaluated them was removed. * The "ldap_sudo_include_regexp" option changed its default value from true to false. Wildcards in the sudoHost LDAP attribute are no longer evaluated. This was costly to evaluate on the LDAP server side and at the same time rarely used. * The KCM responder has a new back end to store credential caches in a local database * The list of PAM services which are allowed to authenticate using a Smart Card is now configurable using a new option pam_p11_allowed_services. - Make cifs-idmap plugin (idmapwb.so) use update-alternatives mechanism to be able to switch between cifs-utils and sssd; (bsc#1182682). - Build sssd's KCM - Drop obsolete patches: + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch + 0002-intg-Do-not-hardcode-nsslibdir.patch + 0003-MONITOR-Do-not-use-two-configuration-databases.patch + 0004-Strip-whitespaces-in-netgroup-triple.patch + 0005-nss-sssd-returns-for-emtpy-home-directories.patch + 0006-Rotate-child-log-files.patch + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch + 0014-util-Remove-the-unused-function-is_email_from_domain.patch + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch + 0019-winbind-idmap-plugin-support-inferface-version-6.patch + 0020-winbind-idmap-plugin-fix-detection.patch + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch + 0027-utils-make-N_ELEMENTS-public.patch + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch + sssd-gpo_host_security_filter-1.16.1.patch + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch + 0036-ad_gpo_ndr.c-more-ndr-updates.patch + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch + 0038-CACHE-Create-timestamp-if-missing.patch + 0039-sss_cache-Do-not-fail-for-missing-domains.patch- Fix sss_cache spurious error messages when invoked from shadow-utils; (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch- Use /run instead of /var/run for daemon PID files; (bsc#1185185);- Create timestamp attribute in cache objects if missing; (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);- Fix a dependency loop by moving internal libraries to sssd-common package; (bsc#1182058);- Fix build against samba >= 4.12 + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch + 0036-ad_gpo_ndr.c-more-ndr-updates.patch - Fix build with curl >= 7.62.0 + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch- Update samba secrets after changing machine password; (jsc#SLE-11503); Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch- Install infopipe dbus service (bsc#1106598)- SSSD GPO host entries are ignored if computer cn does not match it's samaccountname, add 0001-Resolve-computer-lookup-failure-when-sam-cn.patch; (jsc#SLE-9298); (bsc#1160688)- SSSD should accept host entries from GPO's security filter, add sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)- Fix building with newer samba versions (bsc#1137876) - Added patches: * 0027-utils-make-N_ELEMENTS-public.patch * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch- Update winbind idmap plugin to support interface version 6 (jsc#SLE-9819) - Added patches: * 0019-winbind-idmap-plugin-support-inferface-version-6.patch * 0020-winbind-idmap-plugin-fix-detection.patch * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch- Delete linked local user overrides when deleting a user (bsc#1133168) - Added patches: * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch- Fix domain offline after first boot when resolv.conf is a symlink (bsc#1136139) - Added patches: * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch- Fix login not possible when email address is duplicated in ldap attributes (bsc#1149597) - Added patches: * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch * 0014-util-Remove-the-unused-function-is_email_from_domain.patch- Fix memory leak in nss netgroup enumeration (bsc#1139247); - Added patches: * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch- Allow defaults sudoRole without sudoUser attribute (bsc#1135247) - Added an option to skip GPOs that have groupPolicyContainers, unreadable by SSSD (bsc#1124194) (CVE-2018-16838) - Added patches: * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch- Create directory to download and cache GPOs (bsc#1132879) - Add a netgroup counter to struct nss_enum_index (bsc#1132657) - Added patches: * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch- Rotate child debug file descriptors on SIGHUP (bsc#1080156) - Added patches: * 0006-Rotate-child-log-files.patch- Fix fallback_homedir returning '/' for empty home directories (CVE-2019-3811) (bsc#1121759) - Install logrotate configuration (bsc#1004220) - Strip whitespaces in netgroup triples (bsc#1087320) - Align systemd service file with upstream * Run interactive and change service type to notify (bsc#1120852) * Replace deprecated '-f' and use '--logger' - Fix sssd not starting in foreground mode (bsc#1125277) - Added patches: * 0003-MONITOR-Do-not-use-two-configuration-databases.patch * 0004-Strip-whitespaces-in-netgroup-triple.patch * 0005-nss-sssd-returns-for-emtpy-home-directories.patch- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)- Introduce patches: * Create sockets with right permissions: 0001-SUDO-Create-the-socket-with-stricter-permissions.patch (bsc#1098377, CVE-2018-10852) * Fix for sssd upstream integration tests 0002-intg-Do-not-hardcode-nsslibdir.patch (bsc#1098163)- Update to new minor upstream release 1.16.1 (fate#323340): New Features: * A new option auto_private_groups was added. If this option is enabled, SSSD will automatically create user private groups based on user’s UID number. The GID number is ignored in this case. * The SSSD smart card integration now supports a special type of PAM conversation implemented by GDM which allows the user to select the appropriate smrt card certificate in GDM. * A new API for accessing user and group information was added. This API is similar to the tradiional Name Service Switch API, but allows the consumer to talk to SSSD directly as well as to fine-tune the query with e.g. how cache should be evaluated. * The sssctl command line tool gained a new command access-report, which can generate who can access the client machine. Currently only generating the report on an IPA client based on HBAC rules is supported. * The hostid provider was moved from the IPA specific code to the generic LDAP code. This allows SSH host keys to be access by the generic LDAP provider as well. See the ldap_host_* options in the sssd-ldap manual page for more details. * Setting the memcache_timeout option to 0 disabled creating the memory cache files altogether. This can be useful in cases there is a bug in the memory cache that needs working around.- Updated sssd.spec: The IPA provider depends on AD provider's PAC executable, hence introducing the package dependency. (bsc#1021441, bsc#1062124)- Remove package descriptions for the python 2 packages that are no longer distributed: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config - Correct python version dependency of tools package. (bsc#1082108)- Correct dependency of sss_obfuscate command line program.- In an ongoing effort to reduce dependency on python version 2, the following python libraries are no longer built. Nevertheless their python3 counterparts remain in place: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config- Update to new upstream release 1.16.0 Security fixes * This release fixes CVE-2017-12173: Unsanitized input when searching in local cache database. SSSD stores its cached data in an LDAP like local database file using libldb. To lookup cached data LDAP search filters like (objectClass=user)(name=user_name) are used. However, in sysdb_search_user_by_upn_res(), the input was not sanitized and allowed to manipulate the search filter for cache lookups. This would allow a logged in user to discover the password hash of a different user. New Features * SSSD now supports session recording configuration through tlog. This feature enables recording of everything specific users see or type during their sessions on a text terminal. For more information, see the sssd-session-recording(5) manual page. * SSSD can act as a client agent to deliver Fleet Commander policies defined on an IPA server. Fleet Commander provides a configuration management interface that is controlled centrally and that covers desktop, applications and network configuration. * Several new systemtap probes were added into various locations in SSSD code to assist in troubleshooting and analyzing performance related issues. Please see the sssd-systemtap(5) manual page for more information. * A new LDAP provide access control mechanism that allows to restrict access based on PAM's rhost data field was added. For more details, please consult the sssd-ldap(5) manual page, in particular the options ldap_user_authorized_rhost and the rhost value of ldap_access_filter.- Update to new upstream release 1.15.3 (KCM disabled) New Features * In a setup where an IPA domain trusts an Active Directory domain, it is now possible to define the domain resolution order (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names). * Design page - Shortnames in trusted domains * SSSD ships with a new service called KCM. This service acts as a storage for Kerberos tickets when "libkrb5" is configured to use "KCM:" in "krb5.conf". * Design page - KCM server for SSSD * NOTE: There are several known issues in the "KCM" responder that will be handled in the next release. * Support for user and group resolution through the D-Bus interface and authentication and/or authorization through the PAM interface even for setups without UIDs or Windows SIDs present on the LDAP directory side. This enhancement allows SSSD to be used together with apache modules to provide identities for applications * Design page - Support for non-POSIX users and groups * SSSD ships a new public library called "libsss_certmap" that allows a flexible and configurable way of mapping a certificate to a user identity. * Design page - Matching and Mapping Certificates * The Kerberos locator plugin can be disabled using an environment variable "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the "sssd_krb5_locator_plugin" manual page for mode details. * The "sssctl" command line tool supports a new command "user-checks" that enables the administrator to check whether a certain user should be allowed or denied access to a certain PAM service. * The "secrets" responder now forwards requests to a proxy Custodia back end over a secure channel.- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to krb5-common sub-package. Address bsc#1024836.- Update to new upstream release 1.15.2 * It is now possible to configure certain parameters of a trusted domain in a configuration file sub-section. * Several issues related to socket-activating the NSS service, especially if SSSD was configured to use a non-privileged userm were fixed. The NSS service now does not change the ownership of its log files to avoid triggering a name-service lookup while the NSS service is not running yet. Additionally, the NSS service is started before any other service to make sure username resolution works and the other service can resolve the SSSD user correctly. * A new option "cache_first" allows the administrator to change the way multiple domains are searched. When this option is enabled, SSSD will first try to "pin" the requested name or ID to a domain by searching the entries that are already cached and contact the domain that contains the cached entry first. Previously, SSSD would check the cache and the remote server for each domain. This option brings performance benefit for setups that use multiple domains (even auto-discovered trusted domains), especially for ID lookups that would previously iterate over all domains. Please note that this option must be enabled with care as the administrator must ensure that the ID space of domains does not overlap. * The SSSD D-Bus interface gained two new methods: "FindByNameAndCertificate" and "ListByCertificate". These methods will be used primarily by IPA and `mod_lookup_identity to correctly match multple users who use the same certificate for Smart Card login. * A bug where SSSD did not properly sanitize a username with a newline character in it was fixed.- Switch *all* URLs after fedorahosted.org retirement- Updated project URL - Update to new upstream release 1.15.1 * Several issues related to starting the SSSD services on-demand via socket activation were fixed. In particular, it is no longer possible to have a service started both by sssd and socket-activated. Another bug which might have caused the responder to start before SSSD started and cause issues especially on system startup was fixed. * A new 'files' provider was added. This provider mirrors the contents of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose of this new provider is to make it possible to use SSSD's interfaces, such as the D-Bus interface for local users and enable leveraging the in-memory fast cache for local users as well, as a replacement for `nscd`. In future, we intend to extend the D-Bus interface to also provide setting and retrieving additional custom attributes for the files users. * SSSD now autogenerates a fallback configuration that enables the files domain if no SSSD configuration exists. This allows distributions to enable the 'sssd' service when the SSSD package is installed. Please note that SSSD must be build with the configuration option '--enable-files-domain' for this functionality to be enabled. * Support for public-key authentication with Kerberos (PKINIT) was added. This support will enable users who authenticate with a Smart Card to obtain a Kerberos ticket during authentication.- Remove obsolete insserv call- Added /etc/sssd/conf.d/ for configuration snippets- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update - Update to new upstream release 1.15.0 * SSSD now allows the responders to be activated by the systemd service manager and exit when idle. This means the services line in sssd.conf is optional and the responders can be started on-demand, simplifying the sssd configuration. Please note that this change is backwards-compatible and the responders listed explicitly in sssd.conf's services line are managed by sssd in the same manner as in previous releases. Please refer to man sssd.conf(5) for more information * The sudo provider is no longer disabled for configurations that do not explicitly include the sudo responder in the services list. In order to disable the sudo-related back end code that executes the periodic LDAP queries, set the sudo_provider to none explicitly * The watchdog signal handler no longer uses signal-unsafe functions. This bug was causing a deadlock in case the watchdog was about to kill a stuck process * A bug that prevented TLS to be set up correctly on systems where libldap links with GnuTLS was fixed * The functionality to alter SSSD configuration through the D-Bus interface provided by the IFP responder was removed. This functionality was not used to the best of our knowledge, had no tests and prevented the InfoPipe responder from running as a non-privileged user. * A bug that prevented statically-linked applications from using libnss_sss was fixed by removing dependency on -lpthreads from the libnss_sss library (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for an example on why linking with -lpthread from an NSS modules is problematic) * Previously, SSSD did not ignore GPOs that were missing the gPCFunctionalityVersion attribute and failed the whole GPO processing. Starting with this version, the GPOs without the gPCFunctionalityVersion are skipped.- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-login): the latter has been deprecated since systemd 209 and finally removed with systemd 230.- Add 0001-krb5-1.15-build-fix.patch to unlock building against future KRB versions.- Update to new upstream release 1.14.2 * Several more regressions caused by cache refactoring to use qualified names internally were fixed, including a regression that prevented the krb5_map_user option from working correctly. * A regression when logging in with a smart card using the GDM login manager was fixed * SSSD now removes the internal timestamp on startup cache when the persistent cache is removed. This enables admins to follow their existing workflow of just removing the persistent cache and start from a fresh slate * Several fixes to the sssd-secrets responder are present in this release * A bug in the autofs responder that prevented automounter maps from being returned when sssd_be was offline was fixed * A similar bug in the NSS responder that prevented netgroups from being returned when sssd_be was offline was fixed * Disabling the netlink integration can now be done with a new option disable_netlink. Previously, the netlink integration could be disabled with a sssd command line switch, which is being deprecated in this release. * The internal watchdog no longer kills sssd processes in case time shifts during sssd runtime * The fail over code is able to cope with concurrent SRV resolution requests better in this release * The proxy provider gained a new option proxy_max_children that allows the administrator to control the maximum number of child helper processes that authenticate users with auth_provider=proxy * The InfoPipe D-Bus responder exports the UUIDs of user and group objects through a uniqueID property- Update to new upstream release 1.14.1 * The IPA provider now supports logins with enterprise principals (also known as additional UPN suffixes). This functionality also enabled Active Directory users from trusted AD domains who use an additional UPN suffix to log in. Please note that this feature requires a recent IPA server. * When a user name is overriden in an IPA domain, resolving a group these users are a member of now returns the overriden user names * Users can be looked up by and log in with their e-mail address as an identifier. In order to do so, an attribute that represents the user's e-mail address is fetched by default. This attribute can by customized by setting the ldap_user_email configuration option. * A new ad_enabled_domains option was added. This option lets the administrator select domains that SSSD should attempt to reach in the AD forest SSSD is joined to. This option is useful for deployments where not all domains are reachable on the network level, yet the administrator needs to access some trusted domains and therefore disabling the subdomains provider completely is not desirable. * The sssctl tool has two new commands active-server and servers that allow the administrator to observe the server that SSSD is bound to and the servers that SSSD autodiscovered * SSSD used to fail to start when an attribute name is present in both the default SSSD attribute map and the custom ldap_user_extra_attrs map * GPO policy procesing no longer fails if the gPCMachineExtensionNames attribute only contains whitespaces * Several commits fix regressions related to switching all user and group names to fully qualified format, such as running initgroups for a user who is only a member of a primary group * Several patches fix regressions caused by splitting the database into two ldb files, such as when user attributes change without increasing the modifyTimestamp attribute value * systemd unit files are now shipped for the sssd-secrets responder, allowing the responder to be socket-activated. To do so, administrators should enable the sssd-secrets.socket and sssd-secrets.service systemd units. * The sssd binary has a new switch --disable-netlink that lets sssd skip messages from the kernel's netlink interface. * A crash when entries with special characters such as '(' were requested was fixed * The ldap_rfc_2307_fallback_to_local_users option was broken in the previous version. This release fixes the functionality.- Update to new upstream release 1.14.0 * The AD provider is now able to look up users from Active Directory domains by certificate. This change enables logins for Active Directory users with the help of a smart card. * The sss_override tool is now able to add certificates as local overrides in the SSSD cache. Please note that the certificate overrides are stored in the local cache, so removing the cache also removes all the certificates! * Invalid certificates are skipped instead of aborting the whole operation when logging in with a smart card using SSH. * This version allows several OCSP-related options such as the OCSP responder to be configured during smart card authentication. * SSSD is now able to determine the name of the user who logs in from the inserted smart card without having to type in the username. Note that this functionality must be enabled with the allow_missing_name pam_sss option. * The sss_cache command line tool is now able to invalidate SUDO rules with its new -r/-R switches. Note that the sudo rules ar not refreshed with the sss_cache tool immediately. * A new command line tool called sssctl was added. This tool allows to observe the status of SSSD. * A new option local_negative_timeout was added. This option allows the admin to specify the time during which lookups for users that are not handled by SSSD but are present on the system (typically in /etc/passwd and /etc/group) and prevents repeated lookups of local users on the remote server during initgroups operation. * An ID-mapping plugin for the winbind deamon was added. With this plugin, it's possible for winbind to use the same ID-mapping scheme as SSSD uses, producing consistent ID values. - Remove 0001-build-detect-endianness-at-configure-time.patch (included upstream)- Enable PAC responder. PAC is an extension element returned by domain controller, to speed up resolution of authorisation data such as group memberships.- Update to new upstream release 1.13.4 * The IPA sudo provider was reimplemented. The new version reads the data from IPA's LDAP tree (as opposed to the compat tree populated by the slapi-nis plugin that was used previously). The benefit is that deployments which don't require the compat tree for other purposes, such as support for non-SSSD clients can disable those autogenerated LDAP trees to conserve resources that slapi-nis otherwise requires. There should be no visible changes to the end user. * SSSD now has the ability to renew the machine credentials (keytabs) when the ad provider is used. Please note that a recent version of the adcli (0.8 or newer) package is required for this feature to work. * The automatic ID mapping feature was improved so that the administrator is no longer required to manually set the range size in case a RID in the AD domain is larger than the default range size * A potential infinite loop in the NFS ID mapping plugin that was resulting in an excessive memory usage was fixed * Clients that are pinned to a particular AD site using the ad_site option no longer communicate with DCs outside that site during service discovery. * The IPA identity provider is now able to resolve external (typically coming from a trusted AD forest) group members during get-group-information requests. Please note that resolving external group memberships for AD users during the initgroup requests used to work even prior to this update. This feature is mostly useful for cases where an IPA client is using the compat tree to resolve AD trust users. * The IPA ID views feature now works correctly even for deployments without a trust relationship. Previously, the subdomains IPA provider failed to read the views data if no master domain record was created on the IPA server during trust establishment. * A race condition in the client libraries between the SSSD closing the socket as idle and the client application using the socket was fixed. This bug manifested with a Broken Pipe error message on the client. * SSSD is now able to resolve users with the same usernames in different OUs of an AD domain * The smartcard authentication now works properly with gnome-screensaver- Enable internal testsuite- Update to new maintenance release 1.13.3 * A bug that prevented user lookups and logins after migration from winsync to IPA-AD trusts was fixed. * A bug that prevented the ignore_group_members option from working correctly in AD provider setups that use a dedicated primary group (as opposed to a user-private group) was fixed. * Offline detection and offline login timeouts were improved for AD users logging in from a domain trusted by an IPA server. * The AD provider supports setting up autofs_provider=ad .- Update to new upstream release 1.13.2 * Initial support for Smart Card authentication was added. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. * This release supports authenticating againt a KDC proxy.- Update to new upstream release 1.13.1 * Initial support for Smart Card authentication was added. The feature can be activated with the new pam_cert_auth option. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. At the same time, only the long-term password is cached, so offline access would still work using the long term password. * A new command line tool sss_override is present in this release. The tools allows to override attributes on the SSSD side. It's helpful in environment where e.g. some hosts need to have a different view of POSIX attributes than others. Please note that the overrides are stored in the cache as well, so removing the cache will also remove the overrides. * Several enhancements to the dynamic DNS update code. Notably, clients that update multiple interfaces work better with this release. * This release supports authenticating againt a KDC proxy * The fail over code was enhanced so that if a trusted domain is not reachable, only that domain will be marked as inactive but the backed would stay in online mode.- Update to new upstream release 1.13 * Support for separate prompts when using two-factor authentication * Added support for one-way trusts between an IPA and Active Directory environment. (Depends on IPA 4.2) * The fast memory cache now also supports the initgroups operation. * The PAM responder is now capable of caching authentication for configurable period, which might reduce server load in cases where accounts authenticate very frequently. Refer to the "cached_auth_timeout" option in sssd.conf(5). * The Active Directory provider has changed the default value of the "ad_gpo_access_control" option from permissive to enforcing. As a consequence, the GPO access control now affects all clients that set access_provider to ad. In order to restore the previous behaviour, set ad_gpo_access_control to permissive or use a different access_provider type. * Group Policy objects defined in a different AD domain that the computer object is defined in are now supported. * Credential caching and Offline authentication are also available when using two-factor authentication * The Python bindings are now built for both Python2 and Python3. * The LDAP bind timeout, StartTLS timeout and password change timeout are now configurable using the ldap_opt_timeout option.- Kill unused libsss_sudo-devel solvable.- Obsolete/provide libsss_sudo in sssd main package. Sudo capability is an integral feature in SSSD and the library is not supposed to be used separately.- sssd.service: add Before= and Wants=nss-user-lookup.target correct fix for bsc#926961- Update to new upstream release 1.12.5 * The background refresh tasks now supports refreshing users and groups as well. See the "refresh_expired_interval" parameter in the sssd.conf manpage. * A new option subdomain_inherit was added. * When an expired account attempts to log in, a configurable error message can be displayed with sufficient pam_verbosity setting. See the "pam_account_expired_message" option. * OpenLDAP ppolicy can be honored even when an alternate login method (such as SSH key) is used. See the "ldap_access_order" option. * A new option :krb5_map_user" was added, allowing the admin to map UNIX usernames to Kerberos principals. * BUG FIXES: * Fixed AD-specific bugs that resulted in the incorrect set of groups being displayed after the initgroups operation. * Fixes related to the IPA ID views feature. Setups using this should update sssd on both IPA servers and clients. * The AD provider now handles binary GUIDs correctly. * A bug that prevented the `ignore_group_members` parameter to be used with the AD provider was fixed. * The failover code now reads and honors TTL value for SRV queries as well. * Race condition between setting the timeout in the back ends and reading it in the front end during initgroup operation was fixed. This bug affected applications that perform the initgroups(3) operation in multiple processes simultaneously. * Setups that only want to use the domain SSSD is connected to, but not the autodiscovered trusted domains by setting `subdomains_provider=none` now work correctly as long as the domain SID is set manually in the config file. * In case only "allow" rules are used, the simple access provider is now able to skip unresolvable groups. * The GPO access control code now handles situations where user and computer objects were in different domains.- Update to new upstream release 1.12.4 (Changelog highlights following) * This is mostly a bug fixing release with only minor enhancements visible to the end user. * Contains many fixes and enhancements related to the ID views functionality of FreeIPA servers. * Several fixes related to retrieving AD group membership in an IPA-AD trust scenario. * Fixes a bug where the GPO access control previously didn't work at all if debugging was enabled in smb.conf. * SSSD can now be pinned to a particular AD site instead of autodiscovering the site. * A regression that caused setting the SELinux context for IPA users to fail, was fixed. * Fixed a potential crash caused by a double-free error when an SSSD service was killed by the monitor process.- A minor rpmspec cleanup to get rid of five rpmlint warnings * Remove mentioning of system-wide dbus configuration file from comments. * Remove traditional init script. * Remove compatibility for producing packages on older OpenSUSE releases.- Update to new upstream release 1.12.3 * SSSD now allows the IPA client to move from one ID view to another after SSSD restart. * It is possible to apply ID views to IPA domains as well. Previous SSSD versions only allowed views to be applied to AD trusted domains. * Overriding SSH public keys is supported in this release. * Move semanage related functions to a separate library.- build with PIE- fix bashism in postun script- Update to new upstream release 1.12.2 (bugfix release, bnc#900159) * Fixed a regression where the IPA provider did not fetch User Private Groups correctly * An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. * Several new options are available for deployments that need to restrict a certain PAM service from connecting to a certain SSSD domain. For more details, see the description of pam_trusted_users and pam_public_domains options in the sssd.conf(5) man page and the domains option in the pam_sss(8) man page. * When SSSD is acting as an IPA client in setup with trusted AD domains, it is able to return group members or full group memberships for users from trusted AD domains. * Support for the "views" feature of IPA. - Remove 0001-build-call-AC_BUILD_AUX_DIR-before-anything-else.patch (merged upstream)ibs-arm-1 1666003720  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ab2.5.2-150400.4.11.12.5.2-150400.4.11.1 sss_cachesss_debuglevelsss_obfuscatesss_overridesss_seedsssctlman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupdel.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsss_cache.8.gzsss_debuglevel.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsssctl.8.gzman8sss_groupmod.8.gzman8sss_groupdel.8.gzsss_groupmod.8.gzman8sss_groupmod.8.gzman8sss_cache.8.gzsss_debuglevel.8.gzsss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsssctl.8.gzman8sss_cache.8.gzsss_debuglevel.8.gzsss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsssctl.8.gz/usr/sbin//usr/share/man/ca//usr/share/man/ca/man8//usr/share/man/cs//usr/share/man/cs/man8//usr/share/man/de//usr/share/man/de/man8//usr/share/man/es//usr/share/man/es/man8//usr/share/man/fr//usr/share/man/fr/man8//usr/share/man/ja//usr/share/man/ja/man8//usr/share/man/man8//usr/share/man/nl//usr/share/man/nl/man8//usr/share/man/pt//usr/share/man/pt/man8//usr/share/man/ru//usr/share/man/ru/man8//usr/share/man/sv//usr/share/man/sv/man8//usr/share/man/uk//usr/share/man/uk/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26420/SUSE_SLE-15-SP4_Update/d5638734bea639f5efc8de481d762fc3-sssd.SUSE_SLE-15-SP4_Updatecpioxz5aarch64-suse-linux  ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=32fd6238004b834f6489689c205f41d790d1437d, for GNU/Linux 3.7.0, strippedPOSIX shell script, ASCII text executablePython script, ASCII text executableELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=303e1903d56bf36fcd6689d8905801d3676c7eae, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=42101c6128b5ee713dc6321b5abc92eeb6ae725a, for GNU/Linux 3.7.0, strippedELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV), dynamically linked, interpreter /lib/ld-linux-aarch64.so.1, BuildID[sha1]=8aa23d0842dad25d346ce6c65c0f5de8a729c0b5, for GNU/Linux 3.7.0, strippeddirectorytroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) (  RRRRRRRRR RRRRRRRRRRRRRR RRRRRRRRRRRRR RRRRRRRR R RRRRRRRRRR RRRRRR RR RRRRRR^ 7cw2-)utf-8129c4641c01f3e052aac1599ff8d42233cc624a1b6c80f695ca0e218ba25c6cb? 7zXZ !t/п] crv9wLzmʛ`jZ+^S%hpeotr."D J"FH t4Gj m"2_WWMzzVE0nC 'ON(~ƲVuO(ͣ> XW]idfɎ`Q߸(bzh4͙{'˭ %#_lJ3v F^'~__7Iq Fa$pͬG[hLt+ENFG?pUV(X}$F{c#/9+\s7*(;D\'Q|?zlcd6% mQH VU%X]WI"KJf\0Ks9rpZb855|HbLBchx=m^H&Ջ 82w)&Ȝΐt|0? f0:|]}e`&MnԐPU>9` ,(3? #B, v~9*QUcUia2{k.ѡ/ cuX"E^NF|a_o7+{#}E"`$tːU)t(won?m ɖX5oB,T E)Oex ! w)^8&8UMF2+/@>#͜˾==%fjȂ+ky2:5 zzt(heÊpv`x@DtPz3'y. I)5P5HWMƸY,-pKdGpJ#з(GUX}hdvΧRW|ȊQY!-ĺɁ7ғ' kq%mQCp5Qk ޗ}r3E|R't$H?pN`Iwx^foyudf\6h4pP x+]yZ ]%xE^Iͪ=_Ե-(OtdMt܇XPC!*4۱]܂?hXAB;}BlH)cC COd!Ci^wM8=x8) 'Q8_oׄJ9bOzC5#N?Nɉv4WK&q't+64a=_9cϺ3[ Jƞ<[&}ZϖΧ4}n.0#j?:,(:4؊f+@ QQtߎw24jFE:Ik9$PqI ? y)n] Ɖ`ՏD/MXY({KzBr=]cc~%(dI"qA K^Ǧu«DuL_%/Y" 1zhkŠ rtY_J_ Q2XȺKJT<@z;\c[/4-HpæpE4B3K (6jӽ?|(_ɼ ^0gKw]4,<ΈA:gUB SL끜xq"*Jf vZK%nVޤΆ砷{= [(#Z'+2f5j ][Y&6HkMu!$rV_?ظFs:-7fEgYSDk(TgSro$5OBvX]D3DߊΟv[⸋DPp^_h‰A$l6_j2 Ui SL-E6Foߘd>yD#NbH\ 0~,ڂ,eHtdˑ^YVVYR:{^f([e%^W*3P+g]6ߏ:#KY?^ȯ5V~cҼ4OO t-ϑ=%f6^IjMX| 8/ jMheuFUqjs}雳&T}aN$C&J71[0|GA3d&K)Y% [K g>gك#nhV"H3]˩ ʼnf |Xjgc/YUUeF[a[S>(sڡbz6dF%*9 _`/ q/Lus]!1"Bޥ"ed2Hd}0 H֝ݹW/K(߄z}$1&r` {y]vd?@Ӹ `o*8Cם@ہTx,uܜF2״ CVpv,Ɇ Ƿ1K{P6+M17B-tZ8?-(uf0 EGtZSSy7$ib @c1tmw!-QOHAe5YqJL@׈g]DCt<-D}q<&yV.֬iÞ؄TK}#!x& ݲO352g xt̲z- .$ U0Z);1^h6I}N*mpF/G9֠#ZI4ӄ+gfOMIvzvX'2{V>EB /=Hax~ܫLwX )ŢE IO{{2Sʍ4˘l_sCL+IH8Mh]@=Yh˒G\W94dvFzk.fV {lEǿ͛nރ5xtkg2 T Рizi ]BɰKnR@C#&='{>π'WZz{@@qxmrY+B.: dA PȆ^4C -j_}}@O*a(8vrV} oEcU|Gww0'".ӓK$ |qy YA;G*TݺbFQC!=XKGj_b~xOjrDcd! J,5bi̊*&J u)k+|cmsB)b(uf zW d,yZ`y Si_=ȴbsAZgݻ-2(<~W{//D_<-P,iYF!sŴAO7V'UgMy)ՍM>ntD2dQ\Giå=. ^Sui94sæ/,%&Əq!s wQA*bQYdn lW[E/g%FXRZy s3NW*nP mdPZ h2d"ҝ)`븇`W@dy;tH̀UJpqxh98jS]dzE$''a3@xa`{'+~Jl@Bb3$J5p6ۂj@.!Dp9m4.ڹ {b&rci OR Uw&FnV4erVNDB% qX [bpcId:kW}Πtq^Ho*yok6(T>X>|ifoQF3U{,3mǶc}cTgNWv Z^P͟MZP]j__ 1Y,и1B'9Ljh _u߼]PG4ߢSz-Z%O^66B2v5؆s\ZS̰&s@̳) ]g7(>U &Diy8^kοۮU^prCX 3kZ, e;6 PEj7B~"yy^%qTH$vTTdI-GB3 b?L}R'wkv(&Ŵ*eߧ#Rt| ۰2h,Mn 8 b$m}3 '!hP2F0`5i0sw'6x8 gXFivvDx*tHfXϔ{aJή8S2g=y~7KM]nz&4Mw J1]v`gTIU Qj2xfǔؤmlA<\9~pKAvBY~X~%<"jmHIO3H= NyD_V#?Z~z◓]z5|UN׽?a,S KF:2 *rMwҵK_6ܡ_ewz}+CnQ_8$7^,_t>3wz>]6Syj.z$j[/Ǹ,O'A)-`&:ŕn)ܫ;$8QZlu"fD&Whw\y^j;1{I3%;iU= zIGpͣN2X-~!3Ռ\] S~"JKn c3Ha.2R mb1].s[n+v+^|wB7$Mz.'kL$H 3=d_<\uΏK*meAe '%G fć1Y[5&OZb, GXKF7;rtѹ,+6bS$6qNHl(+cgB:2FՄ'I=^&ʃ@ ?WN vP~F>&\,9\]皍l*=\$A3%6i뚇UKN'4;`8 Q3 alr% mrg\Nt `{_jT:pV?'1)&z{$XYdk67oȒivsx=n>i>s@ s8!t~lK_*V M/ vtRrS h?F'$"|X#w1elFAy':A*@BA=ʤl5UU_x?[tLtfl2љ7(F4Q2rP.B,U#My&$>.Oi)!c%?G4K.a*BWҌ.>9׸Z=ĝK3_&ֈͲߩ^PͰp8b `-$[ j_y47a0G/oܜkiW'k`뾿 wԥvA\ $GҥN˃xC=DCwNxE (e; D9h9Hy#jH2YD]!ݤ$vEu,1MO<KG2#j 铲XzDwoT9_`spOH˭0+1AĚrmk!{5xI]VET[BdJW.v]׹9jl.׿eؼkuH|aԈ?P7x "]]FP,F[El2KPΩtWWG/c恟X)j νvj5C%ևlJTլTVLk3 -5)tz dKAaQM s?YkY"r #m'F+Ia@w.%S [}*Q_>I5ICLANPp ҋ+-y^BhF-x{bzƆFLVzÌr8MvHz l5I\5"75^4ڀTw(Ǿ3mި!uDӜ|Vk(GBD~͡Xk6"=8RgMW_9?F+z3Lk|T+G;*{]WJĜY Q?`[0C'&CKE=+-M'P䍙I7Ctq(<5KgҰDbm|@}vQ'pوC| ʐ;FwT"*79yXЇ2Od?;/GGM 63"瑩#=HϨN w8N,}PDo7)Yxwl( `y5.qįJ7[|4f2tLbHg>Ezsz  eI‹Eۥ o$Gk2ySҷfc53f0XG}4 =:)oׂ\K|VN~#z`欳F=7ML:L%S8a|̹uqT0lH8|W?* 8 x<-u$gcȠ};*E;wܲC6sm+1?9+[@6L{Mg=3nm'zUB7[/E+1T'Y0Pj}>¶#W(f ~ kC"$핟מZU~F(p{ڪdR=m ZDn%x\TSH[M}ABIF?0h _:r]`+o8m\}]Bwl(dXII12v,~yr Þ%ߣ}y^rT~z=&s-3TЗGTM:;eR#!ɸA[%!ʒe ѶYbAoE#њn } wP[ĎA%O<j'dJO|p^ y&᫂ozVP4e((̴G?\BSx%)iHSRR.&<E?uX%J8 fh{^A]l4 wP'A˧7;a7?b\p8Qt/y R26Ld*v_U$F< w:aZc6MH@.=fo/ucg AIkR|7k=4ʟwk'h4Top*UfR^x_9Aijp =1+R^5%[#w6~Ƙs7hMN?b2ܘOQ0DSP 9=x-3an''!6ݱ]Ӟ .]򋼖΂hlenK^goo^Jp<]Y/|.Q`MDZ{@ЀR*IQT SvqKrW!$Ud%E"8xzckj8fk5QtRrz>'H`XEoc0,BS1f:np3&T+|6ڎvDFPvCMe On޾9&!|2e :DBvk~LTE"b~憊ǞsٱKhTzTrlS}CcNArVdh&]jur9;K5hz^. &_ Q&R,fZ ‘VL =5̝2KoH|ǝ ϙDAU$_J192ڝl<^?~̟3l,+\Z׆9uPMHOd1A|z!d#Є[ȹB9@n HBMk{24>-h+U eޜ]xVTIj;z2~ӿqp;=a!G*6Lea܊oR. |Bs¦g:"z'0C|/ƨ\&II)ҸAZP2V!o+f@yd@iq/\A:Z4$;sLJ'ũJ3| a=v*Dd%VA)-O#DVDRh|m%6HvaqK7YKb%5oea3)\_W4X&ReV&s5bNXaaFE_0PPGs۪vJKb̚{6^^,+va Rh?vT `,4a EtKݸ!kCs<˜/a!6#պ,T'LpM$ɸ rޡ o6uVNзə*H>(,ɅZ7*F7 FΚBq iGԼuh~7TID> cޮmW'5y1 fH,cA W+ Sm@ @qy $ꜜڧ)|I1mAo6,N8 D5k@$ #S7Ƌ^Y |rmm`lx)9a}|*k˷.$-!dġwj_ FNhUM(#t{&JP Hπ0(*%xO#O?jMnQe2fm4*ىUɮjA|,̅ƻY#\_ڴzMI0MuNV}X$DarlM|H=K= R@!U9bEnd`+谺' ݶtRf% Og*DcAz"|;ʲvց,_r!+)k.Bsb:v[K1|X%z0`*bN?ЬYhp$0&aIW9#wy&2 i9+}=!;`Πǥ-޳$d 2INj)&l|ŢMێ.է('i]8\Rtd@z:Ĥ*bhnrJueZ`3y,^|:b8"j5U-ۜyBW.u>.F;/1.ͱX0Q!f 1eCh-tJ(sb}hFEQ5H{N م*`Zw\amqF#J{uBdJU*|Y%wH,aKa(̠;ru磶+=%4[aԍ2lrو߶“\q]jY;ߦRn?&r`ODT2˒spIc&aJ򜐈 sm3Bqb%ղU@Ft%cD~; zL8y~yrC\~1A&(Ǫ9^5IӘ\ iFS32 zlv3wj^y/OiTfzyCJ܆\€9'̕(WlЍ`||LF*2VURS- k'2!7 6X.YpjZ4έ}cTYl\ˇA^$$$nkЀɤ^L2NJ!ጰZGiv}qĪ,=5#3&jb" C໣#(3p[,A-`}pH7f eGecBJqK :{NL"޿VKxh u)h+>/<(sGV#G3l-{6f8xk=~h K ɃHu9\ĝ0DnWr'iq&[KF`v/*dVhwn[ޡuWsre"-r0琸`QUӹmDzd振of5Y*[BO(^ +Ўyvb{| gF+-ᠺob^|@޸a~r%Jf/hWWq7H 7Q=c1|Rsۥ?nfE_2i'.5'4Z RQm~'b->q*#: sai͖^5'd?HVv\EqJ֍*2N P=I )-et(NQZʒH|>2.@Bu3h,%cK(A%O]~09 CBlrUMouH{i4yJhQ2$-ʇed.ؖd3;Xb~'&r<[˦7 ̬>T6U;6#}pa 37?s TbG}.NeVWW0HoǺ/IUr& cłM5 4E"AGZZDR1Ǝ3+-WKo3l7~)thҸQTN`ӗٞ1ZA7`Tހj^_`'1YFn)_b$qkսg*]1:k2A3)I-(nx$AKOh,чS˽;r0\ 6i-KȐ1]@uJĕYRZTsȮ[jdσu) ߋoF;AL+HҽK?wP=8 apT0ÂҮ;ܑw."mcq"ߙ㔣'62E,y`ԡ6KC)qN[_ÈpIoj'إWt=]9J@e|b!~ǨOe BڃNY\?Zm}zvSI &J+opuY!*pИ!wZ_ ~vwMv%s:~W),=WHz; jEɮl 4ft*Ym݋& `6aP~ۂ~I q"@c.ϝR_1,CPO(l#(QY QY=>_mL59(Yuk8uϗt<:"&|ݨYK)pq$ll Q1TF]VY;!% e!'Pť~j2$. j! ݞ_"i ?zl`gfEӺ /343M'kdu 5R9;DQH5Vk|tiALpڃsE2 KWN:2*e_0dןȔ:/cTN3v1oH}(1}6Mvt+h %. G" P鿺x%܎l[`P2.<=q5aaV:_p~Qq[5GֶVe%_n)sw;ƒ?R8o6wf# fBЄƒ5nhS݃)IV"/[1;%JS3i~|v!ZO@C2騏Jk 8ljRrXI;Y[ |1 bKI|裸`lD_|AL ˖v nfw.| (7r#?4h[O83ʒKBn@sX |ԂheުX._S s]~g+Iޥ >_>tQ оAּv]?E 0Fd};NZ;Wr툾b0b1~یUXDB U݁Qˀ&:K4 T[Ki1C?-p p7Dd9Z˙LHm|3 P9gb]?yx2[ nC]uF˪2"Ѧ .lԒThl_PZAM7NhA"9Gf'ufrֵr_vE<$=5NԜw4"ޖ(S^Cxsf֋jϾXm&,6:hϥ '$aau'K3V>;1tbv4 K(l~+' #QS\V.aF&R*wjQf# "-!a>}׀z/̤t!yJs |a CmK>meU{(!MU!&񼣘:؍Ϯ@ݼᵂOjtULa%+*M63GGT0]Κ ~oGX=\77}H7+8I(V?%wujX>we3%̜ ޙuX)xh `A/94/u K_ʦQN`V/4wN >!kpS1CU$h&#Ρn0ë_)+^{k>xqC@[xOj|ζbw- VO1RW\y5`Cs".b2޿*e2(!6/@f3Hߍ\ql`j51_J=Enh1Ɣ"cؒHom.brIlM$FN^B4QudNb$:[;fJ5R6^t3AXS<MahMvz7ş.1g!v vDԶ[ 7FMd[c. Y){6[6˨F~(hʐX 3^I:oQOD\6:3b:Ϻ<_i;R 릋^9 6-nv@7c0237o ˖JZ#KOr3Е G WѦ(Xl?K$o/~sϗP~/֘1OWmF~x Uܞ:a.d0>w)3*pI!*`l]?msj1m:1'"FΉ RWDLX.sxdq5{B}ovҿ0쀧U~]FQCmE^jP";^džjeT<+:.Uh  ,+6Pʶ:f%XKTVF*rW}vޑ ^ݪꟃҦO$uJ_|Ov![b]SX݉S¿/2̋.LEU7r/X=Ўr{rI*y"LǗMu_{kԔuc?o0{Fr*AʨIc1tsk-eB;@ jaCvʰ#yƥ<ǖ!! ҭhgϪk2n7Լ MG+vF GAh' uCT$ϯnN_yWicz"a}Xu`sqE<"΍]fU4/4BUFy=6 tr[]BU$&pF%-:kPqK;Nk]i~q9whQ?Jh.)mgZ{*X"Jn9tWӇh5AnK0K  }sx/Z[B1WpӦ`|un,%K!H=?쉿ɫ y~%!cw+lw|83{̰ұ=dR[tH2[U:B%oJ*c+AJ~ʠ Cpk8'hkˇ6o1112mUg]C֝%%dSy/Q 6ʎDW6 +wủ5)B{pXڄ8O};U $U$9T3ASw=~.XUTfYinhPVec˽Lg~~Q 븳`jm!lE Z_Q% Si56Vi(Rv.;W;$o ey,cUx=*}M QY|:s ؞%,i󻘙YpOiTM;)etnrIWZT0*ºk8PJ@C.bNDpPt[r{ڀ-Z|1ҚR:3R9|9p۔%>ӱڹ27FkԮ3;$M:=(PE ʼnfD,`ַлlMT;P☜;x; YtgJr'1`(QQo|j35{LPQ* p I:MK!CФ~$1L%KmKdIpN4=|EW-ߟINt%Km@9Hg_j7]W@Jm8X)aiCBU&1W|ڬYJQ}b9)=T5[[v]"e:YO+6П-;<‹F@98)aAar1P:I6\n 蓐*j!#%rFX0%^四VQg\sľ6_]@&::8zN.$ B<oӠYg̵]Xb͕h%]D0 `xy863l{iB §\s%6yeVus_ϘXmRNPtsYiI`5//f˜Pu*B &)D2C!tqL& !9iOO$4އӶw.sߨ)W2rŜPgeoAQPu?\3y &ܑ14B"]S0Lb ђOCGQȽ^ukk&d+ѽ-N71XLRPdu1҂\x,҈ׂaK$OXhF{v'HrXd;ho;t<ϡ:YJ,*"$^&lQ= 0WGM.텏r/`}WdMIl%}hl{ /*izCcq[=YK SC0K5+"AAO|ڳ}HD0kQVa g{Z̜Y>A:3guRΠ Ev04(U8:>XJLۑq7H XyKhIJDC0(`B.,a跞د\_YP߹9ԞTtR\X%rvWhcG$7`! (yec (ǵ](qmd;,6'+tsƄnUtP!$}U$jJ%)P_Z1"ZcZhJd.3o">[ciַ[f*΂ߵR˗n(ףI6DMwxKSF,ܽi{/Xߚ;EOYdt=HRtbbL6gGNT"fN rN*UO=Q !3IM}ji0 uBΎϚL D5s$x*"! G~-Uxa?ڒwжW2GWA6LDPP⥤4Jl8^3s>JaHֲ%:CqMͽv_dwF*ϳLQGW;4_jEd%X)qx] xwJhZ2q{5dtf=|g(@ΥXíjkme *ZRVџfr(lw(鉶HʄPvqht[#[⚪VA=R' ]u|'+;xfV YC2^A*z PڏH">RK>9^@A<c{8~NMuX\Xyʱ8bCNP,D.&x֏?y!9&/fYI'ZUB E`=~B/Ta@}Kĩ聎KhsK f/6+?fkQ&Wu_ꭑ"P=lqK|J ,ؚѩ,I^̲y; UIڒe'D,EaQEcU%64«-p=qX1$HXӝCQ%#l8l%G:R=j30OcmiX{1EOHD*fC>B"0+D :QfH xtIղ=bIp"f$IdTǘ7uK64:S!ĦM}e{io8JrC-pV(=Ɉ|ֺsb_0S0S2v&MiKhǟ,2Ewg&S?Aij*FM*2)U' \:%"^_h##Kbc`۱fS"IP ɚ[s98m52#ޥ@hZ`~X/ȮG5Kzi[S)[y}.l˺]"CwQ2` 0,7fymF "a}[)pm3lTPdj:"T!*,=5iZUMo%[Y{E[po؈$/d3eOJ2S8{T\TBt1)N#!Nlx6=׮Qx,8,ګ~q/",nU8.+A阹ŭ?IZ'x3`?.G[(uSC{hRrzdnE-?/c|X>tKKT-[ mʧo~StTpAx**u'gGj@ 's跑5ƾpZgQѻ,q*/>~UCkI@?P_O.<#8ae]ڂe5wm)9izU^#=ߣ %qq$]c[Z]O"8g ~@C/pXDq( N$€fu^\ LH ekJNQKy^}XL[';baxrjF5ᬡ~_r_6؀]#u\,p24G9O=sb}e3G*XԸHܥ.HGEm);!E:쭆l å;襝qY}7h=O A!t6$ż[}|~q""U稳$^_69K\>ԻT7"i21o`u`uwc3$M~& /(7 Eh(Mҏ1- #,GmOwSڔ`B^1et.,ޭ:kd_Ye3}]Hԃ{=7p, m̯˝ZGi+ܣCrnݏkF@r[Xj75h}cQ8JfP q-M壄sۧG_wjR)ݿ`3#8V6}ۄ vfJC64r7hRo㰁s#k M\!˪9>@-2Wi(䞅5:7i&x);?*=ky+%G-S}dC.?-e@/]j82\K [~&^pL/N`d犻LXI mJ&`؟u/Ҷ(LBLb9ϭiw:Z+D.V33f`.:QDɁw؋=VNtRF hnО1D˨֏d! UK=&&k]#JS1f ~Mݠ&#@'tYX|ufzyo4q QMpw6K"~iVe o-Qdq>9?/v~ptӭcw]xFU.]}Hq.βm0T~J$vul:?̱0~Ӕ V0!6{$ÈԨ]"h9Om㥙,r"HIXyo +\Ahf%OpS{b pRIn1Ԣ6lϷ41KcWҸ!xQ keӞ_(3%.8\(*,a;Zw_o ڒZ &(}^# s}e  Ηػ7v RNދ0?Q\l#w+6Aj`JήHH cB>,reFNefPyrXHhr CA,C)!Z /M |\+YyPc.elꢨ Xʉ̬;V Ld[EhW.o> Gn2KO*4Cg}X;|$ϓyoM0x_%53 60Mq8HM,ݺu gfAN.u]+ .!i7O ϧ97>7mny͈_[XVsEW+Fڴ鲐 wl_G+rե1ukCbi=DJiGHyzg_E-ؤY% tקBk*ÙncʣQ͆^Н\,~ `OѮ6;AFVfAH<B"Scjy8(IX5)Y)}v"lDiCnT5m[ZMoRy jޝd$u^_:!0y~ (c 9HqݶM'y)lAwOȡi <kCُmDtF~rLm_%.2%NEUُӆgYA}):u6g>hh%1rS9~"wZ"\LkQvıdjMHBԽ08w:vW#_W嵛LXa&xzK"G KMJ)3*>icEiEXX7=׍XK8O(6xkv뀤ihbm.  =E4]) xmt2XuZ `R mcZ4"4xĹֽ+hbxcT~ +Rgӝo)9.kG_Q1Αֻҧ Կa|z18R wG^.d6?^kz&MrNxnRXa egTcy+L߭"qBX!<]xF_~?97Rj$da>rRAa}(ɩ!77a~ %21@ty!%I3E0~,*(_DP}y!Ǯ"ۨ3@jW_UT)$`4#eA^VǻfwV X$]$=v*~ѳ9,bW; ~T@>bn o+mG} m 6E )[:)48)7<߶լ%V}yJ#vweZ2."ϹKR"q3t6?=NMKx+羧r"V +Ȥ pG%l ,|*C'Ù^/%bo= ƙ̜ ~5l' /}+D4UMtCg_k41DiX0,KviF&瑥px.+'gG\N3(:(YMc0W#J=y 㕄r$R)a;Kptv܌9}^VkT{B;1iLDGSh>W/%/mjZa0}%qBh:%G=C?Z ftOl_1ކp,kw+GT3]ӗ vL \4iZ<ŝ?ݰ7z1Ɠec"5KR>ikZlKxZPmaV HK)(~wslFc(@{%Jhh00I?GH<؝5X 6_eǤ8?Ϟl'Ճբ]qttn@2@+^Rxj1!,0?m l|z=hZz '`q̌3~)o5^0\WD8Y+fjyW,t lwnP89_ׁdǂN3S=050/yya j7K 7fpMC 4H =D|5RunD>m#{CdG3f7zq0q1f~aeY'Yp7`_fAQ\cxGR})up'zZzI[MFy/Uٮws4/jܗckUAȩ3@ ͞%9Yܹk=FEC0…')䔠9~kA42[W9VU!)CvjIƟ{4j DOc77`!fb=)KJʏHSo]ƘI'`DpaF{kj Jւ~] B/o*m[BqYr,ME,o{7MPS(1N2E<Π-e `_x4/#5ϳ4*,|aUĽ4%6zI!uؠ8;=o2MJO|o#&?nk5틾e }Vߥ9'xpRӕ9 VDjztVm z;Iʵ.'*}k]RGi^{)o=sܥèK>t|f!3$xb'1Xccwh.`lة e vZ-t.B 4zR; ~M⫫̺!8= 5v M5eyQ WgmtI.}M,>Skė}Ǵ&hltzDiBGzZW~BG^,~ǖxE2c]KtɖU)axأ?;L`Ntj/}$"d&mxGWF:s }þti3D6ktޢ9̍Nd+H-/; WlX%^“e:5Tr[Vqtkq@J/imԑBv>פ4dXw @H ȑzy2zGOlOkX).Y//sF޿X3 a(Pb)u>J׽:tT(?WYisw0r 蔔@aHx]}*1 ]b? hTs1uQv#[Ng=fWbÄПi9͈7 v"ݳh-7߼RR{s$p,yR\Eds$o u|s-T1öTf5NdnI v$G'3ђ/4gV 7 h3jcLF<&aSluuO E􂝯|E7ŨG'4A Ԥг婆qT#˫zKz@um;**8s&f]Mtl,Թ*IHigz=Ib p4z^ڙ3Sjv /ZJoa XPu:nryl+jI5虤{;+{V[t-=֬(Vi}=sZ`_۷44 s$";5͸/%,&:2.\T Uqa8HF`ciG\}+&h(Xyz#h9Yk$[QOX'N7Y!LzH0~]BNrHxnfnY|E-~Mq-6`XFO&ssbq>w"KTv]u6KVQ};Rb5(MΥ? >@͓]=frCˈyRxX'i@sg̾k/dŢ,NO@;nΪYTD] %1E[b]9ȁg:ɔk<yiIOKGfԟp7Hwy`bb?~"Ȼ_F-is-WMĄLS;ˢ=Oarhڑ6 R*'uލ>ecDNwNv !ۗIѲ }~)6†[?:oJ!'ݚʺ鵴؆d< 6 =Vr$2[A%s2لO |ʳncKl7bv}γ4P&Mw [ʏ5NE96ֻX3Ig-W)P adgnZNY5n:KR5r/Gm5m#z"Y-y2f'<8Ha3p@ = 3|U ;QϗPҌ' j{zN}`R҂5Ч.&l\,?JpH\Ä%+2vيpP.S^bDzm\WHs}|YVYP_]4ޜ+janOO+JsӂKt$}l&"Il]u&l1nM$A ~ڮŁ08Hv2T-oITt=u*F᰽e;fANWF{Qm f{- xh/UvW .uhNpc2δ ~DU\T8`SB9uԅ co V͕"K ii'U#iUN;$]f#:Nd}?kEhjuDUH9+\SpYmQV dOi"+V=iQHglJ?JEixb=*F/?'!qHYe-NE4=P)}у檰|r pmZW./y^7=B>a5 !4oB-Ja#nr+; N"jp*|kH-CWLHAcSim`DA4l+\x])i]m/# Kס cJ]*N{H&dN;xf T*4]\1ӱϚRdk>KC{8F=TVIH>VP v`D-B)tD/ %ȪW5 >V#}8 +RNhkr іuV ć԰ÃlITYyKR=#<p 5TzaG&l0\˂7[xp8yrjYijQCJQ_q!uz*u4q(ug^6`YNH(˴x6׬11VO>q0zpr^_xj<''dagSt4pmiŶ?hE*iQۭ2'$u ex H5U6]3zcb!zy$_ߋŧNEh}]wY X}|k>ΪAMkL5&hLr"N,ODp5-ߚ%&xUNwGgt4_B=~ߪI;#'N@9:,"n EjTi:3cQvIkw6KfIH7 3jiλ+7^"mz,r ) 8;aCs*8-y򕸷0ѰrҝF8s#CGKd,sвuAƁJK1U9K˜=C7HkL]b"li~mDg+5/G#|`Z,(E7aÞ.-28y{sCWy_!TxM3G* "k75=ʙ1R%!u77 L aGU#ӖqP.x9E Wk\<OPxg/*6X`\IBٸR"DϦ/P|Ef;#!Jwm*{;($uIRB?Ȁ{E:Zヲ$ B"sc=V |p4ݡnz sH2~08\O DюœgNgO=xS ,&ՆǧI(n'A n=\ވ^j(?(cNW{tv>*=uԿ/Z& 6g6C+WFӸoCWhPDkZvW_IVIH qP{%h/xF5 W0!EG!M7&jcϖi>mVp!oWX^"GC_*ϳk@w$$kc #;Vb2;nxdj=)-=T:N[LPJCEil#"QwN;D &2N~ϴ+v2.J(|x!4N i,!#fuA" P9qHV F]=?2UpKIf"%lx0dz\Ȑ߸a`)$|Gޣb}hKcu*' )x ;Uר蕋+;E8/0ZlGv*{UMͿިϞCCThYkwd)Lc"j_kvyHpKHdu9~F2qj:U_REq6+Y &L%w$ck?c̃هʗC[k*H q%Z0++3#pP9wZ[s |PujyF#սgBe@ܜB xMHq`T,sNf(fx0S٘}ǣmHAMLVǕK6!龮 c%*~}P4+ST6| <29 t4gO1_7r mB* ?Sˑې`Z0zRĩajwt@s}(c`v)8bp‚D"$hAۜ Ӯ4$ThyЉ:jvL)4\JvՋschNr!ٌpZ ߸(pOlH6S@0źzҠ}w!e:$%Xv}!y_`5ˢxR;Aj*N-d b\UkfTp9UcUSQݼ#}իc0[,vmZKOc|]~*1TBuo# w1R@~C#tJGoTHwCN70%q9&=5[_Ա0S<.@#nPI?j غt7en-s\(?lH#j(/)]9]q*$F"(.wPiL&N&Շ.$#s+Q1Ѩ$]m%U 0t6.Hhk'/Ԍ@z Ddb*O-@|~ \m%"aq1f ZD EcF}uk --*/;Dm9jS&%$ůQ>˝eSW6xwU0R[3-w!?MRp޶H\IH\>88alBӿdD6lWە6(Q;ȓlEml~H tVwgG6=_ꁒނn }uG9:u3*z:o=PL|ӎ׌$è <|\6ukY geu4|s;)~O$s%{!!U[Ci^yMڲt4)z6RO;q1)$"f$LJ,`Ue%Pa Hԡ8YCkh.CkyKpO{=:t*î@X5Q[ݹZtB̫CZ@31|K1+n9^O+G#T'B-SvطEazL;JMZscgQd5uZ Q8܋h:4JWą ^G^w)ua)d6i^ sGQ XyP8hTM0 [;V6ޟVBfNFB} m%a5򔊜sЏ"3ݡ'DH( {PVV0E*Ss@+ 4 #=3'p#)mq0$$LBDV ` 2KfٟGm9$8nZV̚ y.nV&cB^‡]G&7#'b6 u ;3ߖ>⛑VS )h-{K}1tݾ²X\kv :kkyx[^vj9KxɟqR?p80}FA3虏5FGr(CS(Ƙi IIP$B73aUTcEQ?fHx~Ȧ8j YM9@S ѳTEY͞Fk쉚1>qP#Nr`.*^A|#/H݄{O*S1ǪwM*3'OqW P>zY5 *×2oy3$9^h!ZeBRwkG GPO]1?tݣet:MS,pkq!%B݊[Ӓ7a^n븡z|N ZFM{DBKb.g{N "R0db ArS J! B^AlU?kCT?"MkHUf2ϙvx;Țk<|!J c cVS[mLU0Au4[U>%T<;n2($5-:BIKY=^7NUO!;"|ҡ@lB4iyz:`7Y5>).qwfAV 4%f_:ܕ@NJݜ )+]SG2G1z]K|/F<dû$J .~ "۳I"(X_P+aT:8@Aw@"[gF:I,v5ڤ(@+3l!:j4/d -4WwtWkJpd+$(s02 ^6哬W}*wl`t ?׉ǣ)EWwR%*`NUA~>{CY~֛hUd4 KXSlq ANszdт:ۯB?T:󠓗;_ht_FG54S["CYjoJ`~=,휺f w?YlCM 7 $ F\$ƹ-ܒqM嵴% j+hvJ|1!{ɺ4ډk-*ЭI;O(N' ( nnbl(-,I7ךnIWln58Ӧ+ZXrZEd8A9!AiֱP Iݺ*O@X5pJ|%FNc=e)ƒKcAH mu8]Dvyx{e93Jz4m0CIw/n4GPHf#Lckrd:W-uװI}U1QȷՒP'j ^ sZ,L@Jv&UQAM dQXpIS^ԌCqpm,w?]-5?zsΎO k ٣ѥ"R פ֜'*Psᮥ ϊ`@$l[ (y5T{sw/z!Oޮib T͍cnEs gQza#H}FLasz7S$>[m5cJ5O2[SɺEyϮugnE~-kCI+t#ӳC5e+?.]BHOjBe@XA\meϽL,^7MƮr{@' xeg/Ҝ` ] 3~,Kl #K(I3&ĥ IE1f3"rZBmkm򋼳k<ӻ'~.h t![= OU\ o7_6)x /$j`Ѵ`nC(xL1^+y'ev҅[u `-Cs`$F1 юꝓ (>źo]vha 5cs`vwUIM_U|mĪ 9fB8.=+tNa0Gb]ˍhƻ!=>z^s] 8:aم?k6f }$LUg 1j~hE{dGkE<knz C0(٢E]bb=ڎ:bvAhij+ɍzҤWb*kSD6c9aMNO9 0 ! 6"IÏRT‰= C,>2'>$_[ Xdr\鞨7 _O/ҕi\Wl69vu8MtEf!:y6`";7Z5y9wg}vE_/B:Oiղn#0g TdH*ᝪ吉I:7͊ /d y;mos;\|a"[ 'kҋn82<4gBXa^W%֨j!^$ʗ8Kf#!83׮Sq}/־0;>^f);eTc׍V 0$I/qAvcNwgόɵqWkthZK r@{zX[U[34fSh4kнR']?eʊ|ąyuӘ8zYOsEͪ׭$9n+: ^Sl;Ai̺n.Oc|@7`-#c9F;]#T'Z냌~ f묧8>eIi7U5~7;P?dI/1P6T71so <%A@Q;altD)(cYam*eLF5m`)ҖgoSmIrd(^Ŝ'ȝH]\ cn;!( %Ν}|6!{!Pim((+`|JٚjF"9 ˥@C0R)@dcdв C6sgyNj:P'ynepMv"çrV'љeI/q6+FJVkKeNmU=s Z]:g+8onPkBU^=tĽdF!v':i5lTQ$mMkX6d2΃;|lgf0ED3ᑠ%K;9/`<\VMK?kT@rxkn)ڲxSI/{^tiAXV`"_Op Z]IXe <߲: /hyY^)yoژ}Z^Vn,'*/qe|#1;ηXJRf3# <̄l{ӐH=[oYE=Tdóz?޺N`(Kx8kIΣv ]ٽLR2"C(#`܌a8YBȣm6}I5Wy,<@xY#-n1mh Ë&I˘ .iAnu;\wŒ'GRn훌+^O`஬U j l|? ᇶThM0z)ĂbS@>cG$S,:45_e٣r?[K˘*TY~LJ@#R8NNbi5戣<#i]M+Ĩo~5ЯbDhL}Lem2K(Eۏ,oFec De\taGxy 5Q*zLKBhȫ.{**B! ͟8 ئ5Ht7Y![Or5i_@Oc5+} 98="! TdOfs9AXtI' ¨oR9#<d"~߈QqU[}ױS_CC=gGxf)ut>Z~}XW[&rr!DŽ{>.ɼiSQfUz%W2auXw6>ԇnnukHyBls#p  jQz,??axU˵H)TJY[~o,ɫ7=?ATX^\:{,0#I2\ 6\0T];y `f@ :J5k]N\{"#7)c.R9ɮ:RDGi8]yS@X:I86>l8-EoH3hf.0zzk-'V jfsv$CS\ Z}wM}]4>cB A`zq;L/l_1`-4bkS-GFů YY0rb{mG錚\Pb6ESv~tZe8nVN]hhm}Pbdɼ/r4|&xy)\H5q[䗥qW0dd\"<게`23\*O"Kn˯TN?Vtu&>\ZF٥ 7O:%Ov,lbŸMΕF:u!Ѣş~I鴟{'j&uxtW_ Ib,n6D `8YW+||?;⊫!ma2x9shIq XOV+Ӥ5 2X// xrNbW$8`#@0i.8xkh P*k$xR.Fj/Dch _ Nw䎙޽9iQ!Up\-ni5-V++Ji%0 x%$ɼ|%JX`aЦVĝk(8%5'}G<3>T!J۟09۶]$\dW8 rf[`S&r3U= AZ '`ս`Sk(5^fmUP Zaw?W걗< ;**,k]@ɞj(keM.Ev{Džѳd[-J%OT7bhZofk7VN3ynvpX(*B}퓢O|(̈́ 0][6 LÍ2`ʓf :D`}X*#J}3gkeSmgہ)E/ ײw/?^܃уOD@ҁBf$%s4L'blϵNl Ȟ' n4iIH˭C;Z" MW&KZ31)Cʁ3*u< ɻЫ|"VBGF,ƬzvɯSGGi56Bi&>Z/P%6+xvG*2Zo=m&Gtլ׻0= qT.JKG3L߻ʍ\15Qi=S/a}fxXfq Wm2{1N_ &aÔsS{K\Ser%:<ʰdHA/ 5ע),oS *8b[ lʹ/jӊ'~>e:EnmkV W n᯳W-@mLYR6_jqKדh"Dhu2@!/m@ȩhLjPƯXzR^D1r[Y(z/ rɓ-U+UHmptHZPd{0TʻB }!s;6t6~> GrسH+v[l^- = 2}m_79hnQozL杝ۊђЀlhO_ٝsHbnQjMV$6˰RJ+ vi<8NJ =Y@k;5³! }K??7: 5a l4 \?ĢHIF§du n8ʮKq睕!Tפm}Ӭ#ۅF$^s&5$Av&.ڐ}nr+=sAj3}S&5t .d@͎ʩ#}x:v@&._ѻ<$TQpT5 ,g[ )0 ue їΌONvhٗNʖܻ4F/]fsFeƭz9jV;=0̢z5t[qW_}Է@0ȓwSO1U {} ZrP06>@9.sALQVsAWb]$uF̠Rh>yO3@7 I=Fi?Y3(,r)G\;7q`L/l?X~-+($ #IA0ZH&g/965s<۰fxubh bŴlc$_Iǵ+ډ*뫮/]>Qg!n;}o'zqkBŢJXVXGʐGVкsGy٪dWvpZN):ZT'+[fS.. "xOs؅#KK%>$p6Skoܨo}N9n9,Vޚn*넳{J`px/D^L2^QfӼm{2!*6i12k5A>8lINυEfv!I%8 j=Qe5u{]^clհ!* BFhd@M53}QsuY:*zۛt<[G_ қ+!!c/=v~4br "gi6x\45΃DKe?JW?i'5_2C6OL:%ݏ9^2~ 4d7}}8Do"Jqw#ZHB aw+, zj$ܧ)յD_\g= }~PC]{:B!p3 X)ڷa&2qfS{$lmRӠj<{ 4v0ǎ,.\W )< jfY/PNf.]0vt?9 Hy\qDIwyaN@r\ cw̤$!^NH. 7DIVRRtWu]JiDof`yge'Aq\wca Fj q/%>PΎƐ*`;6a-5|mMseQX"gL({pb3+#T-;C/-u/.IǶF*;p%GՀ΍bI}'HDY?Tcㅥ-fvK3F\iӵ׬*_87Cykz?ŝpLH,~!N^>29Z^.${C0gڧdM-e8F! WIњ+(fj 9;/7PlbI9Rr僪M.΄SzC96f8%<<۷Wxr-s&ډ?-}bpP-P}nɉ[E\qcF̒b I[5^ݜbSpJ phV޾MG7>M(ϐ6z1&v?Tp@\('*;1fA98Woh۴R9te(Sz#|v4.ʨ !~{f6; n-ب% n{:Mf yy! x}zGЋ(.l.B^ϙ42><94!O.[Wic'y!,.P5+)) #Ld48VKLo5졍Wvhewߚ)gQl\hQgN3\+R[Ɯf 7'uFӮKwSgqCBtR >@5Vmd| gt_GO\t2 I(9g&T vB*Ru`>Nɜߴ"́k8I*bdu'NyetDlgws_@AqEAlO`t)؆{lpѧ9Ts| LVtcNt\bf8b d)d1x cCPji\Tj!b1(6y˴dW?*rl򒉡 GGJ~دbߞqq2r$3\>!Sڂ® C/^mq.Uzh RbH{&N}*hdaϭoѩϹEșT&K_iCdj̟.l gG4MH=isin^CEZuc$Mq[NC 9w6[ @[Y1{ui.5@\D@wT@^\?.D֓LxL$fh[oWYTV> MhMx #'G.(t]{9€C**J2 $ՎGԫiqCDx{`ր_ILrlQMzqg:SK#`&:@;**JPw/chu$3^?zP2 A}(3PđX_A[[ܰDveLeٸ׏_d>tc6%Ƶ4 TT{%] ?k[Jҫ^ԣYImo.L8e]nf?@ڦ`0m)^raw巒 szʡdWS_DFAJ>変U&<~OE*d5T7|.Xn\财- GcF>ulL$;ڽ[WdHm/ec'I8&IY6q▬О"85=Dէ kP}ЉوV_gsIdCvB ;.χaO z.Ob<ܩT5j,:_Dʬ ٧ʗ O?PN^M?`>`ϸ#&54O=1c4JoT.l KK{9:2E+Viw|& t'{[~GDuayKʀ hڡ|qMb2Vo~CjQyoP@iam m#4=]#R6X|oy9 (Y,4 j3K1si!eS,D$ƽX0hM| ̻eeَa%t9 #@Q;oA !TvMCOD4b 2aUYtֻ ]R?l];44%.&Ԙ3^Ck>n!)rSݩo),z+2 =՟w' rSq:gUِ%R<1SBhcڗB-2LJ@P-&bE61UMU dKέ\6(+t0 6Vf$S<LdRsv? 7& Z1NԦn~hC=P:QC& c,_B59C M /vo]SUwH.e\]DR[9=T,DO,Ov GDAY_}mtBϕːI.@EMA=&H6<'dg gR{wyߚ@X|7tWuOiE .)l ϪyɥvCdY E[嫊h1rgz1 7@Ny ԆV[Ё`h"$lMNa)\I NΥ`b _Eo2+*ڙ0~Ŧ&9!: -(FЭ>JTג m$Up37phSi'v(*ɢ{hWSn5<Ez"֔?d,@>w }::?s@>l#(̅%:&`6ֲÚ j_}nNb$]#ʝ}EBKtp}e2]yNB^!뭡]VtA]%)EAH1pArLqj 8ΟhSr][UNMRnc$Nτ~t02"Uq%|yD"LF;"| XO쭊 JB=(\mK`Xj3N}s\?KH$sށCn˞9roZ3 %cC ر $/܎p=?R\OCԽd!T&g,n~_mĥ#Y&xH}zkЂ__ k AgrqV-k߫8C(Y5t+QUc+^שl'C*LeCwȍk1bY-}"F/Ű?Q^_7#!Wi#^02]D=(Dyp"dc54-FfrRdY`=TWl_ٲ8`)klbLq A._~(c3%!ߌ=:w |c-OhQ"-x{2z^|̺N&G}3f7v(_-y56R/,Û ƽ 5n'UT>:v2'A9"q-ZoYfJ=j+νP5d J,nE8&~%&?J-+AǛΕ$ڷ3L&.+GsS1;>S'X=T)DRcB䞖 gL$u8rKZ\T'jvDhSXvyh)-U-Ex4$KeJ -HR>E.K* dvfe9eӟڑ<"y "Mn 48SʗFU!f96jh派DGڪܔOr+6CR(}Xʕnb3;FH}2HdlZPi,.tᇡm scժ3=V)[h3T,,2ۍG PLˉG-61pMAs'ӂQ%֙dY4 )s6"}YS}DУ*$<}8H^ThmMް$PI}h͘y X. @#z)O8`U9 ՞,d6 rM(V0G#4ӝPb: ʘQ a7z/z}CZGDŽй]pk;:,~|.V6=7krlG!ZGA+0\2a@%Az `2clIX_f>!t/eg$RX ~+(hTJWzrw'Ib(/-[n}^Z;3b rF?]@ M+<݆Į"~A5.Q<ldme_u8%9xoL;ƎoE}\JT'TK%0`ڠVru 'Y2yW dSS$e4 ]I|^+1^3ct{mEF&?mv}vc (Fܞ.h-PڕR0ov?TڥPla/5JNJ/lM\I{{oih#&\<lR5iM< =w6zIBRႂWXggIg$$?̓.~!ӫGQ ^%Dr&"^/*>'Mtp\lcNWlꆊ;`TaP7$jKY2u Izb\/%;˨9A$\QYV6Ns5 H'b .;R54$AQlx1{NxLO\1>8pvFn^U6;\-Ƃ,d,{BDF H'=ܬO^3a$M.hSr<:\Q8{ aCIf ^CigУ4}>":24{P QI6P^ts 6M!\ّU[.nj%g%׃ŒRiE>狈O~Il}IiccM,ݑ"9N@W._YIWMZH+cmŦIIRߚ pvҬf,^/9 : [v-6.H!O r+aNla*o[BwDxl L 5[rqO eTBW UgW%M$dUJg#}`k7UW}  kOsfufELx^pnYXK zVԌ:؇3,|20߆-l"xm W6" JrSq;:9 ʘ3ewP¼=²Dr[q;R~ 仒ݾ(9֙'5\ w,vu>ڼ.AE.Obu9aY6 62S1Kfz=s*!"m8\VAd^XrRC2v\*q\ly^X'<-{,IuZ;{K\KӨ~kQpBGh-Q0]RQ!<ơ7j*u7*b:$ bh~H:3ܬ~o_N\ 2ucbd;lDo HAj&g;۞e~𹝸 ʡf֐C\ )*Wv;wd ɼ46[3έFdΛ$ЉňВ.Y#`vzāG `sg&xVlcFꙫ'$m716 sF` deM[o8^Z,>DHl|jC\k6aN'Wc|ah7qeS/_Z_|hWtQQQsCpm{>VelZs@O ZՌta5(?\r]ʲE^(7G 2{ 0CRrj\$HJ ΙdԼ-( %}.m}$v=b'Aq.5FQzT %R73yUsOsX|-jՂA -88%N ƅ=d̚Ol"-C`KBqf-.+UU }zӒP 1aM~.OÒ&| F4lg %:_x_I~?SJ L9MZ0TS:.̌hqP:& +~|5if [!칉[1G% ni|}i*z] ~Φ`e3\LJMq^\ Xftȑz("u%.C{iQdكwaRNq.72-pPF, 5Lf/ayN ՎFuT4JI! Ű>M}o'ϴT2rln=.iˮ!߲ 8,瑞cG+`% z.m(PE+K?R~d[ԟဋzBB-+&*hth 2>m#vz>4 ,ۿA_DPC~yˍFe*4 +ΰt8}(Vy'/[6 S7n>>ڏf1pTV3kbUϮ옣j䂨yޥO,tQ*gS#-lCi6]\~ hN'VHd^(Ix_Xp^0(pMm\$ukL-=C5KbF:rDPvm {"V(t壗3 vHN:P6Ks,SHUGj=R1L<+$pTPO_^x2bï(j6E#0Bȷ skwpwX~1Y+lxe׎yb[M^^sӎL\VkɱB^G{Ėo^Tvb &z;T[qt..ezt.}>!eS2gǜEtQu/|7<֒br1H ^`ZcJʭ!"c$yڳؖm%z=pL * B<#EJ܈T|0bz=,*5k|\´CW[ҁ|IX{{ȈR2fHd4 &؎er _$L#/̟,\/]p!@z+Ewp8!hw䰃Ll N&F0Jb`W6P@GDv~x4";iw2x%ۂEs`k*^,J6Ha]xHM9Z^ "fR[50-@0`Kv6=Pm/.l42pES/E.icTQ=HڔBfқZWTpq ]7xʪY=? ̸q2oo\]#5`".ۏ_0juKz3YrD[qއ7}-8cfE"5,aPEf*|G|󋼄hPO ރ[˂p9ߞW$|sY S11Ԡ@S&8>*{ %SBKg9'v" {@b @*K:%r+܂_tYR:2s\[][Jj^_?IEO~x$ƙ->gI{0?Zki5CcZ5rŗ@*x3kc̳:~Vj'i6 N9BA[@Eiu h2Mzg_>PWuZ(7`pbdO(P)ZUpG`,,RWjQXp&~)^~_Vu!;^vCE/Cw޲iKiAp*'yejT g188WT8[Ty{0 Rz|),F#e|Op`)C.<&{G&PeN:MMm 8X,RTeklv7:-?8TJ"_fMN~ɻi@! $^&Xݶ~:dHDh8!!?qV|mq3q:v;aNGQ2:gv\]y+[U0|eMԟ38p9aEo(fJXϲm{jyb@S4'W,GˈuAh@{벥CZ4/Ѷ=Cʃ8 H, /@Ӂ$ z.zkSlFϕ[26o?R?X:pOL^-hHD͚v anB=M玵Sz]"},aTD;'n * |n2VQ#=BQnABz1D%(?Μ%ck$9cBrm^keY/DZ 4.e/tDϘ% /Kqp'i: wvuaR-jBQjM1у|uRa ܪQb6(>\bူS ѡmTa[R<|șf{rVC;lxՋ\[]Y]!'vWNb U~q]*vW'?V/K)CkۈDi<Q1F@Oͽ4nCd!',rVQuG9eS@tI`0 APBK]o3B |uѫq$vq]ƒ(j|a(6KԾm5C(VlzxSYwqLcO>(o<SXoj?{gJUSM&_=YPlRkpu2Krq|$\*KE)\¿oPn,_[u70K,)] YOOM6t5>OZ$2%H2+lp@l-[$GiQoN.*ޙRͫvqX__tK5QbPmYga)z02>ρ><`fG#'㇓$1%J9}FuB.:O{Y#и ,JNte]Eed˱ENF(04ÀBKGsL7m/.~9 ?;W&k&PGă|)2#~,pѮ<8VvkS(x4.gLzE1w.0|b1Sxy@uQD|6ѤzCIoi8xj#> L:/%O1o5a^muЬǚ_2B!9p  7_}|d#o%˝ {PϮ6NF [U *=C 2,TWFHj֠]5G!&)o<(I9#ik$.3Rp#` ;NEufIDŇ`J=3kкG8,?+ 9`{LVw'y,'jue $j:y~lJC2M٨z32rƈ[ \4R!rǁjj\^&ޥ}.D5$X$$yNzkaSJ^%t%~S{V9 &<[Ȯ&@%d+l눮;93Ө5@Lf%WY?ƚc+SN|@$^퐀, |xa{͔ F(x5DbˆH۳ #@,̔f9(.#7j[<)2 ɨ)g[-ECVrQfGy',N9(j5ksFi*,=pWu9q|q=Pa o%C\a.[b6hތgs)o:ɓYuT]$!cv1< 6Zl LfH^IIWYmfVzׂwv3q`vI8rRɡ˃1:bـmB?k[LMQ;>g.DmKO?^8g89ZvL8n~eS0{FA+I/]CF/Qg?,#y ufyo7QSl?W#zfk޶jV$oV`&*c&f ˤ0o7I?ʊ K-9Ґl /ɞ4y vc`׆'H0 ,xL+1w_G]|9G.xG]WG]]ˊN{2 D] I@?kOCgP*C |3.WϤlCڈDRW1J̃~DDҪ4lI h. -*ѴxF@դQּvjA~/CHx.Y/ H|z/J ؿGb͂D-A]RA1l8 A F9O7SkxAcr$`8jMTՊ[uc1IuOwKXVj( rxnik=g6IMJ*8jFxej-D 5qǎ_* Wk+F@Qcj?vzGbl2 S hXb>'%4Ġ*., {(+4Y[*녰}CORGsc"GK]!W;awƊvV{IzTf "^TLlTH҈1˄Y,6ʩڐ@N'?oﻑ+Ef= 7v1Eld,:t;I ߹>رdJT<.fc1j/i\/)#C 7Mr?3Un2sl,i4wjzVu 7sER,k=Å]kX?Bկ6؞ddr](9~Ȏ_|4dsF΁kMC 4k吋vb7)()jKh=!]H]?>\ڸP.]AРyUqwXm5I[MDyx,&^^5We&{!9<*ǣ!H|jC|#-Zl_nlETu[>MR;KwQ~պϊU,seR<7Dl}U! Bh'(>qn,mYR t*Jb:% Ϊ_d3~yHjG ҬO: 9x u5LHJW4/[{pH#l&cRÙTrV'yFE)HNX'Z"*`8auwXC^kDш (_UAveϐG)z9jZXZ{Xw)S y̤֕`ΚBAjD v!.!@^}b6 0F&IziM,|d:m˶+Z;-'Gƶ$\) L;VLvf>l'e{"]LGӸ`ݮ ̑b@ E{$ ժdtdX9~[y0bՓUDcjL.F۸QRPZv@[ 1\~Bϫykoq$ cZSHQpHJ00 R i!Пe)~dٷN#g0Q &ȤqsGn}_]MS E1>BST^Ӊwт.MP Ǽc4uRp1: llM~rz 9Nh8\w\ XWR=" D %w3`wC"?I:d|2^vȌ@`J;ޅ*k|K7&{㤌McJF휂gY0"2>|} JbBɈƆǗL(5,Vi O"A|)NwɈGᄿWldK|Uk8Ueg61 $HAs YcnJ*H+VQj;ZBnܜQ-'lO5<$Ffz%ٺ[xB-5{`M:d s@v"yiw:tAnxƊc ?z8 +PZVayck nGCI\E֝V͋iv,'Hv66Qlf*QW9 ٽg4ҜTm%sQxJBbFuX%shJM'~0NءWs #g0ϿkøY#0 OCEAykQP7\?`t{4_y g!,|$c< 3=Fh)aK |iE!ty⨨&' |l{!ʛIr)^zX<'АMwfwc_cTMd7} }j{b/Xz=ga t~pXN^ PvQc,iȬ#!:`Ao7p~œEn7F(8iW>N{wlx EXÁYm3_Q*Wk9D ; Y3wFP'zVcOxYD1x jzuHHax\Lyn(H8J3=iHH+{f4] LU /Z؝ /-_glx#7 ~l>)sFoj̭C~\plݸN(_A7(Z1hyDވOfYF5Ph&'y tŧ?tف{_]vM7+_m% 3•C|?thv~.C+@EDcm+(x-HFU\$:q??fetB,"=kudN {b U]5"ZGVgQ~ߤKi|ݽK\h Dwʜ͘UOd\-B(͑vנ E:BH UMbN%v)ȹ{ꗆZ$؉2,U0v!a7|M @MB Mg3']¿ltvn7EETB:ū#rfgZi3$|ixbqy:s$1X$i _+oV5ʟ"]gZ!9Gߍ M0y d'WZu,YS-*:ÍER%WS.,\̪7/:i5c;~Z , $akgE8zJDNs=ws2)hyzdK ,-&p,=].N~0H# ;@ӵr˃kw(}I5dPVt0'K^62X~ d?KF'P^Y2j#0NV17P#=iUv CQ!X;SR9z k;iU;Qb̢Q]m˅-5ij鐅[яWZ1i2qo裱K)oȖW~AFmWFwV'a'j]S ѩmA;zf&߃+|/2儑 75e/~xܭFgjH>V rIYfS4Gcz,򕅿{[s^zaUN%-RD-#bu 4c4fKUCm/@#v!2 Ni"#?æCN d6⾦iDjNRž7U^6a6"CU"92 h3L4l)KuZ߉ծ˟jiy"-";d%:us3Jd7XK刃pj&p}L" &15!fiW>pd4X濜r@%A*d}%lu&f1r |bs%Â@xoxu[>ZHVvIIԔ9T$y.j 0*ِ Yphɣ8U \ X4)/79ohjlVN{IMh%')(MglV弓m PЫZu`Jҝ(%s33+,UR`0OzK:8\GďˆC8s*Žug0?,ޮw ǧHPRUJhEtk[{+Z֟W!.v qTrjߚQhU X&IK⡤@ ?$= ]:H3%#.^~n <}:rKZ(fFJ£%d&>$#(|1(@p#fzQ`վprZxYAD{ ,v~n 8,<be8/'֯av<7,M7&E_6hU[AIA?Yoۙu>9{y3K{<'qfCVe8kp 4lbC ogA_UG9d=j[;)ӳM):lazbױ~nL&BCRS9w "T62vsDX)a|b$' zbWIt]$tYa@Cn0ϑѵ>Z&gT}4hy1(4bYzCg`9q@ J=2-)h; y J wXlcc0rB(rl 2崮y)nb#OqUe#1[#1HUtDŽrCFv&t[B `Z_N{3{jN|K}Fyz4M_{\lONf#xs cJr|~OEa[/춎_ t^zBf#1@MIp]XxXD2ӃZg[#tr{V8eP13'$ﴹ=͊g{ܴO$.>n݇ڌgy#F :w>UIQyC|K0<iB9p%(ucT%VZGK #  hP,弳xqoMnltKM^}ܒR(8ם|D Ho!6z'x=#h$;p=+8A*sP@d6PوJx PHK8 _V:௢X*ڹ{lG<ec oMWx >' w|Ah=X]㩅_ / C ڸrSr}#"Nz<)?2~R=95^r@wx}1o =e7 M%8ҭ-j}r%.+%ⴴ,wԐ!eG_ XC!CdcdSm& dH2L#Ρߦ뉊w0ҍwرQ,d֟)4*m(n׮BBs)u$_>bvZ]_&:.\_YG HtB=GO@hsWG(V{ISQ~<"IYapu\fYcq RmVR(=Qb)r;c@m"OEFYN "CbQ@rq)U_q $$ ꬔ^ y|׆_/ Dm*XQ@O?I  jh|e,'o[#F @ ;d)8ja"0l Fp0D9fSQʑlfrΨLnP <&K8Yr86rcoBi)܀):X֣Zm3vshE?{HWOO3_J&4;Jd3L=py+Vh`*z4sT6ʡ/Jh+1,J *3DL=иGDeaT!#im~Ki[A'/d9Q A>n,!@ۻ3`k#R:W&I lݏ֌7h$,t 9*oekt=*:*.0=vޟ[OSJ;\X_ز_^7tb1Toټ5 HWfi&ȲǮ3O/ZZyST3]D6{C% \HضW QA 1{ك%zσn#ڞl,e1\C7]v2c68FE|H՜~܉N,{< sk4f3*2͵9f,*^6IXrS nx^׮r[]_=ci J'/QIíM-tM| 2!ʄ4Nŗ 䈧ֶQňE)?We #~EW3NrzU)i$e(|RmEX Ndfu'QowSصl},D%l^ D\HPZ'o(erUۖgI5C4L[%KW /ӷ eoڐ*d'wZ0PD8:FD孤{)6b1oЏ!V7D/0k OxY8m^"8;e\9ʱa|q(mTi`\_Z`]+#o@b\HO"RGi8W*,;.Xgk5wq,6N:,=0S=Mx ,ܙx:# ;Ql1@GB/A` 1ՃN D^VϴWiev?:- !qzFD}dX#/F3aM ^&M΍) ?dA4xug(ͨE ܔ]F {f%S;'@ ̕2U4*路;.Hx_^.b7;v%@t42u*@@u4PeMnjHfi۵qS A^ 0ezD0l;u;_& "A)/78[dwPpj)Ϗ[h` 4?_O$1rJ'1M NMoU~@[3*cu7E=;j}[{ODbcR@Yi|A;j" c7[m}]sa3s[ %ATBք2ۍHwH(QI .ejU@eCϤG8VP]mwCģff?BV^/檭-𗄯:3EΣ8ۥ򈻆 C#7D Z ml%):~ V犯;99n', (,c[D TE_^D͚'鱋dQ 7/벬8_o4RҢQtp=J6OBy4x`o0$>qqqd LHhyO$tbSh2(@cwCz'JnkTE(P)K)Bt[s<㩌W3:k-0/OvOc ,Y$p"qwKM R6CGG)5du|"rs>;U߈Qn+Ué 'W EFr \v\PJ,<%  +Ue%dFV*kujSw"ϾZ%]Q9+q1C'&n$]m_$#ֽ::Ŕ(F ӺkZm S>Jٵ*ߦtQi@3up˸~R rԲvbL$Ni!+-|+/j4ӛYSyS2R͡VϟZ;>.j&ɓv b>'[%"JobUt5޸8sn}QzxܯOWnrk U]|^μnۗk8TYULdSۂk4[0ٻYpӄ8zXS 0>A aVWy<)AbIwB P9Zzh%K"Mx4Жnm<%?? P,VgEO& Qg:0pW ɟ;gLll$$UR?5Ƀ coC0H>_ϧh&/om`\F^$¹#3c(q}?'=f2zt-쉊y17}[3?0)wnI"RCUOU.|;yjú4'<{3B4fL&IqGuB on>騮G՝;SRh#~meiB: /\ IzKR<(},³l;lhzdp\ XJjSFԭxޥȏo3[o˗Ci&+Jo2J{"cR,c'i]`F'pm#] /PFRo(b 6ek =4( (x'r*&3s>"IEVd1[Vł9r+$@ȠoẔ> xsZD*uw`ILf$Y&aɹf:Gn N^ִa'a/a:3:MRك8@.R$P69_ j! )KK"I&RKE0Ud"AHf|:-%e=tļOdN낙#X4(`BŲxHv#5)z:RysޔDD/{5PmVd8iR&xEgz`=2'L1 1 v:L~i0ĴS7Y%~:=_t9̉{`6M_$E-0|5*+v!M .u'maZd˲~"c5S*{??sv"bANX] ͒"ϧ1@3SQoe ) ([^󌍓Q /yDd&@ոmIf.Q|9h,7ݘ"3PzDbjэޘE)]AUekH CjE-b/dž$Bd;e~ /4|"brN?Pb|ɴvD+2~*]!G-#mC.XקJ+V;lvv,˅u=8D$_̴aבΖB4h[غN!ܻuzPSm´ 08$"uUhXW#S@kۈ_)R›Y )iT˩:/abȩU=KbQ3Yf Z(ZYF/S)bI+'pAl:TF>Kŷbr-0kcg{k#vLoEJ\]~6 ANJQ ҂B0nWV@؞O.x-pΪ 9[VNR*TyT}_SF#)Y(B.w ?_O\H 1 ]cM"m>PY~r/,_?}a0*nA6@ (z#l1/|zkbB/|fUcʰĄ= :>fiPs~MGpܫ S/CL|f~Zvq4wlEi+P4ϟ!2gշ;Ix4;T[O΁܃f{ypQ-_皶R68X=ś18ӳx:v.e,`=aX@^7;9I>G 8 Nko.j/D:BX/32NLsZr-_;g|FZv ư')K6vlTOU)trUF i@>᳂ӎ=][ BdMM)#0~0<^:i#Xs;%g4&Jᯢ7O:f_\3RTubv:3t5g%mƎU7}rI=>yJ.h0Z~~_0 UXs`Ŕ 4ILz W>jH4uML}3 ' :M{:b *ޯҬ;K1 t׸y<4?T/"Ug³G IIdFu&ompY@Ñ'_7֌ i[KU}/ y,']S f/fmVbc,h*|[ۭvVE{t2 /:l_x6ͤAI_7bN1Q J9v !t^r,BJ0>-C&.XaNlU֡et؏8_,SBDձBBrl8 yYfTTG>xaIB19۝̚yᘟ_QR,;߳V :]wQGzPԃU JKdڙ\:pݍ-~%wup:s9Pי$ 1lE/: irS>(˛C ŏMD:[z,(mqX ((CWh`Q:hmZ{$B[=@\ylKϵM>:ל~H[[/1^hoJLI (C!l)n?H_1d< +NLC(fJ˺? us6"J^||/%uZ/近`tɹ]þU'HxO͢=Ђv 3~?hk6yie<оҖ`gmEP}82$n9HPSTb%5(݄Ͽ7E̎oَK::OvixcGjMw̳'}Eġ ^A"D>bbYx,1DّV5jg.& zGNs+{n൬{,k;y}u KX؊.Kl]㳪h[(4 )&]2x)VŘ!Dా@ό`o^U&/AwAo|aE4`=T5/ 񿜲ΘY&ԶRGą%Ecisrh—@wf{vc4$O;kLkubo.`HމSIj{ԥGN:kdUWC|)NC\s4 S"jJ jbt=6Xgkzf>]3ێG!-3s n@Fj,NRZu9:%וEZPINM%@&I294c\ݤz.Q6?&:`˥֛N\4M4K,@rEJ^Ķf5>z0b0:,۠֊Џ"_[M+~ʨ$DN8Z%AD?y !'ћ7eh~h==Ak :O䥿 FmXq^,aƸ2 trmE|`pWuVB#(S L)jY |!ckcj_Βj#E[2Ą/k55ir]YM1\ blMvԩ}. lG[)» T0 NTd{b҃>m6[Z(.7s&t^\,c0Նy\D PT8s;9>Tr{D*9 cmd+A]d7@?ClwZۑ]^%Y2UWilwrn3t2v 5ѐM={[j9#sgBTY;c\O k0Az}z3w蟥x7Z +ZSC?ƢbT9u55+=xmVB:TYpP;=r@2m #'I{μ Va  J54IcxNbi\TB|=/E$DhMxjœ&+OdK%uY5s1pӢCo IΒu毪w)v)9Uy8w')dܰu%0D/fbp^,2.N;JGs'#S]sH`[.WnX*RYGۿ]xx},hB3\FGk9+r ,vk?QR-G×P;)"k%ݗU|/b0l1bvH3J{1L:*k-OsMk[rtL`1Hp?'k(V% XN]Cn@ fp%t+\79~fb5Z{Ԇ,.L組Qޔ3Ul):kz&2ePƈ ~.:Ϲ"0-hdyϒ=r$;i4k 4ˀZeY%gd+'Bz]J*W LмqCrd״)=;W_& 5!MWaMjq-h3b49)ѬB[rQmb2*pUW6N [DWdGpF,?+%;7.53yɐN}KM5'ozdq-p0PL>V*dauN F6mDIgvU^m)vw\Ž:Qt#h nӽɹVW U=&;;jB7 2h0`ά ,X ɾ%w1t"5Rnܽd`Z=2fJվ u+{ؤnS^V: VC!@cJ_,Nx|!:?{ΛU /ܨ~O*Q.&;-dԆ(%a1ΚMi0́W+P=j>xf1ռ̶-g/t I1{ EAv\U3׏ieJU'ت.}bP~p fk,;ƓgNxHYґ"0),˱{d~},eHKDt>ڤ3$x umba6Hm}%z Lٻam\=*&p[ma2#Ld9Ǹ.,[~Ot1:o|PE2rj"7|O;L \L mӭ#nؓDєmg1 =jEG~px7{yy~q^lWg1vUؾ CCij◆d.;F=4.KpA ЖN4 ֫nIwhι\4P#iL~1PEGאz}G@_ãQb(v hƁ/xRΆ5mS.iUkdEˈņuؓ ҺY6aBT88u ;8ݑB%l^V.cFe*Llg6eWNd(nߖ7 6d52$нo}۝taE-sl=j 'uup+,"A",V x:~ ?w҅ոklnP#~4UU`&,2$*qϻ.mX宔!vک40dy9I}XR[!0ᾱ3<a3P$ߪ[q{b֜W1Dp"n>-]J*=I5ZwvL͏}v78qf]2an0-^zg)'cCؾW tGKcDEчakA*u'vFHO9>niTrQ@*}^#_q.@)z:X>;Ef @0H׭EY{p x}]ċK5i?BNWSa[0o3$q0;9lZM4r&SP{vStqNt%e.ve+nOhPMisCؤ!Q ߚ\Ja;<=49,#%OƈKcY;,e#E CM PDxs/dlG_HAoy Rj*57oǦ'xE!=āNjT#Fͼtc`ϵ\4C;lH2=h4s2Pе ( &ȬX)}LNkĺЪ# ;?lT jAWb\PBN #S  Zv+3+1Ր7N@PKlir qz7sH;P9 7^5`RڲjQ_%]q;_HێռvJI3nݰñ R(.QCl|eW\\ @>ڎ)Δвkv|oc:顄m41D,nb1jp,S3Sڐ v=J'?e>@$:ɊU͊xgVlvx{ &-ҩpjEPѐ+/ח ={s+jt PPxTW_ķfMv{߬zFZA|֌ae7a61y\,t6 W,`Code`& o;si)شwq0+O8nz]d>ve dܤ/1.ϯx03.5s{ R 8)*Ѡ9 wCInҝ<],]{bh,9tJ5pgx x WRYFӔ컞?3x/QZZN]o DBQ8>Ӡ<8sxdVvUZYGȇbWYUg* DAcQTK61v|{AȦfF@X.'6gBpB`Ir@HQw,|{z,YPj [ Y`Z -A١P@NJ24 bIN tVT'kD:?W aһ{bF7E&մJPM3Ӗd;l~Bߊ%[܅gX[bl>Wit"Y:xبWPq? ( &,>HvڬG vm%6H|86 PɈs%ݞD߀&QѹZA `"<'($T34SiVw-*.1[JE ŧ0C)c`|g_r/ll&e3^^ ?]u1|lCbC8;eX:I 5}79 ͓Daiuu ]%DWbWbKdBYIi^2ZK/ |ג \#;2sRҦ3n/#/UoɺO<-H,6B'd>uUw|h, #k챋"]0fY ƪ9~]K' .TE]J5kԌ{0c~P%&2SpHZ4Z :xl:Ap1NYx/ea*5 3 KuA7#䳶R[:G{g{Br^ +'egAMA9yP89Fp[iLeU =RFbbqqSs09wXM;| G dri?۱ Za*rG_=n rMxNrh~i @ \#\^SGܭ@}@cl%3-1WH!lծ`̴q׸X5RVDoMKaOn szyd9L~N-s~=3pK_N:ێQOJ[pz0XKDZ_Nq杧mdc F)Dʷ䖔6JG QXL ')v=iY[H3dl?r6fbSoS!0SSG)=/cDmEů_(2>%D& _'D #̝k6!L@|HFӺ$-l3UK/kns؊(TUJkTw?b%iWp4mگJcժyGn:MN$N#J^S.nR%?˓=>ʱ@ka4ArOlT| 8)hss&+L%;~$K2v%Sby5=gDT}lQuYW)53ithtat|'s,$\Fh_nлNW"zWi@b#t:kdY"/ ė6,s;`TGĝn-3Q1DßL26SH=_{*M?J@oNi=h(}Tpz.140BPzOH0p`|yfўm̪ L*,UϻO!Є78I2)`9Cxۃ اZzttRA?Ij"dnx[^_klM4m=y@[{EXSx&H$⮫$]F.lDhf|x@XJC[NqhX#*͢NMw1l1^/-^]i|!;5j0_F  AQ7feAɸbq Q${gҘ:< R=@JeهLMY6Or8=K?]*Õȩwʐ+首6^IM4f LR(aDS4>&_S.( `ړNoD;%>]EB(WkA5OIҝsWX@2Yoڙxon\Iu<$:6."Qh'lzN N,|Ugu *lPEAѽQ ?.ͫ_ʄh/)4Y["wX+E5M ehfҵ1h4/؊>j^?IZHCWf$ !'LZ9  rovnѤ1Zs'13M SYX®g൲`wYiԟc&qpױ` =ɞDuMg^DK-?dm~PYaWx^;ʵ/iO %dwyDŽh&.蝶g(q]S-$i`2RR'ZYN@IRsbB2M?htLhLg)0kItΤi j~' Q*0~[O"<_ =g^`X):k/7w:@#n$*&-|ZJDOR(R] ۿ{}#7qNw^,$%]e >qod:]ZI@#?.r=hB6:NpVT=E: E]`-3U&MxKe43,NC{8c&#nspyP_5컡LF41ӯHQH$RƗEt#bڨ t{E6 Γ."شAh؟.%H4ƿsiL:T $C \E>ێk5CG0Z']tXʘ[pPxi-,|R@Et^' )au7#e4 hv{vO7GT]gT 8wb)mXscD1CcU8$íC(jjq$KYJof#F10·_L߭gT(8 ]זF@Ic^/_xsi_d.o\˃OwjYgg6HoӉ}v(~Eicše&3ϵ:mU}D ůiX/O"k4h՗(5MHQ\tO:w `GTlTHAdf/_80,論%GՂXc{tۈ? kipoiq_"^D U<" T^ . |DJô˝Wr56!z\Y'lZK53=1$?ʦ&eV#3宐 :@]L)cd n>Ff$ X?-m0-# jmpZlk!'ĸVxv*o)]wLFմlcڔlDqw|H(t1SFEs(m}3e*lu \=@֦Ȕ,;_ka OL1H BʭF:y&s}>ctdEdCAq8.r:ྨ^-nƝÓ5"@܀Xxwo 1] B_r~5D  {P"MkJs)+`<"_rs y{45l\1Vc,Q3X,>h:O 9>I3# "kEZTE:\:^W[_J輟.VUӲ؜uy7x^S즶aGibv&99af Vi+}gD_ BP&SoDoP iζAhV #?dNrGl1VOiUn@ =7W棯./Krn%ɢ)nk:K᪃wK=ƹӺ򏆍n֒lmƑeb?}MeRUDgI{ H>H&`T(r ^uj_κM͗ j282DK.5IbBɇpN^}Y]PVL4vJ8誼C" (<bT# t6MNe"!1MVxoT͕ۙ{ObLcw.KD-26+(2' |۪mŲ ZyW x 9"Ϡ$XbQY '4(T!i3 _Ԥ: 'pʿ ۡ?Q*qǻSB1d}Bq˕\^~"nC*8=}$UљtBOrc|qj#OsABӾXQ9"#IEx#clQ)؏We=?,e]_Qrceصh#e)38p6hZl0c;CC޻oRLM!F:2Ge}HZV(9`e)vxM`ބ^MSǟhN ˠqv/? 1{>9tYA|t<}]e1h.. Wb%6aK#{X*|2R;wpo9?XG=$(LrP6_I,0q͕;[QoaZh%S쀩+#Zj+dvF|yϰ'2t6dhLiœiU Ԇ:AlRA4#١dzΨ?(S@Cuy56n~6:ͫp鼡rhR<;/~kN\u^ }tYIn+?s 'ɾlvεe07Οf9:tp*X/.*3iqr 6G3*!XgPa  MUZ D9xW_T6W1;׾\}RII90¬ .p0?Jh>*гm^аf(~}jgrB5FW˚NL%7ҖR0\Lj`T;рBs\O,v՛y6GUG4bN?'xRx֣L%xtZ$XaDZxH gxUe0 Ѽr+Ę`Q-z4qg3d AM^%WL<[fڞ.bBO] t^N0PQ>9}t;%d~$W{ 85f(БNnNjf.lqzZ)yt,e Xmb>H1\;R#_P9\-EjGݴc2~ƑTf&f|8G[2M0 %:h(_R, bwAvSBLИG,O:&X*Y]?CDZaf8vۀ?x&mhZ" {B/9{%L.6)Dv[I(V1f؛ረ92ҫrem>U/\~l֊h8DP^qL`C/==)D@i>-Y,2UK6rkAܒN(V)"O'XϘf+jT3|2f@M/>1*>L&QY|)}Xr$(pif> L71tr+μnY͝y>;ߓVv 8ycƸH"e3TNb\&t_mxz?S"@R;o:Py$4y9-X$BҖ|k3U(@z,UxV! g_:֏,)Æu[m2hlGBr=/@W}6‰"N&e^?̃I,ԱQDmJޏz -D i 2cAnW%KJ)u8L~ׄk#bs'm3]6ƎU~}?iH\ tl=]f"F#.={>J>֊kSWiGi}XcJ̣j\ ^"܄t&Sl _DVg0kl7ߕh7>j }QT ,Fwi6P(ap6jiQ9YPc)B3t.gΏ(6 ,]_%檍Rg[caOXj抽nobč~f.fkk%޷`'*$ͪ5o0*$eƦ,~_ނT?i%@b 2}G3;V9ײ 5/4oWYh͞0H7]6mAccc W7bYU&t% Jxk/dr,(B ?q2ğ0߯x5 Β}/kXD8jl۵h+\9sZ&cݱ (c\0 .(,7%.{ n [ Lw^`㓙K+O {m!ê [eQ2,QQabދJز|AC>a*u4c+VWnX0z^6k8&z aH?색dhIB?!#*E1Y +QD0q~̣UwjjO2N N ( |+C'N"\kajnhXe;~aEu,[AFQ] 4ZH/*r1\ň]"W©Gcn</;j( ![H" #'߬L'oSU_.swFkjn_ H~`JuLNA{"䃯9#.(!jWwme?܆ =kLʿgp OW|Z,Yq|orJf Eihjg_/Y!&E`Qq.cǣ/։: L-*΃:JcǔZy9_iԔοv1&^_@``'~B;s $lv#";{eabM{>~ &,O]H!i{iR UXEjNwo#K#u+8}t?g9^F{tfj#p<[dPYd<:Ȉ_!MK'epfʳ_H~(b1sU{sUU᫴~!QP:ɑy[渳pfg(pT2zɠ#f%wUʽM= (e>֤JS%4C3AYvt" k[ٮf?tyȼLT~$VSg+4Q:P|QmrG,y1ɽ^h\c(!3Thc j@ҭGȝ'E#|?`p~`fyjD,p&!vSf)' |q8:pl9,Dm]%/;_TWX W04oK5tC7P˫k `uJ"򾎞Ʊv?>='?I؅GՁX*Qڜ'*!Cq蒻9ة^S8^d9> &c$oɵ#R/BY,iC;ʥ1 YwS)Qn0^髨K?u/%}EAV$A-q*[p#S^)ThjAh0b9Zنnt9 F?A`<eSIBЉ:R؜̶FV${XOJ5~8~Nڒ)Tny+=I[" O@h9G(*&- X'}8yn@t: P2Ix*9+ӗ6.U b(c i/mʣM.6D N8c-pugZ1eG(VE|bvWN'$SVvl׊=RCwm"2 m§㽡, Q`pNUE*gv?0b~TbSiZTO.P*?:fcXtb8vھfxXoVP9}KxT>Õ5QǰE\ԇSY#|jG=l<#&+`=YA |ܼM%CوӘt Nwycȥv| }W<+1t+[~t9Ϲg'[X鵽c=J/1a`9XBxeė<%LkD(hAÙU^Z#&&aP `\ϡKUm]89C=a8>Q>(6ͭ\nV};#4h e"- 9ۈkҼ@yӞĤ96yO$b p%TP#*s3D͖Aވ.fUͫNJf9 'L:ib/lMx]JEõwqr1I+"-GC(LPAkWZnRnRnaC #tI!1|W>ssf~?9O(D~ ǫ2f, v8U̷t  dmU7lu @)7: $MRmbM"A ݒ>6vQBͦ? `$%|P [dh K?}E%uŌxeT$W˖d;z _h~b9K² tIi}wol&`Ke\ҿ76FKb-L^l1xZC lJ5M{FKj~@ BmCd85e7|ǬqV8G)G;CK-Hl2$ٙ.E Ekb:ylW2&:okW,UNXsq\S:si)% <% vU)%0.X$' ŰB W) *Etg~Ɉ<2er6 `)Q\GB8:/j=ܘܭ/wwL[)5fަY}F@]R*Ow7m B.UT{aғ%-ErsppUis(*2t%crl7K}#v!N\n {8r"9M.PEO_1c'T%!Υ?z>ʏIn]g<IQxp7i )igv.%,QZ* }ny,%fYmpp\~`D.h3bE"NGT7!F160lhP ץE#&+Յ4@E"rvlScd"ك;- 1"c$_[ FzNL[}5K_!Wnܗk̷K\(œ*X* !yOZD…h~(cPVR{8W+m.tQYn8rU`pgiw9#s?6_x?&&xVyQ{*"NEZ[VBD%ɱ$qDS*CT_(V:2ٮ;ri_9G~1k4-KǢ89'!pI|r&!\;KqR 3c8`*A!)` m_''a!&wԱ㧧|H r4]9$}{#9;LȒtL4.4Gv|q? +q欦dBM`꤆qx~bf~Z"w>N"iQXh!8A+O HK:(DJ_qU8kF3~Ō" ऴWfg;'`{Z;c~j[P{Q銽(;C: |:j:ʫVg8) 9# c<ŽÌF:0QZb|>Zswf] ňJ[B q&8RINDL:> ٮ44@gCWh@/I82խӽ8U8B𚈇6T,/GDHطa×I|qGٟ[MC̫ʜ ,j#(ܑR/_)]T!YٍGR$>;i t:m~ۋ ҰluMUNiB)*f"O&LZ!KS0L4=W+nf bM޸9!¼4NJ,뢻\+w'_y/;={& f~b »Mm#Bxe` 5찪Z^Y, |gCӣ{LԳM,<^xp e9V "NWwB@j^[ M#>0JfklдԯbRAA+#LkDa;'XSOz.X,k )1ϟeA!m HS׮+!7D`..MӦ]-Z=7iv4V3^Le59BF,'ż\LsuYRX>VU_D #S``;EmzN \TYd#_Cxa{WR UC'f׬ `b2$h(!M} G^?g9a> ߆5SO+H3 7%j :wV1Ej\1ېNH@ͿoV| _'a:S&771S X?StK@,y[MtoQq3xo}x4ځ0-< KӮG4+f0x&x߮zpuh|9%Tf~UBSoCf7G]GxWu+c0z5k ! ?L@<9rp .q.޷[o] zIP[ D oUU* Nj#ԴuYX8,(%.*}KS~Rv4 型b˖ .7#lJWB<ȼґ7>XpMQ~ , %Ҭ=2;=eL+J_4.N IZLjZk*7{Z?xms0(nᄲk@4xu!h*8 k2h ˤBθ3ObdnQZ5QEĹAȻyĻzIO 7HԦzsJ!KA|D`<(/h+eb gzlr퀻$_w5F]QKO7ᖘnU%m EP[qDP:. sU >]tFPT5P 2~'@"#$U!;d0e67t/Gx *|0q\@K.O.H_V6Y8%A,in9yE̾QwqSO:h>4=ؾ!槶ՖLrt)ay3ɩmB"2Ksa?$"%JF#PQ~yj9ƒaL7bbe`#W3}G=& % 򉊠:ebV(3qJ]ȃ1j35 OG!mPNuY-in*M|ǂWZ=N#f:p$`hZ7kzv8c%:6t^~#4_GG.P`aȢeUVR` `utcT7WMǶPp$i^!}7!'FI0"c'E -c>FCNe!e,#]qc5<@!:(`"L%1aМG-U"NI&}~/߶\ľ7 v)|Kd pv_lxf>bK2,f)y[ϠŋtP>`&w/a/@8I0矼>?Lճ 1 5!a= N|Ҡɇ֝=6]6=@/^&7H痑s}<Ϭ%<6VQm}07Sl1'?Hyui 2uW)cL \I>c4J#|XA;baA]["TtbMS=O VjQt *_F[X>ˆ^* zKfȑIND*SN.cx]H=H;jr7Zxw5.櫢 F%AȯEEZޖvR0D]pp籊CD)hd 3W@ $yJ!IE.^-HUdZ?E~''O-ntұ 7F fqXƟ M#׋ g6Lkn|4EmP;"9iS*c0c ^[P(NzbtWy.oVճI|H@dG\5| iAǃbڐUv{'е}7].,8%,8LȊJeB9;vdB2NEؾy7Rxr -n N b)uWӪ(YOj"kqȶr>fT6S;wt#&+S=/>!>$)ÖFR%𣿄WVQZSߴPC5T,՞b},uTI$~d8TQL(V8CM  ۲v zlSC|6BG: 6ӭqf+uŎ xc֎N'SMy&"e NcJY#u,2{Q* ^# G,DE=5NЪ0 JԧKJr>:tf-? ,SPG&t*02[+jjaRaJI tbr Nd&\)$7/vuu(AD>֨+S.DJ{l(,x<ȄNwMüNV"LOHۍhD)n p؉N8҈c ajw}]]5S(Аw1϶ >ā**"~iBEa/(;\pKԥM7TVw^=WtCgwz897WEoWl̴'7gAp'2~~jtTsnoFn?A񾀻n8*9+#NbEdG¥?੘g28S gS"~S* Һ7sYy3avo z,<&It.|S"y1.N~Çs2 -eڽ{O E[/ :jgqN2n%Fe=Z-l*M+ RZ)~̰eaNukϘ,Nevpڕ ȿF ^ޗN!L]хDjGjY'(y\NZh!:j&U}t6i J@;Hò{RŎ[aYŦym$UhijQҒP2X(\=]+TC[/1)IF1d&y q#vnd(Jg2LΎטiđ[ꂸ;{_jfUBE 5wB!9i$[|֒x{<_UXYƕBշ#rV5,Ujn`6GJ_1IekOnZt8!cE(آ 8 X: NApB7MlUs#uոn.`^iR)%Uߤ@{pbeʻƘ;*`]R4SqX@-ѯ>~[T~ %f+'hwj,MJ)ԽrTJ-^1ETLˆ/(fh/|;I̢Nj wxN*GM\8ZEЂ 3Jr(+,G߲ɼM.qjnl_9ո`b!Dbx"ރS1dz0էGn٬FpO!dr(ޝ -^ց}lоE~6p AbQO3kDLH}V>~4`-|i=XsBxz?so/Uo0ɽB\EtY5y w6U5hF~h{W,n/H'8aF,Qi+2+#p#Q3!N2/37=tXLЎ"aMpfSP!*C7zȓ B%LFHTnp۟ I%( `^ڱ^LPy(^p<V{WNlOP6Dn)J.Ủ\ Ax&)"m?o6ʖ߶$>TQpGAC?2hW*6O*ʲy[ճӜM^SA?5bXU\Ng (ݦR){U+-e~u2c]rR#(8IB@ <*wQ89gDRboyS +az*Fv(ic0 E,Mz م]]r\B[$ +șPEE`NŽaV)#N\}N 7e/N (kofTވ0jhU(le ag[b!:B*CTtFܘLkXDHfLukh+  8ګʺP_T)?w,ow)! 5|ˬ2Eۤ!3Hغ+o Kq&rdzi=+S/UلKH(Z:0' t? Ɖ6յ,Aΰ9%;xεJYJk/hKnV^>,8+#|cb >ܶ`2ZۨSFTQQγ1~v*޿sTmޗkf:pruY{UTxX4)p=+黑K-ڋS]b!ypqfS )^6K^Οt'tO%7Ve-! fSkH,!y{K"f+4UЮ1Xڙls@ Ȋ$ZE%CyYXX'Y2R>lj¾qlSo5[]V*4` 6I5ɲa۠zJ&xߘ]$,ky5fSpLȮ=OF{ (j&"(@+:Ou.zj8aU96!(="&3w#HEDSc%1m $5KYgOh\.'tT,5KH*(`ޕet1u+œ.vRx]7.eZ"L)+ ('ς^+>uڝF?8_( m;戈uZ ȟ;x+u-E |_+w\kYWTghr8+~lfVty],Jg}(%Fi?+eS J]ۙG*!BRbƤ29cfFY[㓫ХdHӅ*C4o1`Lr:T-fڢ7.#"l8?'u@]}CP@Kwy-F?w+~(z,⤩0O>D؁">,ʇ^;?^Eq}ꍘ$GN?CcmB4=G %&pɑ?I;uLk\4~PhG("8 `,i4>C@Ի.WeqAW?ezMLD&${B!n*#18X%i,5 ?mp#rɑ!{NY& / PU5$~C\*&0N#Т]+>|=KhimDDr*E}A 5!@-RssB4bM;Dũ퐝j0KӈgUouaV;"Elߣ.wo/" schBwN7Ԡiw^.Oy=Jh]#{,]HҔ_N"TKjtKeGRHOX%Cktr%jrVhNV6mjNF+8|/({r.m`Bޥgȼd#%S~w F ' *u4y<t0/E [PhJPo8v䞖%.[rԶw';׶,V־<=yƅ2 AE /;Q)Pp%K\P")=^lv^27*.-h3Rn,AG K,`μ_Fꝙ'>"/xy@G&ہ"H'hgޫ'֊*OfD/\/7#~xMCmh=TMlMCbUj}{'xY-6Sb `C=C+j-ŏ lAl t"eK8XD1ܻWu4i')@UF!UGT>ӟ #t2\)V˙pis>tX9[Bb,/Z4nҶϴZ ^9K?NQyj骽|A^M]!]I: #vm OVٸj|g6H׶T7bzQ?2=ĭM-]Q@$Z~U#a }Bˮ?V-aּ 3K_Iq$C0"<g^ɿŵUċ='ËpoSv+p3:5cS S;`p"w/4qB5_iy >Ȓ-UAn\UQ,yTW3=lZr:yuG~ߔP)tWc> kS†ӣ-QNMNY(1T[~aS6d\*D?ܕ$ %Q=풻%AsdWPs[3qiЦyzXF񏨂#7bqZ JaeC RUsJK tOPտJ6h UM"#x6C|N Ƙ Doz,m"-c)ei%f`^ L%eEzjR*!䭅~ZSUZ3]k>km421YC`>'"Xaxc] YqoMׂNŬ|4֌i)6 Rp ]2ϐ܀Mr^+V9T3:=\ı#pZbmƗyxpn7itN#r80ơԎ3$-XH HEzpH =A )_h͌#bxn>%*``Dթw73D]1sbwF8^R@E6.EoQe? eQ^\!k>mJs xۯTǰaqL!XGmD|{ |i Q>%_59]_ 4mu%:(Grg;#bNzb1W!pmy#bHP7bÝ3e #cǩ* tiD a3V`p*HךbdwJs j.J}q݄Ln&Ɠ4b5s<E>QzOFU~po̎q6d6aA7WŠf)ŠAhk^D˨ʟys2GF,-6Dё,pVenZRD_t@t@99[snbK _qzV Uw_X2"tY.d)-]>#?wftEG"]TѦTu""B ,Be/j³/h9xk!f_GV}yqcm|UC# MomzL[v & Ӷe#cֵ(]xg݈JɻިBf?&?fԹ3 `IBբ6WYec0GSTLcZl\tL}OiJgxN Wj;/jy hJ/ ~4Ĥ|HJ@KTEݘ϶ Tj&xeI%lH:@++_Jۚ HFRմzKI í>g]WkB֮Mӹ!kYیBۭUNB:- 0<F-MuZȇa,L"b3$TlJ $VeC"$oD\nZDOG+84:yWFp#DzdWȳ sVפW.*JPOCI`kJga仹J6Uov_鑰#cS}@2:ΰ^sÎ WYAӧ&&Ѹ']LNmfg ƀ\woVkEUWAD;,oo--4r0Gr Ʉ1RοHWL|8d(pXpkxZ·Cquy9" TSڙ J LU78.P$ ">5;jbJ8瑈Z:@Hb 5,]" $h jRMg!`QgOAQ4*ܟczMw{I! MZK ZuST#j6iKj5X"LS14Z/&QijYw^[N:^h!@ՠ^g<3=ityf|S4h`` ^`]}M=S6㚺&%-z!*dK-czFf!Izf$Ę)E?]i{'-۸l|7kA((a:ݚ&>Hy$?V[(Gf#qa^ Ls_>AaS<8X-Įb7ZAlV'fgÎ"(ӉNJDH_U"ڭԆO-µz*1%[bXǫ׺ {,r<$H;|?Nd G6L(7ls3fJL|M?ehRJg]8IOF3֮ߝ1YΚa !yT;/oA&4x#n Lס~Kt 6EGFqGA57xsRsq!8yS@Tdt/D'WHBĩ:=8#+{Ō5ԁ !3GC^y}C\Qhֈ890ru1o|&7(qͫ2my m\ҏU\ .F\HaW@>rRQ$*<0 $u!p;AhSN  ʗ`[%ײN_6dM\Kx֙"D; ~|z2+iʽśyL݉Miot%s+@g j(Oͱcu.#m6مi.g;/]4kD b߃ [_.逨1fPР 6=!H/b= ~;cϜ':5<61|s$V "턇P !K.O N7+c??"kUO[z[خL51L~S&%.j2JnrVZݤì3U {4s#pg^F Oo2Y? ԥZNfp PWO;,=i?QVPG<|@QN^~ 6\#Qz|G7C5'#'$]t4wo@Ac(Wר2Ɂf}~C8*:Py̰Hfڎ0Y+nt-? E MN"> \).iDta3?e%&gbXW3`\X)+nm_ZX4ڔK]O!KHhםz#mmYzc3בЌg1* B7zeN!B6*5qM+ɪM_f S1Ӧ@Pd*ݯ*vQ6^?`|qUW u_ /~km< ܍s 7x'%>? ?]!f1aԮŎ2nr|Pc|4ȋ(}'Xş$Z+1 d!Fzz(t'6l8 ʹʡ{J6 D>ʁr|skDzǘ`^ظu2ͬ\3b)3j^L>bKQCe:,DZҊ<G:ɓ@-!M1b(U Pt]uFq>Xqya;;-벐$ X"I%wcI/o2 (;(M l&+ƣ􎏙LhUkDۤUpot7-stB*R|ft jc֊C4q>-^MifջH8xkj ,j=TfpInoI>kB]d=C.Ě*YS4ƢV#@1p&:JNOn*4XgX&@*As.@TNlg)[hg)_F<-pHN`H4v0qkP0ևvy>aa?jwS32F@ևpݨ|7 R W\["Ƭq9sBF)yw9SIkN@3lo1rrwQ;ٲzU6c{n*jqɈWؠI l]ƭLobeTBݼ(Ŗ r 5ȶzݑW #E(Ő甍s <.fpg:dn {z]5h,h6rT dD39/j/M{m W:ԋ45~8ws6$Ǹ6 ^U+mQ֍/%xH}s|M)Vh0nk\e;͔pUax;=`Q epTƺ-j8%74Ԫk5wf,U|BOz6L>M@]^K9m@%/NQRZ^ߨOI豌kywɔl/NJmߣv֩]3fd(`#ZPO q?DfL0`@s NԆK9916Ud͡_J.[D')|uQWFuF&@%黸G~|~We7Qnz1-VE jsGB3XɽM7yN=obe\ V: T\ZXr;x8qE|aE7 #ן\-Eڸyԧp1PYg;LGm髂y>JFY2]V bEįۏϰr8Oܥ҅`Y$>/nc 61ܮURM,1[U72Ťj&9HeChQum:)DC?@J-ߨ}+ؗ$CjY/c0GܒˬƯΉDWD} [d34nA~pAaeuiHeg~4dx[Kzf!0fy Dh|&J1 H/9hr߸2R0M h! w&\#* o<ؿ I{Ex5?cȨB3}}jNWkZ/97"Bnpz[vl?_f {iD )*0);FN7jNz@s=3("Kh+ #Ø"ŕIgi޶i2wR[S8Mhؤw/%z,*s#W/NNrb?nAi)t,A|+ֶ{v^?yh񯉜K6)'eopg>ƛ%FGyt , v~H RY0v"BSfM>[97CBdcP/ƎU]ш>D}ji!=Gz ;cm:{/.v\ 4 tZùPY/=zE䌤8D3OpjkMLV(ߜ?ˋAFOrэ:4FA%VX f柩IȰw7N5la3Rɺ~8 As)OCoS` ,/]סBWbmomN\b6)zUzG؁[0tpA(ݺB6O_;Pؿx|VITʷ#K~SIu> YwйW+Hy.[X_?/xnj3dM8jB7{ނ,+ym5\ügYsޢ}_Wf{A]4X \::.8OCP ׿LEP]~xҔ``(_Dei}8J RNYD@RˠOB/ݑʵuGR{ArH|sZex׋UFt+)NMpw-,ղ܂wF6%l1mhu@1v`n0]Lx3T57fw&>}?7%b/U.p-U?^#6fq%M|jŜhy!Oz~3ENZ`w,%R꧋5&m R?XBpQ ڸƀ]InIW<4)-];y(Bc7`iIˏW2lN(OEa{Ŀ2 {2h1j-hz fA4dCOC{OLi$уBG:I6ž(f&q 8k& W H GeY_;ۖcH]Ⱦv,a2&Iھ!^ %tuC~p Y_2p4e\ %Z!HA+*X; ֑,_&OsA`?3}S-^*VAmIk7G\YйKoPx2ՋwFeMJb5 P  2/to&"NPC\Awa" z!2VVRa"Irub ]ϯ2E9]e6 <SU#M*'wrS2GTC=_)T>^]2J.f*7rmݪoqHwR&A]+S%)EvQTK͔=O}a{ /꬘ˣ."刣hn&>Ѽlq*ףµDȻOHo+- .=|a:AxRbI5l覞+:[ˣG!]mP̜3 H $ R^zdž:`$iXdq # !Wہ/|k6q!)5-ƮuǼxˣ b<^`[_~zU3P`PWP*}%B"o fW?KM  -~[D{w l&і#E mTVa-zzuMg(^+P]eaIq\׆ަ=F?\\?΄׋Q|SC(j"!eܴ5٦j*=KQ!3M>n'\>wbD7ꈘt#JCVx@h 6imuB>J nk顬 ,:,%ibsCl#v[z*)˧b|,9vmƒYnۢ{k3p@7 d Fa䑒  jۻ2c]IwNɍ^zꛪ҂=׃[PTaWB;H5-jJg9KQ}ft-Hn~`)PFzB7XTmGNFc4 #}9͜T@ ^:{`0CK]K`)g4U2~+rXRŞcBA"4;Μ1ؠkkgObr6iBPȃ7q +dtNг?k@Iy`dȅʞOg%1i#ţ-> ص뭣/phiC T3͋&lCи8cD5AܪAOy2&R3 Й'gd `!yG^ %*s"t0kFs'2n RY9Y,s.蟛'{oٸe䇘]M}GJ|awP@!wp"#Ţ\]"'h=eyR5=2hp:#Z0`N(kapY GչL.ѝs4"mkv)r@3ۦc,Y+T#!{ =(8H˚$ݙS&eKFͅ$HAS٢EjM~j\xcmFTqOGEYg/zVn2znSq-/7lT\rI)-c@CP*\?AK0b]:xDӴ ȓy2 > j#^--y}O^0OfHs/Vds%:AH+fs*JX-;F}emu4Y9;q5zQnEE&YyL=Gvf9j¥ͧior.gF5L`bYgB^-?ؙ/ -_5@ʆ0.xhxV"ULM/􏼗(g-! X46OP'6KE)r;;#;5E^o?QԳD Зf8hzUWiZ\R *eA~J[ Aw qC =><&kEF#?d.Vl}8Xz8=AKQP 7LțІ:BI a^~MV@ ^ߜ@@ӠeG0. G3kqc> R@\SS }3|7zJ>]V=H!az>G=dFLa$Gﴌ[㟹 #kki~[ FIBbZZ  p < ˭ 1aQH $V3@~#ѭPļX7V }T6m |ePƇ8^ש5rlnH5 eJ' ZVE@PP\6jGo.+@FПlKpx{H2?qǛJ&9cMn>09%raXҏ=髑0m);=³a@uB9&Ε:GSapE6HBgq"d|( }ܹ5HGڨ F4ܬV2GHaVyslϓCYQ#ՃqؐeIQcp~ᖀ5. QKZf!u%~^^R^Ȑ~obmy*UDuk Ga{!i6GQJ>tZ$kgǎ3$hKe1`dzqCVZՇ Λz+! f#'/> T޽Tf<_ci@seciozR/t9x&VȽA_i`q @,!|Ffk޴#YHq.P,G;?Y{ ڿ{ Vdv[fQ`iiܩ }nM'}qѥ(Wd2L1vnxY&9PiQ21; _5J׳iNQ`H"4al>5T\- 0J̯n[wU"fkn5a0ˆgˍqNdRNYJm?)dDyPx]WW.`MYr^xF-*'5W-޹)q,2*$nmL-`.9eO~$TrH{ouP.g ~#$QiT0Msoƚerzu1z u!DeqgPsc;C$I2mS1TG/s.XK@2!-(c.ThiXഭ&{ɴ%)r+W ̈́Y/MΖxd<Q^jo`?\8~} "S?L-Ί/4qP.[=%,:ai23Az͝ީч2)#ڂ~4}< eUVBV2cVypyyS4(< @2xP ܏0mِjۋY/Mw |B虬Zrhka@Օ Z$k9%S6mW<;. p4-JJCs7wXX &&lBs;5J)xg3( EbKe<49`~48vOt%A.8{D_IiJp"3/gmMڬeCbNcU35ҾmFK;">۟e7M}t~ۏE[{٦K#B&K^g3j1Ey c<ԑ>+l@Pڞ5hea:n*wo0`! V+2.&y6bJzb{kGN-dIAH?;Z-*< xS>[QuAp@x+m<|F% C¦86w$$ʨvi@@哒쥠G.0? gHF4c2Bi Wl 6 ĵjz|`R߳(iFEp7+. X\HN#7k ]wRQ4vyÕS)4J*;M1Ӽ8aa+8YT" JVnƍM/Rlh]'ϕ&' :A6-ճ-_jKc=?&H_ڄ$Wp}E1Xdv#R(mkp^" %G5'D1&P7xuV@70p -7_@".7Fג=䊸> G3T˙L-ljF9o؃ i`=))cvǦ9PL/Px8+Xȿ~S%H "Z-r-tFfVeӒU^>N{?2Υ}AHc eY'FXj7d_e9(]+*e2͉6/8[5 k?4dt }^#UIs_W.Tv;^Hܲ(S[] *cH@9, `ĉپ͋aҹ`qD֒Z;WZn>q6taÁ\TU &QreU$,hf6DV|_~p.Ƌ*T@"S6 REv*-!&)️_>u/ U'1Zp#.A/K)fe\?v=?9eCTDF+`\&3!Q1k^C465'6睘Ϥ_k;mO +|v^~t7ӕtE_@0D02D.0+zeӂfDv(‘DU-pf^GS ))e2ևEvsk /Ou1<% #t5zz= xs[0}~1a[F=XiO 5кu"ɓ͵SUyM6E!t[CRq IPXmYQ=poS.Zr[>\_25hҠ3a3֣͍JC%سNmP?xl_W̸;'m}p@lly5A<Ǜ'T_*8SgTo%& L%=/Ll`Jy~$b[m:?@G<1zvW@Gi 1uE5*vnԠ2zL0:Mkc8Dhh\ ÊdEb)Ԧ!ܑ kt:TSGu)'ְ ELF݉k'#+^QhA\%ډ ”R$f/ n߾|_:vdj^"CO(WuR΃wt>qc$& c⳰#I4M6~io1YT-=%geX۫Av/\KKy?ƴ1-7H=S jhs璻_) kc v ,)&UyGv}7Np ,s|m}Z_Ow^xDvΰ+'Xjv_j|4tGB_K}sRu VTdz0%[턭 co3jtoLߡj6 "H"b]IHւ5[fISl@""<>TKWXV4m9{^.ӷH}`O St8Mi-ZdMZ5Z=2M*ٍ*F_ jRR~wMF,ڼtέ@RXTJް-4qod;UХKOrnp?c[#SeVHivp)<[H &s.҆&`ntd9S1yq$Ŷ\)\%#۷K$/[ qo˻V"V6\g*GցrϕH2iZUy7 i#gR#5#)P^oY}X{yn43' 08M:]U#f0tOm;=%T"dzb®-%A֞QQZ[C^x*ѕ| îH+570 @ȝ. gs5v!ho$PEC\9ALK`|3 }`L/io]t tvk O0>^U*\,NJh=F4y+f-6,0 cf :M^N@\jC?2;9ׇ{iRX(R蜺QNfA]`Qnm`yAfeyn$ϭ?Y^0&pFpz,A=smG2BEn/3?蠽f"sԴ\<pN;طJq;r;6S߄/+)\.h'oz#x[xFMʷ"681~ɾXD&mjMV(Y;?ׯ\0]G7r{D R w+p)v""`bЧƈңg较 0xkM|3mCݸB3W7=P%/@HXzOyʄ5*:{}u&Jb;*Q+y*RJd%l!:uF  GHO^z2~UWc~ *7@Cw\~;v9g|u<47H1y*9/=rI-cTjFj}sX&{{5I_I.J wdϜD(TH4ж>Zd˾鸶75q+Pb#\& ~:ަG[w0-z$ WgaMRHO4) -Qd]KᢪvK3p?]{[r`^1~ i}ȡL,mn+ȉFbaG|K|t =9@򓲮Ƀ=.D6*B^-(g h~Ҟx[q7~C֪ ~kdtPh3[iFW .`.K4^mjШ̟i gWpTi˘CR_S(`>-Iy QꋋfbT,^F1e$ 潄22 '8Y))n뢿P4r!_d'? 팥pîpUe :Il#e ׎d ̂yaFLh!C 'nhAMĪ:_/n]~-~d8̫{O_Z괼Vf03+6q$Vo*'TY0>,4Z"*4Td5C]9n!X!I\ӈ{*)9*^ƽ|h?r=eh-`O~uC13+\4 ޟ p֩U#c $\~>v dꂜΥyOU"{ m9/%մ]QuVYE%4#m{0} bt(F;-AIG4|4Qe۳xo10{RW i NW@Iͅfo'B;Gk@,^sr7c9'-^D/a8V7Pgp/'|ap<7MC!zي O/sFZ6//}|cEQ`J+@{pNZ:ɽg|dc\=fo7f&QS.+X@GSZƞ}ycIֵ5. 9: YR?-<$tX~5פq(Ց ?v!wrzWmm_A֒gLjP,A醝3B[d%*#MiX\fi.1՚dUWe "P,I( #C@x$/ * q^+G~˷<6C~5ׇXnz(;V0&o)Zj?纤bh΃Q+t$ND(l8\DoLVGQS[h-NKEwAǃhiRVz;8):sGN bJsOFW zjPi,syx6Tu]zvZp{)@΃w,F'1&mO :gSwYD^Hh&\="TJfoX:p_ѓoy)`=tc,nagD0.sQ\ Eyd6oe@o&F(ߥ9s-,_>Eo0(>%PCo~KDWAm7ݭ7 jl!} !JTad<R*vŭR<KKwH~|h 4 Fj1`zJoQ<9i8/$Y*O!1< Ɂ7+os^lgok :#9+-<\{ Ď8%zu l/L@Ƶ샩B⚡B\0)=s=f:-cTs0.>Mp2w¬psB?͢mxILmM#t3>GmnaشC^G>˥ b6ޡyȈߙ{C0'y4jU[}Tl>g <ϦRH|W9›ojmK׏Fɰa]b"fBj,c1} c>Ș550&ߍ;;t\L~ cMߌ6o;KH:h*T1fJgIx񐁲s;NE2 )t@2;Zq<*g9@DbQmJP 0zB[=k"'z}XguNWVƓSNp wjSX{lN؜)AxJT"QS7GirռHa[{A;*SIJџfKցS~PJl!-|s ȡtI/E@*?:Y4Sʼn`̣"K龞|)JI#0Lo|`\aUU11 LαR<`w=b!-ⷪk̬=M,y<^N uz QMA2!_"_*(4n7KLCݸ:aN?./kzi$,֞EB-&䖕 + yԿ3+Eo!qH&gWgeG݂ S ,(V D0]0#4p+%GaC(yZ0.h7wB.‘cQ?09+C@Ӷ岣L[E8F3YlrnUKy0-psqnS֯OǑuDgdF&CI r4Sxk)f֭A0/'.t1nikܦtjIM#P̤v`fr0Zq6&ۮxnyϣub쪭 &60UF/iC Rx֢l-bZB-V I~cUTR34WA0֎%Ϙ<|<4Nfϼeᰅfj|>B> O{Ϭ#tÕTM6sׯ e"*F©EyV1iIeJP J iqSk㇠^ƽArVG`#'>p;ElpF 8G0jH!e%unmJ\P3qM&ոJ?FKnh&Ƿ9\O @(#va~:D%\PS;jI&R98j;wR ,^opLRqC +,Y5'/&Uo} f{fH,l~Dy~~Um%І"RIHG1mf/wۺ[Te]m*$A,bZq.#T^kf.v3vN+οt,|"݊ hUҝbRqcU5"d vMJTlOQ KC*R'߭̈1҂$JmX`8~m/QaT@!IO,|JO餃Pe}֏4EP}?9l'vC@#Y.dFPaLx)zLDlU*R)2nHHyէc/ת&!]or00vӇ<<3y}rpQ2 =m"G-Ѧ`y.2L/m(v/EbH9Œ- )iɢ\L&+Թs坸' lH4 hᾮ#3{p=,豚+$ͱ 㚪̱,RAlt 1j/@IFAZP{ԶLf5YjV5'RYK.!eơ|^jE~PE; O{ ?=cNIǬZ;\ӱF}\di<΋3%M;Rrt{aVj/kXșt#oG"@$wWw~v&[5)%!.E J]8tS&`;?<5k zxbm;;9(bo*'kɥg Ӕvd`sÙVzu01᎜ ǶMC4ǵy;VpI>6!FI`S_cDjoH/\ #HNLX3niZ5y-l P}-dʥQ+q[ 7"2t\] |4)C P+{3N6[lzme( Nhjg\sí=ɯ<\,z~}v*5t# rӹQ)5w#e 4}u{(L 1܍="jJ")PaHXv9; PG^,w+t 3FgEwT <^:d7Wo;$;.2^!6\-FbMQ[QyiZ@aNdnm+8a ЖuTpGɏeRKwcrIcdH8"pry#} 49Uےy:q]" *4{.>Ax{Z+ ?I2Hӭ$ csX? UrՑlU2~^GXC& mtTܥ3tpxÉn~"3WkD] X,uZEx|̙< ML![F+5E/U\n<# tM(,U=V\@ލiʎ̏Λ麭gAPNNqcBA|(kR_);7ɼ8dcB;@O-+,4DgPaq^%`vg4lJ\*r| Ju&o/W<̮e,*buIԉ@-8v5_qZQ,&L28^9+%đɱ+yNy.T:eNn 2NjStɯ搯83̉zKE7{0sb%=rl7 5+Q{\aBViƂ}XNX "CȐ0_\1a|n<-G S. #ՄuViĢ!`{"~9(3ݔŢ(MW)P@lJ VzJaN +Mfgm>I+zotU5 OIGgP#0}688hSL3GrÈsՒ7;w.{ sC׮1Dg4A9 ^mȴoyAl^߷ĄET!n_84n,ځ!8nخ~D=Y- s*z%fnHAl|\ fj# .\,Is^{ä,?P*M{և߽oj ;?7n{y ~^Mq":ğd%BJ VV9:%σҮʿX8RRsS S?sD8Ȓw-; ֛r.CBE-6Ȍ^9$nF.// +m}p!2Kk=>[2Dsչ˜!~wIjnCXed"sm|ШU6sHxe+Z\ıJ裱\Y/h .rbw pr&wP9b"DZӅ)H 0ǺRqdVr77Z"P/n T6 q)n(بoSz$:_ۺ'9̞Qךݵ+Riǝ5fEQ8P+ [@;V0Ep9dڢ{"}|QYݛO\˘P`Bcs L}rzDNC__"rlӼk5ȭ-:Q/zKH[ԩ>QQ(;4ׄ_G7JܨWqsCDgBxQw>gYB3i[BU@[bFLע#PhdObUX0jn`TgYAYQ/&X ȱq@۪_ aaU~bÎo6>t"IJQ{?+ʿմo^m 5 {P(z {ܮр>Z.2NmKA认[1}IհRJ3Xa"*v5~]wJܚ9mxYPlxfKY7ƁtVj`hj٘`Huą)51º.2)|~SLe\T4SmO4i_Tt-/OMJѶ|E'hyW!=M7vȾZOAہAIxFŧ`S+)]򭈎B])"t6j/xBג%Փ(Ob S`2\W'bm ^ȗuiYJ8,ygeM])RÙyl7`v@3{¡ڸKVgϸE4tKǬiַ^%^r!Ͽ灌tu7~ !k+"zQmڥ^I'vMbi,8 >rYMA6WZN.gpriFf2DX(7mP@~ۼD!BObbRӁLA 0!V=W~Khf2W?P؟ toAm>6R\]*R|Um+28l?Ҧn 2”m4.:wNlwsBH/h`LEځfOqWJҨ RNѡjQsaƺ0􄈺gB?eC&Z*'M8']p[A{6)d( l_I,K0 |.c^`E+wqq4.PŒ!!g##}CE*J`3UD Czv(g߀7qhXc}ID0d=0[۬Bj6E-`틴<Hýa(J^er{wa2ؼ0Ŀal%I9r1(HB$ aU\5cMw G:olI.;aK:D_ xyZ$qVV]7c˞;L_a u;Hݚ_\ u}W`E)P+ۢ;%MČ`1 cϩP>͕LjJ ?;hu%۾{KrDzLLWnyMҭ̨yK@FCo;Q=u}8R`x8`/YB1E߲p3@ )=~QP\1\β;jD3"<ĝzI-ao~?QpK 6YyJ㨀_;·8%Į捫XFl@2~iҠK>o}-wu?ZôQH0 X HlT)԰ p$ܶ1QB4 Wo|6˼)c^Hzʎǭ9gEEJ#/UԂ.]"jVrbHwߠr@A|:򇷒_l[4`?DUZ5lx0U/xQ6Qp5`Da nb@ZCg[*DE<2` W0twB16QA{SW?D 5LC,+"+m[+$4ns=SꧯP8z ђJ9 oH%;b Ǻ;+ Yi$<ߴp%…HJd%7`2KYOL}X@ԉs?[! +ORtPK}f[G9w] UM's?ffhxU?^ Mu`kjH;|yB|9A~2F>J9ky&{%j\]([u[M*p.܊̝|^?C4X~n\>LkIU8>|En|8, `q?iRՄL][Tb rwcw<+Ģ W)S86)~j +7'pԇ5aH'.& CdNҬa&GDG1GMW6o1Z"0n=}rbxuiOM/2+QOܡ`٥ן$3l}cGINJ|YyK~S^d'ο/;($tMs"я0O_e` Y\?cr)ui~ w ҃ Uk Wڴ;bek\R;:S'_YCB Y67&dΩ ! <8wlHzTg{~`nԴ%hUXxp*2z(k}cE|!@%7ۭ Rf\lE.jƊ Xf{ahVVLZr%(!7܈T?)VUk. Gx+ct<>538F$IB1&@&l#6P+"L@XodrjDg{&8l f>&n'RULi!U8}=E#>+Dz+eK];;=hwFA{xW,"UױyS`2 Z?fs6:QKW*0dXr7O!S+N'!kUWOOЊy [Yz5#q)Eܷ1D^-xT٢^&Z[5SBڿE2pGٔO7UvN~Im5xO ~}z\tگWĝ^6bhd]Vmʃ_A|@8DQТ,sFETo@bəEof:@M@wpo !ORBq~e$ 9$<Ȝ~gUX!Yv>RD|%}]FN)Yo-ʫt 7ljAxۣ[Kld)F/sV˯m]le4ĥtuep0E/ p jb̺X"l^5zI1y<;8 }'p725BqZaXna )%jHP~ϒMNDo;$:*\dG1k-΂WN?yV"F GO_$̭Ɯn[&$,I 2JG&VQ֭xBWTe[WؓRIqEE?Q`[؟wNwڰiq|-j 3)̜S7uFKRm#<-!jIx Wr^TgnXVr]>V:F"_,Y@݄E{ VW8:sbP?t USbǘ<gl뼆|~`ZwA(u,d2# -)a?SW@n@M8&qBU>)N:ω!cumtO 53=#004fU93\aU)&@Q?+4P>a.P<ȥ6Lÿ<搝,lij VB ^XN/Ns[r[oCRm GJ=9{/Z]B ⼹BUY*]+Zӈ .?~H F{$LN7eTl5d_w5pX}H#պj mi%-:R.ۣ8i ;#L>?T~(oͿeIUfq}h5b6iM  qXC䝴DK6*ܯpĸkN%&nܭ7ɵ"d^W}~0JoP/h̿ǯbv"&>!XTMLt@BaDWZ6;e]+IL9J fUyT]AB_&/0pk>M7Ҝ\ #(_8~m9(6V"fsc6.g`g@nb5}#:1)$O#lrPII3E[1+@H$7M4(wt-~UTOk ':%eQqP7jb&!Xk]cts7:W>~;]=OP1Tki6쮖8|t U|v1!vBcwnu]&^q 3C5vw%Wا;+弮KSw&I2DCx7,ؗ(Ǵ\AJuwyPRu9DAS(Tv"sVT*tZ;>Wlwbd@ TKw@,B p{{=}.| ͉]|T9[[RCEɐsH5~e C C c/Pb.qRAohla^ϮQ,*FNStrH$b0'7 ' 8M-LdtH@z<1NgzdIoʦ|hIYiXKX Rye!rf⹸msak췴Ķ\xG[)&aHE̥ba/re.ItX J :._1+#밠`ʸ&~hPGσذxX Ӂ1㣐}Jzߙ&Z"z  m_Րre bQ(f<+zlCPM,F"uDXZDR' wʶvD2^rFre;D%h-5UEXxג w@ Ӓ±&pktL?- 8wHmw+tdViA7!Q:Q%r¡~"ãP( wy8j-4жEz6tĤ0͖39 p3vKƽ ._EwhMJ?P"NFS(WsD:yzġinR<#|ˠxZbKo9+(90_Kɗiڴ>줥Dᦫ]FNP 182@YJjaF/̙d2o̕fYhhg).}*1sCM__U?V|||7m16] җ"vX!\!q.O-R ~>0 ޾G @yVHgDK7^OLT޵7Hm讄\F=*YPɴ|QV8K3_ 8ّ"wkD =/Uj$'z.j$JI;6+zsABwZ'㻢8SL}}9:J~jk+@#ƌcrCx[Ak-<߅n !קזLǵj4W眭0ȯXNzωY^gIr)!_Տnz1 .h-"gC2z] Fk4nʜr3s2\xZq@ uŨiD=n  i ʏeɿ䚮e^8H5h&wUczcI| u҇Sv὿Glj po;ΝCLrrKItT~y|7Ds&x^A2*(X:Qd/auԕNW%oCҳY>@;%PRI݁\4%bh5CgIΊDpOPBB6Vj#rY9sGUOs:5<~#RNpd*[:D_uCŒz-C!bx4цOg*D'\i!LP HR6ʪ|gd[%ŘQX+(LE"'T,Y^/@$WL,]&lSWCzU~ lT7m>ÿ_P14{脀T a&ڲ"1b4ǚO@wͦǿZW|<ޜ>7G'+ K A:;cl';n`&#k.P6\=Nt[㗫8%2]eºEyoD,h+tWH~X W>8SlV[0vUyK\IJ5^qYAFfewi Gڝj#uik̾%v5h9%&Plql_5p`rb/Ɨl_q<-x;F`<&,K:{(7ъqzokWD+\&Ο -}ZE$D^Vh`ki +_7/M,(7B5l Nr!r1D7/t@BXd ƃ͢TJy3oxX iџChlUppf`2L[(/r7@&)0wqƫ%eQ!}/?/Q.SF̞Sa˹eSuyh8TrSlRQ7T'ue WR{' 1 'pI!ҢMj,HwHm*P Fs<|W2 RդRy~i=h&y\*P^Š#9Fn4MG.3, 3b694FT<ϢVMd֑DeJV#n/7W,g=mv4 y]NTkT;,'ƄM }D9]HzY4<0歐Tb :6#@9 Pϣ QatҦ`zO S':@:HO6j!3FNUV9ۛ>* r| +Odi}/cxڂ,֬Sȯ?3I&Y[⒤?xbILm$Z!۠QWi+ V@ Wv\c2brMtᱎ6K‡5Gּ7"&7Ol> sT gg%US>q2o X}ŝB kK>nMj/]sBCk#czv6 Ho ?\.|h&Q<osUI 8{q,:SHu-.Lw*G/J&>H`Q^AHy  ܮI\=]m;`jZNzu ExZs8BdKKr;;6LNJ"Ct؛Ċ(Vx@Ft~Bx!_Bpb1L. R'0RhM4>F)^.AP(|nqh38}JDm\Ii"f=SM=&s!zVd kI+ԙ(T@}>|̄Qޓ7g852Bp|Сr֭_3M;Jh@YwNGW.T}9Өi6Ys 0JcP,[η˗0VJ$jD!tG!},4ğI аC4Y=FO'RN<~LjMíd!zY ^/=t{b!*#\+?Q!p >ȸyWѫ3udVx>&kԆnVyvB\$%a'@!n}޿z_u Af E VWW:y3ǻ呇c&RsB]S (? 35NB6f*$;2}|RN2|)444 tV-#㣟 h<.];ϜBڤr>"S*M}C'BO\Ledl=[mKMy1*>0v ǰ="4^l0UYhءc`F@_1zcQW6SUgwFDD,0zO H1b3txD##z%ҷ7ML 7 (CœbJ[RiO!X^e#"N#&Q0X4Q$$H!LoCiu\&R*Ltjk lCxq  T"ޯȋ+Uf{Hz>Roueԋ<'RiBVi}ϑ8ٴP fv\ žٔCm@7*LNX ҽ >SYm~}9U7,,0J wbOPزg:x&fDƱ|kˋ4G sgIsz[2*n!%7+l$8 >r/Smp*D۪|\Dn& ;k39CoArʲ:"8#PN=,T=^1s!u0fD;Z]I6i vM:ך{mrФp܊7wNMaCٯjyi!6&Z>R9[wWVȿI {ClTf%v68`N9s-I;+/N{ſ*ÌT+5)ye[M[֥49=61%E\+P =ڌHA7Hk;/FR܉:lI8wwޜʷRɪ-\G~b|At4UɧZ .HX,~dF\X~hs*:QS7P"5Gk$Gl'^_OdN1Txu_!@rFJ@[YWin.EeƆ[M3V&0V9M`3sRuEeio gi5J1\g$ ӡ.QP̷*-pE~YYsFƑ <5X5-0D<]mV0d ӑNn=na4Pf1Dg B} )gwr/h}RwkRϯyS mtdqNu<6 s Ylq`kq,Ya%3CI  s2Ol'@[,tl()T/u4QiYʵl6*) 9V{JRi:Oo/7ƴ|giz"0O''k>.d`=5(靨u,ao3NC@,BϞT;XHMb|s .KYG9 @2MxC Na2I sӦ|pRz䖲ؖRR ȰFLQq(s%A[Hf;ma6>YnA@nQԗ!~b8[ZGc,5[B(.wcƹhJ'$2ebvE#v~#xkb9341Jp2ag^PC?v* qHQWb={+( +.lpjL u?xr)Ƞぁimw`00/M)1-6| Wxʟ`R=!G>!!NL4 P>%m]]X1kUؕ_O;ˤ=ᄐt$hv'u5(#=B)@,((seR6(. E>ehƘ V鑗qq|lz[@kEj0JQ&}mV~7Y0 $ZGR@M<=OqO\`@hOnJ H;vO̦Rf7ttpxy0uwf; PlͥDD` K!Lƕ@Iđuܢ@(gx XFh1&f_,‰euTǎd n32x[09CGjR?n~N}sͱ?'륂aj;˚Ҍ;I G8coy|Lx_NӄV-WV`aj]ct\|]x\@׾rrUGye^"*hjǎBaQY@iB0ޮ+@$$]{hv@,'@8#QU-_Ùc&lZ=9sz 6P0m p.;ny@,u:N>J5dV!h%p5"9๮Vy LP`lG"Qk*2\`X ggLf֎A&j*yy2IwvVaP%ïjrգɢb/(;g7hd9? 'blO (3iNQMYP}{*d"%/HnS'Xw,v&b5Xס a ]1nFzY4-|h#J+Y~+XC+zdp#ZuRu$9 Th*&aOyM+6pq4,e)ce4|r~JH0RtǕWWH^e_`:Ub)OxO0ŠqH?Z% =xGqʨ*j|'Fn I jxeZU8lKBYOdcmKr}2=OIc&x˛o}Jλ`u鳘hD, Jݼ LwG\Hİ-V q*t}4Y%)6n[:m1;u۠!VPB\1mىۮ]9[Tc(f: x 7^1Vk=٧8-j`umť,~Mo7G^vTUCJ^!44VmmZ|}_8Pj-b5杙'U^zѤbu|[wh: h*YΟgu=/ihe.C}D9| <~yO5JNQ۶i^7+>) | Ӭg>ߊegDrWa"?{nd*u'WZ |u" G/DRw⃂Zb1ͩ;?_= ds,3e;b˝(rKOXiykDqt4SQ-7 \>C>ŎF> j <1E-mѶ~(V 4q>q~nsа;>|kobJS^grzvkv<$&HWwLٟ2PW7 PQ]l1}/krU|2T^ʗb7FIHK< ìM6Нbc6 k"ɟs/{k5E8N13(8}?#MUl_QʋjJ\zu3 \ hŒJap#2Rh!-nA um$fr[:A `!pe+'-V9u MԈ2;z+ [r~o]3/nȭäƚ"K]CMs'˅Z#j~w* s$c|lp5CM*gi5ZpS`Ԅ2 C'x]q}V>( ldX65 ,d9 QX߬\qXJʔ!2s%eN=an hdԴ]&AIȟɘ׶`3]`Ke">9Y2 #C} qmGxS[eL"`\raIK|Ԁ{:woq(:pE~Y0']~_Ӹ hAq6[0G(&p%>4vL')Xz,ILcqq\ÍEcEpD14梍zI.USL:̡P): f b@r?%acMJu4 $-ha^F*P{ajfZDh*^T?reg-wfWvhZb-4-(U/a~!Ịu a:pNd>~zx5K*k:A}WC(-$xԏ(9*ƶ-*R~ԥ2EߏG}Z @1&{2c5}a=F|^-E@zV:1ȩeЅ*)࡞ijx2y9(̭-*D9G,wq0 G`u_:hUΘ1(O \QoAјզ$t\87, 1;oCz^K]tB4.FZS]ܭ4{FN6Sk']oY3QE ȑ'oJ=6BN7/4^|nEf{ pz<I!wKkNVe BhLwjzEM-cyhː@idrٍ(&9UWrGHX !S-R=ijEO4XZҬ +`f*ٓ].zez{\}6picGZƤ?ْdiA&SrRXTrY%qix:l,3{ c_HL}[Z &ڃGŧղo_ -L)MQPtCg{ ]_bwoئH&ql%Aƿ +p%ʄϷ_zLۏ9;JTxϤ!<ŋ59 &P(TD>e?m)ZO\fg'F6da<>l[hU?d<ơ77gYAs3N<3hKaU1_~x* Ȥه ;o.Jԧ>ג4@J>+L9lbo Ǣ."] ﭼ9j7'QO^s&mVg%IUx&& j?krl4sS5p>t&.Ӕۼm\.OˮvҴ0d0ַჟ{X_JȌYs񼞻HlKk?&{ Sgb]eF:"q@l:g{,Bp"}|O^HayW]`fe !c-C'op'fbDgnBʛ?.mmbmRϐ.37۵Sy˧~~ =M*`-tG[Ty6}w=]8);f=-*Ceۺ= ,9\n(rerk8EqɎ̱YwTV|riZBuDo46){j$6>hٛM~պR{g[j99:մ'Wdb+ԜPbBW@o:J%{lC܀&w(` }ѳ?Lk=N?/E6:dtO^uOǓUԗ##L9~O̗ [J2^6,o'kL~[r'3hN}..D gJݏ?v?mxGgkW sC~BZɱ&vS<}\Cř r,ӂb;tŒD‹Yh[o_Wc !/w婿f7.ޫ"l?x̚Qzq,H|73{4=Ӓ8f4|o,kap3n zcDAĻ9{t>vaB{;?\l4𱞾RePvgb: }h <|oިV5hsVBs&H@>YSNxѨQ=0gC5FpiF!bof?-1;sCL 8; W!\CJ`<>4/WvRB{k '0JMD>ZJ N w7%f nynI$S7(Fmܶ[3uMJ=V"`\w{;ۼ:6?&կ,(@Ta/0;`ZlYE:"y">pDŨ]HOn7'&zDfU--ga␦s^=Ha?lt(Eɒ#S#Tܻ4 F[KW¨G^`m-.hpZ}8D[;'"7gm(Bz_jS"9OSD|[uy _-/ObfaB;8 (|Usq}Lsœ-*9'Qks!b74d#7S6 k-Ҩ{'֗hPО0DDPz)M 6kJM#YaʤXP6:3:Iul^+f BYv46: TxdZ)M`.?ᰛke'1\5&jNbyPvS۔iP ;lwZ3"ȿڵ+/Fsp%.Ȍ0CJ3q̚+j8?-Ð _V9.nNDNۖY'b,%`0LvBLbTiL@H0c6Eھ 3>nnN 7 FZO_0Fg4,0a ؏ZEQb K|TB?SBD*Yp*hwG ?%59[;&XY_zB5y*.m}'"65MM9ƚ "ͷE}7p)2|atc6 1FcPeA܊\ S~b_m+8EФ&%Wݖ_: $|BG(JB.q;&Tך].k_Ll8Y 87O!⋫s>-Ӽ]&o-X<6B"P,W[SXWUv=Edj:-fThc"71Nk;*cDkflJ'ί.ZA `0͑n'PcWJ-&t[MaṰp<׉RW3(@WºCFCj;;F^ 2h,IT-z0FθuR5@*x.x8lT? kmnx<tӇHf*ܢM{Ր5~szB8ae :Rƿ:-[U64+T% ,0s^a+cŤoêTDBM!YQ(=YH)dKłD$0>3WUt\YKFʨjOjQqpRX*\ uC6Htr5ZoBu)qkX^`N9e WD 7^zTx#ȁ8[hq&& )%Cmqݧ@Uolsu OԎfgPѾYY !4xjk.2cFNZӆlzsމ݄f 1H)~;}nUi&9>qE96{s6Zqg)tKzbMԝitD4}Mղ L>;%?աA:[!; +;cCaq$.dE5+ qߗ4Uz=^ ^V'g=uՙ,TmN]ˣu?wřKJDRX},)Rڰn _zRٵʸK-_Hks3Mr/iՒg{fgO8z.cְRpy2,Sh@>R1J5 L_g dBnʡ~mJ۲Xk@c5?xv ؿׄs1Z8oD5]+qT>0_C7)g6?=6Irh ;ll0/f|MyÌԉ}2Tr{ † c',cLu ?-!1NAasſQv7Z{@!m&ƙ8ϫ5?[KfEe/S |$diS&ay,%׀CrD>E;7FڭQ[t9p%%NNX 1HMdטhBqw[{'%ƥ~P%hc6x^wV+8|O²qrsO>^.jx!6UR&H3`dј4b^WBxq JeN|h5+ESG0-T4k$CRՀ'mzLvM\ĠE[Z^SQWfрL5p[LU.1IsMwl\)ߐX+Ry2!(n`\uyJgZZv5Ք14{PXl '( ΐE%l^ev.@A*S䉁( 54 #Q# !v9 Qomi/̢ N@C`ȁl8@I 9U-Ɨ3_1a\ Ͼ-> iR/f0qGkT=\*\wxe,aDu7,o.UZ3,(pI]*:64`,Fg[H'xIYs1`|t OL}5"1#3Q0Gq#(;/I\8B1SuGgcgLa`Nn(3 ED#@ @Xv0HoA! Cu}"qr/\~1xǥjVX6C$sMp%#sqY@SZÙRrVUlrZz"PR ؓ LƯR/$vl6+ TȾ`a+j|ciRhD& L. ÚCbfMHiw#ru֕ĊL\oڿ#-_U ƣjfD*4=O@V i|7r^m{uv [6_3jH5&7xԕA[?L`q72K_ae ,IޔZ, .8ycF,ЄRPv$6Q,=Evbz,U(\^ 6֒À=WlU3e;StR²vM97Q[p^ɱ/gnYx2GEb!.N@4jqQzHD5n?AӧjTr2Z~Eztf˱N]4,8/RFᲲ Bp Vޏiul5Ro0#,6&v}o%`+|Z4A WXf2^ŹomVNQDi!Q\孥{8ـ gAj ɏAPyaWsү\y*S/+€wOΉ{g)7KTZE˦ʑ)F5AUCv]&w.s-*&,zy^9—BNlߥe>ϝzm?Ǯ'kWWS3(w:Uyo`( P(ׯ@I<ՋԸ=ۭI^XqIɃ8GCd)u&7ܾE\ پƐEɥlL2x}ߓ.u]ڸ?aiնbհ]Z\ sLP5Rrj$|T4,C[215n:I٘f܃K (QT /STA;.d)Kg֊i#۞~`=R87 P~A6"3 l2jd;PHڪRWklONjh?0=2)iR 9f{v.@,aoאF5|8ǔ|]@aׂ<%b 6B\v37[&;^zYAPR>i]Ҫ *Hf"E̢xZwJdg-| (*a!`Ū>IV>癃<5ZGDBFYWW~)vcK(||++|T$bց[ήNħ(,S.19av¨><5ɳm?zȠ1{Lj?'q+;b:{*&Hfg때٤|h˯)?U"yA{fj"m0p i-lD c-,iCa )- R_Ys'BCRO3M2 etDN=Cdb@hqJx{Ȁ0R0 %`TcxWx 'ۂ9ӶQ[*v8ӞN .m} ..;iWZ`%_А:6;&%ğ Fos #X>%6iKc ŹyFт~`>SWV81+q]K*XtRGYK44>re;˘Ռխ!x 'j4ѴFw Y|7zSgWagKe@V^>[84ɋ1Uc@jΎχ]ði.'WK)tcݥLtbMl28x@M$g7,&'$ uqx1CϺ,B28GhF# Wvu +tm&:S 8q(P(k[p 䎷?ѠÙh $T5i7l?Eh;ئ`CNuP*%/Y <7CdX c:l_^nS>^fOsn#E ^ nMĐ[H8IYP>VQuPGsd\ -h*M8s*D;f}!d^Pd`|x}W&gXdmW!Ds¢)F4?7#"+(I[M8BuSI/dd<TV$-_aP10IȗS3\5Vv 6u: De~ B}mPGj~ZPxcswBy K;zW@7xCu]% yGrh>9\)!uՠߑv.B)p 0^-GwөO> Ѿ ctW1g"|͋ӝv"ݭ̷}(P_+|z( 9**5\E%sgY-3@+ܒ{ޮxwsP^hd"58H Smy~|uwΞ,ii'6;F"o0:HPs_/("q;> 3X!Vo@翞>KoŜ<{ 1hW:- ȢM.1ǎ,y| m_veB*ZXYxl*)ZWm/Ɨb!({?'V|{{"|ImaQG L4E 9&Fy'vE- 2+fU]`ɿ )̉F(9rfAVB+ՌE 4ˡt>D~l +(Nˍ'iRrqq4,n 橎31Fdp|x_$&MgSo+˲Knʎ܂%OvNؾJׇqf9 ڎuDXB!6,ZH_9:s0kMtCDžZ6բfvS"[$x2hnbVޯqBW=''=~(q#Cl ДZez PT JõSc/ N1 ]R_G +;xzVEb%0U ɢiO įSVp l%| 0! #"nj7mI4[:)?zd[rw̷_'#*J *,LQ =Z4yfx=@ ->C9_A^r+gmGj|3'|.Y݄u$*}5S4VNuMsS bKlh+@Z`VK x5C=mvi \*ۑe7L 'kg-i YTIЋS2B"T{mڜ;TTf\_Hk piO¢ؑuG9bۚOpOncEx8'V9ҘiЄM4P $s4sϐ*kR-u~GD0J&TOb@8E/5A Yjo h?ìhΓj$'ʹ,rSX7Ɲf~0Iz~F8xj9x0 4o);$mm@; Z3P#Hܔr,72<(%qcx~f*1Le:I4 u~3|Gt)4Υ~G)m5iib.\a0Uf%C~|dlaH/%z'gădYQJ3l(p@RJov#hUh+PԆ&lݜ_s-jdOWȬ&\1苛>=LPu*Ɂ4VIۓߑx*8 ݫaEӾDĉ-x^MXEIŸ:"n eϷhAcwJX.Sfϗ{"Öd-4:OO?P3JEmwQ1M;05 ?.ڭH=se !Lw +%-%3{:KҾcgSiڻn8O@郿]:chJ9!+G!8Re0*?0}wLcF-&Ӿv>m= Z'mLse^gj8=xA^DD7]RvI</96px^5Fc(teS}rQcjO;MiD5'@Uk${plژ 51 J)-()cc7oQmXY~ ze/TXg(QD$v\>GoWsXU{!DGnlBUGcb'xh(P@-Y4e "|KUOĴ;y?͡3ր,f=Z.CyteF,E~͚44cjzw]:9b8 Oy4&nm%K"A4_~ρU@fڭиVw]iK_-3_"= WbtC,A=^p_jЈf,yns%b[BGv|'ddJUݹm*P]xŠ5 lp`oiagĵNn|̺HӶ>[ice[9=zsG( |@:BmEW-a*$fO,Iv,tվӈ\>Gu/N{uP ⷆ$ybړ&|S>ؒpZ">@NߥhNj܌I?Juw=A6;!d$Q=* Z9\܊$p\[j*tד2z-4T]I ɯ]=:Ӟ^/w!M=|Iu 2gGL32/x6&S_{>k)!JȚ7 e~O(Jܯ }v*U}art.MYD/"‰0lMR\wĊ Ѣda`rNj3kL"HQUIf)Z@0DK/'9y:^S%USbJy I҄9 .8mNll@[bWDz/(r؛PM^{< L6dyr{41ClGYy$AqL9+z_}qq_v,!r֥ʢ"c7!brt^˓ m [XU9,ʶ_Ѩ΂'bxtfedܒݐ1 (0ns?m<(YiKX]X-I"|kaKdl0HE? d:.s q1SΥh0f P%3AwR%urCIhROVV&Y[~@EfBi8_qw$eu|+9t8P^QD{L) G 0ic;_ e&mep/ L9,tDgs:sOpm]Ble"vȃ!~%5SJJv8"h VqnE.Y7f j45316Dvհ{^S X (SUȵ2'UԞ)9^XEImxBtGXc QLD a^ܿ4cWβfk͢ט+.̦Z`[k0 ^\gXU*S:n8&O~(9h_pi \G"oU䩰7CX4@ybPRq>x -`s+B[pF*3vy+m4><|nF$'Ļ!LK=3nR' H3h+--mTxgDns pʄv;mډMonNQc0^$?H+so!>Ҏ[*s6eWS$C9IZ}[oZ;2\B]LՀ3/5g*@j:\!#p҆ GW3e|0a7;:~-\aGveUmUODl7!S䝴r.IEȴ[M#R E8R@n;AqV'GMC=)ko!ZS q%P"p.Y@y <9jrX O`$`WB$*:_MkT}aƎH91.:p'ibHMQLe3pW4eܙ Dci2ݻ#A|Owەÿ4"8G__&=0\d ~=fhX׵{ jA@$tNLҦVq'=P"Qxa'7vyܓ;QkK~coȊ`Us6TnM8TlvRO羍%*298CW/mԪcݟ@V *7Ə)B( o$ <c/iy u]B.ڷ>ȥCشPл$C|Z=r ZQw%m)G{<-^f-`]dO`1[xI*?8NnUVm 1$L&7Țsnk*t,h)~vmm4ˀY.X(>Z VMݷWH윾`EAfm8 `@RB,v(_;ȪhZ' ؈|N7ʣi׮RItfdsY=nG||`$RljGg7KT97[#Io‹1Uˈ~GB؏^&3GU|V>O I9#Ow.s#[^Y.,ڥM bDj@Nڋ4Kd)Gm +y7Q#$β1.k-\ ]Q'/e](z|$4FDqS2}{9j;fn$(d%@f\$Oeb ܚT0P9οQaڛ qv +\ ,QNB\8KЗsL*b+moxDkL>bB ?GT|y5|qN%mӃ9ޥj7iI AV;2^ێWMJm9Mo}?"IxP ~U98A8j:AW հKr~$e2 cy3ÊMCGr+vC.!nK&uiMXWkm6UsF\[C۵;.<{O2s&gU:6w?ZBnewfsi'zh8_ **zqXMR\UI 6uf„o0UnThqă Ki OdB4ڠB1Lnjf-Fz%l0z~\Yc*ʰg|A֙GF BĒ_0&oO| Bo'=/e\Fh58KTvGZC.kx ΟH{/ _Ҷ~(BJ!u<E`VXYt(b9rniufTH"|<Ӿ>)>Ű/*oGv)ECG6cS:u&;^[: kS,H0sThɀ%c8yʥR@A5j_t| "imEH]&Ɋ+"(dpvn7&*N4=Zw[Z7A7imUYQqL`L $LItxfłOV<;TVS$M2Rq`{ Ts4 aT˙:S{L8pg Lh0ST#)L{jrP4r'v |98'Oqb|- sm[+Y[72%:G!ZZKjh]qXۑb1cp1YAxl; JNX&[ŕBȔց,AFۯi;]3X{ -rXژ\)mVSRHh.),^u?/Ud晟-:bIl19HDbryDA<_d[aǡX'>fЕ`;{ʼnD@DD\VZ 6/뛻SM͝CwY\PMaWǨgkx 7Y5TZNfC{ Fo>ͿDq&LBFT rdn<~r:ֈ$e oL5X\?lZTok`bK;ʂ,Z ìl_GPޏerńj5r}ZY@'_{hy!ۻd 8n oE~cuU/em/\{,j|V<%PSB џ]Oɉ#cqvasjJXL+oain;fH`X#!Tk!^G@!&EvN^/ҟ3Q$}t8Ol?V)?hR`uxk]Q *-c 92aէz۱3'*]:'JEp$ 2wd :$8B 5û8 )׺{eyӉhDK8%B꺣[7 IShPL Pga(p/OK^%]'GGW}HP!0 mGEZ\) 4#8`Z XBto =|@9QxU"zUe9_.CUNL,Fr&cnjV}Z F (Dj#Mր(NS W#ڼL\-dϋ]lZ v5A=ZgYir0O`ܸd_6?xQ^Rտv-tDE+cK$рp^";؆IN'TqCFv<%> MZ,ҟB ? &zlG`S/ᅕm;覛) iJf DzIT;=gv`U3R(hw. &-g5bpan28SCn(q[.{d&"hЭQBd:?т܁ƤYat0L ~xJg-`9ڣ;Rucmo ,B)\"<,~? a \;L F&'|ZӁQ\akΟx"x -(rHf,g ВC6la$82:ú`{6IbF*rp`bڿ%CsVon C~k.6FׇW@3!5dQ2:UmKaʛf+\ [sk>Tz NyIBA>:6Y5%ɌF0־ȱ@AC\^HE"y]D N@{l)Bٱw>UrѳA$ޯ5dG_/~HI|dZm/N Kc{ȿ`P %'PsЀ}j1,rYP3JH%Qǁdxy2h=#;ڀF3-ḡOYs}*/\i|*c'x4/3pj4ϥ^ݕ_Yܡ O跜w'xRĬnKG J"Qdc%3EنJU9SiSIH uQo" Xs6(E6h6OM@R/G%7qbn} M`%0>!IRd?$ӴWeT/NL,B6iϒ_ BwR(>&) 8l {)u;_+ܣ0GJ̱mw*%Yq3X|_1crbwАeAG,QwgOOp2AE_tɵN^$PT8UoC騯-NGN8Eۆ֔b'f_{L݋OsruɁ<6w1匆@K!`+d,ڵe>ѵ3cK,_H)==%1e]QO`sTA2 3o [+Tx [w(lTUTDC'Y*,ĘIx1}Ĥs-*ފ;r72A*v,#?`~^`;[(HG9\q_@U#zZa &bH#ֲfQ܆x2$Tv({ j>B1}ApC^ =soDEXЪB™uWN(=n>16 zTp![lm|t[ބ[qRe?1ȫ풞3[7(TAd(~q=  s%xˈc9TIMRuIEBB0zao4XBmhqAkcټmC+WM^{?4WiSl]BX})s2SjQcG楜jv I%%BȞN /a:^-ʊ.) `-uKj q~32^EAn$m3cB*n 'a+#C!_uM;v%G GzQi$+Z]`Le#Thwwƌh瓸:$kl4]Z^;o`RC{.@J̌D7liCc7DaWSs+)OEʡT )-;youz7- 9djCAj1,.-FFە#8Jf>; Zq"WMȂz8?QױK {W{@DĀXl[~Ϧ)ƃz7Ť^HK]Uwx=(dԟ\[FI4zx zU\Y#}|5(\<9 Ţ41!X!B7yy=sm|`&9Ypliƿq806!Ҽ5Q62X*zE z7jpa{evXЬ C5ख-eWz'8L[QK$W,",=iFN13 k5{&p$%v{pi\q(׏WD!eUf`Vؖ wYLNwH~ݨ).k[(g#.09N?dvy>FRu{1*/?:4h\ i:l}O2%}ÃV" ,Bd5Mt:eqZhֿu Pꊓ?WΦ*hfҙs`Q~k[GjK)"0-0U_A{"'ɾp CƋwtN)VcaU'*x.qgm?YͬMآ+JtUv/7OxC Eҭ6YE=VDHcxtwj\t{+SF.@H>sT2fU{yTCdD>C.υi F9n"x*-*'vǾgVQpga.Cxh5u<֋PnFkaq*$UPϔ)& D}(bl!UXZ(r:V3,KV\ړ~*ds??[ Sș?`"HX`ȩox\y!bFx!6aq5yh6z3dw@ /bhiTtp%OJ f^C*N~4^klg0Rn* I@kC6ċ5ɂkS'RB)El-ç0A$Ys8|/-Nي|6cV #Ot7AT# :Džv1X cͰi攷#Ɨ7%Q pw~hsUM93@Gz|L'4oX(4=*̩́<˜g2QK\^dXȦ @IK{2xu^}Xx44z4ִ,. ira5Rb:b|I{za !x'%˛=|p] yz$BJ!H:<;fD\1g UZ%SĪ_,ӍgYi_/z4Uq=$LB9X6.}p?Ҟ<x.' 5GdCc,v8omևˎikYQ[؅vm cPL2/xQ0^$ռgMypL~d Vf,k;fS_ҧ)S"ujYf\c/!Hi@AΟzJ>XȨ˜?{AunfL"b#ש_NT^o4=zM ]H[L7)Oo*gO@yn5QЂPO m-QQalJx;4wt,(=D( {Wz&@dm;#q8/_DZ@p{|jE)"g\zFߡ(B3ސL98XѤ r¥ V>9ڰ M+StiA4v8DҢOA_[.TGvl[M?VM8'6< YVԐv%Q:/0 v5/KfM:Vq(z!ڌBf& ;> CmԖc̎P(3L |ޙ5oFx|=ev`0h_H=~ GU{9^*'=DJdj_P'`CMd)ר"(@| .(C m`h#w={my$-}СՍop&`y(exPy o6dyn<+r\$VXg#IEc3@EqשD(U7^{F8+@WR"!TcJLͲ).o/=<7 "ׁ Np,/=|#ô\|Nŝwgݯa ÷:XC8x?'Xd!Q "6Itmc@gN kz]إ.9r+v) ]K?Ht?>ۜQҡĻ $Oؒ ޻]7i<a$tMT|EE7 zg+xF2w>R` ~\?4PMz-ZaEo[ ye)똲gGb.x2Vģ?G1rt4o ߕ#%3x3O $B 1X݃em)ԓ=SW4{r`L Ҏ'jV&0k'=u78>@hb,}7g p=#`ХnG䵶,Ip,] ^dQ# b :;e)W}e[1Q䮃B A~цENkBm$gE3_)]8`>ؿ[{/F' rF@ Fc\}ש@JLTcT"jH%]}.K<._umRt5:q,&gӞWh$4Q+PXDe{ hMaUI G G@}4 YӪ&dX.}X¯(j, K]ԠGL* nahQRS7Dlܗۂtw~R}f]*6r"d.!ul~!ӜdIo$Wm5I2Si^$}oH0n >!(J=ub!.)pqU  f6V rPݷ~Fqk̋UТFT)g$7ܰd0+oGKF__M`OA5"xM=3xV"qAiasuZvTt%[U;؛\JC)\^%8rB0?г9p?'SR &P{HJlm:'X1:S2I;up3BrX|Ԯ/!OQ | ?Pa|Y{ $"F5O.`~[*!!p)0[S+% h(b/w!UwL'pjGz*rgbsR!-km^d~᦯fȟePh@F=af H@qɘH6 vѓe Kݐzh}Bd|ڌ(]Xx;4Jid Vgx-W('9)nXCYJ/ad9EqQm0O;ۤ^+  G4E,Eɬ2Lh"5SSi!RZDhZ~O0ȞiqK>D&ZDo>!Lx#c>>U1c g M@\,v,p6uy/y CCgn1Biˁ!J%$4ƾzR\ñI.Fh@ "?wnp}-5L'Ȯ?HmPD:܃u)#Ylj E<\rݕ?iL%+of% \l-AK~7*r%f #3=>/tYa{(kTb=F-ETv M?Ԑ Aw*"GiԻX_:6Ka%S쓯;7 *:c&4-TsqݛmN{R_ZrF֡%D1cZ.7d5? =Z;p;e_ݥkxL#h:E qQI1 ik*Dɝ?ꀏ)U 5nN{ɂr}l^r\Q\\44`SM\e Qu7wMHp/{NeRebvO4(XJHjS{k3 [K/J6kLJ0ݐ6 .* ][SxXy+Fw()>\\ As+( fe%mub5PD~TRr ~Mrk%Gϓѻq8'y:|k1z/~e'h؊hŎ Te=J;I v--taGUcs"ЏB0lb s|J CQ*RrOM&굣:O1\[66ǁa6S?ctP-ӱȺݿX攧"D ^&t&vʍd'Yzѽe^Px/}j\T箎{ "<Ǹt۲)#m:W1 #woՎ7+}7tdi^;~ QDwٽl vp[hĪ{F;TlteTPª`"P! eϚƶYm Dx}S`9l"  CbYd<5^^uʔX@f69W?qu؉dmG77Ȣ-1Ψ  =l=#YP6 u l IV|$N{"^{<4S@.vv`h{IXN Ŋ~0Vai,iwa/S8S0x7s5`$A\Y6nv .w.; ցO{\\>_LUK2~ S/$V[#o.5#{NLEuq9R\R<-F$'GKQj/[Dڒ[X@JK웠=8D%ŕ=9$w'6= f' ZqeG#U&e=6mIR 0V YNZhq^,+xcW̗&|^\#ra̘ÍD$NmhT`3chq:u_^Y"@q.]{^~Bxv;IĒMS)NmBo?mA=lfSZ3BؽY'=MлCF3O(MeY ]ɼ JoE7sg=κQ/˛ӌ#( qg5k [t`䆲#@lmSlƎQV{< e:pm-2"bK?Obrޭ$kۦ ʟ2|QDyTTw@Y!z'|OmC)1̉g!аfĠ[,,uWϊ״_ %ɺG>(ȋǵ8|LЈS.I;w3/ɣm% '?Z$TUZ 1|6/O*F66.Uets\q>$k7wj@`E+Ɋ(2Vb/6M*K~qJN!+irδ'̙-}\o$fG$iD#s|xWG@Bu$+ 6C+(/%DuAyO5rH0%5U5@ZZkOx==6J%W,Lt9ӥWKVld XkPuOS6х9΄Vm_P!q2aqaC/M9oTx'vf5 ΋ -lhh<`3tFXl;ve[* Y[&B4cn[28!̲ 9]=&8ѫFWVQ YNlGj64ehSXOad ;RGN-ڴ芃R- E65_~eQ)VeghO-]C1R ;wJ9FJ]1rZuAD sc`㊸јdrn)u} m #A7ZO26mObqr!}Db7f.~}e/opd|l:`H%^$XA'h o8sJ="^>8ctu6ƺlЛ?=QFIF7˶@z_γl w=~"!}OE[^4o!\BK2#\ew*^"hIĕ 5l;-vU`tB`?tυ$e&m35BuKA aPr0Ŗ}dʜR+.( ~~z뻫֚XrSZKǺ|'Kqs $s -,,Mf(uꀨqb;<`k+O3MpDp>03b9H4YhqTZmc^E&GZݍ(kplo6nE3'HiUMVQzߙ`-L74nMA -ͳ_z+{E*ӡ!YuK1 5(D $ SxMDv1eD+hPT(-ǖ*Kw72]e(7Dg'a`7(Oh"I%B.YxZ I-bO'GkBzb/u'WGo2-.蘚JtuaEчS< #k7:(?iMZkL)n/ SVZ[ ' nQ奰&jQqk$4dH\}Y Fece ՚B ykl@<&ZZB"NNzu9ב@/}Vvi,M tU؍َ;k p$Z*H\)Դ/>VG5(x# *xo|mYBŅJ!jgZYDó ^ܳEܩoydQZu>IRgr!X7ɬgBLpyCSIҢ+|:mlTce49?VentkrHFˉ `:Oѯ/B[_g8‘ =#b1|!wxDt|s/ [cG=DUt IVeΦǸ߁5,l# .!WGF=U[]i{UEG ڵfvDya z_)ơ? 1o# ?!SuDو;NmZ*t4:r ʼCf( tg f$M9[DӱfU~{5%~Vw/Yj@P &Le蝽-Q|wI7k|~F$N7z\Nv_G [{MdžKcug$zRr 崆Ӎ-6l\gy.S7]-~RE:UluxN9p),3Mp ?9+yg,֛\J=ƶۇ3a/riuQD^ϗzb "IqoMqR<3Glxn e" yc,zB4BZ8෬B3ODv[J;gD̪ok^2 P(;Mb?@8# p,Oj]-,ԞlmBO]ػ҂.T͌!b_CŶv* =Xn7Zv.=* Z,0~lޑBVЇ\e5QOq Cio= /x\'cIkg>Ϳr*J(|$>kaa(Š׉KKj-M}x3}SH몸ŒT'_렀[>< N[C?$IG`Iӧ*HY-}<׾[,^_< ЏAӐfjyo0bǨ0>0yw$•<~DT̴n1Y4YK*")kޫ׸{S^xy;cb/LCw/hDP1|ę'v2Q/?Ճ.B%waF o*OUiɗWR=l IG}KC'Ұm3lX^;?FQrNlv;j߮Nɵ Z:*2 ȗu3{!`qtķ4+-Xs@=m:~Ŷtb{0ֶXNlˌ[֤уk1MG2k|Sg FcKWW<{G} *\I&PȚ-zSc0UPn]lkVBLGRvyGiji$*gʦYp頟P%FG55: Fj(y}^h;I뎣x_Rcm"9ή~d@tN Jp8B${-|{&y&kŢxԤjE| =S { *7#6"P$rE9(8ѽ u MwdYa>TrSf+(8i zf~\%:%43BCK7" 1JGhrFR״hFQܩ.䣕 !)#,Hٜ[B=/"b?F^*vdրG p0m ֶ͇@KT(EZDW1$T?TʂB̀2Sn;.4 9P,yM?)m x AI~޳R 9UUq°';5Y5 TvIeN[ 4 ht6f?onlҏ]N겧xektqLd■fTT]Y6ST cpmt;/y`g*:d-+ᡦ^G[;" }"CuD_\tϿtfRoNAcBi4I 6TXoѿñ@ Y@'xG`o~Yڰ#io5C^k^LYPZ!_1P\3:"1.,+0{A@.QLb yr.ϣolʽ[2Oɩcgt$IS ?~1 fѷqJ-'2[='ńظ{ʞ9&FFg\"rMQ>%oJnl`ݑ#ssmb>@-hzðM23eHAɚz d7d^}&Q%y-{ƸzƔBasO>ʽ+ݼ1< grb02czZ S[yωi{&x?? w*Q( .'}I5q;3V,ן4"EH4᳕0HMS_K;Oj;dd֙R]-j&|z|3FC4kTp4b ) ^9zGDOn[2UӭGdnkפԀaWaJ7h^F+h%̝LcY2zt pބDr̝NJ@X -!\L8_stί0e!Ws'=C@Fi1'L|bR o2G&WҮdծ{q4 윸v"mIhTěP;1l~j¶X*{o%=&i(x$N.檿^:Hxت$ YUSn8{1ɤQ?H?(njlNV:"o'A.PҬ@QffoZ9; *t6@4IMH$RҜ|+]~f=?i,8|+sBק{|.f5m? "db-l6AՃNz. AY8pHgH0Ym}dǃEVBU`zNz vC7am&w^e^w O"HBG&)VeV3(wP׽S,MƼ~H5tVa>04+Y `Bez uWIg~3(&OamOJ:zcqLb3&1|%mptP=vTP`_aRhnM^䀳69NW㊂-2L<6GfgjR3;o,\y_ނvS:nCA$hq٧['9_|L/TeXIlւT,$c@DbΌU~=JxxZc= DRh[p*;Z# \e9$ݺ5bzN הvvd{ƌr4m{"Et@{z;o'QېF}cq-a풿 Ϯ.m) m;.Fjπ- @`˾NqrET\rTLWI(, &tMe|]γ<m3QttF5Uw~:1r6nW`I`hLibi'(- *τ^&k=nԤn:<W2L;>>h똏 GNE H$(Tί>꽇"NtA7>=ɛu+ntDl99\]Z#$*߲OI]5dۃ]V.τb3 !QΦEX39@!MS/+MaD+,KM**;ʋe9:UԋmigFHTr5uM-XB~b;1+txd;_V`IکoR vVu+u9TU%rՠl'OkAODhcu 9F+̔\yUUL2YzX M8ί=^~gWqށ*H(s xI;Ixψ+Q=y7NJ!u ܥNCAl(k=NdIqCF-N5cs A67gإ RP;hE w `)n+4/aݠលޜ-sgC. .*vOIp7ݷ6vFVn ɷ}+9}VzHC R,/>QR/Y1捅d,[Iic2e#jqѯ=~ {(t\gѺkMȪ#Ʊ"'R~`*6jMBIͧ}P|:RDVY>y{?MF'6Bn&nM :Q _,}J-Y8^F ]3r-vZ&GL$c9LuE+"|U!ϖas y(7SRt9a0]׎|#}p_,5w{+*D6{ Z&mDF9tF~vs0H8kg ǍPc-m oo]hDm9[_I9A cok}DP>d>'yّ@jO'r 9,WJm72/R2aKђ PG-DknqyP,o\"$W_؉҅BVKv|pp<36+$Qė=rOG$ ipO7&\mid $&e*_xmL\K0…tQ(# NUff܁K}E7UC]V#Z2hYډK_s돘z.e8lk56+tkO륺9l0A6\ X3[.?!UB#ywёȕk& >Z.KhtDž$hD5(}C?p"Q:%XYH0^*@U>S ަm㉛v4˟iRu[ewvB]EEt T{]STLfvʴ&ΉW(,EO&V3-c\U/hRTvW;[Y-6_nOJm^ژOg5tmܒ$'irEqu'}l`zpJJLdF *0VTGiHpm :HSֵ*mQ6lX^S &0 YZ