sssd-tools-2.5.2-150400.4.11.1 >  A cM'p9|Yo9a|4HԺrǣB_F$ї ",O+-6KZe&Dt?UiYZ!ҋTx$rw>ԿKWp2/ N)>]w%,okHpwSTu/3Yw{locfO~& gJp> 5)F+?%M50GȚI!nQأ|yGi2/ݎ Wp-BnxTd37da93ff933ad06c293e79baf409a96c76330f3f19a3a0dfc969041e7b5b86ca82f6a3f37d30151f4c0add2a12b2ceaa4d11c9fcM'p9|Np4PP2ZN sU-Iە:%dPxϳC6Y $:tNǀARy én$,ha[pcvƱP.nZJ9P!ƣ*μu_{g^i1bAˏ(5p>?d  ! </ EWtzbb b b b :b b$b b!"b##($d(((((8)C9* C:.CFGbHbIbXxY\b]0b^&bcdGeLfOlQudbv wbx|byGz 04:|Csssd-tools2.5.2150400.4.11.1Commandline tools for sssdThe packages contains commandline tools for managing users and groups using the "local" id provider of the System Security Services Daemon (sssd).cMs390zp32Z>SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/System/Managementhttps://github.com/SSSD/sssdlinuxs390x>0x QX-Ue9Mnw'Ez>uHom3g ^`# 3`|3\ nd :OkLu $ ] A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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-2.5.2-150400.4.11.1.src.rpmsssd-toolssssd-tools(s390-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/usr/bin/python3libc.so.6()(64bit)libc.so.6(GLIBC_2.2)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2)(64bit)libifp_iface_sync.so()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpam_misc.so.0()(64bit)libpam_misc.so.0(LIBPAM_MISC_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)libref_array.so.1(REF_ARRAY_0.1.1)(64bit)libsss_certmap.so.0()(64bit)libsss_certmap.so.0(SSS_CERTMAP_0.1)(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_iface_sync.so()(64bit)libsss_sbus_sync.so()(64bit)libsss_util.so()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)python3-sssd-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sssd-common2.5.2-150400.4.11.13.0.4-14.6.0-14.0-15.2-12.5.2-150400.4.11.14.14.3c1@b/.@b@b~ba@aq@a @`!@``x*`m`T@_ts@^}^f/^ P@^[^ @]}@]µ]@]@]@]@\@\\+@\mA@[t[*AZZ@ZH@Z%8Z!D@YYw2X~@X,XX@X7@X@X@XN@XGX`@WWW@W@V&@VqR@VO @V U@U5@UU@U}lT@TTq@T6T`TR(@dmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.deckowalczyk@suse.comckowalczyk@suse.comckowalczyk@suse.comckowalczyk@suse.comhguo@suse.comhguo@suse.comhguo@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.commichael@stroeder.comjengelh@inai.demichael@stroeder.comkukuk@suse.deluizluca@gmail.commichael@stroeder.comdimstar@opensuse.orgjengelh@inai.demichael@stroeder.commichael@stroeder.comjengelh@inai.dehguo@suse.commichael@stroeder.commpluskal@suse.comjengelh@inai.dejengelh@inai.demichael@stroeder.comjengelh@inai.dejengelh@inai.dehguo@suse.comcrrodriguez@opensuse.orgmichael@stroeder.comhguo@suse.comhoward@localhostjengelh@inai.demeissner@suse.comledest@gmail.comjengelh@inai.de- Fix sdap_access_host No matching host rule found; (bsc#1202559); Add patch 0001-Fix-sdap_access_host-No-matching-host-rule-found.patch- Fix shell command injection in sssctl via the logs-fetch and cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add 0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch- Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attributte; (bsc#1190775); (gh#SSSD/sssd#4893); Add patch 0001-ldap-ignore-unreadable-references.patch- Fix 32-bit libraries package. Libraries were moved from sssd to sssd-common to fix bsc#1182058 and baselibs.conf was not updated accordingly; (bsc#1196166);- Remove caches only when performing a package downgrade. The sssd daemon takes care of upgrading the database format when necessary (bsc#1195552)- Update the private ldb modules installation following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Remove libsmbclient-devel BuildRequires in favor of pkgconfig(smbclient)- Update to version 2.5.2; (jsc#SLE-17763); * originalADgidNumber attribute in the SSSD cache is now indexed. * Add new config option fallback_to_nss. - Changes from version 2.5.1 * auto_private_groups option can be set centrally through ID range setting in IPA (see ipa idrange commands family). This feature requires SSSD update on both client and server. This feature also requires freeipa 4.9.4 and newer. * Fix getsidbyname issues with IPA users with a user-private-group. * Default value of ldap_sudo_random_offset changed to 0 (disabled). This makes sure that sudo rules are available as soon as possible after SSSD start in default configuration. - Changes from version 2.5.0 * Added support for automatic renewal of renewable TGTs that are stored in KCM ccache. This can be enabled by setting tgt_renewal = true. See the sssd-kcm man page for more details. This feature requires MIT Kerberos krb5-1.19-0.beta2.3 or higher. * Backround sudo periodic tasks (smart and full refresh) periods are now extended by a random offset to spread the load on the server in environments with many clients. * Completing a sudo full refresh now postpones the smart refresh by ldap_sudo_smart_refresh_interval value. This ensure that the smart refresh is not run too soon after a successful full refresh. * If debug_backtrace_enabled is set to true then on any error all prior debug messages (to some limit) are printed even if debug_level is set to low value. * Besides trusted domains known by the forest root, trusted domains known by the local domain are used as well. * New configuration option offline_timeout_random_offset to control random factor in backend probing interval when SSSD is in offline mode. * ad_gpo_implicit_deny is now respected even if there are no applicable GPOs present. * During the IPA subdomains request a failure in reading a single specific configuration option is not considered fatal and the request will continue. * Unknown IPA id-range types are not considered as an error - Changes from version 2.4.2 * Default value of "user" config option was fixed into accordance with man page, i.e. default is "root". * pam_sss_gss now support authentication indicators to further harden the authentication. - Changes from version 2.4.1 * New PAM module pam_sss_gss for authentication using GSSAPI. * case_sensitive=Preserving can now be set for trusted domains with AD and IPA providers. * krb5_use_subdomain_realm=True can now be used when sub-domain user principal names have upnSuffixes which are not known in the parent domain. SSSD will try to send the Kerberos request directly to a KDC of the sub-domain. * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald output, to avoid issues with PID parsing in rsyslog (BSD-style forwarder) output. * Added pam_gssapi_check_upn to enforce authentication only with principal that can be associated with target user. * Added pam_gssapi_services to list PAM services that can authenticate using GSSAPI. - Changes from version 2.4.0 * Session recording can now exclude specific users or groups when scope is set to all (see exclude_users and exclude_groups options). * Active Directory provider now sends CLDAP pings over UDP protocol to Domain Controllers in parallel to determine site and forest to speed up server discovery. - Changes from version 2.3.1 * Domains can be now explicitly enabled or disabled using enable option in domain section. This can be especially used in configuration snippets. * New configuration options memcache_size_passwd, memcache_size_group, memcache_size_initgroups that can be used to control memory cache size. * Fixed several regressions in GPO processing introduced in sssd-2.3.0 * Fixed regression in PAM responder: failures in cache only lookups are no longer considered fatal. * Fixed regression in proxy provider: pwfield=x is now default value only for sssd-shadowutils target. - Changes from version 2.3.0 * SSSD can now handle hosts and networks nsswitch databases (see resolve_provider option). * By default, authentication request only refresh user's initgroups if it is expired or there is not active user's session (see pam_initgroups_scheme option). * OpenSSL is used as default crypto provider, NSS is deprecated. * The AD provider now defaults to GSS-SPNEGO SASL mechanism (see ldap_sasl_mech option). * The AD provider can now be configured to use only ldaps port (see ad_use_ldaps option). * SSSD now accepts host entries from GPO's security filter. * New debug level (0x10000) added for low level LDB messages only (see sssd.conf man page). - Changes from version 2.2.3 * allow_missing_name now treats empty strings the same as missing names. * "soft_ocsp" and "soft_crl" options have been added to make the checks for revoked certificates more flexible if the system is offline. * Smart card authentication in polkit is now allowed by default. * Handling of FreeIPA users and groups containing ‘@’ sign now works. * Issue when autofs was unable to mount shares was fixed. * SSSD was unable to hande ldap_uri containing URIs with different port numbers, which has been rectified. - Changes from version 2.2.2 * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache. This has been fixed. * Because of a race condition SSSD could crash during shutdown. The race condition was fixed. * Fixed a bug that limited number of external groups fetched by SSSD to 2000. * pam_sss now properly creates gnome keyring during login. * SSSD with KCM could wrongly pick older ccache instead of the latest one after login. This was fixed. - Changes from version 2.2.1 * New options were added which allow sssd-kcm to handle bigger data. * SSSD can now automatically refresh cached user data from subdomains in IPA/AD trust. * Fixed issue with SSSD hanging when connecting to non-responsive server with ldaps://. * SSSD is now restarted by systemd after crashes. * Fixed refression when dyndns_update was set to True and dyndns_refresh_interval was not set or set to 0 then DNS records were not updated at all. * Fixed issue when default_domain_suffix was used with files provider and caused all results from files domain to be fully qualified. * Fixed issue with sudo rules not being visible on OpenLDAP servers * Fixed crash with auth_provider = proxy that prevented logins - Changes from version 2.2.0 * The Kerberos provider can now include more KDC addresses or host names when writing data for the Kerberos locator plugin. * The 2FA prompting can now be configured. * The LDAP authentication provider now allows to use a different method of changing LDAP passwords using a modify operation in addition to the default extended operation. * The "auto_private_groups" configuration option now takes a new value hybrid. * A new option "ad_gpo_ignore_unreadable" was added. * The "cached_auth_timeout" parameter is now inherited by trusted domains. * The "ldap_sasl_mech" option now accepts another mechanism "GSS-SPNEGO" in addition to "GSSAPI". * The sssctl tool has two new commands, "cert-show" and "cert-map". - Changes from version 2.1.0 * Any provider can now match and map certificates to user identities. * pam_sss can now be configured to only perform Smart Card authentication or return an error if this is not possible. * pam_sss can also prompt the user to insert a Smart Card if, during an authentication it is not available. * It is now possible to refresh the KCM configuration without restarting the whole SSSD deamon * A new configuration option ad_gpo_implicit_deny was added. This option (when set to True) can be used to deny access to users even if there is not applicable GPO. * The dynamic DNS update can now batch DNS updates to include all address family updates in a single transaction. - Changes from version 2.0.0 * The Python API for managing users and groups in local domains (id_provider=local) was removed completely. The local provider (id_provider=local) and the command line tools to manage users and groups in the local domains, such as sss_useradd is not built anymore. * The LDAP provider had a special-case branch for evaluating group memberships with the RFC2307bis schema when group nesting was explicitly disabled. This codepath is removed. * The ldap_groups_use_matching_rule_in_chain and ldap_initgroups_use_matching_rule_in_chain options and the code that evaluated them was removed. * The "ldap_sudo_include_regexp" option changed its default value from true to false. Wildcards in the sudoHost LDAP attribute are no longer evaluated. This was costly to evaluate on the LDAP server side and at the same time rarely used. * The KCM responder has a new back end to store credential caches in a local database * The list of PAM services which are allowed to authenticate using a Smart Card is now configurable using a new option pam_p11_allowed_services. - Make cifs-idmap plugin (idmapwb.so) use update-alternatives mechanism to be able to switch between cifs-utils and sssd; (bsc#1182682). - Build sssd's KCM - Drop obsolete patches: + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch + 0002-intg-Do-not-hardcode-nsslibdir.patch + 0003-MONITOR-Do-not-use-two-configuration-databases.patch + 0004-Strip-whitespaces-in-netgroup-triple.patch + 0005-nss-sssd-returns-for-emtpy-home-directories.patch + 0006-Rotate-child-log-files.patch + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch + 0014-util-Remove-the-unused-function-is_email_from_domain.patch + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch + 0019-winbind-idmap-plugin-support-inferface-version-6.patch + 0020-winbind-idmap-plugin-fix-detection.patch + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch + 0027-utils-make-N_ELEMENTS-public.patch + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch + sssd-gpo_host_security_filter-1.16.1.patch + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch + 0036-ad_gpo_ndr.c-more-ndr-updates.patch + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch + 0038-CACHE-Create-timestamp-if-missing.patch + 0039-sss_cache-Do-not-fail-for-missing-domains.patch- Fix sss_cache spurious error messages when invoked from shadow-utils; (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch- Use /run instead of /var/run for daemon PID files; (bsc#1185185);- Create timestamp attribute in cache objects if missing; (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);- Fix a dependency loop by moving internal libraries to sssd-common package; (bsc#1182058);- Fix build against samba >= 4.12 + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch + 0036-ad_gpo_ndr.c-more-ndr-updates.patch - Fix build with curl >= 7.62.0 + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch- Update samba secrets after changing machine password; (jsc#SLE-11503); Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch- Install infopipe dbus service (bsc#1106598)- SSSD GPO host entries are ignored if computer cn does not match it's samaccountname, add 0001-Resolve-computer-lookup-failure-when-sam-cn.patch; (jsc#SLE-9298); (bsc#1160688)- SSSD should accept host entries from GPO's security filter, add sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)- Fix building with newer samba versions (bsc#1137876) - Added patches: * 0027-utils-make-N_ELEMENTS-public.patch * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch- Update winbind idmap plugin to support interface version 6 (jsc#SLE-9819) - Added patches: * 0019-winbind-idmap-plugin-support-inferface-version-6.patch * 0020-winbind-idmap-plugin-fix-detection.patch * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch- Delete linked local user overrides when deleting a user (bsc#1133168) - Added patches: * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch- Fix domain offline after first boot when resolv.conf is a symlink (bsc#1136139) - Added patches: * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch- Fix login not possible when email address is duplicated in ldap attributes (bsc#1149597) - Added patches: * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch * 0014-util-Remove-the-unused-function-is_email_from_domain.patch- Fix memory leak in nss netgroup enumeration (bsc#1139247); - Added patches: * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch- Allow defaults sudoRole without sudoUser attribute (bsc#1135247) - Added an option to skip GPOs that have groupPolicyContainers, unreadable by SSSD (bsc#1124194) (CVE-2018-16838) - Added patches: * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch- Create directory to download and cache GPOs (bsc#1132879) - Add a netgroup counter to struct nss_enum_index (bsc#1132657) - Added patches: * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch- Rotate child debug file descriptors on SIGHUP (bsc#1080156) - Added patches: * 0006-Rotate-child-log-files.patch- Fix fallback_homedir returning '/' for empty home directories (CVE-2019-3811) (bsc#1121759) - Install logrotate configuration (bsc#1004220) - Strip whitespaces in netgroup triples (bsc#1087320) - Align systemd service file with upstream * Run interactive and change service type to notify (bsc#1120852) * Replace deprecated '-f' and use '--logger' - Fix sssd not starting in foreground mode (bsc#1125277) - Added patches: * 0003-MONITOR-Do-not-use-two-configuration-databases.patch * 0004-Strip-whitespaces-in-netgroup-triple.patch * 0005-nss-sssd-returns-for-emtpy-home-directories.patch- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)- Introduce patches: * Create sockets with right permissions: 0001-SUDO-Create-the-socket-with-stricter-permissions.patch (bsc#1098377, CVE-2018-10852) * Fix for sssd upstream integration tests 0002-intg-Do-not-hardcode-nsslibdir.patch (bsc#1098163)- Update to new minor upstream release 1.16.1 (fate#323340): New Features: * A new option auto_private_groups was added. If this option is enabled, SSSD will automatically create user private groups based on user’s UID number. The GID number is ignored in this case. * The SSSD smart card integration now supports a special type of PAM conversation implemented by GDM which allows the user to select the appropriate smrt card certificate in GDM. * A new API for accessing user and group information was added. This API is similar to the tradiional Name Service Switch API, but allows the consumer to talk to SSSD directly as well as to fine-tune the query with e.g. how cache should be evaluated. * The sssctl command line tool gained a new command access-report, which can generate who can access the client machine. Currently only generating the report on an IPA client based on HBAC rules is supported. * The hostid provider was moved from the IPA specific code to the generic LDAP code. This allows SSH host keys to be access by the generic LDAP provider as well. See the ldap_host_* options in the sssd-ldap manual page for more details. * Setting the memcache_timeout option to 0 disabled creating the memory cache files altogether. This can be useful in cases there is a bug in the memory cache that needs working around.- Updated sssd.spec: The IPA provider depends on AD provider's PAC executable, hence introducing the package dependency. (bsc#1021441, bsc#1062124)- Remove package descriptions for the python 2 packages that are no longer distributed: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config - Correct python version dependency of tools package. (bsc#1082108)- Correct dependency of sss_obfuscate command line program.- In an ongoing effort to reduce dependency on python version 2, the following python libraries are no longer built. Nevertheless their python3 counterparts remain in place: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config- Update to new upstream release 1.16.0 Security fixes * This release fixes CVE-2017-12173: Unsanitized input when searching in local cache database. SSSD stores its cached data in an LDAP like local database file using libldb. To lookup cached data LDAP search filters like (objectClass=user)(name=user_name) are used. However, in sysdb_search_user_by_upn_res(), the input was not sanitized and allowed to manipulate the search filter for cache lookups. This would allow a logged in user to discover the password hash of a different user. New Features * SSSD now supports session recording configuration through tlog. This feature enables recording of everything specific users see or type during their sessions on a text terminal. For more information, see the sssd-session-recording(5) manual page. * SSSD can act as a client agent to deliver Fleet Commander policies defined on an IPA server. Fleet Commander provides a configuration management interface that is controlled centrally and that covers desktop, applications and network configuration. * Several new systemtap probes were added into various locations in SSSD code to assist in troubleshooting and analyzing performance related issues. Please see the sssd-systemtap(5) manual page for more information. * A new LDAP provide access control mechanism that allows to restrict access based on PAM's rhost data field was added. For more details, please consult the sssd-ldap(5) manual page, in particular the options ldap_user_authorized_rhost and the rhost value of ldap_access_filter.- Update to new upstream release 1.15.3 (KCM disabled) New Features * In a setup where an IPA domain trusts an Active Directory domain, it is now possible to define the domain resolution order (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names). * Design page - Shortnames in trusted domains * SSSD ships with a new service called KCM. This service acts as a storage for Kerberos tickets when "libkrb5" is configured to use "KCM:" in "krb5.conf". * Design page - KCM server for SSSD * NOTE: There are several known issues in the "KCM" responder that will be handled in the next release. * Support for user and group resolution through the D-Bus interface and authentication and/or authorization through the PAM interface even for setups without UIDs or Windows SIDs present on the LDAP directory side. This enhancement allows SSSD to be used together with apache modules to provide identities for applications * Design page - Support for non-POSIX users and groups * SSSD ships a new public library called "libsss_certmap" that allows a flexible and configurable way of mapping a certificate to a user identity. * Design page - Matching and Mapping Certificates * The Kerberos locator plugin can be disabled using an environment variable "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the "sssd_krb5_locator_plugin" manual page for mode details. * The "sssctl" command line tool supports a new command "user-checks" that enables the administrator to check whether a certain user should be allowed or denied access to a certain PAM service. * The "secrets" responder now forwards requests to a proxy Custodia back end over a secure channel.- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to krb5-common sub-package. Address bsc#1024836.- Update to new upstream release 1.15.2 * It is now possible to configure certain parameters of a trusted domain in a configuration file sub-section. * Several issues related to socket-activating the NSS service, especially if SSSD was configured to use a non-privileged userm were fixed. The NSS service now does not change the ownership of its log files to avoid triggering a name-service lookup while the NSS service is not running yet. Additionally, the NSS service is started before any other service to make sure username resolution works and the other service can resolve the SSSD user correctly. * A new option "cache_first" allows the administrator to change the way multiple domains are searched. When this option is enabled, SSSD will first try to "pin" the requested name or ID to a domain by searching the entries that are already cached and contact the domain that contains the cached entry first. Previously, SSSD would check the cache and the remote server for each domain. This option brings performance benefit for setups that use multiple domains (even auto-discovered trusted domains), especially for ID lookups that would previously iterate over all domains. Please note that this option must be enabled with care as the administrator must ensure that the ID space of domains does not overlap. * The SSSD D-Bus interface gained two new methods: "FindByNameAndCertificate" and "ListByCertificate". These methods will be used primarily by IPA and `mod_lookup_identity to correctly match multple users who use the same certificate for Smart Card login. * A bug where SSSD did not properly sanitize a username with a newline character in it was fixed.- Switch *all* URLs after fedorahosted.org retirement- Updated project URL - Update to new upstream release 1.15.1 * Several issues related to starting the SSSD services on-demand via socket activation were fixed. In particular, it is no longer possible to have a service started both by sssd and socket-activated. Another bug which might have caused the responder to start before SSSD started and cause issues especially on system startup was fixed. * A new 'files' provider was added. This provider mirrors the contents of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose of this new provider is to make it possible to use SSSD's interfaces, such as the D-Bus interface for local users and enable leveraging the in-memory fast cache for local users as well, as a replacement for `nscd`. In future, we intend to extend the D-Bus interface to also provide setting and retrieving additional custom attributes for the files users. * SSSD now autogenerates a fallback configuration that enables the files domain if no SSSD configuration exists. This allows distributions to enable the 'sssd' service when the SSSD package is installed. Please note that SSSD must be build with the configuration option '--enable-files-domain' for this functionality to be enabled. * Support for public-key authentication with Kerberos (PKINIT) was added. This support will enable users who authenticate with a Smart Card to obtain a Kerberos ticket during authentication.- Remove obsolete insserv call- Added /etc/sssd/conf.d/ for configuration snippets- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update - Update to new upstream release 1.15.0 * SSSD now allows the responders to be activated by the systemd service manager and exit when idle. This means the services line in sssd.conf is optional and the responders can be started on-demand, simplifying the sssd configuration. Please note that this change is backwards-compatible and the responders listed explicitly in sssd.conf's services line are managed by sssd in the same manner as in previous releases. Please refer to man sssd.conf(5) for more information * The sudo provider is no longer disabled for configurations that do not explicitly include the sudo responder in the services list. In order to disable the sudo-related back end code that executes the periodic LDAP queries, set the sudo_provider to none explicitly * The watchdog signal handler no longer uses signal-unsafe functions. This bug was causing a deadlock in case the watchdog was about to kill a stuck process * A bug that prevented TLS to be set up correctly on systems where libldap links with GnuTLS was fixed * The functionality to alter SSSD configuration through the D-Bus interface provided by the IFP responder was removed. This functionality was not used to the best of our knowledge, had no tests and prevented the InfoPipe responder from running as a non-privileged user. * A bug that prevented statically-linked applications from using libnss_sss was fixed by removing dependency on -lpthreads from the libnss_sss library (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for an example on why linking with -lpthread from an NSS modules is problematic) * Previously, SSSD did not ignore GPOs that were missing the gPCFunctionalityVersion attribute and failed the whole GPO processing. Starting with this version, the GPOs without the gPCFunctionalityVersion are skipped.- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-login): the latter has been deprecated since systemd 209 and finally removed with systemd 230.- Add 0001-krb5-1.15-build-fix.patch to unlock building against future KRB versions.- Update to new upstream release 1.14.2 * Several more regressions caused by cache refactoring to use qualified names internally were fixed, including a regression that prevented the krb5_map_user option from working correctly. * A regression when logging in with a smart card using the GDM login manager was fixed * SSSD now removes the internal timestamp on startup cache when the persistent cache is removed. This enables admins to follow their existing workflow of just removing the persistent cache and start from a fresh slate * Several fixes to the sssd-secrets responder are present in this release * A bug in the autofs responder that prevented automounter maps from being returned when sssd_be was offline was fixed * A similar bug in the NSS responder that prevented netgroups from being returned when sssd_be was offline was fixed * Disabling the netlink integration can now be done with a new option disable_netlink. Previously, the netlink integration could be disabled with a sssd command line switch, which is being deprecated in this release. * The internal watchdog no longer kills sssd processes in case time shifts during sssd runtime * The fail over code is able to cope with concurrent SRV resolution requests better in this release * The proxy provider gained a new option proxy_max_children that allows the administrator to control the maximum number of child helper processes that authenticate users with auth_provider=proxy * The InfoPipe D-Bus responder exports the UUIDs of user and group objects through a uniqueID property- Update to new upstream release 1.14.1 * The IPA provider now supports logins with enterprise principals (also known as additional UPN suffixes). This functionality also enabled Active Directory users from trusted AD domains who use an additional UPN suffix to log in. Please note that this feature requires a recent IPA server. * When a user name is overriden in an IPA domain, resolving a group these users are a member of now returns the overriden user names * Users can be looked up by and log in with their e-mail address as an identifier. In order to do so, an attribute that represents the user's e-mail address is fetched by default. This attribute can by customized by setting the ldap_user_email configuration option. * A new ad_enabled_domains option was added. This option lets the administrator select domains that SSSD should attempt to reach in the AD forest SSSD is joined to. This option is useful for deployments where not all domains are reachable on the network level, yet the administrator needs to access some trusted domains and therefore disabling the subdomains provider completely is not desirable. * The sssctl tool has two new commands active-server and servers that allow the administrator to observe the server that SSSD is bound to and the servers that SSSD autodiscovered * SSSD used to fail to start when an attribute name is present in both the default SSSD attribute map and the custom ldap_user_extra_attrs map * GPO policy procesing no longer fails if the gPCMachineExtensionNames attribute only contains whitespaces * Several commits fix regressions related to switching all user and group names to fully qualified format, such as running initgroups for a user who is only a member of a primary group * Several patches fix regressions caused by splitting the database into two ldb files, such as when user attributes change without increasing the modifyTimestamp attribute value * systemd unit files are now shipped for the sssd-secrets responder, allowing the responder to be socket-activated. To do so, administrators should enable the sssd-secrets.socket and sssd-secrets.service systemd units. * The sssd binary has a new switch --disable-netlink that lets sssd skip messages from the kernel's netlink interface. * A crash when entries with special characters such as '(' were requested was fixed * The ldap_rfc_2307_fallback_to_local_users option was broken in the previous version. This release fixes the functionality.- Update to new upstream release 1.14.0 * The AD provider is now able to look up users from Active Directory domains by certificate. This change enables logins for Active Directory users with the help of a smart card. * The sss_override tool is now able to add certificates as local overrides in the SSSD cache. Please note that the certificate overrides are stored in the local cache, so removing the cache also removes all the certificates! * Invalid certificates are skipped instead of aborting the whole operation when logging in with a smart card using SSH. * This version allows several OCSP-related options such as the OCSP responder to be configured during smart card authentication. * SSSD is now able to determine the name of the user who logs in from the inserted smart card without having to type in the username. Note that this functionality must be enabled with the allow_missing_name pam_sss option. * The sss_cache command line tool is now able to invalidate SUDO rules with its new -r/-R switches. Note that the sudo rules ar not refreshed with the sss_cache tool immediately. * A new command line tool called sssctl was added. This tool allows to observe the status of SSSD. * A new option local_negative_timeout was added. This option allows the admin to specify the time during which lookups for users that are not handled by SSSD but are present on the system (typically in /etc/passwd and /etc/group) and prevents repeated lookups of local users on the remote server during initgroups operation. * An ID-mapping plugin for the winbind deamon was added. With this plugin, it's possible for winbind to use the same ID-mapping scheme as SSSD uses, producing consistent ID values. - Remove 0001-build-detect-endianness-at-configure-time.patch (included upstream)- Enable PAC responder. PAC is an extension element returned by domain controller, to speed up resolution of authorisation data such as group memberships.- Update to new upstream release 1.13.4 * The IPA sudo provider was reimplemented. The new version reads the data from IPA's LDAP tree (as opposed to the compat tree populated by the slapi-nis plugin that was used previously). The benefit is that deployments which don't require the compat tree for other purposes, such as support for non-SSSD clients can disable those autogenerated LDAP trees to conserve resources that slapi-nis otherwise requires. There should be no visible changes to the end user. * SSSD now has the ability to renew the machine credentials (keytabs) when the ad provider is used. Please note that a recent version of the adcli (0.8 or newer) package is required for this feature to work. * The automatic ID mapping feature was improved so that the administrator is no longer required to manually set the range size in case a RID in the AD domain is larger than the default range size * A potential infinite loop in the NFS ID mapping plugin that was resulting in an excessive memory usage was fixed * Clients that are pinned to a particular AD site using the ad_site option no longer communicate with DCs outside that site during service discovery. * The IPA identity provider is now able to resolve external (typically coming from a trusted AD forest) group members during get-group-information requests. Please note that resolving external group memberships for AD users during the initgroup requests used to work even prior to this update. This feature is mostly useful for cases where an IPA client is using the compat tree to resolve AD trust users. * The IPA ID views feature now works correctly even for deployments without a trust relationship. Previously, the subdomains IPA provider failed to read the views data if no master domain record was created on the IPA server during trust establishment. * A race condition in the client libraries between the SSSD closing the socket as idle and the client application using the socket was fixed. This bug manifested with a Broken Pipe error message on the client. * SSSD is now able to resolve users with the same usernames in different OUs of an AD domain * The smartcard authentication now works properly with gnome-screensaver- Enable internal testsuite- Update to new maintenance release 1.13.3 * A bug that prevented user lookups and logins after migration from winsync to IPA-AD trusts was fixed. * A bug that prevented the ignore_group_members option from working correctly in AD provider setups that use a dedicated primary group (as opposed to a user-private group) was fixed. * Offline detection and offline login timeouts were improved for AD users logging in from a domain trusted by an IPA server. * The AD provider supports setting up autofs_provider=ad .- Update to new upstream release 1.13.2 * Initial support for Smart Card authentication was added. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. * This release supports authenticating againt a KDC proxy.- Update to new upstream release 1.13.1 * Initial support for Smart Card authentication was added. The feature can be activated with the new pam_cert_auth option. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. At the same time, only the long-term password is cached, so offline access would still work using the long term password. * A new command line tool sss_override is present in this release. The tools allows to override attributes on the SSSD side. It's helpful in environment where e.g. some hosts need to have a different view of POSIX attributes than others. Please note that the overrides are stored in the cache as well, so removing the cache will also remove the overrides. * Several enhancements to the dynamic DNS update code. Notably, clients that update multiple interfaces work better with this release. * This release supports authenticating againt a KDC proxy * The fail over code was enhanced so that if a trusted domain is not reachable, only that domain will be marked as inactive but the backed would stay in online mode.- Update to new upstream release 1.13 * Support for separate prompts when using two-factor authentication * Added support for one-way trusts between an IPA and Active Directory environment. (Depends on IPA 4.2) * The fast memory cache now also supports the initgroups operation. * The PAM responder is now capable of caching authentication for configurable period, which might reduce server load in cases where accounts authenticate very frequently. Refer to the "cached_auth_timeout" option in sssd.conf(5). * The Active Directory provider has changed the default value of the "ad_gpo_access_control" option from permissive to enforcing. As a consequence, the GPO access control now affects all clients that set access_provider to ad. In order to restore the previous behaviour, set ad_gpo_access_control to permissive or use a different access_provider type. * Group Policy objects defined in a different AD domain that the computer object is defined in are now supported. * Credential caching and Offline authentication are also available when using two-factor authentication * The Python bindings are now built for both Python2 and Python3. * The LDAP bind timeout, StartTLS timeout and password change timeout are now configurable using the ldap_opt_timeout option.- Kill unused libsss_sudo-devel solvable.- Obsolete/provide libsss_sudo in sssd main package. Sudo capability is an integral feature in SSSD and the library is not supposed to be used separately.- sssd.service: add Before= and Wants=nss-user-lookup.target correct fix for bsc#926961- Update to new upstream release 1.12.5 * The background refresh tasks now supports refreshing users and groups as well. See the "refresh_expired_interval" parameter in the sssd.conf manpage. * A new option subdomain_inherit was added. * When an expired account attempts to log in, a configurable error message can be displayed with sufficient pam_verbosity setting. See the "pam_account_expired_message" option. * OpenLDAP ppolicy can be honored even when an alternate login method (such as SSH key) is used. See the "ldap_access_order" option. * A new option :krb5_map_user" was added, allowing the admin to map UNIX usernames to Kerberos principals. * BUG FIXES: * Fixed AD-specific bugs that resulted in the incorrect set of groups being displayed after the initgroups operation. * Fixes related to the IPA ID views feature. Setups using this should update sssd on both IPA servers and clients. * The AD provider now handles binary GUIDs correctly. * A bug that prevented the `ignore_group_members` parameter to be used with the AD provider was fixed. * The failover code now reads and honors TTL value for SRV queries as well. * Race condition between setting the timeout in the back ends and reading it in the front end during initgroup operation was fixed. This bug affected applications that perform the initgroups(3) operation in multiple processes simultaneously. * Setups that only want to use the domain SSSD is connected to, but not the autodiscovered trusted domains by setting `subdomains_provider=none` now work correctly as long as the domain SID is set manually in the config file. * In case only "allow" rules are used, the simple access provider is now able to skip unresolvable groups. * The GPO access control code now handles situations where user and computer objects were in different domains.- Update to new upstream release 1.12.4 (Changelog highlights following) * This is mostly a bug fixing release with only minor enhancements visible to the end user. * Contains many fixes and enhancements related to the ID views functionality of FreeIPA servers. * Several fixes related to retrieving AD group membership in an IPA-AD trust scenario. * Fixes a bug where the GPO access control previously didn't work at all if debugging was enabled in smb.conf. * SSSD can now be pinned to a particular AD site instead of autodiscovering the site. * A regression that caused setting the SELinux context for IPA users to fail, was fixed. * Fixed a potential crash caused by a double-free error when an SSSD service was killed by the monitor process.- A minor rpmspec cleanup to get rid of five rpmlint warnings * Remove mentioning of system-wide dbus configuration file from comments. * Remove traditional init script. * Remove compatibility for producing packages on older OpenSUSE releases.- Update to new upstream release 1.12.3 * SSSD now allows the IPA client to move from one ID view to another after SSSD restart. * It is possible to apply ID views to IPA domains as well. Previous SSSD versions only allowed views to be applied to AD trusted domains. * Overriding SSH public keys is supported in this release. * Move semanage related functions to a separate library.- build with PIE- fix bashism in postun script- Update to new upstream release 1.12.2 (bugfix release, bnc#900159) * Fixed a regression where the IPA provider did not fetch User Private Groups correctly * An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. * Several new options are available for deployments that need to restrict a certain PAM service from connecting to a certain SSSD domain. For more details, see the description of pam_trusted_users and pam_public_domains options in the sssd.conf(5) man page and the domains option in the pam_sss(8) man page. * When SSSD is acting as an IPA client in setup with trusted AD domains, it is able to return group members or full group memberships for users from trusted AD domains. * Support for the "views" feature of IPA. - Remove 0001-build-call-AC_BUILD_AUX_DIR-before-anything-else.patch (merged upstream)s390zp32 1665991337  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ab2.5.2-150400.4.11.12.5.2-150400.4.11.1 sss_cachesss_debuglevelsss_obfuscatesss_overridesss_seedsssctlman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupdel.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsss_cache.8.gzsss_debuglevel.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsssctl.8.gzman8sss_groupmod.8.gzman8sss_groupdel.8.gzsss_groupmod.8.gzman8sss_groupmod.8.gzman8sss_cache.8.gzsss_debuglevel.8.gzsss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsssctl.8.gzman8sss_cache.8.gzsss_debuglevel.8.gzsss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsssctl.8.gz/usr/sbin//usr/share/man/ca//usr/share/man/ca/man8//usr/share/man/cs//usr/share/man/cs/man8//usr/share/man/de//usr/share/man/de/man8//usr/share/man/es//usr/share/man/es/man8//usr/share/man/fr//usr/share/man/fr/man8//usr/share/man/ja//usr/share/man/ja/man8//usr/share/man/man8//usr/share/man/nl//usr/share/man/nl/man8//usr/share/man/pt//usr/share/man/pt/man8//usr/share/man/ru//usr/share/man/ru/man8//usr/share/man/sv//usr/share/man/sv/man8//usr/share/man/uk//usr/share/man/uk/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26420/SUSE_SLE-15-SP4_Update/d5638734bea639f5efc8de481d762fc3-sssd.SUSE_SLE-15-SP4_Updatecpioxz5s390x-suse-linux  ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=dea854e9528cd952e23096a9b29eaffa0754ab85, for GNU/Linux 3.2.0, strippedPOSIX shell script, ASCII text executablePython script, ASCII text executableELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=7eba7ac8d5fe1cb14d3c8414fdb305e4421637d4, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=87e88f40df94c80153c57fbb44e646963d4d1767, for GNU/Linux 3.2.0, strippedELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=31da466661a37a8b1193c6ec53148aac96e16923, for GNU/Linux 3.2.0, strippeddirectorytroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)) RRR!RRRRRRRRRR RRRRRR!RRRRRRRRR RRRR!RRRRRRRR RRRRR RR RRR!R RRRRRRRRRRRRR RRRR RR Ra9Hԣ+yIDbutf-8ad4fe9b08d6726b3ea9f5f212d5da6144c6b99420d18cda1a946073240debf26? 7zXZ !t/z] crv9w6F .ԦJR3#f-SQX쯍N#d<`rԉ- Erx}]GG&7Gs]NT@#0#QM)ƈQoj9PqN2[\8i;yC8Yz儆|lԞ op0/*1 Ȣ`AP1$2lS2C܉o'?݋붳imBU=SUiȈ(rPw.?JW-ΥJjP#;\i(k`1&c/uv&trk[8W?k\pXN;$|f|h odrbĈ0a{=9/5C79L߶VD"9S@2<0P3xnEcwc0k?TЍA冁'Z \wΉ˓Ub( ɔo3v:ZQ*;f!#6]_E{*H-ҡQa\J1f*˝X*x5G=45M[VĂ^G~Ӆ୼܂8vYK%e%zKt+J%K!(g6u3qadqa74f'bKGX:VR^.N,>3!Obj:]rgc޻ 8lb7jUq Ko;67 aJ$k?eTtYZX=2?I}O_h88yb!XwvظzKߏY6ZiUm2tMl3n. jC)m1 'ўMw=B #a( At6VK0ĨjQ WV CU0 9KԤG #`J4g_HtGwFnWUR=A[_Ʃܭ~Th9Q7z7%RfMSQOvć γuR klbWUkL2EڃgכCX377T }bt/7*rWqo4jL^d~XQ\|7lM V[d\\2*{ZcYH1i>h1QQ]mY $ߜr%Wf -.s!̀<;{ m(X 0$?E㞼Ϳ0kHToZErML(m 1Di!@P/̈:i}GN@M/Qid間x nḥ UpOLv0*r`Z5%/ nbAT$She8%NY{2J mSX/R>0g]{I+\"a]yopzRd8>栵އ>*_^}FeЦ]o4Y/)Q`D0KW#i{ex< uIwqх,L,@&Lk!@:MݣPM̰̕}ӊ]U tuL1CJ, qr)\0IvmǍ*0EQ:Eu1VYOBj,&|v6+,z0Ēncexnd2i:bX~,Ľ0q1t'}6f> &T%01XPdI| %\b`2qѯτH|7a3d\Âs|4W2g35S>Szɗ,u:c؝ 㫴Cn)CߣݙH1" `(K VX=!\jĞl*aRh&ҫWо|XCggz_$x:lf&)FTR|Qt113_i 2//GLݞ7Gjokפ"FCU)9C@Z52E:~zi16MTϪx3 ov-"w8+kQH?p;c'OhYe~Gfm$UEɻn,S?R="|(+;{_ PL"L5[g0>H$rv֎!u"Ԗ&Vld+_:לe~BިhDh 3aňC(&otwlǞb7dz9/Q+.Y~ Ki|im-KkSBiq"OiK F%]EỔ vnW';J>uz1>ݹMpp +u8)XiLI'˱F .j"Zk˿OdӨ )-.]/IfB)JAGYH~1P#Vor#$W"yv~~ݒvǘL` 0ݏS "D[Z* bTflIѦ\O$ iz)#=uæl~-;Q@Zt>j@a oU?KoLmۍ@+Xy◽t@2wr7MHw3Jr=[ O WeeT؇ÕOqاH%W4'DOpE ϽUB+İ#<pXyˆx&]'/VUa f/R)^d8H OU YWvf]<}urx_ضë-Rn%UDaMK/xY؄ji?7 ID.Zj;pt\4eWd%]a gW>ȈmE#($OWˆRga1/ Ce(釴mRZFt(МH* =X,6n5T҆N5) qt%˧F@Msʛ~(Z>6Xpץ{@(SpѿX+1Bv15zeJu,J<.8|XMM\ߪ/f/gQםR|Ѯp.^wtE 2[oxFɢ=O+z PgDl5^Y͂TS\ָLDNoYNMb:8|54s}ںsM}olW8Dِ]ֵfw#trwG#[ɺpϞZ`7?5?p\@ϝ" L`;f7zAiCZ#`Alu ǝ:ۉxΝUC|N}kG <>+GUPJێV°BNh?Ayu\Vfd-8j1TN3PڊU}VZt0I9B[#1N;] #ϑDPANnXm/EP/ g42R ֞]!G5UU9ǯqj;yHLRtbsP/B (*K'+O0',?Uy+/k; !em_Vѩo80M+/}gC g5kaDw|- TߺoA2 qMVɧcLY #=c4rDCnH&q9.?m!o}ILCֺQ 㝷FNA\ ̈#{:IrPNe3E0{Sz fp}/:n*Q*t&Q躛WO0)`ٕ[%_ܨMVV l52jH_Sbe-[΅k;Ndӡ}9(H3o-4dy"1k3 RD)):v1☔m[d*ݝq`.R+-rZoo(v.x@o~'p+ufj"k' /js^-éog _Sq^;4{ @5_$x H(^%C3bsӺ֘QnzpƔ}#@QPn,à> >GJzZ:_% n~gO$XDG_fg $/ v~.9^i*CKT5G7輻lZH-1%iG `_?Ĥ?͗JM"Npn;E.N\>.U~z{ܯ?. I_ a&dS( (Fޏd,*b#ѴB "C\#lLAA]Hþܔ^mtXv M0Ba}k??KKNY WNUWOR\8WPP\$”AyR +[W5z_`Jtw(Nfd;_[N/YvY`"M!_>5l_:{<(MjX 4 hѰȴ75$RDxy c}}4?XMu Z6b ZHIx}`=nmq2d_s^;f7ZBSK8 iQ ztwqG5@@ rjW%^%V0^pG;Edo0S6.D.!ȪSX ՟lbx8ꇋg}񖲦OqD\ɊtZ{sbjn;Cpa巂K^S?y$eaV+ohBYo#• imI 7VR_bD;@&S^Dղʋ]+D+q?Xc}fMZNuZ1 *(75J%1={XUZ=s\ 9'gdf1Ny?\9biN?卧>}睛&<צV31 VTZ$ cleOm 3tTPPEL_w0XHbsHaPp ~1cD4pjv^ώیn~? bp8[Z._ή2t.rcR sgFq:\Ǟd SR |О:KFtoo&S//87df+7P lgY*Xi&c2^O)dFhGh/靬«?L4`J ^:n8yP()ju&~ ^2(*h34j|LuEKzyԽ=떉o)Fe[?U/Ejlwb/cF,Kfjqm~`0)x?'b]6fPlBGLXaox^(C܆f0U=5x`/)n`+(a }01- eJAS7&sTlH\]֩Vye `ڤJP4Y<i( K0;\z'|lyL}mQ\0۷(Q$usrTeߤѥFb VӼB㛝CJYv[=*Cer*fhjֱ`k>chyF|SLrIK8)vcM/刳$̮JJCS촰e,i#ו̞h_<Gy瑎,! GpQ1ʆyۧ֌+#pgj`/o%NGQBpg_duB@o{hdlGVLZ+eVǸۦ(H7c7݉ Tif+@ FU1ܛ\&u$wsI_C6lԡcpyA)lkY - <5J'L|V>6-@1&ddD*jy}E>8>`ȊN.dn[QZ,_nc#OqJ^bM T/'>3 &>t!Bw'@o^CMuq95Hs`89KL˸Ѳ}R cz+"+:z ]k`Cp{APFjRTyR}%t" ࣡Qi>8:F^8c5POF[5ͲA϶-/]8p|qHA_fT:ĢCri*$IXA "NWI=jAnS0. 4AzUYR%QHiDa:|74sk Q6CXEԉ=nz׸F0 >HʒY?SLaFُwބoJ۔@EK.Nb5\ .p0 ء$`p:%i(v.I9 )KypgI`C,b@D*֚U^:rz<<$Rzj4z iV@ nvVIYQ>- 6z. .04AYn&}w J8YZ&]B2sA\BD]c(N:x'!@Aaw<:{ 6bnFFTjj ̈́yk,]$ .љ0^{}-e#DoO 3W|:3=J̧cC>#Q ͵=,3X:Mo>M &=gX{1pKr  F~u\12[V |t_5`tTc}\t8zp5sIHJu :pe`dtm7ZPXRW_θ{UoxeBP.3 ْb=%4"*uMq).3RVTu8#?Kfq!ݕ^QI:nyf53( Ψ0Gvu2D pӣj(76\D 2'K]plY+YV/Zw|O+%n3{bFs)Tda)?oS ?"mb=01НXC4<?qF˶%C^@$ř6}qM @kRJcyφ[C{<0sֻf0bhT6Y$,qkow@SI`$72Q-f( DP&@IϳbADV#F-\PT'lj#~6.gk#orL0=9  ]+[`p{ѽ⒃X{K:>F# N#Ӽ 7%,7C%<->+$VaL$hF98z>iAͼ4(2VW/Mm_-I&Zr+ /=g^`u,/_ɴXjF˸VZ7U?[T5f)_ n 835цR׈1a8l9+2:bdQJ+yF|_r?>pԚJ%LhdYjz0ie\Mt%s/z Gui ēJVis3spxCa]E aL64qҋULx& ZĎt}$k rGĸL k+N/m_ ;_oDء?\蜽`!\N.{A׿C"JE] Jʘ9VjUi]J |%h1Nd L%yQu|Zs;R\_ ˡxnNH*I-.^$@B5ۄDg'MSl2#2b}K4% (*P3YYAc$6jUڻ̉hvrZ}uٜI/xRM=ne fJ#*H%feFE!o?[WVUс+A˷1!9cց؆7Zqi˻p1,zYJVׁ?9p#}{>f OpinΟJ!v̷.f2rdEՃL{L0/c  $|"#n?db==Ox]Ý4ae_9/4$T0|/9R>JYV>HRCXu_ߦepJ&'%Z WqSBAһY>ّ1Hg|?2.gMxS{-j(q,z0YJeH ZfL>D(Ko EBԾiOQ/XAF.:W5FmJb1I e/݂6':;ᜟ0cTy%oMswf_yۇvtt9٪ Q>y԰1fohbmAȗG~G϶a4 f"w%é>@8oWβ~Z/=ڗdkng|]a ;L!wFSM,]znPXY^cH\He\!T#*=TL"UPK/qJЬKf,pH3uŖaqKnzQa2Rw6g:Z󐏚+"c)ai{3?f~aY{{ixyKf* Hze"M,?HH=x5XipcMoyՀDz&%`bP ՜3hQ~d| >LrN?Gp穜GZRF@STA=R[D*S 0L0Q1' rkghkN#[E Y|k-L1*6RSkr8яq>͛挕CnIkth,D1ܠK.\ZBirw n0}{Te;HlkYT6fr8X$p8a,ZSA[(l ? Asőq;m5(;\K~Y(_tҼfpFwRrdx8DyJڱ~/c CÄYV {EsZm)JzhWGT~uAB3 A av+`+r{DL,%E!eCS{yhs Kqj `8筵EqI[:_+ffi W"+]h< AzHm52 䶌-JHӉ?UKcxH6*֥G]crŸ㖠)6қ^d~8QKp,6^ӿqnri:@ iEVWZ{,b+&"ܷ /i]s=& W*j(baV'0w'l00vӺHE x:j@Iyㄶ$PpN8b%5!#$:o3 <џKQWociQ"UHLexsZ0WU5 v):H 4H͇FhP|ͅy:kpA.kRgtYqt96T6[~1+o]X}ءb ` 9{wj~MB,+ǯҒVCJq*"P޹NRc$Hc)o ptvF8įyZ[^wHfn$VA|N>*8U_4;DKhj&&"Zc6`##4XBgaCS\Ug]Y2] Ib=OHX gXoP1{I0C?cAM(js׺ZRqXB&ArrjcS:熾?<ݥF\uV^gIEr`j-ǟcg*S>P/_tqps VbX Wfu60$Lxi5n=/6 bEtbLfA5w9§99_J#syL-[I& [P3w%GQBTV/(Fy׶_Y :@~&xfC1R\ " JW-B7 E.H^%jA6<`22.uH47CHq XEuŒP=0M|){E+SOj,~9?sT~N׼ /۰<üKm{Y;!b(zd+ iށ–\|rrk:o -]SuhcՃ<^]*`i{!RwJ 젓5h)LHf dﶀyn(|ڌq:&ɧ+~z.wSq:B&˨NbM'0CN؋8{ A)of%DM̭c { | '˙1 9cyjثCHg 7u.E7 ׁEd|H7n=FF'T(fv5p)AdP5ϋaekG"QD.KQ*j1~T ))F(;}#1mh=Vm9TYin<'c頧9{PL<\Jt櫯WМLcBcwEqOaA`b<ޚe}͈T(mȁ$4+??a4›M" WS1[ e/ `[:2!,PA|}Rߎ=i&؞x'Ws}`\Fl m*v!4;#x+0`V0tMj8I0Hņ9%+Y8>lSzg j,qNoߚ$3Y^%^6wk$ȷRjcueԕ:jҪafJd]0K)[0:-B&=d5 A#I2 v޳z=jND4SaMUɣAn_P}t @{qSÓHݖ#ғ, `}O@ >j5* WLR='7Kw W(*>18Z]-W%N)shutY6u%yC[.cBa?z4 dD#m~"U DzÒ~T̼8ue12ufG&" | v(j]}|-bSߝƎ5g!zǨe;6c"s5$bާ\\ ]H-Oj ;}F B[[({=RԀ;S .r<0)<Bg<ƊnÑlI be~*xq+#b7]cmvu!":】CSTM;r v"GdqNt>8 ϙ 3mv5D_ hbMZky%4jP6En5##8k.AWFj #7+L>(O]&@1# =8CZKmh$W }:e|ơԧ﹂yd#D\hGSȨ]+_;q o5D_=獦]!(,wm *g䢤~6]-š {y("(T+sK쯏ϯUƉwS@3s|OLJA 0 ۻշrЅy\!rպZ!xp.Ɂ2UTČrafjjىhE31*Nm@ܻ}{O'(۴~ /1H,AU4z^&ra9hK ##j~FyULZ`>pȺjً&G}.M|?b'cM.wfzs.zizָޱ\W>t9r l+Hg߸rD˖A _T31PY-ǖ4xmeVX20[~#yB`ղ{j0̯Dz,[/wXsFl`Ez ǕU%πu<&=_tiؼRɔm'@,ޙb<(6d~*0ڵ}l@ñ$ %6SF9}8y[TTr\˧Hb:Ԣ*Ԩ)$;CCE$p\;DZC׮@`%L]4@Pᴏ(ó(2_ƎM}e/ 0Ri\iGY(hB O>F6(p@Ev{ j'\5l|8f\ja)J&>7R'u=۫\W\@˯չtH^Fh~ F۶+9e]?o9jQwL".,j<8mr3;#+pҴN:. ?fRIJpW>g;=c#u۫ڧn c.*ja4wLC?Ƶ_yţJ;h׋Lϰ>¹ur9P/bZ/&L`e֭ssP} L Isb/1?#ؤsV3 _@tsYɾ'z G']R8 W=UըHP,)/oH:0CvgO62r% jb r.}@_MtSoG3qlɨp+,oy(L{-WA\G@%H[=2%ns| B/% gݼJ‚+ts?uWG'~ =g>#tFGl ;/9N8k8v#!@gԹ.z2_l&[B> KQonCN]+nODR2vM%3/FcpOn aTY(' [֙>fTyf9#=tzy5bӧ gZ݇ &ʄL7R1yYRAK-uy͓;uDP-ej~urVJ(2wnkz3 !bN95C8P9/彇,M:1"f2'XV}1yͬQ*  1k1m },Q`ͱT54Ѧ뺮">ƒ:# #!c_<'Vp0b?c<-&w"'- H[ H~POHQNL%p _`ڝ߅(v|%|q) z ]T O R#W<[8m$vjE=VxJOX;MC{ 8LqR+36O"1 W@Qu%2mN,oV>ǽ7\¥8Ty9! ( eݥ]")a+QSF39>=1TXoؖŻDM~Bk0lf/WGPqȪc (\EG콺2jN2ۑy6kslL꼏l ]O*\!X5{Q"fMH!^" $fg?urU0OPC1% ܭ TTRK'FǛD Dcf칵qt^܈3VxBk\B1%H^LGi|:_QJ_7߰%ZkTλ8 {t9J?˯[q)17?kUM:%pzq~Xf_{:K@@dA& c-8p§BϿ}8esqvSJų6֝9$*Њlo/~N)щ$pvws0Xm$ZzwƢ|'Q Z$)N9:8S6Rqt(0KqcFŊ/B/MSfoCMc|R/J`X?μΰqvx}ׯz.W届߯=8^"P\dN*s-+ӧќa,)k:$J"Y I!8ƙ u4pxU$)WDtH&A  SQcy !ca*|ܣ)? E)$~B%Fr-:. 6 ,F&rts&@ZC%;%{STYꥷOnSw#eħŎa,G3_IsW A3aTunM`TSUʋ//p kc/V Pe)id O${_A<&4T*Ǿv41q,3XնZҊ|vv&}S]lmYsq‹rYck^O8C=г$[LwƟx75LW}x53;7UFY55F}g'! 5 W2>?R@'ʆlI;٧ FznJjwj\fAsHnViYS~R oi_Ѱ8罸 Dax2 6w!1"q{9Ĉ0{w3X!ofA&U2Lgo+0 n 0DzGq:/ '0 exv0HKN1H_K*<*`eRzKE/*]yեqV)WRmHFiHfkힽ.:>]SeSh`hqS9j˼̪f,<&L;~o)AAWBA40* A:R:{u!V[:̸‰-5/eȳX h۝Z-nPU Ue)[HƔBBSDIR $G0dT%}m|$s.pǓˊ[`Ψ&\z?%o`h֤| J@ٸ$%G2T{3JF gL[oh'B՘£}Z`Lm&уD|zo8VaݢO?V؏@v.uHL>J9MI hRgq.e3@DG7ƸAU>2V&a!\R.z6̊[+ji[uhU)e"u' 2xJQ3)!Cy'VD^"^̋/JZ <r ;7Hs/1lU+rV`g,vvleϢLWƚNj(ubb)ɴ5U! _[T8f{.cuen[`S_ }&:COg| T3NQ$]<"A_XPE1j4e, {N,rsU\[o\X 9>HOu('쳨`>-c9uͯ;;ؼ|pFL(1v@7t9 sǠWڞ\ŸY b2ba>8p7 3>hWWݤd4]\lm8lZW[t%5jqWW;X0d[u߱X1DJzaqsz^*(T؁1K͛/L,0I ͋FV,X:8?NDt:G0x8*,[STxXRJم-%L%*ww` V-" 7)Q'm>268Ii ?&G`kll^?4(NX0G:oI phwZ_Oa[I+ Qo')Ԟp>=t|thqQkh^'T8P~_p)Ǫ4CŅՋjBy&iӽL +ڿ1=k~ *0gina_A? 숨Du+%3CICKÈ(9cҧ[xGʰ~dvzE )u/ 0zҐCCiîzv nZ@EE]ve'؝v9֭bvi=jAX9Whbf7c;]JF-1ZM'Yчoxm؋o**X29Tjp }žkl-ZR6PJl޶3օ7̉WިR] ="w7MA$MiY۩w3"@}H힊 woDk`FEsxx )jA=dwS;\8rg=u%B MxŚ 熖0N^{WB]̞>>ALhkyQ%5}`ZDȥ -`WFL kA-_򾡄P u\:QTCϴX.W<3Dxn xICxaa).igo7 bXVKSژDD.gGzIW5ZeKffWO5ƼWuGOU:DwS /p ӈUwBҡJ~[O9LGëL2ƊǏ[גA\!;/nt8u+8 Ft Mhk}ޫ3d@$8[8?э\VE\vgdXb0oWlTDx1kTr{dsCf Xg,m|onnRU54LFtwm4WqQX: ᷆aQ[-bny3]yjdE*d#%΍| Y+OeNXc{]U貸c([:((&~Bkh$,? #P qXȊ.WfLbF 0_-idI3k!7\ >%ùРj( RGcXB!HwתxzE> -1W|7wmv9g.XC&vd^`S<2n$mz`3z'Fnudrpq=u ԳA \OzZ 服4@4c9A' 2]㔣po2oXS0pr f=NVXG&5srbGfxGvVnT$54am:2vN\.*-"A һړ4ޢDP]:G]N'm]N?#I֞KK]K?dJۀtD62e4tA ,Jxp ݄P//PݺPnݽ&H ⨫5 9Y1P˞ [~0g(tGP$707-%Sh[d>u H"i[<p:!NBJ#9F F-QxX$$SS2?fT56lW"4L[f ߇:8fl7w.TOa{vULwpQbk*c:bGv;@YJ} Pk6]hl:GB/9G{]:*@L_(כo43"A퓚3phR-W•4< M]"8ۚ]gN *$ *$LtTs*M&C;]ݜtNg"p 5G̕5E[Z¸YTe\!h]yjJ!:h'>k Y W}/Xax[&h U"m)A] yۦ fEaI7 T#a>$4jp\2Z%)?o_BO3" ͙CmN>Y^ ":eph)Juܪq܁7gL*E)39}[ wx+i )"r2) Ͳq]?+U *<J9O /{#PWƁ>_W^'IQnIgtE6@;܅7~鴉!pB iVQ(=9)a$eg؛w*pO |YPaϏJyY81Oqj;CD!\ ~mO Z"!:wk5a>Rpk."MmgF2#eaE~RIC_7fRH);A< U.xӺ }MX&_I{0~H~#ĀkYd`P:pxƻIg)@cuF7@C1W71xR.pw񷎕L!)v:NO> lhn)Z A26M݊6T$?e*Gy`lfYȘ CE$PuiPcPVn¦2i$"dD&ձRX/_xz[]>؟Ͷ-7X2NdVtr *-G&.ep /TZLOPbˌ[VV6] #puWB<> yDYٴ5Ly- O>$0{,au٬t(Kp{1ęXtjtE5(&ƶDZ-%[c;fINL:;>s(8p<SP:|qHe ^`d$4s(Fw {TlʽCRw1v^ Rl ~tB[ Z#d㱹vp6kgV* 6Hjm`6ٻ{s j ,>uQߧo˳DI.A5E)X20zq9hQ5/lm*T|Z3m`(k 0ΗZZJ}Ԃ(@).nI)DLa4.^zhnQ .- 5t@*ܾ'mn=9t-E"'ׯDVJ܃x wο#E8> J:t$ͯAf8[e 1&UIZGI *b]"89Pu#@mኯMWT׹܏g8^ga#zzl"S.%9ӹn/385Ӻ߂\xބBp;l]ܬgF^ƋF#l$$`6`AgShOEzmº?ls<-BF +z.sэ`fZt#ŬWǑ8 UANtrȊ&0J(pX^ L0IB%4|1ESt7w8, 7`#aEI8(' @vһ&v/v6D\l iti|KΠMn(Bz?h&dz7hy)"2gWy>3+'ypliQ%K.tvS` 0c~ߪ[Ya;v)ZuZP%~“2̮GQ27ڷ& 1:05, PlM]@u2$1. 2PJAcByDŽʁ֑/Y}BLO (ͪ!cnB_B#]h茣zk /?\K`DUn~A91*S¸>[c*l72D_@9dHb*f{ ݕ˖rY8=TZ\ɜ_,Rl~'s IGT9&(M0E @kLt[hx`zV#}u)*V]v>=f;xy ˝Q6ўRvc3!cmP%Z'=( ;e]s6*F02+2Ph>xc8 ^Icsb`٦^RH:A꛼0G(9蝛ν1$HNvjZMQ?NNt6X@m,).4WC9YM1ıޱ[]>gNFJ9v>UiC}ws!/f]XPޞ$n%~ЮAUYNߍK6^V_y@6Om "Sq:&͵9+`zcvC|qY F+ )Dŵ  s]Bs4<Ŧ4e[ry\LƝK+?ؚWhӯ]Vd[ wI^HOdde3iA+egMFyLW`3n}>$L* =ҡ"?d0y~qp:eg j;WutO}h% 7YN@ q!oգR=N 3f È '{([HvO7%\5XC Մ0 kXgJh67:hh$0ǵ0qR+@TتG.,_@֎IuU@cx/#]N NfAUQT9Eo]粒hf@Ϳ!'Jeuii_]+9mB1[e-YK+qAvdER~A2u>8*gSF]ě Lz,U!K (H?ډ>7 69"8$%ۖ B"(NRY29[Xr2&LJl%+EJrDU8Uoi9)2іk X+EɃ"1v'*oN/"S,ޚܵ  KoH uTCʍ08ـhP%7,"0Fq"k`웍kP ;{R銳yCzW@׫8z¶z$ #RdoE,Oi]RH۶e@hm> Cޟ*́4nff]?")NUpk l~fXZ U\ͷ(=RgyKxit6n+l̡GԦ+%PQqLV0p$1QدG)u~=IV$t* }o*P@@AB]>v sH%Y\Λt₰똗28UaBpe:OPNrPQͭ%|!sO`j`|t wFBl3SB[qk>vY6xrMJlNQ=Bk֮ݦ_>#>{>麶kCq@-)ke 0Ҵ_F_뀇7%}Woѓ%]l_ uH(Y$IF*<шBþ OYi d\zE=6z5He*F&4()V͊ס1)d+z&~q3LǏ E]hl¿pH _oJ5 ۲2%h&`lYeo\;(PLz'#}:4Qot2bv_*ۏ;_*[ .Dslzh/o@RXfyOkPdR@:yך~@REp4P"H.aƾkt/L pd ((0@5 Od1-fP=Q_,f$M+8Vܭ*K۷]ʨ t1h NaxfNH`74QDߞxm]59=ל*vtQu N2 W7+zY\~3גCS8+3uj@W9,C08̄̾5ifWy'NQ~i*cU:,O6_vL;(!>nyn4bT(&W.xƯ;TKTš7͜^衦-ye "1G'R徙#%.G&`t.^qlt'28jҒRkͩG+kNڈ'-ЫKHL VRi>o'InDz{eP9ح2 wMޛbWȺ3րTi`ӵ'-LJk## W,QŴTP 2v bj!N "jOdwJ%mJWfjQI[ZV^[<͚$>>pfK`{,KZbJgƞaTW}J̒'Od̪+1ĺ{ ⵒڊDK'L6ʗNmA>߄5&v"^DFU`'ex#l6-1݊ Xֹ J{yhMص*noךB4?,{4S^kQ17X4TG#_UHPD{b=O-feӭ,%')R/}\0SpWCP@S~aX"/XX[AM2(l')> 7|,Ѿ҉M_I6Ȗ!S$3(4L"vfyK -Ե.<?"ځLAǽ /|tUpB1 t'nep jybzi$;)m)6JIL) -kDoVʤYeYP E >xFpK ,DfK.t' /so;b^4cIP !De=S@ _saقrW 6O&E֗gPZlV|={ UdP:;DxiYwvVetSy'W[C*ZaޮZ#yQQpu1k5BhJE@S€;S-i J+i|h@\04lBGB^9|r7'ױa]YDձ(UKK{ʛᆃ5kV^ќkȏ;X_>:JC=Z:N[z'~˅\6w>ljT~KYW&}=to M,"nSg2z_BЧ-6kd~`b~M\ tW4Yn"Rw?E贇lcjׅ93;Hkrj}!@^(rT&|pcvS3 )JWk<?'.nKMNE_jo`B9U hj@ئ?[F#L|9iXlT,>%Up,52p8 -e/WQS1IHOwIA+GRLtKqSh{=6&Y-:s+<*Ζ?UԟpQ,ZQ~<37:nk>?b= B]"uP.FՎb:ΕPX 0x@z/׋X_#H Ӫ#$i M?y=Ė1V \Nlc1>Wߎm.oGWɩGmCHȄ7 zi0PEv"8nx")\V_} F_wSْzhyQ=$#ZwGH|LjVq(LWZ\Kr']GYs+/!SW@O0HRt7F7)zFK5C^eQxK,.3\IaDO,X'P݉uBPI,IIf9iWLB'wNu4 m!f1 Y?IfƼj߼˂6= x.ESFF#=Ds b}mTGl * RO% psSلwGO͡= >Hw~|}x`p+^4nQBAbdf1}Pfad ̺Lp=H=z˵nzu#,K "Yf'3h"e4U[]FQ@y:猞< eeh `5'/5בTۘؤE!IFb)dIij x#0~lvCO#˽&R'U6 Sʍ(m!RJZDyIqي%&Cw/=[XV n]{bpb&D7OF$Hq];Z> zLz&-RWӷԓF:4C[$,)~N$Q@[Ǣe]mj'@G9Am_f4TwD-gaÙȿl{A:1m& sOpX0'b.Yz@Q[nw- .eͨ| 85+97'@ٰc~mu 'pMgA[-UU#gٶD bL;U*`bIU b;]BnMiNW;AA#e섭ηu/c;S◫_8ytk>*CO'C9wּf55|6ug I@,HrHJKX2dXf, UOѐ L2Xny:!D,L;瘈MS5lX97*cQǢ!;)Ӷ*g=jK=I`1=[C+/@JU!^k̯=1W/·dU \Si<[PmI'DOND9(ixiɜS VV拃8#Ytz0LH'LUV kCv-`  DPLNc~ JMCvYuJ#lah*9MCš1e-|u֜?E#:@]X*$V],ZͰ&'c補b%R p/JoMc DrٟIVDCuQ.rLtMX+>Ql`5qbm[фK#gR\ L+0lv?QQϔ@Cex!wƔ"x}YL1@{CP6C2`W/3!ҩAѵNݜu 9Y #@Uٻ۹uGm(ZE#H@XP{wuUaph5hd-$mP_>E*֭'וga#<\&Gcz9$;|.A,'ĆdUI>L=z ;ڌۄn!T%֮X3k"_W{n4:KM1EG:]/z*NKkR#.Y uB;O$:C^w]`ɸ)+\(ɡ8pVrUIUEoKM WUUܳGZRnTzx'EXS1pjZ6lͳ8F ѵ XH4Oű1w b.p} W`5޷>3tx"f) z)[-h5jOː9U?,'~@܁S]y˳R~r9=L== omU vjjQ!ѡ^c2( Lw?`5Dohᠮb:)_꺲ws{Zxnf_Sxz8悡ހ֕mf{}·0ѐ rC0R9 Q$!:M鲵9Zt@?c`2٭^gPq%ӽxVKCRC=~d. nENX"AۗYjsQsD<1s1an/'vr1@{u<($Q1yGWlCe.u˭_U^. {#Aj/;8t5"ڰA4ɿ"%#l$,D'4P>kU֮ [#C#r_'ѷe;B0ws%t + O&;@c?]&\PLʹS 8bwG$ A.*elT^ֹ M-V\LYP+o%-eJ@Ѝo[ )͗TT*Qi M% ّPʼnJ>J/NżΘˑ9miFsec ƒF @X]XSkbiT>OZ'm*vL^̓=|*:DeqΔwu| T:UWX B0 l:mz[.$wUs%`}ȳñNѢAeT?L+\Bmu#kPf]Cݧ30`qU9DIn5"y<C"07l$'0uQ&KȾs |傫̟V'dxy gm*ǦqѢ|KJG4sao_uїhknxs&v쵹X# q#%jT>urr`a0RfdR9ɪTj8͢3Akn4&ߣN|G?&kІe7UHiR5T>C3?5OKV{UWk/]{1kW#G ՁSK[ʖ9:O-KGQ0Z^s0=]e!uj%=&/o\[h]ԒD9m?CNApY]3c},L{~'-.b*Q$'!݇3uY >T͡0+^F 1L$=8ǘ-Q;˙0"[h~ؑj;렑F̉.TQ"%,$d{ZE8"RAm6J(4U҇iG/CE5bo{W:D36w$~Zx2%BZ].qtʽ9_؞NYyϵu RBx%u]6Q߸Ϋ eEh\&Ƥ7y4pwP%(2}Q^A{Tޕd0;;fULxwMNtՔa LUUK:9.#m޶j"A2oR:v8Vs$K{K[rF>,SI b[d3sKg|W7~CֳAޙ.N=:lXў\x˵n2<:Uzb t`NI=b9߷{T|D[PG,Y1EYtz%셖 <۷bა=2Euuz;_ہʊY (0l[>h:1?Fn%9\IznhdlC8'KNhOvFe8l"rLS|D.6kԞb#b)hZ=~iڪL_N0L[&+J]twM,0`,:궾xvpa|-m8m!奴<rfɻd4D v޲H;]CtL0ڪq18hdhZ~B-\BOx*O* ΚBo@@val.6/N% isگΚ\t4Qj?F=M'v`8r{qN'GjB-$O/PSyttD8LQ-XmشM~nް5YL#mߍ3yUȌOɟge';aseJB6;$yrRs{*wS"VJv'1ޗu?-͂~7lΞC &.WgM-n\bVelQ&MM˺#[ѧo/+~SoK.5QlR.&*NostH6t,7fwi'3ռxܑʍ p񽭎M<3q6tՙ"IJiP ؙ%T_eSrOovkܱ#|ԨBLvqyȝeθ- &w Pz2Sryt~ɣnEW[bdƬ{ <{=GײߺTOuH!IRUD"]ZA'hf. -5Be;|V:S*De ?k'B8=*f^(00a?Tߙ6.H? cBW,)5,B4dD!h=>eo @`⁜k OR˨jg4rjCIP1asv櫎: 'Gee[rDhS,!,V&l Dam݅X ]X.6,cfVuXA)g:VY? cfM / Kʺ2>hۨ-;w븷pfaリ_awJ=qV/kMpa/ `%㧷B uAQ>>wYKN=.KV8Ĺѯwp kfb HoPA*.ݚh^?`ꋗ1 $s&W}ݲA(~#АN360lyng{SW;U[F90Jl[9Pk|Ne5l`"+TҖH;! 㷸pjUyC*7w)HbM/\Bd&/G;JG3/pi uag!]OEQvh N[zE_ۤH$ -sƆ!iKeRlNFCF-JC?x|snm6SR,%T9iBUJf^yI0ZML&Xq5&+ G{QV뾯p~No3t꼁zLi~} teqIKpha-=PFA68ŭLOӁ/F(3Ck;IWNWSG^ jJՈ)HX[w?Bb1Lc=g]Jz~Uʉ][2[20 X^:;M3uI0ھkB,R $kiܽ#"ԲS {|y-Ochb 5rJTd+ HWLX:$zMiebIp gZX'k .ǮD#fn4HR7ad{իFGZ7=hL0?(dQ ΔvmBMo'Z 7>:ͧ.f ߵ 1x0(BQ a>} . `d :m!C\Uo imb/+D s BM+Y}Xqps93+:%@@&(UۣI)*`|\A#S:kqR鈎̥̯rr/%5i K#Fyꩼ-vkvGvC~1m]Gz]i0&G6tī <2^ M}),l,H4 : 2침#NH) rxukzxXp L+2ۺYVsF(uA~-e6ZrNZ<(R;Y !2 [F$#jbInʅ "vd: ]f )%$֢^GFg'-o\_ƴx2u9& !wB45ِ%RQ0޼txB&c?$B#KA6RCD?l\硆EgOә3Yt%`ZXU!kɣ+S:蘵EVܖf}B==3to ,˔Hj 1!v]CvT<_-W&*Vk{#? N*6gXJ?چ6R~G!S:+dOӬ;˃ uW`re оvǡ\SS'Z\YVNMX%?0?SO' *EYP$Bgro͘½7|3U\jwj·IP{ V`5I~/pzV:i^(ZG[PD[brzQy\ j(XÑ$a GЙzdzY6z=% 1Z4=*3VǹB9oZ8+NSӗ{#*ޞgi``f\ >aB:^tj]67~4ܢ:} C/?cm 1吆6zltTFZ G8B7zeULӨ(CO"U:=gdp1GB&a5Zʍ`L0ShHe`| JS-׹7nϚXʡ趫n>{FFpkoоwU 0x^-n7%7f+RW=Rv=wJ-D3Ve$(f‡mX$t yĻ& qђsߑʬ7eP`DPUC*uJ5t^ 4)Nkȩ3)-m=K} 6/}ߓ󭆖3ZsCjɺaz̔5}k\2=e-OEg{GT$N go 7C.hY;y=n3NofDi* v|E=A" 5I{#loW mD3,e5sNݴSݩj] AF CƴOOhƊ} x[f/Mn)[K<%qVW DŢOv*A:fMEs틲3\Ft;Ѥ&^?4z ̂DUwT&sD:hO )1{W0U(nn6$ZxK1܈"lp׃M\꼂m08/7f}0){VA++sh(~ rr?{pQDI߄CBle$EÏ3 I&I>7WaE Ju͍6^9XB"^E_-*|i.>E.'JrCw㍎_\i*qnhԼ@Xk.p?YmeBaMiN{.)*RT顱^4=5=ƩWpӰ4KL Q)Ul@O.P*\3j3:AX@ ԎOMp& }-*ajEjo3Q`$%yz3cү%3yJKuRƒ4V|j_Jkih:f@h]$kL͡V@/Ħ {54 YNjk[ :Wkx#7a򐅊<1Q贅]M ok54)'"$O\0;w3JW+SG4lTkZo%Q]}bR5ETdf@ ?!8&U|$r2p)g|'h Dv0M}ަS/UcUmoPT/t?WrW^{ϸ!4IC"-o{wr,#~bsAK}0|z;FLR5l vG!5qܩcJ: NWsBbXw j7NeB ?d'78 ߘ/7|+ͱKW?@:mcuNqmណ/NBoX\b=VAE&,h~9SK<*/7Ґ®=}')6;dFPfFMNCcqY0AU+b]Rsv˜F !M͂wtxY4Ħd~/ߝym !X}Nԭmk xN_mdkzJ ׻,ntBFXfx W6$ݩѽvע!Q ֕DE.|MY&2F_෵]pHc%x.[<@shׯ1qH*k|{+9$v 9uj .l9tȀ0BHlY&3aHxb\Rh@~?~,g/ K`  aq:FVމ$O曍S/7[🄡8F Ep\[qn7wBH}͸:2=xVh#o^9E4jr>,M,eSVf YP]?o{Ɖ{/!t ]bؑi KIILXijG:ЍXb5t d@mWsTSޓPT)殙 CQA%pJ(Y'()s,A]+OM3ƻUпA cʳ;`YV^ݗXM1ݏ ؇/gx]Q. 5͓56vg@AͩP ~wT: ZWnG41OۡiX0Unl+XE!zFNL% `B'_آ7rƸ,K_<e ^{EB-tJa|Qk8#b΍TvԴ@BQ5πީBQl$"koF3NNm̗+Y qwfv#0&kCʉ#̘b HWȔfcLل#>K((d;-aBΜc.rT IOlXsmYߗ7eKq3,\d =]#;\36 d#VkvN$gxMbB^:U~hjv P*j-z*RTEgY4C %D`X 6NDT.[MˎpywT!",2SnuڲƋz?gz(u3 MKKϕ\) K oSLï1"?J;ldr+F%ss^D'Qf:++SuU>zȊCx+n_ amzz,*uN2ʥ;&zU.rq򓌏UƑ9oHO .d) \ݶQ+H ~}(t+7@Ia"HS%b#!M_13FY l(㨀S]h ۟tO/s0O٭֫T38]c|d63/( % gUHT~ZIG]'2/NkPiF8NJWE<;87IbM`%zk?2D~r9y rAfHVbRQhvA%i>HY/ f3%1n\Erctm x)b#QQ(8c[$_c"s|n؏D:r{[Q82N-g2pv.mH M ̡2e]dXR<UO-S53ɸ_oi6ӻ=\UM\~vz]nV`o7ٞ1e_Lrb3$&x')>jNCt4ĥՏ (xV8*Xp%ء0s:}>K~V>tPQr" t>SFy؁6"VA3y⒨kُu&CiG/vT(ePJ@{ =*eZWR]m46:}dV*]l6dn)#!ZË<_{Y9m @K"G 밹̏*/H}£*x^/FBF1"TZ}ڒx>O1èkc#F!|=& f@1Tћ@..5Ca%T/>{;,ZJ`Mr0s٥6x_ٍ[o`]W H%(YNLfHzSe*-CgR*m!WݧGO*Dub쉥FX$zFnPMi)xCʥe3r'm|,oزBWnnRX_ !q^cbIbo|CSf v THK6{tG.ё wГ`/to!7@#X.8/IVC]M),B~L|Iy!T}GPd$+ ˞2&L[&u!=׹u輥6wQ[-V'˽|5ߪh1)cx-<~Rp2iS]L6YJh*U KXE쨷ig{d)\rMoހ T8|i3GyI͵{!::LfRUCY-t@]AF(;7iA1c tt{ffX&xzpCcU0$ C(bܧ;voG}^OO溪F|xC[|1wcri&U t QFqͿm vAx^X.BK~[ kg9`x *\tZ2V/a]/ue¤;p7QJ-֤8/$kXF"#tgRp̪a%ӄ1% =[,btC„ƥ.!#JVSu ´ dJnx%f,ng6Ur~Jj]T܀P;M$W-bT3dV OOLJ{sƭ>0`B &!TI:ߺU%dFh70;𙊴^:Yda1%|isx)jCW'&´qշm#MĚ5ËVS}a7Y`hTI7 @rQ/'w-`]h0yC AOV90vT2CgMASN_14Dӂ4$(Ѳp*wDkӉp)ja#QlɭԈ#xNߓ*e!)\; F2WYZ.PEHsK+?u>2Lɗ x@mA 5$]U;TDߍz&yR^HY|AuC@J X+CZwyPIdD!K P&MS{9ra쥣+Ϗ%uN GH)$ӯ+8&2xB\v!2&2DV7{o:|֛ \y,2S_ OUŹ7~nu!zgU >WSar=ԙ])PUN;IZ҈I!XLl[~qnQ=%U4Ӧݣ$f/u" CHl!ǃ&>,*PH'QRH#Lu0>"~]@X4?R(Czz,V8]5 mIVv3CXjOod;N#ma4B$d{Og$Ho,1R * j#c Vxs mL'&<4CX [,~z'ML6ST.eC!YiCTʇ/B={7[wx?s+'QH f,ۯ[]3h"{(}i^T6E.ݫj%#qFnȈf*Ƕō])]MCFa<ļKE3_lbXI=rzE g@VD,kCfKKk4p #1,oh鉿EMݖ%v .`/P7_Ҏ?1KC#q͈}y*kG]+34L'{q 9jZC>KI72Xk%XLGUTQP>y 6ذi뭓3L,כ8K&.o$藊 5:®Q2rpEcA^ذ: enr9ęa s9n7w ԇ ҆eNщ|_dpbc52{GI2m ="ːMb?%q8;&BRO8Swe*<Xb M+hQZR`#+Zҷ]Ҁ# 0pev-y;F~L@ x8>>r ſ*qyР44|mjqZ14}SDjBi?O,[R;@(tqD}"A2XPc[yRj0Id'͸ 8#6òswdĤ ~8k ^}}?*pdK= v2S}t+k|z^'pRU?jzERHnG  Ђ<jHT6]i*`R^BwWI LiBXR[2TO4q9 7d es-DdUx>"T{|Ӗz]b ̅è \|~7Z1<1CEG0`\Sj6V<Sͽtj@B/+rSI;W[Z.Q}/J`)K~$) |{2$}>j zq(1:LS=p?QNkDBJE˖VXYƵcK[)cF  S"~o+G U%!jӉL}9lۙb4n] bǫrsIWH}^@@訣v|!'.* +~Boo9|FG*nۚ2ӪBJ}gW~j)bDVCv%^Jv5chsн[RArV1}SP^ #>ʅ ď~I 0GF OKrޣhAO'v.̯EE=p΄O[^ڡz@Q@'ش uu3i2I)fW.`ΩHnST(` e@جmw`sOY*sr+Cw]tҢ?޺r<&NU}³9%fMT5Ľj |[N{MAH2m-du2H͍JƼt,-8{KHO]u/l|p^OvG"e8z{ OO eb5>e! 6*1_–ʑo+SdmǏo&7I/!\T˶LN0TżU d_yFy#&QL+$ pҍSγH.1):cKZzGɚl)]q5-]5#jy ๕C4G}6RR 15:.BE "_SA=":9$L8}tjBLwXi\,HOqq/Tba`'5褒՜1{mR^WKx  DK3S5Q\Qi%0/ {,kbMz_"VX4K-@W 2~m%۷O➜<1:: Ɲ D:) VL|Ķ䀉lyEtvynFX)8Z:.<'"^zpNLv!qW;}-LCq&|#8HMЗ'a6,˅.Ck'itTMY I ɒRAn}RB<<+Hsq(+#gk[֭-6רFf}7mumZpJ^ۻ}&$&']}Su\U?Xu#[^5z3Q ~adЂ7T#Ԋ_8NYRtZ@+_>iL3 #NwNDm.taTAb97f9tԆ3VhN?q3f8w6k :uNGDxh24bFaΒ}(aMgeO_ycA!A2f%ݍQlX ]RA@Uҥ`4+mfUer!Yׯ8.<%q+ThAegM 6[< |i}rqaKwpz.[5=deɳ -/|ԒB$ćڃ9⼓OaL<Y8oe˞FSɈ0rV̨ܶYNN`> .8'dn P*7{jCPTs'Ph]}IIaMW],;\h633W+{ahO"RH५s]{G|{v3nW[ eWX^\X,&4oyʛ|.v%Z&(ũECeO#T/CF^s{2tLsL͢7_IaH,5Hrih,+4]TOJaFc?zpǗK#a|5f.CP1UVӂe JL>̓#0[AOؖwPW(>L&Iӛ7Ci*CELQ]O^ ‰1VNA )r'zgAbwΠ2㾂@>v#2l䥵ƣ?wv(1t%ψ re̸Z!;UQ1 sWI:\$CH qCHk]} =لuÊ!?vyjt5^;MbqFܻ(=f'6r!%"U]OCP$R%R$)X{n56| (&io~=2$`Eu&;ܲ 1 rdQ3:x5)C=jP%1 Ϯv Zt[S7JLr 6.R<Vmk?#7G?S^|\&d);A԰cTRwHݪn;찶Vh30#TC6a@6Xt͞r ,m;N'=/Rٰt'`.b跙UgӏylHܢs4;UxTK8r7@vђ#i}\ aBk W ډN~!qkZAo᧙nؤ7Xes  xGw!7_.x#h\9o4Bߒ"հ#aa<="j\t5Q >ůxxnj~o.~}EBiĥ`gɛ S<7>'m؂tZ2CjڢnԽo quVGվ=- Ǜujw', -"4{`sz]ũl6qЀo+wp۝uBjTPrʰA[ cAn;>K0K.p 7'}Q~e ?I?cWX223sChZzOpw70NJێ?D {mH͑xv ,Ϡ- O)K Rj؈qpO *Ѝ׭e _* b M i4@X xS|:R'֟F,qXعjcT:1$Hñ/}5;TX)B( &!ؗ9H!j{o>5BV*;&msJ3~ҽ)1jOܐ@ Ċks`?G e|AOٝ|eZ;~<)ĺTGl1ۦzŶH78U+=,#\cѾ.CWH(Lh_ r>,i0DMy`0ɯwT-3$ޭ3iF̸'p_Q=$:b{;ȾDcvT:ԎP(P2bǡ,vZ:*&~ᾩOU| fQK2#Nzj 5NVC"V I|.Ҭة{FaA2q 6]=Ӿɞ]L9F[ }M_ҵRmY8w>uvI>(P=P ou Wf;ffE!L_!gι2I} d|4 g+] y MhY+©pIE=QL,s}C7UF_ - !UadKclmnb!W}γհ]]r@u xa W}?+tŵ1bϤ5uԷƅm(TL~Egk<@^Hd+;t AwIxỘWo:X[}Z3| ꊷ'z1"9I rtto9}Jx~h!zw0dlL;`{M♞DBB~-1{0j]eܶ8#pxm%j~yPRmvD¨*V6 5V ~υtt\18y7R#IڻqxlnX&W j}3Tz)Sn[QY}vI*)ʭ;eA.hӱ̤F_h7+.OqHME^i.2T;Nw a ѸM5?A%nSEZd$//¦I1vthQ3%W\iM1dTǛHl^.4T͔9T=ܓLe݄C~&:"n0tÔ',@v*8% -}ms S;8J5e(GXI|/s>F-s6U2XQ=[ gASWJtRh^,=oNNd@ r$?F|O*Аg0K͐¯xp#%8wǥ XnHiLٻj#5}{ʷޕ4-PˉJҮ>sj!`92hGcTibw1J'L*_638ڹuCFܳQ7;H8>|L 8[Sݘ_amhKoDmy7};K>5r4S?h}ڑ6n<6B6}*G/X"-u5ZE +kqQ(~Rh[֞C2 7Uj8N{5H"v7E'-1PvWgù϶,Y?Q1У5KsKY﫴՚v-1O/CJ&x;4}nT cTۈ+UI$,JW92ueSdek҄n]|kH4qZ1!b_Ħc[uYJ b\4FAn,xCm_)Es3ょphүZ^kӠA88@YC䢮}whO0+}>_׬KػK=BE\D_#*7^dwE ޒU}m;†E]sSi8MSXOi&!nixc+`_(\-WLF Pj pWRU\ #E DɃcZ$T`c(J 9'.gRwK9wM4vNgnDj>QomeGy<oҢBi%r=|֘ R{0>|vwVowjq{aR蝡/9q '$'c/DT-5䅮^U w,5V ::؄ҙ<1trs] 2Q"ow٩UՎZUĊTz^v>s,LFŤ[8/:Xs,EIrC!=٫]CwAwTonI%4gxW2KTafD)pKWk۵G. Xk׺cS6_׳(?xwߋb75 6%sBo1` 3-t!b wdeF< 19ClxT{*Z3d W[@jz5 'v-H#=nQ\s? 0b:w>L}kOC3de.7i|46*O~Cǎub97T?Ja/~UC)_Mtf=2T+֊%gj []tێL9夑=CC!ыo"7^Aĺ<8B$2#&zA88BOYB4iAVBU6)lwLiTvawST^8^>PfBJn qZ^{&NZ5,ӍL>tAPKl%$!E~ز?[,H8 6VGtzju\}ބcC#QIuF.!ˌў?QeowC}mC2K*q?f6:y_v&Qi'\I"MOڟ7肺g` zuz_\='ݻMk4nDži@Ҫpfб6j=}o*[ rl>nOea θ<>J4,]68.S \j"gK­ |\j-oW'zPM/>ڱaAR~ImY#/(N5&,V:b[ ND ietp&<'r3$AdX߉!<kBfBJ~Ujb78{%P&i' I8=OZOq2ߴxqlBBI 0WNMᔚI)%Eh p]VVP&1 Ar @äHۇ VM2\tDQbV6) ַCrq}]H~'z'=phى%"WzbW@lp77'[Y{ܦ(+\٬bK2vmS*GhIeJ!۔IZW(O+,voxv}ˍI>x򰲑䀴0)-40QKVɵ}Q\ooUb*%'׉tN:\{r`^1eTW L2MˣƵMBϷpF2f_5t3~Vwǎ9u[2!K^beFK_673t Wm 'xuJI=EW^E8i5wh#b_+mK3OGgd4f37p+Qx@v \$Cdtj;*! a,'mg煂F0D;Q!HMՌ!GAEvU56;0JWzVo OX?6)U iKjfl j%pqZ8Q%b +9ZjҦX*4锽3CjW/&m Wwtt)#CFnrյ3P#L ߴjHXn{^2DnM*pyz&Q?A3Dw?'ꛖ.iWJ2Jm&n_b O` `)5R\X/2Sz._ȥw|B̿D_sk.(_X|ԠlC|48eҝ^_,Zi:cQ`^ Kgd$^SR.m&w Ԭ`c\F:7^ε`2LJȔsvKwnCޖzfk pfN Q9`26E34muKdLQynL !d?'_<i;iìWdT"@!Ou۵Qwb C'1x6 tUHk.`4ve^ڠo{f Y{9߅iRL() IȨ<v)QrPu6J,K~#}n" d B):tB㒸Õ5}hū$=aKHߏ: sf6ƠpdB3m| J%dqچ30И(Sk%y spWOd=[}Y ‘Ew`])m/r? W%'Ҳcט_#|pc7}'&lT1#`[Q%Aqnnk Z9y,s,ty$ G<cegcz~hkaݹ 28r: ߌ )(!"8$j .7uI<{x._L6z\ śkϧ.VMwڨj OMj"DrIy\yJ H\.M-Җ_4'p|y< ޟb=?_z^?` ѧ-gB.xA ^;؈Hِmr~ϣF͛cazQVFByD;9ohzXHTv<;\~+^e%y[8~Φ@mT]bc{Km| 2ycvjzj<#\1 S/~$î,V:N!}|=ci(@RHji&]~P ;9'Mҟp[ C*B`46 #,-k&p^Zڙ? w+/G~oES [b@QaI}0877^l[ĸqo=݌dMQtXȹ0i.\,M ?)p|ZGV1܇nu!aASqrr ʬ ఛf:\:l.ObQ2"EZq2ogV.GjI( jᢲ!ph&m3殔 ~hj⟒>OM0lknQ8i`9422"Kc{X%'~lmeL^JܓjBz/31:\eA׼x9 hk$"塹3yd)O军zyŶU0bHꄸxmSLx6 wPXc+f%_vERK7Ef&3&UdCWc! @!t 9-'Au݅Nk?{Z11ζ*Z[{|ħCVMs$V-2)sƢ+NƺDl9%()fg]@C}o9VhDpW}A=MAO(b'v6>\$pK) `.NpۯfatSgQ7>8!t$AD۞UWa$@Q }mK2REQZKet&!UOqP@3 vTo/'.cEGrˌd9yl9<'߀S[R{[6wn^vX9?=64\ T (?]vb9pMqDè8j;_Cu1m0f*x1=w*_ mg4dL'"x%Vd8k1e,STI,x@7Nғj+uT1)AkN%7huE=Ax饎vHЊVe4q~AyR˜ءw HB'f#:^rBuͳsDC죢q˃Ok;&^KE`.u1xzc]t JIwjQGuG@#")+-pb:wږX6RAa ۞W=) K {gTN&=7x |XߧFoini/Wn~, iĿ_-HJԵDK3ܴ,.\>\pV`A9)ˆOacGe~1;f_|p,VշjmfN'\]lMdm#䭘*,K`{o$qꑘm+'ki2rt;NGD7( ٟD,hE `4b%lVm)ypOQ+R"j H,$Y-B;n>"`%.jY?qę~OcW7dCbA [Pq[[j`[۪f;CWA|]- ͹H97`_i/-$p>Mv<ʋId(FOA+C'45@H7XN)N0gBG*^ mDJazŭXs9zKL6FAkŸC +Fy/4> %B4g5%Y(rCdf0uB\TBQ Hb"kX'Tp%U`G̚p6OѺ7flqX|F<_^RXÛ\մֹcIWrW5 \gQ 9XӀQjɪ`N];P.F'AԷa8BY-mY_|ʃ:9b"RNV1-i2\S;輑Ƭ̠˩_?ܱu&C*=#ܝҠBm\ nhjXYXeJC 9iT `^$?H 3}["}mq3Wg.VoDQgN,I8HH&)_< 1Nv  Zl0iqT}t-o+ ng*o}szܐҒo s ߝFMx14XStT+*Ӹx (p 1lϲ@Jro3|Wųaf*X)A\T-!>QC%tt^=*XUޑ8 +.BO;)m*}Kr<۟kCJcCKQ2q.^!R|loU@X#e[ Yw?c]y>?-'-{ .>_ˡjtQ^KnWb^GY@jScIPUZH#Z:w;YS>Mͤg{PXg[Pj)as1 -qDJ62ڋk?1ߖ/( xs g&.tKw]̜/p)Yo"FGU{C~G 2 ?l[J7(v'su͝UeinY=IZѵ#\Ñ$pT0ڗǬ亏+%+u,y~-{O1M[gbkLf:X`k&tl*^AExRN_sn]bQo|)-̱ҳw4YgC.p6^gDTU:n[=kD,xx )6NxAW-;cXhMvUχɓRN5D k6N :J|SqD. /نC- !~L6Wm]\2N `9~ F.r\aHŠg A*E,R;&b9IGm~MlY))Y?iL-P -w wZZdw3y|`\ӹ&"Djt?ǁni F^%?('5 Dq|kzP Hr͉fZ}eO~m-- @j^S| ?nmPD8=u+r2}=5jNBa37$O*YF4P1QOX]Ĵɱ bARY6!t3:AC64%aOg92Z+cMiR=]ce7H4j[:HNBMwdșhkD lƀTN淍 '|9.sxAR'LV'Y;ScK*//H„ey7iԶpcQ7Jf@fǤ{M8k~U~25gp*˖H9^Q9eEad> p|jL[neWP ]C u@8EQ[,dhH-oK(?r>z bc|ZSBP.L/7R) ^ o4/V?N}]dԢ`&r(v}j3[\jW2/009TU)DYԦ:4wrrBRrz]JBo>''bKޝ;}M-~?r1L#|Xd? ,_E $yK0D]%&o֭۱x yB]G:_lPeh" y`!+H\뻦f%B8/58Szj/o`:oA^a_H󒒕w .Ú&`'{3`}m&@4C;_dL<;(%E'Pb 2j_5y6JNysQALCXpWZ`DprdmFD|z&8*7ɬV3įAu[+kT~## >i'Y >km z?a8J ?s>5"XH < 6Ywm; Ccθ ]|c=LtzN?T"mO2QWsBg?b5uL ].+m#FOj9uW'MtE>24cǂ*M$B@V e&ȕ9H Ii& $jZ˟WۑfD%ADEes$A=/Ql޾sX%ձ7:W3[,*Sryumy-9>f7EjE,ԾZFɖQ?Y -d%\^G(,udDC t~~F2l3 (+)8di5*ʁk&pgk .J"h@ ɿDބP*(2AŮ /) Sh)P_Es9LJ]z? w9O=Խ`I,?%I\פ,xž^lj}ŝ2zRx,xCh陵YzKh9yрĞ|4Ys>a+ 2o8+^s\jǗ Lٯv+ͫAJ5)hNzz:8IBJ3j5t՛q&:-E, 9U-EAa^^MaRh1>#ZډԪ$2D aa.x ^.e0s7뤓p3ub?r!c)Hڃ^b4|BJƉzIĄ ~Xyy %]rBf-K5qNtU䥮$n؟T1O3WZjڿf2w.2Pg_2z6{mqicwNj5Ul1֟6X8N}>&~|e Zg@y<8L]X9YW ,z}g߈d'rhuwe#  .b.KI_ܗńfU(،G/~?G2H^Ô^H GN 4$eҿ|^-س/90-q_ gaӗ^XygHD[%\AL┎$% kԁkh{(vd./.O \ (H4 ݖexLb8M_吚W.B~6HNڦch: OcGo$*Y$!TDR6ĽV {۞Z/No~ Ad f H#.am0jSC7{s!\GWֺ0VȎCHp|h!hl$wМ.-oJA Z[.ƿτZ[#A,ldٷ|jVsF]*Fݝu1{o&ږPũӾsBGNJxױs(T:@ 0_رD DjX3pg* &%FQ={, 0\ wuw冔-:Ā A=> U')RqрK"'mnPh ^r\'#ߒ:)2k(Q_c"GhX;Hc*X.(&`dr+nC`zD`xPH v`)6u+&9p?$d X61"|@yKZĹ,e|Jf;`:W|[kM+&c1/GbשE_]5x m5m;s^fJYѠX-0f-%o?++qxM;O4tf_!=Ι~SXkjt3AJE69sKU\@ڣ8I/$W"Kr(iϯPju-1&ƹ,-ȥ@zTցpe & dID|P &Ѿņ4[B * A~nk/:~$g 8$ y3"a{&ӲäLnW!΄O`dԼIWɎ "j]  bfG,lF.%(MNؔهCBW/cIgm"+_jW2tLrӲ'Y7,z,,݊ysqfƳ)Y0mq⊨iV,09|’8OۨM?M_Ah>৴{ Lo[;l3r1?L4*O1 4_Ƴ-:qEg.,0iZqv|Zx;EO-},jF&;h0Hjۓ#0Z'aZF(?r+۲u!N )aa׷ص*Gp.QT 7ߎ7"fZ5è+|z551*3n.ӛ6N 2\wnݘm¤$#tJaG+ApIN 9e-Kn#0QdPYFjnħ6ȋ#b ?씺?>s1->U:pLjmr?҇e Fay'{e6dvK]yۑ6D "ΥxFT=Rmq˻ܬ5nUP.R=J˥\ΆN\./[y/J!SfC_D.BR}d/ 8:xхiԪZP042v uINz=?Xzh,;U7/rÕw>^NOo6Oj\^l%Q"h fdJ@}yZm2*wGEG %Nombpڠz}wS'Ox4%_\+Q\c^1U*ֈ:<,ap~ݠldBCmش#(a nZ74{ޘq7AV*٭]N7a q "Tu7Zi"D0}ZVHy~՟Q t QcM;n*bs^a1ԝnehBxzK504/ ?KǚC/-]7E7XcA&]ҫ2T1"5e4}1k1.qsUQ0ͻj.}fL@#hUQ"[Y7$hF E%MydY] Vi6Qnw-<.!ZWwZ!$\ C,>/_#?iق@cS&G65iMD(9A!Q+KPɲa>N&VΧ[敶9w&㪭}cyy~=Ϣ)kTE\̬}qaH`b#\Pc3f?mdckHar*cSp#|Mv >Jಮ=,^R[YW]Bi%]mb:&iK)lv5XURՋl>OɒlI.=6DߏR9KZe ^X̗jC;&1(o$DaWJxIV?u;Z8 hWT;H-3NAfWtk_^VC1aN%I8|껿Nzetw؉HGcio Q>;!g=%GL*sT:1ƾ.xLz5)I2B(0Y{G0~+9ne.$ΞEnQ܊^(ܭh.k =_9 KFz,C&WO&1MYS'['B"_=BFjO@*|:KH{>2Dv9]!R+)u)F|cP'JX5x>^v"~W+\Q3|Jl0L-DUl]}ذ"oiD5@H҈7-[ca3-^`:`' n9,?`n ʍv}rF_rkI:@MN'9ZpTVX=װУ6XFK:\t.K)Jϖx]|7 HgdE`I3yE0kwe Xe2> !t7w|pO|P\IN՞z#{)G7jByTјˍ{pO3aAWI%pXws/>:^Aq@I3%a-\Pgc6!8p<^ɾ7Y7ki4/%/`;>Z˹e(SX4"]l?v\_}nN|xK l2w 9$@ ZTt\2+Il4LlĹsxf L*_iכ. ugNc;?AL ]YHNLW$Y>Ւ8n_y40`7?<*bw}APz&i+> /5St9KvöZZp%'0=R ˈk-% `ʏ5)InIhReOq%,mmn":sb/yUB V.AS:zEk֔f zvkֱZkx!{7(SIvL[3^Mmez vPU<-|4ז4Hፐ$8j8RkN4_P w]54G E1~:^q:ĭX#!( %X41.P׮Щס ƃ0&p֩琄(RQcBU)AjL6K-7bZT!x<W5(d'gYjj \Yuܳ3i#qFMn*1؜K3D?pƨN-.q7O?woC'ã>2;<C% 8ɢ4-kЗev'?B% b{R'i z=79;;䕥7bl)n(繅v?-߬EYzVqR b$TGa(-%y|J0s;m%ųFoOx1q۪Ϯ|ɢ}YM'RMr!KW1dFwJtXMÎ>P\l;Y}E3SK۫s:)D Jw*5J8jnH͐ @KF*' {lnPI^ 򊌞F좖xʯQX#RCOXg 8(dH0$!aHq?%`G5GvW?ER c-\8,\v"S=3yʂ%u7}_jkVЛ){(zƃ Ad lnc;*)fhJ tT}Y7ds UFƩf!k=|6"בFWih@/Nk13k3QW1/o?-$Uw@cvb\=IJqɦ4+s P!pd޷12rKіrM5.nhU% s!n&9"pL>xDۭ3 PI={5Z!ʭLhHM42_3}"uTTEy +xͲ,2!)viꋳAb@ `Ue†/OIs6WzHIzǘK6$rl6..>&`0mH Zbtk\F:hi`MM{ .οLLW=:hT;ZU-Z%?i19tyƭ]3 |;yqv̎;Iޥ)8Er'K2sv{ո#7TbY4Op%mwX (~?!)c4QisڥkFNϕXW-a{>&wWA{wLςHf)}OF Z8Efd*yPH`~a<ƧKFٰr (N,lu?jɔaKLmX4W0]\RlO^Jh9 T:6+ӮߩgX3Rbm3Bܷ$%R~moZȠ11/r &14)_iͭt-ѫ) N-w+[??W[9=Ay\`b)8']vemL4IXa6zJ]Cʎ=˻'2?Ա"=Y|o}]kS4: uPhwy&#PҐIH=IjBSo絘yʖlg#$ep>iS >#|3TFġ[2rq%abTkf87PJEp[bѢ%ø uNjj(sֿ_U.R9Msm&O}_m]7`d88Bt"uK:2r̭Z 9w7K)CR1eS-3l2HlyAgj lOZWcF1KZtohloX#xSsE-]M?>#A+DsF;*OF j`~Pþfi}PVkagEBilNtNM@%ŗ)`%?)q4KX]fރQfvo8%) MdU(;F e-%[ _O$^[E %ڛVC%*j3ҁw$"H[v)U{\$׆~| eaBeb/혫490-zfЭ7^𳛿nj4۩"G&lGv{)jL,Xavvjӂ-È`z]EK]߷tv 4֗ch6 h6$ g[@ˋϼ, a/5>h9o%*VHtGA(:'aCVDOeq999@/݌O7JzQv!E ~b18OBvvChd"@w Ή2дJ'J'Y284R߭bU͓]J~D=v'_!<{Y}2 6Je('Ruzv 7mc h+KJG7xV?RX[@*ж3_2cg0z\-#dyh72l1 I^ 6]z9iJQ: Q;,_;J!u& *$ά~ va'{]'V{{PSljg-n0f'אα_1M;ҳ{͔/͙rߥbΠ1)2]NV9 EIaݳEHX~_Tw2L'J0 +Z^&TƽWioVXҐᔠo> lC*I=Z8,I1EYSN5_.lр ˍfI!OTE|b"Gr|]U~ԋQAqt|35e],q$tvwQlM׏R8#D$0C!Um(FO57LpRTM#k=2El]q04!k3Pv~[1zl2눘 q#Ery:ot w1"N_pTHIA@qvdHcJ?C̒Z0Ox'bg&yÆ U:EIjhX~i `s#:!ڑmI)+ãMA3[B;s"5s]Pv|<9i.B0>͗'dm!ʚ$X*Zp;>_U{薨w%|Wi5 ]N63_'%P`Nzd5a`aS {IH2*;]`> zY9~郼#IX',4e>,tL|翡OVRSV"cSK^Йq.s^'#1͞K"JRﶳLf|Vv,Qp{'S0ipn0[d,fPxquC'(9 R+ֿ?gnw(p[x4#Vv, ~)Ԥ>;>m刎vt#%?x "HL:mKNp)سm C ,jFR1i҆Rcd{/1e@i/s#qE!Ih̥جQ*PvD!2Lb)fu,b`dSɚlƙ]6(ϒ2*H % 3RY40y1ŁJAAD~Q']Y ;`yntDodQ"O*!B rdU;ȷD]:fE NXhQv;@T|vq fO|dKZ]? N'!K TJDh #ѐl$(4?U^_1i= Xɘ<6,dIm.'6^~"^%)QhCYQ.`ï'תh"NoC?D{-acߌ`Mƴ,ETT 4놏8GC#uD/E 'd= Z]931j$9AUGnp.DBob+< ~'tT!iJ%ii/eא =&% &kɗb.fD152_PјjYsx:r6j1!ʾ䛺<.<Ƨٞ{@S^|1I[6)`NP(ۗ n#mXOJ0e&Ugpi܍ 258.8Q}5V0"Y>@@ll/p˂0JXK1| $k@6ZjZ}0Ĵ؞Bl$"/qS v>@܎ڸ% E֞9$z-`8aVQ~&3Tu+Tv8+Y '!J1|`Wfҋ QIBJtABR\sN׏7p&;_Ӗ]_:jB2+ L"W6!,hvp)'ѿP#4Q=Ch).ϕ!'ν8{N4qDPkzXsE9#dMkKwn\ Mc_,Pttmc̝$JTY,{V oUP?OP7@tmm6k ]i׻%7-T]ǚmepʿ'JI=9|iC`wyD6Gl΃.!P EbWz˼T)eI^b}okHNcXc(z p轮8i9'`oa-6{&Qdc`|Z:!4C4m/NQ:˦h;d3y;=y)w.z?M} c5{s3lw)fzͦ`O3['#S7Vp'NZ -EhJgXZ}ϖJ Q=B@:>A,K^E_7 i: -vkKl^ڙjØ2w7fAmSZ"ь }|_*́*9,I}*z4b3'GAj]9mlK1iZҤ)M,r( Ak[W)z@*n}3!^GKflf=t)}A]Y=FŐqo' )Y%6;ZGdοґat(iWgP s?ߑTX-y*M79t|IbVfU-WXa Q;./ .T5y,<?_~TMn9`"@S0ߩ3(fޯGlap}{4b> b@'2E$ qw.xN5"dybB!~9\&r~&qAEӫ@g鋰B3Hl`ۓ祸&y?~eZ.>c?Rd>jL2a. Y ub;]\b}NƐ0h_TmxAy`/=ƛY-灮03($ОDn 7o"Zĭ9͍D-Nn1yx/uu/%& tLN%^]b=u ɻoK",Xm ܀ĵAcC27C$=\ŲOj6\ȮioQg(BydRW!+01Z"B1i-#7{v[^D1޼x,ܿoE3 ST " 6DB\g73cB[zw #ҙuy'Z(7A]0M^ZϞ#\qsOjב6Ә ڦsEKmڧ2Yb>n%lbs.d>BVdS>}9REgӇ4OJap8waS]]\-@W0J[_DJyrGjl%9xid.Zc LSWBkm9<~bL/&yΗGgRH0Ah}4 vBrJ`L78>dh#zo\S)s7nB nܮAP%ڜ~})9DlCUe(G &(Tv>Nj`+up~F^LP̶w]~ JBwoFP^Tp\eRe}GE bos PPTvϯE lQR;eJ+I4t}8#]oTDPvU $L]U-p d E.rF?4L ZL֤ҵDP*AͣEA#3iƘ|b@ޓoc]~iPҖsP~b] CqTFp'/b,ay Y7Pggȅ毎| ZKdtF/\,If^n]-AN, 4,n$Anz%`ki#O)-a!5(R},{cW0D h^Qv%h6\(TIHzTh+)31Hz2Oә:HXt'jw_嬉SĽƧ,[Ia1mhAoVeCKj@mYou~Չ;a˨iע ~WGwE@iB- %07tB(iC< Odr=%^rd2˝V̏jkao5'Uo<G >1ƃsjmQ/#ePfȕVJvʮZ{'w9M͍aw[m׸G4DWP0}PO+sCT]m!v_+U~7U7݇GE=6|,xx yu0]+_\HajZʶ0,-_N0sEo9Dü I[DҰӬ-UC#ƭ V)Ij/Ǎ[5dk\p"W9}sG3(|H!F?3@z\ ؙmlw {)8.,z5cJ0X|}AU_"N QrlDWkvžaI~|*{93%6~TG`(i7PZQsE)5C5:*LV-aqD _ Xn1iӼ²2@NcM)$æHлd֓"whp@*-b Q7Fցnr9JkEwY~7n7L2d'pv\!7o ~.#cIw$eh! |4p44ag ."|kTն xw^{⼽* .x%`HY+]@ROz:+{( xiQU:+WNzʨi!aJ; \rnA&e5$x-Ԧ^[(c~!јa@*46>}c3uDF ݕB]swT>%e:` *{ V\Ă~gg#[ ϱEX"&{ShG~ tQ5!(TAn@K@mt{p k(JK74u5NlfjY5ur߆Vm<.`9!onj!Y,cbG3r!Z59sҗ??NJ5p(+  s|$v)g a Bvk=w1@<0kW2CFmݬaWubp]HKz\Gjtӳ-[]9KIxKLi sN钰4^•- 0ՠJ3n( ei{IK_;0 9 wY@V']$`L`IJӠ?8JoJ Rs(6a,ŦOCvnKw*e`aکUNfkg9ɷxwV3&ar{F' e=6偋4/]f.{v^D6*z}ОHZOx%/1|&RKM,{vN&W^ (7hDdK{QpKā(R&]THpns_@Q$ٝ"$DeڠU7ꖺ}J)$!~T֛(V=9-be,'pMBԠ{fu6B&3g`7h_m8:7}OD}ћ˟f9e[%1 6K gW_Ć u?ä9cHkK5YWǬrԓ:88m DzXv8M@,5H5uBėtw;6j)@n#3J V ,gUaOiEKf@ d=]"űQ|QC(w6A>!-, ~gQIC7QӍryl.BҜ| s]l8547IbSZ6Iczɂµ7' D'ba <6(CH%WJ׃-d\~ezevB;e?ᶾ a`WնHbPk$Kī> ?Cl;@OISʞÉ+^?:Y_}+Y QّTM_5s{jCNneT a,`fi'jQU |hi6Tǝ%c6_hw"PaGx(I@:"וCL9T[T5T2Td & WSɆC% $Y8MjSC*z}?bV!t-ʱZ{Z6rI;^D"ew'm~O[f;jTy,\ %yb;e5-M~w8LJk>r.=>}f%\'%m$;գ _#VIȞ5LKҟֹ{?m"C;*wG,#hCNښЍƟpg*i2t ~ TRh$^a5KS.ۗDӬByͩ8k f)o;pO^~|`\>dELPcceHRr҄uj+ lFD$|&mb`N& Y KC- 6ElE@ًכ7 HW3TYdMso T;IIw.WAZؓ㤠|?%g/z<&KJ:h~'l.J""tN^̙bl7 q!OH!KBfѾV1\(pc.$Tq+8p~sYC$󧼍;U51"1=厍%9K)&5*n,MYj*xF0Ɗ ~QOtȫy7c{q3OOբ&Q kX/^ T%Ro"h|ROtkL^WGh6'*6/(ɤ#wMX"'HKuhx jzͱi|SS5)/Ař'/H.)L9r}GsZI jd3F;MHH}'Yg7(IrFF{ azipX:-/n܀dr& gSf0rxj-s!JtkVnJ@9eWa6ɝ7)rL5k xaR\NMS{ a^(*dsODTk H)>)?jYeOw_%؟ 0D'}K p `/k@ =1w\}'\M@L43DK3O[PTo,K7M¤4#<,|z5I_16uZ䥁?GP)\-ݿMcSXi\O}:-݇.jaپ%Ĵi O6x $Q4=Ӓa.$|oI2tԋjM}ZM;U4lttPU2xt/pl"cvPkOIHeXG 6Z8A m-MNfXR>{ulCfK{)]dF$_/F{KJtZ ,ę#l|pr)ZuT!E̥jn60?- YO9Puci;V~c'% {?$뒾rVdH D}ޜ *ʼzŸd)E,}HA[} D 陭:V77d=ծ,z`mejx= p]eV^ 2Ccs/> R0"y9uL4~EteX riMdY-C[&ljK0B #Z3'}0Uy.1TC͆XEs)5Vx_Er#.j-D\u E"niА/!Al-g*3~1Y;ŶS(9qU#؃qEEXD9Q)Uy_`HeߚPʄ8ؚ Qe[&tyt 7?)cP!$;ԷHj͢`Ro@ 2a<\(V7Ls%YVb [&+ox _!`p.: K,J,@H{_O:jȁX˧.Ls(ҎCWLyzﯘY;dvYJX {(-+Vxx@иϵ WM b?.̓6xJ4 ~; 诡@A\MGcl>I;z+\>`͆CPK-s_ZR- $, A ח '-7oPeU8%V`Z]4^ǬU9k %4 \B9N^Γ .Jq(n 3h%QK Ae߲:=nh 3.G-FLwޑ=Nyj\㗑k ΆSolWS%umk+}5uor9I|äù]^jيLe-z'HūŪ21V.V 0~ݶ;`swpNm. y>4\ ]' Aw)p<]-a ߷k!ifnK߱|e Yc^k(Dxy7`T~P.w?Sqc EX_h49L3lԁ/ł{'dÖ!$JRF;(/|i7h(8gH\. J. ~۳zbԀg?|V 2-3 }*\p<${9 -ەonlEp`Q5TK w;MaZ\+qIZֈgK;8`Iw9HAY(hLfԦK1b2Δ-LG#D'1孥m5n5ix[s8R5];C qڼNd7Ӿ(:孷Vjm_YD6Fx8{'LARG^b?s_ o|jLJ7#߰(k TWյ5fomߴTɏpiiA7CG[0yalq~7HK:umCmuWGC~HSCQߞVuH6Ս/v:i !V:icQD+[R[odwU Ac\0-l^/ k&6v *"ζ)Ϣw~;^XD.6,ԩ;8X6:qkDٜenf5O$pic 7 v Ql#] Pɩ 9-&4+BZZR\@z=,D2d\O%@@SCp[\f32@E!S:lO]w#dƅE¡'i]s4dV*dX{GJU!r P p+81HA|;;Y(mIFƠ^X4"oE#Ի*ɻ:jLV+nDi<4`[(?>'SVqHԯhYS\}錺jE4j  Fq[] vL`lQIXR՜zj5VIk}i mlDWAi(̄4-;$od<08Ttr̡eAcWiR W>L=-{( fR@#q8)w^޴Eض4.nT +W$cRȨd.>sm/vF㪣KƧj ?a ЖoS緂A{e#n,JI1r~(Nsoڛtk(3%J QTnq7snƐn@L%R@>U:(5% Dmb'~!aof&0:}-xTIQY2V"aPl5pƲQc#oD7KUa~lo )s,&LOw2>QInss&uE3UD1J)lyw{Fk1?m븝E Ư< aebl.6xwdŝz1qʏ1_! ޓ\ݞ˛` E7rpaO־(V䋧+YpI1*j1{h[zg\ŋ%d?#I-27hF/򊐋eF:_H$TYTugS#V+B, /OM!ʯ@J>qi0$0f}rl?dmz5^^]}m6{]s1챦I@c(eiV\4dN&2yA%oo>ЎGgֳ&<0SiVP_ߕw"RIUۤ0G,AʅbM,=,*yw% FuB4@' @ɡܸ ;V:yS/ weK|44;6gC'TFodėI: fsqfv&e~duW * kesgWW? 4a)=Qt:g1aR\CLvM.gI󯬢$G V0즨ӱ)@y5|6cr;Af!rK[?z& af=b , 21\aK] cvsR_n gve%0#@ e`4C/gV%k`͈*ZڭhqlRs+3Ewɣu+|c]Ҙ`e|OMOtysUylq@ O&oX{1jaf͐; ַ\iH`d]A׎ߟ^1lޛm&2nڝcGO}' & Y'3ɉzq(*ykSk^:@tMrH`@+ߑKpvI!~FYYeNC&JuU4Ǣ4%I)P'-%tCc7}|.DC[KAHrZ8%E[Ormb;v8vӻxW@~ [1FJ6mUНvJ3f +aQO!aM#RpNʱ汚SӊJ'IWJْ2_sL%GC1xBqW"?XGTd=Vi*p _RmuH7MWdk5k7s#}X &J2j Q ]X*MX́P|3?+"^6$p|%(Œ0󄱽ũ 5JaG@R>['1yR'Pun ފB;yP=֌%jZPMy;CgF0W ֌W_NHQ"%.1l^ y-7 g]<>am'/)!CmX'h;oD%9#-Pz ҷT EՃ*^έuk$zAtױpF~ѕ8PR..%1W]IpezV67&[\onװ~W ΀њc`(N+&+ z]W6{(?A-^ke *ҩ1yGlC!EVxt:~+Bj4,N ֬ Z qIPAê\'#7r"%&b\!=fM"̛a$)Hqx ,` >udew8cCZ>:. Ex N/WFA F\HDhM-[I Xy9`zn<Q&27S{5{<-@O"Zd]F40AKkASZ։ʰϟ$8z!-Զ)7dzml=9ոw.nTv 9t2tbZ+9{'nCLW-u݄m;>MB,U1Uo"6'p'!s!Ĉ [WӍ"g8&(զx6Gb4|dr`(<$f]B%R)&s lY'do:?>v& X(> &XeMIf-\^ r&ҭ]S$˧#YuM۰#:kpؒր@>G0 .ir\]N_x@ZmY;nlOuV^ȝva/xn` |fS鑇M%L7~.Q<#8Ot>}e< T22Y hzx eVP'RN!T <-4Եj IEix}:e D B2!&|YCq-jLl>t u&@֏͚(9U U7[.^Z@j.hQX:9`ePj4$;~/!Sڕd6ֈ$(3L=@0?3F|INzOqm#N_69VԬ%LDF ;بXj={P eSy"<'Uh6Ƃ O-&!?[}VX8" f·0WA[+b8#%VzZ _c+lU?#My+Հ=cN N鷨Ӝp)ӢB6]ZCnnS+oZI"V*X䦫v| l9>߰i@7g\d@:pؚ_5;s.ZuO}+&x7K b\&-\mimm td?C1p,0 zi,Mľ[ PC@c(^1 5Cvsޛyy6ި!j;77(Hrd}g %(yyĔP Bbx-45I޼WJoq0%  5esYС0V0#U|Qh2RTh{coTumޠjGoZI`ٟ6ָy!U$X \0FՒ(djxh8D*-/<-b YefP5v{8z]VT:3&/3ܜ |ۀu|b?-zыȝc %wO.[egEcY 3S'jF\CY`o=xzRw.y𨶬XN7Xz#HCL*ez$oHfT#q[Y݃ ǣp$EE(3I~R-'qC)'BgѠBh<:m߶#jZ~W0~&(Jָ?Zb3ܴ(C0W]Y"[Hlh^GO grָXForx.,<ot*5k JPڨpK%5wOz%yhubvNQ7Y~0 8 %~:fkoµs5mC\D&&UWbаڗO` Wd(XQ~PNaDl\"d(2͏S%ԈWه@z(?`? =bxf0_o*ZeΫEx2;'üL y9lOJl6#?\lذo8d6GP~T(H5%,'6/z7@7v&OHk<0ǙyBS7J_1d(73knV,bکųb:ism17bѨ퟿%' Nr\ْS}s3<\{]q#ft3,U~.3kNIs=Ae1f S2dABSOg!@,zXmSTRR~'|L]eő(z>H@$UEc /K _YrйH8@^tS['cʹL½Kv:$Y1˃JzjS1sExnoѥ~AA a]NK߼hjZu(*ܔ6&F. VUذ#AhW(To1am40|5+:)}֤Zg%'[2 ~ qZ7/V8K2ɥݏMnQ'yK3g\939ˑA:oJ\`' J r:Pa҂P)Wa>G'`I2Pt-P†ijpJהkJkl Y+jr aRs/>BhYw$v"I|@z|ϱ}HW.̭TMĜ*i h#Hcmp+b-u[ 6j$-yki1r>d I&r; mRt㍤룊Mi8>gpQΗ͛*3pCF2 Ze?W': z| ! '|Lys21uC6#z*9ַz _,YjXS*"WPw,xN?.`65"rT@l H{c*0cv%_ qxUP]$mvka;s°Z`=,D)ک [t 짾ABtZ |{V}v:R*r+gFSˆFe4ox,,Wb[K>x1+Z7J}@W|yܙ?.Y(VoLzZO~T C"k9aSυ{H-9Ir6 XʍdY2QƽS4Am!VpF} -.T)s#ѯIi4F4:D?6%:Rs`DC}{b*j}(d3zQ0gxngOB1._Ux.R3̿foem {sLaeJb~|\(з aE%?fGS,#) #cQ_6p/OJsi>2ԕBo:_uzRҴ,`oKVm أ'Ȥy/5dpgFcqL 4ʱ{$/ώP {6|zqOMJQ" 9یY;Hd %S>6gS\aSQ=l۾#`3@-+$KUpΚNHW (}cKOrN#aX:ᴲ)!('z,S1BGQ?2dee~x+J=*wK @uFS5GPsӓ9ȱSw)z?lUP̦ZvXLUF}s 62Nz@+HU6!ѻWxN]}_4S>Mh(RK&(a.18wfGRq؇rY>C_׀Cb C:c]nfjfK;&iTo)TmWBLm0+Yն׸k]Jg!(;^LUc|*ǀ)o37h\dgGVj1J4 \`J&|QQXn;.X{vSQ)0v`Fr*2'#T6Io#5iqdU"K˷P@ w%MݳP5\{abog ..&AB( BѷzJji 7AĂ g SR$24i{/G`*Cź~IviψxsNV ,%o2Mc[#OC?@ rOf wHm+ TbB7z\װdf!dY,(m>!t!n_Jf6 2)2Eil}9#w1erpX{MUtP#a_xitBi]N#v1A:~Z.ݑ>.p+?tsqH}+<4 .]AVliv:v8}M{Ms F 0;+IXY}p V79{QL,B["G,z]LzȠOFlwp$9 ȉ7)Q,nO[`QbȟF2}'XL sT$wd\ TΰCZ8^([,U!2>{ФTf?k_x f/ Vk̊f02BaJltG،H> zƊ%OU%QH_:Q\p/A2%g5"ev O+8kC ۠AT"V2{ uC,q]ja1"#`!ȾXkc{QqJ^Lϰ f~(dnꎱ=Ƚ9b|{lLv7{Fp(G@ dx<}0OpSHo DPj !Y? Nշ~qb+bv- 3Y^̴ܞ?Dd+9=rz'/M~2ǜ#gs@FQT;<*iXsX1}m{. <E88 Dxj_ Oj!STM'.P|M+eǏ"DIz=nFv!}s]^rpĬhsg:P|W|,hwpÜgK 1؈dЛ;:;K %VYʘWq6S(! .pN8R>yQ6fvfoT`s~-g,䀌2N;硈5$|Kh0Z(ស*᧛̼̐q"/)P-_:x|+a]l 5kh(Fh9u02Ջ>|A=\<찲1tW&y!C8:$~X0 •lgͯ`BaI߄(kTg * 'B.9\РN_>;q;0˼@ o(R82ץ2NLZ]bKu%J ‰`0@?=y؏2 U# 29b{,*%2S!N_ܗbSE`[BlPqʞz ti}Q'c~Yf[nf'KU6TYSD*ۡ~bipԤY[wW(VJS \ƫc36O"ӫwרii^1|BU!V nt!L_)yi':f:5O$ xdl-hT&LC҅_,^C!)w5_YJ'dTwvw{*0ܛewU]dfי` Wj0ym5UmOɐNƄUlLGm>u܄+%SF7yCԺ3خw 26G$"s`ibJ9 B0Q5/@+sNN](Tbٛ8?ĻV։9If =XK3x3X!Zqu'B5IU1$gO6usUzFVpd\t-Hɸ7ʳiG} ֐U=OG,;Zd`iB?-*eTnħ~V6 UOHN"EiC5^[("Q+[b3aӮ\(T 6_,Q648U&X)kXT =3D ɱpmSJšshMp!f8S})H JaB7)c5r [KMR0 kL9Sr խU%4*5Zhr YjT V!@L\1O!;MSP ̆m ,M@{ *fG=w& жZ8\A8H~12HSךg8 [Wfm õX8y6a!8As=U䬉 B^  pM3i}h+a{PcD~C/]b#63>.B} m5!S푶 *̹@C" xQDG|BIo|Č5ki{~fy1m!y("ՓGwۿ 0ƈN1b*byl<£l[72 "I{@ܬ'Sfδe2'4,v(,{HJ~NӠ }cq6:dh:!%CĴ :k  ]pE][84QMg4C=li  z^ u'@TPN@+p%N^Wg 1_)&ü ӂ>Y$m%:E_hz~Og$Ϟ}yzHu?.{ aB֞9bO)a'=X]wz.a>CS+/q6d;UE// =ދSӓ+nX""_ADeu힐9˙X4L"LcZRE/dZMU@!:6@܈abV߻e&KFwSo&\ԃ2S)v}1!{yp!|j@8o(NZG|;"{܅m ӻ_ sGqq_ q1gif(lK5!j%PN߯s0}r"#C_/Cц|M7O#KeQ'P̑O=vפSٙ£Aq YoUNB~3,{t,ޒ{kD\<%%{Uƨ"c,!èXn ;$Ch\{6W#Ī u +H{DT#v􇶛~a."^fw2>?hkK{ @|}oاo~Br~UC cĦ ek ans*]7oo^%9jf} U4Hv'%{4Zz@@3dpP MKp$>H΋/E"nrD:w}$ M"kӜ·96peA&4`^͘ffNeuȪ}b=(`Ng6)IA߯Zdxt;QPNޗD_{wybbr ۪"$]qI 'Cy,v sjNN{?8X:l*38FzCVDPrQvgH5+rGnO\} ^uIN&1BMLRo&[3=m=r5tc沽 8PxL<ʥaOa{K*ZDFר*F=)mxo&i۪Gi",9' m2!S25=ӕgGY:_bz B/ D2eNsFE}}|@ Iє5U7QZ4<)ծ~<5.J;j(_ ʈ'I~ӐN@/-hݎf] \yAZ%G)f%Ny+v dA>'40_ށQ$ܗǼnr5~qM7Q謜r\"/59t@ԕV)5s\É_0%lA_:lrLx--~uj%A\`Ux ˯)KML=b{4P$LƊ 4*7n*UEi+ 8&X5)UkC7{zšA 7lK /km놓 v:v8cMq?G?^ۙ;~SѪhz@JjMP7`M/@Bt $EDAx7h/ VHAPyoc޾FOD/M'"ra'Ҡ&k~? ވ9da ,A(KQg$)0D_% Ο͸ѭ_3a}\6\0I*"Jcxga=,u)h-+缄^tï#k8V.pHECv;;[ſ'ZŠB's)ycRCѐ&Ş+KG:K_.w/π*0`T RY;0͇Fe9KSk' xjik5|C!Zœ #./+ t̀o6p9U"QKÖ>Պ0ӈ~+өD*4mr~&y2|,XlN' 54GEdL>.ʺ]Ց /Zs mѮ\0, pH5\gNgoz -S]PZXDz4;eqMV+ȴ9| $$^{.{8p>rRI@eMU0%dm[%/h^"*hL!VKh?1K3isqR?Yug#7UΚp #qřf)} 4mU9t>;+?PAA^ChwR J^N(U.؅1lLj>,iQ> GN"[9uJxwtA{^VsJ5aEpռK<\Bmw,0"t0, FoNZ`O[h*%WT/ LORO&tI9|l8У^Q\{|~RL-@BcDD=c|tjdlCgq߅{-6_:l^ZQDJal#)&/~ ضJm܅#&fH7a-Ъ}S(؊tˎtA;J(rA4N7;x=- 9)GxTqF3^@C, J!ֈ%&#QH!%6~ 3peErb,.V8ib;_X}(d횔* `fq CQT8 +c !l7)Ȣ[fH. wKQ b{~xҖb|4*y )C'Q{@ 7|La %ڧf G8: L)a!Mv0gP,_e M'cm4J@-g@aNz^0H+KsRO?u;|/ 1R4^CR`œH̋ IUXWqB/_?出O/cLm2̀rg #rqyu/NH/qL[=_0[9}rXb]^bQ}gs+F#Is&[VQ} 4 ٕpo%daYϤBtj̹)m.ZH\Is*3/Ov7R9a'uI0Qл!/!EEܝw}.ؕYp88up0Bm$%z6>o- 6zCᢐ eopM}&!4 6hr*M mn\$wzAҕZg K~)d;JgH24ucM|oE,Ep 8> |ܕK`&Of&:em"`)8!,9 .[Lր:xF'w.es*4Qch>PB\LKm$?%kOG ӞliiQ/3Ohr?҆hb6VJ1wy8힭r8)o%D{OBF'^u Fמ|C}L+f?h9̓IƑ ^5^ lzXb tr0$ٵj{M@^uPF>ų]4c$})/X |f_ڐ,X'g8p2iEx8`Y˔3e2k=</c_0n ܵr'jbvHON6ʮM?(kޱf 3}0}l]4<{ t)HhZN)(62W={IܿG4lk [q>ʅ`œS爿*ԕ3?54(sfD A#2ń*ܰT"ĘZQvz(޼(8å{=`Pj7&\ L|K !( #Z1k+;@HVñ|^/"JPw2zu:H Uɩ Mu0i@!`fCnݡ đ2+>n>O9Yz1m A÷#E==cF1 !LJ)|ٌ^Iw;4u8RQqҚp" [M!LY|* Ĥ;jg4Kz^mO_/}j4;&  B~ʒѓC`zOK!CddVS%0&By7k?4]dvƋxBA8((h_x-BH\{>:Hk +] S,1]n&q:) t]-YxȰPR1'txx,PY )N Q"!Iebz3fk:O|ϋpsJ/.{o[Y)9My*|`2N|^3A)3 AS,,EݲJ qOMg:e =&Ĺ#ʻ,Lm"T೼>s5]իNϏ~*}? 1iu-H]Ӛʐ۝qÏ*d$@Uʼ~ 2 }2I}b->Ǯg#.넹Y!O|{ sQOޕVLh"q1T1)䭢1O|rV#EsU2`h1-e\C9o[e>r~ҎU.b4ܮ@TpTc5јww /77z0K4&WN(Ž:&G@ sKD1J-%f ^x1RsAbWcݽiO?W=vƌq}Z_IUkrFjɒ׊) oC05:Ej눀8LwU'(O3#6XN8ji!ݯpy' I,Ké mVȪ - Yp, U-; p +ձ(A@\"o](&ok((.7Hl y"my݌VȽ/NFa5p+m5Wuȿyтeʠ醨Y<ļ:GO Kb嗫ִUF[\0QFN7tXqCpZk`~>De?׀bTMjj_&Cq[z (=Oz,_c(̆- V}" Bë= vQfڢZ !2ڍ?K )-Lĸ0ҡ&9gQ0qW^z]yARQ%Uٱ}YZf'h\d[3w6IdFdYF$=ڔ VHD<ʳsaR[fe_ F(kzh ]+vb#H$d )0 ZAT#/4ӭAflԷ(6 ew/nju&$L WW(lM]#4mhzQ=6;#Ԙ: YZpgyD.?{<랓W;%9c͎#Quf]9DΈU3tt/&蘭/TYŸ4,|xhN

kfshk̈SGd`K5O ixv*| :;ɹhPE+퓙.\˲?AUM'η(74akӨ+2I|cWbNo!t; Hl9%h2"1恪ק6^E/,5o Lc)vL2=:6.矤3{.omU 8b䵆ax ,`J$q$ ,sl]y/z֦=B۟)ᖏ<MRŚnM:qߤfˮ Ct52MEHb ?"aOD_.aҢv.0>cK zp1\n\njq!ǧڭL"5cyG%aT ^/WضR#gA SNnMh"[ fe%y0Z Fh"dK/-c#ԝ1j%9 u݉tLlyG4>ר/IJA1CphPLʜN\yp ٵ6l-s8@ +hr/>[svWx,l@xdЊT@*3. -rN p|zg%G|6`_ƑhsYdc2gLyĊ;Ա敿*c#E+'H+EɀuwoG_ڂ(D!<அȑ.\`8`;^9؄b9.8#^zOv; (0ȃ7ᤌ[uؓW&CI+kvw*[ە'zEAF#k.:4|I<ؖq# Y$_^m4i7h /h*;ٌ&39F8ij ]闌wBu}`4=蹉:߸ PO3KI>fG ok5Uqy8@6᱓ET7ݩP<Ѳv2"ɽb1W}œJ N7mFV =Ru5\ w*AP/㯴=2Lv 2kB|Nn,Pۨd7.y'O%.fhOlSUʖsfK2vo)wX}^c(dfH[GChaTk=IhA sz޵FF/K;s,U¯Q9tݩѳJLev{;<:ql)׮RNث-(cI#~h@.K]=-ؓB@A_;?ӇHA*w"9t*4gu`[/YoӛÏdeδ}S Ĉbҍ'3Q?Lrw}'5^r`%;yqԔ;(̗jAoROԘM̬}..ߜ1LAJ'[wU8NY< s*u)̜ѡ);IH+m? ~{Zm 9IMD6j]_twiMWyUw8>@~)z;fB6촻$D|O!4[W'z}йOa׻zA}Q&TSƠO'vj묛yI+`a&Y Xi4y5 ț| ]+F4GHB G+8α( }u))@#ilclՀmT&wqi~ufK,xIVSM+y6_ VjYMFr8S޶En+5: =!H8AMelyիڑap3Ǽ$3rC5uF}5:`txŐ%1Ny- !W{qUȚӯPa_Q L|TTz&q3qIo>(fJJK) A嬪.Ġa@OZ!B\q${_a-.+xtwb#](g[Xo"l)EbtH Iɣ0v=8bǦDQQqbF@uG`yh 0ԖYCexiy(K{dܑ=VwT*7PX"=DhҺ1vsE)'Y^tc&2oI皣~Ik f C(uqK8' {)6D/)孉SOp)wSy!Lȵ (_EYH83½S妾E;#N=3ۼ.?8116EYv;M0(~#-@.Bd:h,\WU' 'b}vSs*t.9t}$ A^r} Є,Fs91}u`Rl]wV 񆟻 ׍`|z |KRMV=:H*MnL%+y}kO$i NѥBM"7 ]AD";+dY֓|3Ey9L (23-y_\(wO5.q}^-N#bw! "f=01fQbΦwc\:.P?5p=Ga۾!93z'AU)Z<wb&0Z<=blp膈 ~wԳI5W9bHhS1 p)&Ҟ^nLeٽU=֘ӛ$, H1bW!\ ۓIwϼ v=.ʪԉ*o8VPu>dn]F}L5( θ!+H@[~+\,yt&E:K˙*[`Gnpq pWfݚ XCxR?MR#WÊFc1~؋vq=} >+4=Oh8zd{ i%p[uV!bcpdUmmWUJC$hqOFchO9QpQz ]δ;drpS,vՇʵ&{@%'ҤDG Mi ڋ%edz 1PSfiPׇ<랎?MZƀ0T) B 5Q\MmJI4gt ,|\V#Kϥй͒&G7p)">+dEovXEH18NZ2>'ra2L#8QpcVsGRHYsG +cAÞd0 qbm˗uf9VtT> I#T#T =]G&&, l*Qs8pcZS84\<:]P?R:+q]:Z .ϤPKM>N5Kl~2ᑵȧjuVY/V7=4RkLHe,TQ:酤h'wUip>Tq]5;^aKWo98j K87`w ,3, 3r괷,c!Hq%H :~V~tAӲ&xrTDH2:EcG}?a)7)n}\Ny5Y\egRqP.[ErQ ]n7`g)mCnˇ5JeeKKYM,Uq^J1k9\X4pv!8P*En L CHS$bّs@Q:dFP8vvXmBw}Nv.lKO׳jgps?}b.f*Sqvx%VT0@L>1(Y^X_;~Xnf8C -. $dM Ey\9R#ل(OiFgQ밍hO_ $Iw kO'>$A_EA>)>狶j|qǣ$Y?.nԂO0]ms1(jh,`~E67x)^鎤Q󽳜 N5->ZNF(0䄃6 8^/$8 Q\F.n]4:r,Kw.Yx%Fm5GkA>doJtޅ&=i'oG*.:6LGO8}w̷ZBFgH@@s899R7tݏ0A Vh_ɃʿÀF:́5q\ZfG'pFGȌќ 8^35*gl*NhD^793hd|ۖhx yuE1K6!9>۞f vAZ]۩VJM LL1XqR;SQaDuի̋cz ǙkOQ gf6F~QCtkPV4/I.<=)/ۦ*m VH@2<41)\Iv@:,ߎVO= cbOt\ źu s::zMhI O9lî6PW͕n ~==]&M-B+N?Q'ze騄fT-m\̌!g#XޯP_;sdlr=j|WAƿ  *а!\ǵ)lvF<|~6Lv*3gUƣUCLcr _K`uNacujc)& 'V\ݾMSzIr`pl'Z 3Ӟ'azBPG&T*  F=3t )Bh++UV)ՠ(WmD}U괬=8?3s.rYUOzR."F~OaHW&9VbgYmW61Hn^}i [ʓb0iʽ?35&0)KBkdLHceyӎ{Whr2sO0e5:?) ecSBNr%~ơ;GK](YnSH~&[{31LieW_ [8Gt8F("E`78\r-߭gA\".):NRF\oYTUjQ-uf\w|_2LڕB~+&Zu9XZǩdUYoaۤۗGs~'1q&H`u| 9 ]ƛ? 6wHIkE 0{TɃxZoZxd#E8yVT^wyҘ->S3"vG?u 9>PJ"r9 G)Z]6Ԇm5V%P*Юh t\9npUGQM69QOXVo@5M[ƀe:"3*K"d GDf/yBO:p}”mMP,!E6ٺq ț'kse,YKa7":n`۵cE.wmu|c)B.EKx=jm%X 6?9AZ-G1‘VSs(T yө@Lӯj~͂Q!HNRjj9X!ǰ&lʏ>5zKXʿ9iYFV1 ٳ7^?#B_r5?*pP1!"VӞ+:"B5_I .vE sc;u4t[¼\Ex#rkQI7Rv$ͽ;6k `+eHzw&/5ſh~"\ REHCF˙M{AΠ3WT}DPUR&zMUp'Y[XZi>SM3pnb`K:BμY@X`x\{3UUORJ^ѡW "XyJrm6Pz8JnQ\wTZ~EQ+SIOJ^AǽmFo-}cUI1=;El 075H u$Io׊ nOӚ))HOi<]fPzȐIBKMbQ:2#чd.x .( '_6L*TD *V/aw` d4˙A?}` uk縨HתdԥL̈iNcHԺ5fIGSqW舵O>{b&KYn*~{ cɡ8sR+*n̈́z୬0P:JJ ^nPe9@{OU #ge{$IсZYݙ$+)"/5o(@n deku A7p;*~мiV`xYw: +!\'< _=HeTQ?OޑGTj' wc/kS?&kX #ծড়Z",ػ/D3?: ?̏`$2:)j*sju,TjCRߦ 8l .GZ{MLLF,טpTNk!]93@m#nd06kg(!UMuB |Cjal]8T+aGo㱏+,tsp[xxw3<zNUW 3zk`H +Z|:[MQ4L]5E +\t@yȳ$ 400 ;1ǫUX(Fk쾃{Ijpc%=g|Fd @:,I.鿯7LNr^{YB)}jq:TcC6Rc") Pe'@AujֹD{S41#yƾ[[NK_>a&<))t+pML:ml8NjFiXgM? ZD/e#DJM5^y,+]x`W5b~w^9ϫ0n#N= f0ZAL_!f$="&6R$) > ĕ"ҾXpNX[[5gJ46ʳ&1%fi-x7?Edq k-Z #{]>n#%%S >r*x=mPaJ;gOEOXM1t5qfĦzk1^+uso6cj9kBߞzpl,w@[&KlI%;-ѽEy3vej 5]wJ騺:eYG';Gr=O㒚lYB${wDxR=<[]kEɮNbiwD;kߛކ{Y?, BSxbǽ!x>uBS[<`2׿[Ԋ(ڶb$)rϔV 9]v){1X2tRh"` 6Q_7/w\Q`9<3\YKE1Ts- ^:IGr=pܶ|}H&\؄rj^-!~y vk? &VH%-@aoECZp8>y Dc0[bx_Zq P ξ_4OQU>юu,)1lg53ȯw>FުgDx|?Jny6e_ʬ!Jֈ WjԗR4 ĘUZ#1d}u9zi L) rJpn~1FGAf/yZ\ݛKBa@E9_DN\uulrzx4"]] Y,oEv>OuciY}Ԍ`KѠoZ/\ K]0Y m+ v}{?ai.[O(AqP?&(!b5a=-,ʭ-g$酝*lY7.H]R>BBFNOp[vuT OKG{yENa]i O-78eAʬ谾RTR2a R On!ͭEO ddiHuݠX\}n Wᖃ=%`!AwǺ x*뮉OΨU:0ΰG|CøtaffQ>eEh!jhviRɱA$&,iK͘AVֲtߝ='7˾+M-~4~U"569-SϕwĊ#Ȝ84r7%HʤF)]U(Evhoxlɢ^H{@v?\Y}fUf|54Z5d#\Y%)Tu "BpJ@WQD&^%p jYv`Z~ƃ ]&8\0Fނdb`p0K֬u+7i/^q, n 2x7ʄ67 ZĚ[\(\hUL2p.1& ܴ: BˬJqGi֐W1 Vuv xX"sGĿ058& bI$mb5́WwbSr#vXUB2:R{QB\GgssJNVP[ U.Y &3JҫT8KԡR6#8gќWA(z'].?av0C-gNH6 1KpZ= x/+^?ws;ѩOiY8wʛ>=H$߲8 x{hݟY TcH c N;F[J-,lPpk?w.͔PJ҂yͥf}?2Yso5 ^vԯ$4ӟ@Uy0OF8dHtD{43!T{n%߆5aʍŁ!js+gU7Tp7@ϳ[-;n_"2&BUY'RIMDe`S"85`18 gLz7ݧ/i*'t}\)hl8WR)ޮS\놺WOHFj!΍{N3۔5"jS l[G7ܿ0%#Ŭ %UVsV*=ؐ~+4QW) }<ҐD-sOC$zBDp[PF9_,Jyx]«NbDrn=$t]M`#@ cÎ@fھlBEtj(l/ߡذTGhSI~Z N.@AڮʾEG^Jueڼ2C&@2%gH6mT%/n:8~n<6#z/jK6N;=rC}VveY@ 9"\͌7Ξ, ]ufnwpgnX$cyp5.24qryeš.)zfBq~'[ oaLH4 4egjmc! ՐP.TxڿY37B(YRHkQ~1LSs"p3Q WfZuce}}ϱs"%$ef̢˴׾~0/3sUW,8)G)E)9[T AR'9U֦OfBxZ(sѽ8 h#떱%H;w0o{6M@°ִ"Y_uLbXW|'6YB#1&4`oEMu0MLM; MNB(%219 A~΋ښ8n{+֘4olRtË |zY@B6>+(K2ˊWY'# 3K 3_{ }n%Vt_<䃁Dth U=] d>q |h_ŧ?5Xk mF)Lopq3890J\.k{6YјI.ɍYD%z'FUUz/uB*#q4L +hϚmM'4NP(nb%U2K-݇xqbAmAGC: "r{߉<|4Ų<5@t^8;t1oEݳ+yZARټ(9Bwmh6%6IݼE{ c3 1PJ&c[7sL?;'ЍuZeWVzGCy$C uz| C0#* rbxQ\|8$)}F5 =K_M)\%Vg3 i=: [4Hk>i-Iýҏ]O'=2ͮ~9QD ?T75! @Zo*r^B zx}9?UagPv9?Üm$7V MPElj` 97KǴ&q; %o;dxv=ЭsHu|QCvT(+h䭟+K32t7~ JHj y6^Cxu &5757==㵋BiRjm!Ėm}sMy6Hq$eR%_6Oz|tgS&Kehkޔ51Bb_[?bY۪^4N"c'?)Pc`w+_r|&lR yVYnnT\|G'l쇆2Teej܌>br$Q2A6ʶё[!ymJVHr/"<$0Ug~3,Ɨ[VT4zO9L):0hu1o~QAA.F쎌7Bhp]9?9{ eHlf#qmx'0Vb&\ͥ`}ԏ #Yl@$tILRǣ90k,:Ccy|tyjׂ+9r7 H =֭hQZ?>@OmJ4S~aG[#s662cmsJ,R+ p9T(:B|@cA|ʮ|$&Q.n sOmx6vFC7(Ѹ&e+ݺǴ="DGi&"ZO6У *H{ אu8I<~k)^f `v7]ɨğS`àE?G4Ѭy۷"/eƅ(L:Lng/5}#Vk\tY<~͙CB z5P- jDs"R /.@0 =\0*~%Y,;KKV(YuC{a9Ÿ6V5d4knnoW|֬KU8OH`Vר> m,m>m눷Dp$M(azٲۉ̤x--eڱi3T4{&]0 9Rae,j1`6w 4 $aU^nVڑB>ok>y%%,Z1jz J9 HxRO-쒪'zִEQ 4Y("VTO:lŽ'deu bfN Eʑ}#6nSE{PѲG5wdcص]{D^c~2tW+e QS{Dr-}lgnJRR5@ " C 1TՓHRU@Zg"lY`؞.wT\BA>pL ^Z=a81)hΪDUizBh5xY:PEzh}Q'621=g\XF0zWl8uC(6>6>MԈϺӲ8^J9iACZ%9=}VYfjty~HTnyǡH<8{Jە$JhҜџd>HQscәo |uNQsa`b *~rÓ6sMt¾*o-)vw~%Xwgq/>hn$lTpY]\Vya͜@w)2y@F#?[L {;-w>5rCMM^92M4 Gms)Tu=?a5smMf}hߨ \r Qq="`P8H8rF1e]l5f{uR{m>ܶ|h5i蒇8yn0TM-+61߷;yʬgI؋-uژ51fw Bz,ix wDREfY)^ԟ JrFK$%FEF*>Kue"{XpGkvy0?=/fr?WF|va`P gO3$@ĸ~=n).[-L@iԿ.oW‘S^IWG6e&CQ,c^׫(oH_@*aF:㹑MBF ź/DPHMw~h52?Ķhy ֚&prW ̩]3E!TtXZZs$F/M2XI1T5idlxJ,41Q>$~ ,;KHW/hnNTbkq Ut>r;b'v1 )9Kg}.ԱٞuzX1b U"iwA]=Tt+( rdn|0@--y%oP"=jCE">*$m=yƟ$& `~! ZDwe<(ߵtQ N\#Zp:klb!Dwj u=?!6qaPJ乩]qQ$˶Ÿt)pLH$`eC6 R5 P q( ;1{Sm*3꘮4:%~={q1et&{&v悒T=0M + z1o=aKXud`'٢]eϝLWdR?:ZE?)}3A6CJJ1nft&oPAR{ݰ=E5o? =yKlLgVZI#jW|).Y ˀ`e5&N(ǝj e _6d,BNIQ+N`"F˫ uZW^ g}"0n%^_mU|<;"zJEz(@m+5xKѻuiqjr :8Ȉi'|,3 iF\>mwC1PFXcXn y Ua3$-ӫ\ʍ06a4_ vig]{ 'ߠd8ݺUBkiV< j=OH}׎)6f]#8Si}.8P $DPp<3 \F`҃(y8͐}=H]xKqtNb6|F|.%*gn`.c`P^2M~G!5?$LU2#h \4-sdڔAv΁>~gE ו-8݄re}9J_fVV?պ)lV{(IS~ e>HBO~T-<\D32BҾ+ċnF_nd t%Ov/ɽ -ԍ@7e-,OU*k7p~ U+y͍m0(h6I:-c OӅ&4<wx8&]WGM5 Hr8ۄě'%t7pSRf)5Etd`&oޛ#$S$ ZpS$yt㫜+RgSp /"D+zw7&x/|EBv -yTgL~֊{ R[1V[[8p܅+R[ /V,) .ڔgj%>&Yes>G6$ר9ѧ_z0DDT0f"sr1_4afL,cNUSܲk[1߁t/I q *I( qL3si.Guw3 :wx H󺂾54:Sd Ǐx940m0 r,=OHg[`]3 .&`&s0f40eO>]XnDgѨ|.6R lҌYmu|ܕ ?f:x!J -aGcxV ax=5XQnTb M\Lc0MS.W_8)%[< D4J'^¿Wj/sǧup ?/6X" ߀za[Ւ޶ Ȑb]{cǥfnc 6`f VĴ- !sG'?'%xZIH` vPRٮ>) }!0ϧMq/QgR^lSGxժ6aCb]wƹ}y0W.N6 ѽV@/XRӁro|^9F'RfSx|^S #5hAPtix;?0l9Jr[ƈ–up )5X~ATugy3lYrѳIop2S aD_/Nig4u,睠#SУ;JuuFǗ=]| @ tǹ~n2wÕ0LқrGݖFn@/R1Bv<n25R}oWK V \cwF?#`P59(ӀiJCp _n^@hUzg@(T̚*}P`]&ΉD5^b2UI+FVlĔG(0Wr h @TYfo{"8F6P*^|@uO9I-*㚳( Xxff"HeP71qn i>3eDs>_3T\"k: lXt*V7e. @͗. ZPݭ2tzoX1_F'MeeT|}Od<7"e 0 .fy!wA M-+Nѣ3TYiE躾 G@lv f) . ]?g %As%idP []3Ǝ9c6nmb #+m^PWYЌWFDP*kKqk $1Ԗ۪ϪQlw>IdtkawV; z+~ƀ)J6Lh.491xhtzNr*O10]nd7,ɦ E)'|Ͳ;o_zzڶg4p:_SA(kŷ$v2[1j`='"I[!e'P*"l8cS t *SYfM%mQUM) #WnSOm>+}&/lO(=r.wq7hh.=@엵JS]DW28eذ| ٞxTeD{7GC zT+i ۰}WBL^ETBB~i !RB4M.J\jŸ2"`Ύ%WyzL8SJR$=9a3ESPPY^ oPTBn,ZST0Hk~:!`24K߮}R,)f<ܤy0]=Ltf,l^YٿSǗ0L*5@cKm"YBfr"GzԽp뛣5Dw&t<>*sYEꆖA.)@ JY4玒_}.-PF;EB%Rp)w}fyS\gYn*wo;?6vfyK*ktb]硛mT Ms;SDFZ^g[`EG5?NZ@5F^XUI<ЉSnotCIǮ*C|(C{+hDzA{q-M5qh;]X{eʌOycȸ J )ݤ2_"1%IǧClu;ȇѿI/$DGox!)Qy^|ԵcpG)SřmɋRCEˋwEF'z\?k`߲\Ƴ">ck%S'v.eN֕tCIRRԽ^J܀i4uE<_[mO1 bVIL5b*đYFfYh& Cȃi/PA^*=E¼Pz~@=t{|2d ]B&fղ*I ^6ڛ'59U[P?RBۣY'ZB?V@V'L搤 - E^267<IJ{CԮȄT&͕UIk RH<7aiMyMP-L^6DQXbRҴ䁘v5)['\[=jr .dqmkP6&Dw3jwrPdVe~v/^N03f|]팻իKEE ;]jqT6=e;&ѭx3N=T}0bWObw٥r^kOKJ)ٷN[g :əPЕx/e|'K{Q}c " Bg4: #"V)3cU :@a4I*hd Ƒ,q{?Z/V@~&_)Kr},L?@ћ;k#Hq1U`yϵ SkƁOdܴ#&dRj%P7R"Ȼɭf:`0| /`q"vJTZlX o s^cvϧ7F}dzFwta=1!} 5фHRտSAY'spf&UEXnzaؒZ NcW[L28<2ZѬbwH3p^wq+Y#]v?7˞I*j9lY?ϰ=]6%,dta$ɦ0_tbQҺi^HvQx;4}?@PjOz ԚҎ쭄Kx}pBb[3k?/z8`JJ9 - "[kNa.y)m/9"^^.lG@HOVchEO`sKaAeBÊUh 5~D2pMfzm^ͰEr Lm܇&[ޙ(훰$qpsNܻ J{f?IMZ EW ,*W^HZU鋓|({VGMTR 9m Eq-f)#n&3N>g+ͺ?"c!;7YPڧX꾛RRwgړV'gv TBh m"[ˋk4cW .ߕ8!q p#FN):ސlҙ2 ״_ְ>]gz@Gh ]ޠ rtf'&֒%ɡ֭$yOcS?fOAaX˗N^/)%ɍq lbm :mU8g$[uO̗۽L.k'JKh(( ,55d[>:.AUo|ѷMk 2ivD Ϥ T’h@rn H>oB馄}HǒѦr>|<&D`ho0pEvV:oA+"(Es̿ ,ǪhjUatibz.2bk/"DiJcB9Y[j[E%GXN R2sDqڗ.PKi); wǯ91&ŷR9at~,ǎ3 g|AglahVD4,S%JSh&yފvDL}(tnb{@.Y%gRD<%+rS%;(̊SM~`9LZX 0n5yX;`hH}4ݰV6SRJhDK%Q|JB*2Er叕GRWvG䳂5Cp  gzK'bo"&'4XrZ-wN.-NZB,  $T[_Y#30_;Y!z\ĺ!{{ /lӕ2FmKryMȝF0jydAP2ɪ\yW_}ࡽT!weUbɐW9^ d ("vڮ鞛cE |"fq }S3o$K%zp 丨Nk%&R!I}|ahhn?UDK{Mj]Yk?Z/^Kn~-< @9`׆C#| >W&haN\.">Zhޢ/5hQM19a@iP(aA9m%94bB<}"-@QF_Ϲ2ɱyF?r+ב^U.%6l'~m|RUMYfhŢъ{cHژ󼬚uMОyǃ)%^OhZQ}riM4 9>*p BrtIDo$v Rܮ3NŻ- j`:2+|]k5=\2Eڣ*qx֭= ~Y,s^VY3g0C iD=:IvZ~˰ =t2yI`VKJRj+c^͠_AB6ہS*м7q{,[:i .1L XDcipCū?O rpZ]Cd;[c%׊z3@qKғm@4k[DQw43c$0 +?HZ A-H}3.3Ѫ 4R+$ N1iQ|4b:2^GǜaFpS ?aDλ"^k7ւ,Qw4}p(z/RHqe3$Z#.e=rff7pAg0 E?I\OSc&"63FMH>PaׂnS4OnAJ @J)h{^*K!xLجמ>EVc9-9 0y˛iWE `uUb+G=,ބʌBGIXӍzш6}o}{Zap"1(3U)@uAQF/?ûkk6[ \#1ֱfduZrhCe"; ۳b SK;ҒRR-n% ͪ mx Y:㴹j|FlFEvC}v% ͗9QDs{R ̿ Ἵt)! rl/mYb{Oŋ,[6 MOdJ}O;^[*&Ѱ= F%Ҧq~zYؖy;[I/ B>3CCx)zdM8x>12L[H/hxu7cc5w+t(d` oHLx=fT>ylc=g#zbRM M"(d~t |w]" 2~o$ !l?֌LQnmZFIL#[^ I n'Z"TWvҖ 亂#KεNBH~+M䄪tt*XyKo0K+`:/[$LYt6Q&PP+~A b:ʀ|{"~W:֌V*~OK, lJ)c4fLϥ\GT\%Y ڌgovP 45Ohz+>S)C]b_q}*`К"k9/Z`XYjPJRG`]UmFNAZzc (ݩJfK*tlAi (XYeQVO)_s\ܲS盍m`e+&e|֢ g(ӆohA{)@Q]=x"=U!6xդdvoT5Yƾ9z=fɒ.)_:@ͤhx+Ug= =pɾOm[W vj :aǴ g:g:R0i楲ɦKDcöS{@7LQ(^Ö-N= v*屋QSP7$rzlEh4'?-+O mU+ۏR%f}*Qa:}y@m] 1߇`)} wmt5:v|ʃ1ˏ*JuIKg)ȑ.NqzXj8 eʯTY+U_\.ٻDq(# _2?GRXeժ]t&LWY&^qQnw^FyuN$)XHjt,P TÖ=.%;(j)>||,g@P<rj2?J%`S'"ECwK}?̫e?SSP3شٯx67f#4R 5 Hr HF&XT8kdDVPBVP%F]646VX9dʭoc )f0 \5ɽ9c@RW1(D*{{ ^PU-bם3L wrt$alhe>q')% kn1^8k+"P#+=c44?h72$0-x'PsLR?ov%"kBJID %`G3\K axh7וF]i;Ɣ۞6pJ2Ylw,y FywSV|(,q?g;ZJdgO6ӆbhd*>@Zֳ8hZYcX*ɢFd{O$4(|ם*t0ƴQ6{vJ+7Ue8ϫ|j)-tWٱ6&Szv i&k*׌|$9|B&DG%!58,,L24  H5p9k./kKڴR[5.&E- O!>2qXv3osC4od4!'B% >}P|~ChyΞ[43H+}xAX*}޵wLI[co#Z!|#*zna&0~ӿ@j05PrwLCW&Jld; kC?~O65 VQW- He0˿3@E2vʎ~Ȣ濤v qVC6UaSI†YhgǍYIةKʒFE^ }hdR 5 wD=BȚJ#0f!I 7_`Αl{lܳD1C`@ul9Wc]b@ӾRNY@ )[nQ7xpٞA.o\~Pf ɣqD1êۢG^YzSH@bDGABAܱO',o% 7)UӔAYFw y*[-oV,ICƗ$EdP2L&E.`o|ocIuBƱeĈsJc$p@5q0SOCh z݂h[}\pP7.+#/EC`~9gTM^O`믯g^xM˙j#סg{PE\>`10Mh ~cFH-4+"o6lNƬ~}Io6V9\v!$&X޾j]2i=L6 tڸ¡3%g;f62J휅INt$ OMyw9%?N+ B0+\)4V`"W%bx+@f_Իᤷ[:Y0vg8[.,k ipb!"[5Ez~ͥʖцh8]/,\ZB+C^ASDe;Q &sUMFM@e,+ Yה[͋$55auUߪЕԓ. []h_8v5쀄m|V{2\NFLۨl??K9Ho%O*c1 Ek@܉ּBRD 5D9%Z(ˁ?ؗ2b U'Z"[Ti;`kU>4~Ux*Â,]IU^]֛cfY!(Z7$^肟K2,g= tvO@)yh)g.9-^M{aK1k3@ QF[?@ 9NwX;M׾+LT'VL;a] EO_*of>?[`4;ו.u1?4y?=0Fpʴp}eJ6ZN*sJեYQz٭@Xu.hHOO4ȂR 5Π?#Gv4M3dbbՄa}2sRQI= QVe[ 㧤"@m\crsdhk1uYb,v8}9ƎnT`W\W܈qu;@*pt LǃGx݀1`E6"+k.\ ֎{#VUWKҨaō|_( sa&G \'nrY,/&H6&r._<'܃fݎ::ǥ^d=9z7 "m6I3^XH!7@^JӮZ;{ 2^jFɦjN|S,%\]UbN?-3,r͎ꘃcdx`} ڑ"P6 G_dKCK*afk\kL>̼y)341XiP`߂ӪBCmKYbQ6f'XDGΏ<%bR?/&\JI+_Q̬ Z 09'1FQ{<~^sI+j;ֲ{N)}k_ GIycGcsq~{Wﴈ/ȟYSku &muw|^R2M]%\S "lP}Ǣic O\zNv%v{u  )~V]0H`'G(C7@O{CLG +Kꢄ{€.ggؙrzטFGdFC϶m{}r0|/2`UJ+$spD4@,Z(|BJ l:**|ģ16_vunD%Ƕ׵fȣve?iq8ַ1KPûQQ>VM#jôIR{KyZiBq>tL\y٤2`7Rp, 5n@?e }Zq z+?_B;1~OhKdB\}`9~ ^>PrUl5ޖLՄVF)nPPEbGIV B^",Zڍ[ogrfv-SЀ_k%- 쓄E}p1Jbf_?MkY·0EE*3Bz {}nn^myf/iň}5M59LR6hp\)}~M[p(> QGRϰ :03cUޗ< d9A|{ űsW2c |$brW=S__yu+L?ea3#bJnǏuu>ڙ)q2Oby ,qFsqBPߪgoԎM/$CgtFn( LkMxBO15P! ]M;B~P 4vsŴegިç:MƺsG} sҰ} y@5#x/,hOW/q! 9r)%ocxo" juiQ_U=~eYK8&o?D">VQ).I7={rFq{@p[J[f5(Ӷ db޽Ϧ*Lz1nrOT3AP%89. #$4<7+RPHަ*Xi8x 0fXY^!X5|&33F u$dw~7U929zp 4fB0-'G/F$Bn^~/?B[% ܻ󀲜$*UPQ?Tw${'hf.=tWhɀ=; ^5,D Zu8`d0,7Π/1TxٺncPǂq( IK7`6xv^t% b .HZ2mZtXuw(:>^A[fJ.ɤ/^)P21j $VzRNG{ 1ܶʠ[Ct#_+G\Xp׆%S߇WO;qM~}?\XdS};"syJ&P'/_M!"3SewqL)u@U? NCgEeX,Wq"+FOArϾF?FQB$TH9ڬ/`R'Z&B$,vGj(afnS\S%p*իMkllL;3uxhjDD{RBd ،!M0#4A,7 <T5: 8/H<1~ծ{c>"d˙򜔀"hKBqz/,Pe{/=t]7ފ)+j5Nooj&{Tl`}g?D8[Ah!pnyM.nC6'nEy2^vPy\~O4y~M?xo>Y^Th7/N&\'()Z ƞ0ND{{W!+ ɷe ݏea_e!o4y)2b1 ӫa!RؐK:VM^P~'nAL4m+}AR | >wqN㐒$ުG\wwX8bskpgҠ 3%yiYrVP>8%./J`5ۓwQ]fqp`4?Ħi&^`'[{=:D:8ׅmfFɿ!>Rem:PuL ^`2-f1H΍j$CYت+¯UCY(j$V9x.d #]~jj$+~"]mcGՉJ:{k,raEa>}2UmPPIli^2K9{DaFrbL{aKk+qie7aiY,;VƯ=&nG69g+iq`;+ к)Dy5dēBqkSq9r4pF}`ĝtIJ&yY;P~ӣ熷Fu9+j[qop .qo2it5" iwcc j/bO O*ht?DWkGZ*}Q#M*0/ tΌI;3WFOf+w$?%|Io:p~TK' :\6"L6ΪيQK(e c4߄me7`)I}bټ֗ػ*aV)[vH߯@8p !C[L^_/ᇙZCT]s-{'0[9&*,S=X=' & x;F1`3(#?hH(i}'5QsCe:0U]<Ť2Azc޵J㲭'j)e;эpf!\.agLJG3-c d:1@$ eB>W84}O YVCӲx_q'ݐArkxh5?iy eMe!S_ DZh6{?%S>-x3EM}⺅$'gq84__lt ;n>'D2ǝ"?znt?oSA<4@ nGծN5d(ܔSvkHeUiŤ~ccI83%ټj-*K__6PxzBiqUvx=WjWD # xZDoXs0'hHnm*;ǁ Jq٣y$^I~ A[Hr0Gӫi:mOZ'శK5RdI5;GvZB[ɍez`.0>d'; ʰ|#zN;& G(R^"۵|kؽѤ22k>T^ce*աd% GQ]PP/+D8SCI38Nr/T"da4a;4JtVfٙeՄORljDZR38IJ)TC8,`HNcn&4 9Hw -OJ=^{ Nw>]CE@_T& ˔br=\5e_tC()9q;DP?װ:V[82(uÞL$s{y)&d!0&XO]uK\y _Wh.ni IKo 1y 5_.'Ā+'8Rv=G6mW󹣠GFl>ꯋVIx|dfMG:Y3?_'ɿ+h3/_SG-Ef^B|iaY!KO܆41gjۣ;812LhPI;K{*D"^NˡvMmvbv=%qNR 51Me W`1 V!D'A jrnlC( ")-+R  >o]+6&ͥf7"a8F|װW.8* #˛ v:>|Z%'؂\+;˹e9!6[eQinC%p#)GjlKņymYOZro-3~ZbDف8|@)I_VOHŲdjT$:Z+@&-9>6֜M {|8zRqI7DJX,&:'3Svr`RFԿ *ܗÿ;gR-/̯_'S x`Ṿ؋Ro]a|K$dxBʓ(5KG 岍NB@#q5qa kr{^Sa3bT]aQkA*lnVu_p_̹sJ%h 2Io3TcVF%sm W%G^5VAdXX 8B- A {Cn%p]h! Jc}fb"-I%?oGc׭ȋ9Te3Ee۵RO8K=asʯcd&(aa4yK0nJ >8kQ!ÛGh>AfLL}$4 3U-4w+j@:zԅpdC΂6a1A\@aU10cY\iFd; u{NnQ#'w)6Bh*Gyw"c& 1r9wNR۶Wf\9jEN)B}#bLׯnTh6mNjGT)H2@9 O 2qy7`eyPFO$oO?'JoS$2of{%fP(qe꟮J^eyDn6Pgm~zkT#}L1 !|k.?-d<.؄p*.ٱ ρC?~S ۮKRj>(]/* YXYL)DeJ[A_h-bfQ!-}#a|w(tpdzFWvGp] e.FlAu%I0[T+KMIfaxUh zKJ2{U{e|33%4K=/ڏh~Vi'}UOgP %NI|oy^:w=eگ3Q8CD ;Oi4~@Y>[wiS:[~sN32V݁?'bKpYRz^Y rcla2 *5flhn(t;083,^y@ 9W:  0Glⴰ72N|UQب 27&(4sυ8]47V*[c-IadRHh4HuQDP. )|y>|GZT Ѧ Qq&DVБIA&XS% ̃q/n2|5Zc52⍗}`]VQF SQpdw. J @#ĮO7գѐRcM5\xCEVй'B L(<Ð5;uҩBRo!t,0ft"H[ AEG'7YY:6]45X7 <LP9eC 3NꭑQ싋$Y|kJ(0®Z{74t5ϡ\=<@'IX-,E5O!(z)^~Kq!'oS):8Hת#u;ʗ݌#ʩa/ꓗ؍-:ȁDj!u)㚔AITˍIXi<>5!*C{'0Pm۞ݼ(C<-3pgG|BG:Dl(~⟀Ԥ ϟ$o"4H+%PfS"LCY%#?ӹL+Lpy.21FqjV&}đ,s7MEPA9_W-k񁩺$g*bP)ӟ>IB9yny֥ o$J_:cqpa<n!9 XFr1hGaV4dgCw l8)MGۘ+y삞)i$]w=#/fyRns/cS31]ʱ,f@Ц['V/A`uMW%|֎MoJgG͆(r+L/*T3Ehڦh/ 7.{Ř-W焃~9sɰ?OeO$TV i\8&_tB.q8_9uVn҉ܐׄ'|=2ͷQs'cZ^7௝ q$+=fx/H8j ]V4bf?nvX",QU~ Ϋ)#c덽ᆪsoXF1<\jpJѷxǼc[hJzZ~6J⬰(Y5P )tet&jL%tYW= Z wD`[ ThB}zK5=+˒ ~=6z' {\ưMZm=G? P|*W&]UƓmbLcE~.~ZWX{ H`6R۶Y<:E1la:|+1W~Uij :V* ky04 $Q#c$!#s98"h3aֶHG0 6`R;%KɁs 9R|: i0N1|I HHͿdq%2 Ϛ'=V1\/Fi#n&OPPפe(p$!2uVdQ[x!h^є^N[ĕ% 8  >Δ9Xz-2kT"A vvFbluرp,AGbwY*W-2X͸Oǘ_2:@]9~)v =53o&hmNѐ?`4)"<3K;,R a衃8wՠqƯA.(H8H towS8M4O=Ι1m!['jFhqPqȘSY*v>ZTE3'_hްupzXgkr _v1z?~#¢7;i{/{pgKUy)e37&`jb\D,~;ڑI6g'B[gj0v =Gu$*YX ~e:S-FN74s5銡1=PB AZ>=VZoAiZSXO0辩&M$e Wgڴϥ;UZ:!@EU$Dײ,9ۚ`zCiI#:5#˰zÂvSʦݥ"Wxr{ Ja!=H@#쾾]ձCk$di? lO!3L| #eTY?-s$|ZL:#䫤]4 ݆ ҀGkPxп8oyP8!Y~uOPWa#7w*ȩ#VY|  YWLW2/&m5וDLf&}ؖd Q*4[Rn5 =y$#ȂV#b)$ zSJ+UmL+aO]"<]"Fvڵ:l]?f&*smjƎ,ʜ617g"5(2̊{rs `܉3,̆hHʹoIt΄l0޵(ɦkmM^c{F 5-5jLqoOmtm*nAqQN8!Lf/# AWIcw_4D376ʴ=AHPhf^[j mx{WtHsSI$p7q|@}OGQ¯ʵPX~s'1Y+aH_aγ@!tT|esiPc/%A#x|l}Mq'h_o iD:7^i\gd&r-rcagEY=k>jʂRLydv$1Ls1LC% -FRRnI-8Q ԍǞO=mwx S@'~]$iAz/#T\ dQ&52J/ixv%4(i8JTNpKe@ݓ_eڼv/|:_q}A.j^EISVthg_˻MW *&нHuGה^BXY8M vߑ{?T4̻񨙥;LN9o]k"rrD#d2Awh h U kg6='iWh_s5X˻sѸף .`rXϵܧ M~2D_j]%v,{d9ďK>cu-lrc?λޱxוȵGg)}7 EX.)r]l^+YpNT$ȉSW7IP0Fʛq\"mCRw20:NդsU5 P>xkjy0x&gJ h3c]⤡c4ҕ Vlq'uC$uJAAr(ph+&Wwx_d;˧f?D@puu)ʒgIT4i!!6-[vD7/w.r0dAL٫HHE[^̅uq>a԰6#q1_lVzs& n|v$W اg56?3Q~"׌4%HYtծWaA5c@;xE 21,Tڶ*gg͏pC՛•V :Dľ F>t6W0an+CFLl|繖w$\݋֝Ϸʏ$eP\KUŶC|?/rdhs N!/[O[{7Qb6u4Wl~򜕓Z3˳ui&,ٌuqKFo8V+ZEhBf6TRh(ޭs6v ȩUF $|xfa1x&NpS*Xppy{TFbrARV*u.iu(!8!6G(6xl{L٠[(\{YS~OHj'p {ĿJ6J.]]AMEƐvMՄ`:]n -j[<_FxN %EFOBGI,'|%w/7jUك*\+Ir˴:5vpcTCP7ʚx,Qq6|Ē\4T~݈ye$n:H"T͞e، wj$Ѓ*X6w@٫{+`PLޝ>S}ؚK ^k 1 vqa{|Z?(48n1&tŧ{rrCzh,:+Y?^ 6O֡M ''zjŒSVE 02::>]c4 ;ْLqn p 3ܙ=:p5w[>f(aJ>)F. S(@i9BG6 07N̉wp ze*UX+h4˘KgY GQXT |vYlN$Jj"LSܝlk}Yniyrv4T++0%>Dc.^OdXaԺ=0\6]^rX'D?xΖSp#geAi)??$AA ZH_DGʌW&PܓV}؃2~w5J i [x-u3/;܎g4OP6R\nx+4=G2,xWAxJ{v܉R(8PO&j;/Jsam*hwksb~,^^T_8-:y. bePb w `ڶsok;rdP+d];i }=hPڈZ^:m| 6~DsjAZ8IQU>3>MU/)%Pܾ❲AZ{i2(ݣZn!U.R-6ITؽn i=!7$NEO3GR޶B,_ }@!FWICBۦ> 3Էqe\q>H#5Q^5d6CF{b<=2ͧ߭];}QbmjՙF p_~4R$ oj1 иܱ@{ygN>d+^ģ)ēr$; ˯+Fl4#E[s A. @Tǐ'xUꦧ2Vrvi^`¢z;R 7n~ Q]Y!\@ƍD9lZ^i_^'4e]ґ BɜmsUŪַ{ڻ?[z4 >[JmME_A!T8,ק_lfbXN5ScQsL3/-1uu}m^B>@&Cf4c1x><ʳ=&FPNGFDh .E_WdmurvZ*)pyYt)SZm\ݡ˘{*xMgsug*[(|뭡N=‚4d ‘ؤLdZ9]+:.zsx~Z^[sגnwe]6^L:tgK@:1x2#F5q\B9J_LKhK{ eB̵٫ʺFZ~ 4V$#<#.;gQŽhpz9a yH@6]rF,1E"LؖgR?FQ@b՗wY9Q(Nܤz3C`2\L8VL{X\zH0gLтp w<~/m6壘ݓ6 ]eP;A%7{AA"1"pE|6@UۥήB3L6wV2αRE;lC;dFXd !q/!k8D S T*@&ub/ b쳾&rNi_g|uf4kzf0,dPU!-560&W`I=K&A1{pB945;1WP5CdHM'yzxRafWU9 v\Twku<qy^aGqmEֻobCBuZ- tv$W驯]CJ7?2kun$ɽzߊ+WZP~R~0 \CG<곲V*Um iq1\`oݣU>Ae7$ EH^0[N-?q ~[?d\yE .?0p6q$G6K!jdRDֆC< xQvβwY*a<-1 nt;FTs5QV!1NMۍk krFQiRLrljt 7me,0$_LHm88%'fݽ_zzcll[YnupB!'#!+6/)e5'")u]ya<8:)k#;[/n_3 zI&Z^b6,]lpJ4nR 0n J _ *F`-/_ ȮJF*TW\$D&d\-RB0iMTaD Abͬ٩NoLssӮcC\3|OiZ^G♏a%Z4ĵLs~NJ|5 뮸Zd(Z|#`LF.yV z1KNW:n-}bȩK p \r g"i.C4me_a'fh utn߆?1@ hћ/:p ҹ:ߓmP.}dw?9xђC/YGX* CE\J1Vy GUnzZꡮ(' +ћHbwFvDlM^4DrYyݫr81 h=? ٬9P7;RtkhT,}Gf4$1r eWmg+cL4KIAُxWc,X@U9==t|^D4*rZj} 0-=_FCqнV+ur2IA͖ nLNT]V7fJixcwI{L]L*4ѣU0'fNQ"d u)E P."Ħ m^pi+S -9@= | PS9D:dJ" R|SPdXL(NF9 E;$/QN{{[9a lqһ\b5ʹlj"|y]G.گ;ݵs Ȗ[eP^Qk[3DSǨ턣E&Єk̿T`škն1<@JGKd5':׎Aj۵BКDPJ\$na4 (}9P <6}3%$Vc*v{f0jF +<1:L2'5PsnCH453恮(F$U͋ 9ܳIaY־!u2D3ԚO<_HڗI_cT6NƍIn5q+*]IpFYz'uěa7YRd Nb_md^s命>{|`pAQ#o`D.t S) Yz1MmWg WطLGnd2!D˼X~ vR4\:1ΕZxQqc{sveY. WC(3BmJ]?/DҚcVz(I?s~C3K{-TiA[ LRCBA& Ez/di p$ @|p3Z`[ʄکք$ƍc]əfVO,'NͥԽ[<R+yW)Rd3> wa@H8JrRTh]×Q_3C}lx _Pwcb3-|c߷\f6Id4uDXbaf},DC=UYd~c̘W?5m$(#~cEDZqE3)~QU-P@l톧#Rrl`\rzbe&wJ4 Iƶ RsAfa.1 %AÈ&#M{Oޖ E~.u&Hm6R| *GپsZLvh@Qo2CIR>KvŌ y^j `H2vc"aH|#/7IE^ȹ""N>z޹ͪc' sdbM',50k,._.poQ='9A{7I-:z{=y=ƎKax͝oO1'(8* [hhgb[;(pe%?(hD1XsJډ@+;FuQ%Aj[7ϼts+20cȀLbs^4Cw]-ɕSl)&rle8yK.±m='CW7I"@` xmhd!'b&/`#!]'4cSh,%Ւ$WB~4UAEESPŸyz+#E™|o.chܑ80)W7FL˥ ΒCd}um`㗹Wc Aj˞E}@ G{p3O,CFM3ts!+ *=,V, ~NJP p s Pbp Pq2bU N0 tQ0>kVf6udD_vzș V}ɶ<};2'/\CpE O-vh6^8d wFu7귔B (vg%e87 oTc /0gJhNj<bɳ"gAX.\W;1)s_u#U°qX !Q-!+ 5&{Fʞqj%i]8FAΊ5Vn av^?!Fe'=:i|GUHPZ뤻_N^=]a?Ug̔ r'XImiF·ϫClbL93ncy$\by.UCOùuMa=Ԙ6|ﳻX._)cFQ/ Qź)I@[/뼎P s" ېNý]枨 JtѰ@FjVI)E )6,MC#jGtEP>As5d >@aX9@,+tOMA;޳LZaanQ@xubńP_N2Jj~qp1f œ#&_ /Xcu !$>y± Xƶ^Q⏝jܐoɃ5i:؂ gOd !ʽNP[η71$&*hyIGږ0GJ˜*ΡhP>|vѡl~w\b5t 2ꢷg˟]BRKC`zlNnε$;d Z/aIA22' -'Cy|˱:uW:J($ǻ8;21 'US\O3S6i&U Z@Ne,u^򚐀|BCQvq.ukY8ݑBr}ażĶ=:O=0ވ. #ܝnҙ:~AVA&&ɀH7x}QdIVKwR{+2$Wd:򄇿׮С7JUz)b ?- Ђ"][8_4f]1A("8J Lӧ'w(E%ۏmQኍKgցȶsi^li*"7GrSK}QnZ l&;=?r]wQ;L]6IPt&6.0)'1%({L5|'LDWE79sW[z)J*(ÔR-CkfhtH*0^ 1B"Ud[ DĚ̆ɳ{]r5?~NqIX#dЬn B`xv7/ !jh2N)"ѿ#Չ9_8[&K=0=%Y-lG:Q\HEhjfM I NVL=ޝN{+|k*;5v%yϦp+Jx⦣Zm]H ⾈UC* Z qZjL(Yb$.mN"dq3}J %;f!N[%)HgZGQ́Z"*p| e?>P(n`[7IqX>}9,2"Q]u,Ֆ)lxRVة es\j0":d[&I4P4Jl!y4E1S7!)gQӖUGz 2aaff>JˈLJ mݛuEzC73l&J=~ @oa$HYϜw:@1A $ F Jɥ! ^Evy8^4Z\'=sW.S{)&l1|@V!uھZ"SҞq>޸!}mhk^- 2((Cg1i:)Tiڋ\D3pp\]ߢҶuW=5Fs,FR~;zV`ejƘ=P-~UQ& u"vۧͅ;{b<|*,xL^ASB۟Actg*$x_.E>ʜ@;G3)9r"ӂN>o5߮B%&:&/ug~G!J듼0f$nɰ΢!w#h>J^7v4IHmNZB:GMN!^d=@.O-O1Zq/BZ!Bbόq;ɷʱ7am)X6Sz7k$# U\{;1$^xAx'Q5"!Ji;U4f-`tFOSd -IC6M$-s@A]YJU9\$;7CaSk[7˧^O5CX#k9ݟEUs49DSiO4 +caW/wkW<0X;N_m ~!!>L\b4+:\\N b(sc#WWj;tܜ؃0v @`sLv̍s<⇭d:?==pw-=7x9M>8&"WW%]q">Jx7GĂsXukjAt;YPZ٧[e}[ZgT+?L9aݣMuߎM!síXӾ(xǴRkA%&=gɳ*9Y10TM 4r1%+6}s'%lT̳@d\3ZI69fs8Pgen\'-tehJql UI}5vdRk{tsvGH/oJS=3ɯE "J[)]0,چ^HYߢ/zp睸f&Y|}_ͱdlj8A.Տ5 ptFgr[1\}{pG$C\cf)ζsõѺ'f%Mi3IZbpHCȎ|*94X_@h"Ε2ΎEbAy7;~xRށA%*;!GJϱ#DMxX_}|X&[{7.MMm4IWj:X1n9QQ0ۨIw EKCNP7l|nߎ<ܩLN TXQuR^ՇcDdB-ܦ)&X"8׎G8|>sZឈñ `q(H'n oז^/E"܆=Cqa9GrK!bx^I$Uy. aſXv$w1Q(E19fy7/WRW+o\]@ o HU,V`)v5@&K:D{עSQQKO%iB|W^Ahr@O& ¨XKu_m@VÅxYju|3_+Pk/b#(Ѥ+{6{. { +d BX(TquKZ?4"T EJ5JOF $ºnӦ!)fnC4LNnӡXie)y㏞󒙘=~A&7߄4z'@wyCŊ/* g@ԇG7T\,nSboJ. "4).{rxL( E7yԈroPhK|gL X:IG@qafıiZ[^HfA3vN䱩VaMal]@`Sф~?8e5;h玼 r̾-nY?3<7(WUYGH~dž!$yUuA֝=L7~1mc^7G/,S C(/(ȑ܈v9*gҸ d`qdj"i_ʽ'$]Q~& l U׏Ȱ˚A;64hXqJ&$z-[>)+ wچRt3tZء6Zx)s%u&ѳB$g&P) sA.dh0J?Qbш_ͣC"nIM~EVfLK@xb8j: ?܇r$a۵s;ȹ9_,LQpȚcӜd[ap} tl vHfYkm;L˼b[g-GcN M{ Ni:ҲJCqa0W:_%{}8_slPP tBㆳTH'T>~kχ!tBFigRQ_:,g$NJ4e0hW8"J -FU[zBĚY6SZ{i1HDn7 UkMJLjXE'|բ _Nm!-+C]7M L.^z@3~S@ltx騇~9~gaŤnA{>?M+e7]_ŏ,A/qՉ-ȌThk_a5š?(]-H 1iT]@# `#= שH?>Ul@VidtsdxBGDDP_ $ pgrvOcOCœ.x,Jy`BtQ5t{76[oOL]F+[pdejCe {Ww~COΛNddM jX~ַnǁXeoxa(@ ևNu@FR? [ JNTùұجx4Hz&b.wV¡ {O8#dur uߓ,؍  #B )U`ſl!x!L 6#?^@bȰ׭$Y6ZME` uC?hⓥ5[ 8|o-|:0u{g?Vkl?f-n(9*&n4> u]ҥ%dS>x9Hfh *aS~W[,1@ٞ T@-ҾYEo($)*g?o|iU֎ђ ];Zy2|S#Q"\ٕ/Ti؝ ,bkP"(-4 n# ee*zlܩ9d˔BZ4u!\Dܕrt}IÑX+7V^ͫXHD+p0/E@ 1;2/-C`w_= X+ehZ 8<F." ܻ+?WW̶*/ju[|Nfi\(lzg5G0=( 'TRθ3oGQ)˵KߑQv$t(7'3G#u:BXgzÕvA3}o!Ɔ;ZZSso[3setVX4_MR@Bqo0ȆRiMi՛4ukz++5ۇ׃dF9~&oguWw҇K#oN{#nfi_DQ~MܵaxpdU4 Wm=TL}pMYaIԞY[pIveX/װҏVds4e{/ij6 $dFn$PbxҠCO0ےt&dٸE=N9TuOrBH}-`QFuST S6~ zi8idž*4 V]S܍.lAMʝl|T 985C3vt -$Ċb*f[m{2-gHA&QT~stYU݀R2V8VtN5ͳqI|]-q3Q.FA'n _,&Xc7KlKZ X).bkorj-}>;Fk ( z {-ڇ^ t \'6Ls2naOQs߯5l*UčpGęUkOMOqhK@^5e-wyA2ZL2Ggrv43dǔ ,593ugOS!"s[^A)(Ym͉i3,z3́>LJU!VC]:ni ]; "2d~voUκhg E*bon.v2s5ZYx 1H/5xY>._OG'U3k̝FSZۏwy"$ϗ׶|E; ;hLul{MӯS&X]\?)3!)~+ĝAV}:x¾O;IJH{f|4~6K饾~褘U_zk*ⅹ̈́rx[iɖm?faBUl}ʠ`)0D.)md\ftA(u)tLx`Q,ϙ  IRAL,q3 T۪x2؂>:ϢO]OJf ~5/'%M,Zk^x%qx@+]X[k"r|K{r&3>(Xv#ŨcN-JQUA6߶$"R!'8euJ=_';pzM (< *Hc0nƝJ!+`$`9e)T\r( M}teg}s-8r6DwWE 0 ,ڼ!/@m-n ڌ$ezڈ3/8d ,9IFe謕Om!*0'zyd5j  rw7='#q$ ߆&d3* n֊w FT*TM D}۳zlʩ=>嬵: $ZtcdDE9nnF[k̭̕\[]A bP(Ǭn̈́ӥ+pOT%u(02le {%+A":g@D(?Tp3{kH!ط~t]Y LGџ0TX+a}/G )SPa)zSxTUcms :xnkNXcSc\#cRyjʅ5i^qN@6}FAiԥ܀M-|r(TJWG(R([ ͱOPE-;?Mo^0Ca8MQ"5+=/Km ,k%MKebމU1g~v[G3M(T=d9Ez@=QDgwn|XE9 ="RCp}H:L/pܱ su”^N[˫ZJ3W@>|$b޾7}~.;G^ۿ y, CEH{<9x0uՂӹ:k`Ys~x܎w X"ٵy͠"hv ة!v=/=h).0qV󫥽iahms=*ͳ}\ Xef|=MiF*0:VurT &FboPh; 3ˉ?߉0`xI#bg\8[Yjbs! R0Þ'cY}vwxY\x TTM#&ʈڮ AY+~0t2KtBnqħ{fz5X༥S)bʛ}<W}h֑5jQp0Kڝ$ "؈DW: F!A]Gp$Y?<#af nuLV_G~ٚua]FĒPBz!S"HTdB]9-;f8mr#՗u͑i#D NsgmI'ם| ̀#aU.MƏe+ھfچw&ESCyQx ჴ̯p^qLi_C 3x ƔO94|Mײ:$O,3>Jt Sg P']$bҫ/Gwx`$; SZki^8dvMQ $\2ݏD]՚颁FTxGWP㜶X$&D W >uF"}/(Y4a= sWk\Fh㹙A3Q~RV٫1zOG8xG )TNldm){'F,1_v2u~(*msZO{0GZs]]j)q1T ̐j q]sU,Y<$\k͒Ig<bWIxs]s TIaQgAR,Iz{o B|pQ]Ĺf7A?|¡A{Od0MT,䜓]=z2W-c{j69+v}4O>5N6< (yva~N1/D)=,^VHO=THFܔe@uri1yu?!8#J5j?""vj*Acv.6WWXiSQ b_J/;N)^ӏYGh1j8Ą y-)838TJi-+C"ƮQ1EY;%Kas7OP 26iUR9bKZ8[Sܨu)0δtY nk51(gcLbhW,tm"/e^9hFQw[{h-I[] ŊH^:w94}EnEzR&Lr懴U“fc'gy?iazƦzp|Q-P X@5 I8%zFN6s;7뻫aGq1 bKcDh*e= Z8*(4Ź&։t;wb H-nIYSCHVݬ!4QcLN;qt澆TDqn Lb VƴHڑl:"ܒ+}DlUMWݎjzB|.qf,0ӱuf`И'4^ m0B>!CqGM8d ̀^]QG_ fgz~3d.#rV̋im6\ryBwhZk 6YR&v-!Qb(a `y0SE^Dyv0n`}ϫ4g-:PC%<B؈irkeKTU,y11Й@ͬNPT#h)ni~Tj},AO²|yz0u g  (43V>AC)1ge5&@7?oxSӜ?a;r!"?ݼJŴ2eZcߜ4Ʒ_M. F92׊x&K)*l! ݈  w 0xG62heDy$2zgaO0T>+p!!2P=XTKPV-@DNڡLl#dg=qFCC咫̞ L^ur) X'˯[;z&͹GPȑʚ]ίϞᣴ`dgz0,IӃKYǏ% Z:ׅg}9d]yul= d-دsݓ|]J$ȉA[(4k#Ige,N?=?'0|GN!ʹ ɗ"*sr^AL1*|Z5ꄸpYcsmAICbU)P"?T&`vM&c t ֳRPC<;@n@ AgZ?#Hf͐MCrtMXu^f8Ch{helXICZ[ǫu#7ɵ{xu?R7^+[2&`0YRBpJ2[4V3+> iPL $xydxoH9gL&͊h1uUsKؖEz0:q!>|W}Ssg*(gw'P(߯嚣55$*_* d? rҙ<+kU1 />T;n-Y> ?"]ƝTt<~4mL3 b3ểmOb:~yr~*^iv׮>fl7H$|_0{ٟ=+sVi.Sߏ/EbskS]ū\.~Ho%u k_xtⓃ+ɯ!%@28:̨6OGZ(䇃'X`Űir, %66QUhN'SJ ٬ qH0IUNhX< [/ock2D1?&99ef}6f=Y&&XX9NXc?0ފz`/QZI|x{K3a(YE)l)_{wH?>~M E:;|Ug$M$5IL?EœVY蔞 悪jh2ǿGT ?طIv 6,So-2yJN}xN ?~1n38jnA+rExdi a(51IwY@8DE_:W.|( 7&S($fMd4_kxJImk&pE*#W{SMxg&7~$}T5\@ܵm m}zaE̤W8yup9x#!ԸJR8xҾ!;0Ҭ~6x'S`tSJx "]~ {% iqjlD𲇢E%ToMh' Jֺ|+L߼eRL :Odi1S,?/ly'wrWD{5TC7-ef6hr> ߺp_)jFsٟ۰EOz&E͠Vx[MkKH69&hoJc2 Ź #CZF[Uo^(] >8p@3paxhn >}VbDE::U(bYةL-Hhb=v=bwq3cBW-wv. Ng S]?ڳxVAPK3F8Rrp3;/345徫{õ (/0T(3`vX"rxUVј#*Ss6| C}1z@=(>W+(͵im .Ywb*,EpOUϪllT")H1O^zh W$j2*ǗUJkCM|*zk-ĽdΞ+f$l*DibW,=~8$Ǔ2/ZE x#: I#.&NDF]IG\LeNda8ߣAԣجswt%POAd:$7;>z&rhCG[ / pC~I]YcTHPf+SRȴˉ m-/ITu3];/<3 Ƒңs86rz j´*_'r5GU/ ^!@ +h`oe$WZ|]¯t(ga91vCSE[40\]jY!J쀄yr.0酊b0T1(lX 88=[$NUG*Q;>6 O' 7=0L&-`̶l}R X t/o9u<4f<.\actΉO%Q-e߰5B<,,? }q-OԒzkùx&uHљ=֬D70K z3ϬrB,/XOӂUvQ,ܽ*60 ﹪E5;QjQb%ZR7dl9J$'AcSh%]f1?PNKnY)+"Pd}v]nM^͢7%5iU~7Y4߮04;)1^m͛;432J sֳ7_[~oB-"Bם,Z~A0A@Y#P /[KVǞq:00#.p`n:]A'ټf&w09nH{eml-EiT5߿.׶+]is4Q7?B;$Ȕ︠4e@Y%Joﭹ [ ϓY!T̴|=&uT)=WmNƻB?)P8yr@8̌bfmug FI6$"Zѣ"I+T?h5!1>c-GrAdaA7H#mPZQ锴 FP5%ۿ,N  ,(?Iqn6H^HtK_(Y4cpF+bX=]ee\SZ"5?Ŏz],ݩF5;/l7~tS=!|1uઌ:|תh5\IG $Bhت ܨƵ;U YZ