sssd-tools-2.5.2-150400.4.11.1 >  A cM-p9|YE0;bt >>w*xC;97o[{{^Y^:Vt'y${'cqTFҪ~!v΃iT'al-f= Q/&Bʷ._'Jz])vD ?KAQP-oԉ |/},ic#0\&F uI9P`C2fpߞaoKX-m50599a892966a2692d2e7d0597ae3d7e0e1504c36872046dc48bef6321acf2a13ea6dcd46d1cf199321264655561117c4d3604ac2cM-p9|$bs -#lvֵ7, [Z3>mxܙ,&}>JCeh kȀ;vb*渐mY8d|P=GEwQ}M3H6cy4f]U1GCl@T k~Ȗ\|#G㺣CW/Aav^b6᱅ҍ񐜈{8Ns O 2c3p =1 펃*{T$>p>?d  ! <+ ASpvbb b b b :b b$b b!"b##)$h)()()8)(C9*4C:.CFG,bHbI<bXY\b]Xb^NbGcdoetfwlyubv wDbxbyTKzCsssd-tools2.5.2150400.4.11.1Commandline tools for sssdThe packages contains commandline tools for managing users and groups using the "local" id provider of the System Security Services Daemon (sssd).cMsheep27SUSE Linux Enterprise 15SUSE LLC GPL-3.0-or-laterhttps://www.suse.com/System/Managementhttps://github.com/SSSD/sssdlinuxx86_64.x @`-Ue9Mnw'Ez>uHom3g ^`# 3`|3\ nd :OkLu $ ] A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤A큤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-2.5.2-150400.4.11.1.src.rpmsssd-toolssssd-tools(x86-64)@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@@    /bin/sh/usr/bin/python3libc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.27)(64bit)libc.so.6(GLIBC_2.28)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libc.so.6(GLIBC_2.7)(64bit)libdhash.so.1()(64bit)libdhash.so.1(DHASH_0.4.3)(64bit)libdl.so.2()(64bit)libdl.so.2(GLIBC_2.2.5)(64bit)libifp_iface_sync.so()(64bit)libldb.so.2()(64bit)libldb.so.2(LDB_0.9.10)(64bit)libpam.so.0()(64bit)libpam.so.0(LIBPAM_1.0)(64bit)libpam_misc.so.0()(64bit)libpam_misc.so.0(LIBPAM_MISC_1.0)(64bit)libpopt.so.0()(64bit)libpopt.so.0(LIBPOPT_0)(64bit)libref_array.so.1()(64bit)libref_array.so.1(REF_ARRAY_0.1.1)(64bit)libsss_certmap.so.0()(64bit)libsss_certmap.so.0(SSS_CERTMAP_0.1)(64bit)libsss_crypt.so()(64bit)libsss_debug.so()(64bit)libsss_iface_sync.so()(64bit)libsss_sbus_sync.so()(64bit)libsss_util.so()(64bit)libtalloc.so.2()(64bit)libtalloc.so.2(TALLOC_2.0.2)(64bit)python3-sssd-configrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sssd-common2.5.2-150400.4.11.13.0.4-14.6.0-14.0-15.2-12.5.2-150400.4.11.14.14.3c1@b/.@b@b~ba@aq@a @`!@``x*`m`T@_ts@^}^f/^ P@^[^ @]}@]µ]@]@]@]@\@\\+@\mA@[t[*AZZ@ZH@Z%8Z!D@YYw2X~@X,XX@X7@X@X@XN@XGX`@WWW@W@V&@VqR@VO @V U@U5@UU@U}lT@TTq@T6T`TR(@dmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.dedmulder@suse.comdmulder@suse.comscabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.descabrero@suse.deckowalczyk@suse.comckowalczyk@suse.comckowalczyk@suse.comckowalczyk@suse.comhguo@suse.comhguo@suse.comhguo@suse.commichael@stroeder.commichael@stroeder.comhguo@suse.commichael@stroeder.comjengelh@inai.demichael@stroeder.comkukuk@suse.deluizluca@gmail.commichael@stroeder.comdimstar@opensuse.orgjengelh@inai.demichael@stroeder.commichael@stroeder.comjengelh@inai.dehguo@suse.commichael@stroeder.commpluskal@suse.comjengelh@inai.dejengelh@inai.demichael@stroeder.comjengelh@inai.dejengelh@inai.dehguo@suse.comcrrodriguez@opensuse.orgmichael@stroeder.comhguo@suse.comhoward@localhostjengelh@inai.demeissner@suse.comledest@gmail.comjengelh@inai.de- Fix sdap_access_host No matching host rule found; (bsc#1202559); Add patch 0001-Fix-sdap_access_host-No-matching-host-rule-found.patch- Fix shell command injection in sssctl via the logs-fetch and cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add 0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch- Add 'ldap_ignore_unreadable_references' parameter to skip unreadable objects referenced by 'member' attributte; (bsc#1190775); (gh#SSSD/sssd#4893); Add patch 0001-ldap-ignore-unreadable-references.patch- Fix 32-bit libraries package. Libraries were moved from sssd to sssd-common to fix bsc#1182058 and baselibs.conf was not updated accordingly; (bsc#1196166);- Remove caches only when performing a package downgrade. The sssd daemon takes care of upgrading the database format when necessary (bsc#1195552)- Update the private ldb modules installation following libldb2 changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba- Remove libsmbclient-devel BuildRequires in favor of pkgconfig(smbclient)- Update to version 2.5.2; (jsc#SLE-17763); * originalADgidNumber attribute in the SSSD cache is now indexed. * Add new config option fallback_to_nss. - Changes from version 2.5.1 * auto_private_groups option can be set centrally through ID range setting in IPA (see ipa idrange commands family). This feature requires SSSD update on both client and server. This feature also requires freeipa 4.9.4 and newer. * Fix getsidbyname issues with IPA users with a user-private-group. * Default value of ldap_sudo_random_offset changed to 0 (disabled). This makes sure that sudo rules are available as soon as possible after SSSD start in default configuration. - Changes from version 2.5.0 * Added support for automatic renewal of renewable TGTs that are stored in KCM ccache. This can be enabled by setting tgt_renewal = true. See the sssd-kcm man page for more details. This feature requires MIT Kerberos krb5-1.19-0.beta2.3 or higher. * Backround sudo periodic tasks (smart and full refresh) periods are now extended by a random offset to spread the load on the server in environments with many clients. * Completing a sudo full refresh now postpones the smart refresh by ldap_sudo_smart_refresh_interval value. This ensure that the smart refresh is not run too soon after a successful full refresh. * If debug_backtrace_enabled is set to true then on any error all prior debug messages (to some limit) are printed even if debug_level is set to low value. * Besides trusted domains known by the forest root, trusted domains known by the local domain are used as well. * New configuration option offline_timeout_random_offset to control random factor in backend probing interval when SSSD is in offline mode. * ad_gpo_implicit_deny is now respected even if there are no applicable GPOs present. * During the IPA subdomains request a failure in reading a single specific configuration option is not considered fatal and the request will continue. * Unknown IPA id-range types are not considered as an error - Changes from version 2.4.2 * Default value of "user" config option was fixed into accordance with man page, i.e. default is "root". * pam_sss_gss now support authentication indicators to further harden the authentication. - Changes from version 2.4.1 * New PAM module pam_sss_gss for authentication using GSSAPI. * case_sensitive=Preserving can now be set for trusted domains with AD and IPA providers. * krb5_use_subdomain_realm=True can now be used when sub-domain user principal names have upnSuffixes which are not known in the parent domain. SSSD will try to send the Kerberos request directly to a KDC of the sub-domain. * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald output, to avoid issues with PID parsing in rsyslog (BSD-style forwarder) output. * Added pam_gssapi_check_upn to enforce authentication only with principal that can be associated with target user. * Added pam_gssapi_services to list PAM services that can authenticate using GSSAPI. - Changes from version 2.4.0 * Session recording can now exclude specific users or groups when scope is set to all (see exclude_users and exclude_groups options). * Active Directory provider now sends CLDAP pings over UDP protocol to Domain Controllers in parallel to determine site and forest to speed up server discovery. - Changes from version 2.3.1 * Domains can be now explicitly enabled or disabled using enable option in domain section. This can be especially used in configuration snippets. * New configuration options memcache_size_passwd, memcache_size_group, memcache_size_initgroups that can be used to control memory cache size. * Fixed several regressions in GPO processing introduced in sssd-2.3.0 * Fixed regression in PAM responder: failures in cache only lookups are no longer considered fatal. * Fixed regression in proxy provider: pwfield=x is now default value only for sssd-shadowutils target. - Changes from version 2.3.0 * SSSD can now handle hosts and networks nsswitch databases (see resolve_provider option). * By default, authentication request only refresh user's initgroups if it is expired or there is not active user's session (see pam_initgroups_scheme option). * OpenSSL is used as default crypto provider, NSS is deprecated. * The AD provider now defaults to GSS-SPNEGO SASL mechanism (see ldap_sasl_mech option). * The AD provider can now be configured to use only ldaps port (see ad_use_ldaps option). * SSSD now accepts host entries from GPO's security filter. * New debug level (0x10000) added for low level LDB messages only (see sssd.conf man page). - Changes from version 2.2.3 * allow_missing_name now treats empty strings the same as missing names. * "soft_ocsp" and "soft_crl" options have been added to make the checks for revoked certificates more flexible if the system is offline. * Smart card authentication in polkit is now allowed by default. * Handling of FreeIPA users and groups containing ‘@’ sign now works. * Issue when autofs was unable to mount shares was fixed. * SSSD was unable to hande ldap_uri containing URIs with different port numbers, which has been rectified. - Changes from version 2.2.2 * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache. This has been fixed. * Because of a race condition SSSD could crash during shutdown. The race condition was fixed. * Fixed a bug that limited number of external groups fetched by SSSD to 2000. * pam_sss now properly creates gnome keyring during login. * SSSD with KCM could wrongly pick older ccache instead of the latest one after login. This was fixed. - Changes from version 2.2.1 * New options were added which allow sssd-kcm to handle bigger data. * SSSD can now automatically refresh cached user data from subdomains in IPA/AD trust. * Fixed issue with SSSD hanging when connecting to non-responsive server with ldaps://. * SSSD is now restarted by systemd after crashes. * Fixed refression when dyndns_update was set to True and dyndns_refresh_interval was not set or set to 0 then DNS records were not updated at all. * Fixed issue when default_domain_suffix was used with files provider and caused all results from files domain to be fully qualified. * Fixed issue with sudo rules not being visible on OpenLDAP servers * Fixed crash with auth_provider = proxy that prevented logins - Changes from version 2.2.0 * The Kerberos provider can now include more KDC addresses or host names when writing data for the Kerberos locator plugin. * The 2FA prompting can now be configured. * The LDAP authentication provider now allows to use a different method of changing LDAP passwords using a modify operation in addition to the default extended operation. * The "auto_private_groups" configuration option now takes a new value hybrid. * A new option "ad_gpo_ignore_unreadable" was added. * The "cached_auth_timeout" parameter is now inherited by trusted domains. * The "ldap_sasl_mech" option now accepts another mechanism "GSS-SPNEGO" in addition to "GSSAPI". * The sssctl tool has two new commands, "cert-show" and "cert-map". - Changes from version 2.1.0 * Any provider can now match and map certificates to user identities. * pam_sss can now be configured to only perform Smart Card authentication or return an error if this is not possible. * pam_sss can also prompt the user to insert a Smart Card if, during an authentication it is not available. * It is now possible to refresh the KCM configuration without restarting the whole SSSD deamon * A new configuration option ad_gpo_implicit_deny was added. This option (when set to True) can be used to deny access to users even if there is not applicable GPO. * The dynamic DNS update can now batch DNS updates to include all address family updates in a single transaction. - Changes from version 2.0.0 * The Python API for managing users and groups in local domains (id_provider=local) was removed completely. The local provider (id_provider=local) and the command line tools to manage users and groups in the local domains, such as sss_useradd is not built anymore. * The LDAP provider had a special-case branch for evaluating group memberships with the RFC2307bis schema when group nesting was explicitly disabled. This codepath is removed. * The ldap_groups_use_matching_rule_in_chain and ldap_initgroups_use_matching_rule_in_chain options and the code that evaluated them was removed. * The "ldap_sudo_include_regexp" option changed its default value from true to false. Wildcards in the sudoHost LDAP attribute are no longer evaluated. This was costly to evaluate on the LDAP server side and at the same time rarely used. * The KCM responder has a new back end to store credential caches in a local database * The list of PAM services which are allowed to authenticate using a Smart Card is now configurable using a new option pam_p11_allowed_services. - Make cifs-idmap plugin (idmapwb.so) use update-alternatives mechanism to be able to switch between cifs-utils and sssd; (bsc#1182682). - Build sssd's KCM - Drop obsolete patches: + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch + 0002-intg-Do-not-hardcode-nsslibdir.patch + 0003-MONITOR-Do-not-use-two-configuration-databases.patch + 0004-Strip-whitespaces-in-netgroup-triple.patch + 0005-nss-sssd-returns-for-emtpy-home-directories.patch + 0006-Rotate-child-log-files.patch + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch + 0014-util-Remove-the-unused-function-is_email_from_domain.patch + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch + 0019-winbind-idmap-plugin-support-inferface-version-6.patch + 0020-winbind-idmap-plugin-fix-detection.patch + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch + 0027-utils-make-N_ELEMENTS-public.patch + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch + sssd-gpo_host_security_filter-1.16.1.patch + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch + 0036-ad_gpo_ndr.c-more-ndr-updates.patch + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch + 0038-CACHE-Create-timestamp-if-missing.patch + 0039-sss_cache-Do-not-fail-for-missing-domains.patch- Fix sss_cache spurious error messages when invoked from shadow-utils; (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch- Use /run instead of /var/run for daemon PID files; (bsc#1185185);- Create timestamp attribute in cache objects if missing; (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);- Fix a dependency loop by moving internal libraries to sssd-common package; (bsc#1182058);- Fix build against samba >= 4.12 + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch + 0036-ad_gpo_ndr.c-more-ndr-updates.patch - Fix build with curl >= 7.62.0 + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch- Update samba secrets after changing machine password; (jsc#SLE-11503); Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch- Install infopipe dbus service (bsc#1106598)- SSSD GPO host entries are ignored if computer cn does not match it's samaccountname, add 0001-Resolve-computer-lookup-failure-when-sam-cn.patch; (jsc#SLE-9298); (bsc#1160688)- SSSD should accept host entries from GPO's security filter, add sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)- Fix building with newer samba versions (bsc#1137876) - Added patches: * 0027-utils-make-N_ELEMENTS-public.patch * 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch- Update winbind idmap plugin to support interface version 6 (jsc#SLE-9819) - Added patches: * 0019-winbind-idmap-plugin-support-inferface-version-6.patch * 0020-winbind-idmap-plugin-fix-detection.patch * 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch * 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch * 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch * 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch * 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch * 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch- Delete linked local user overrides when deleting a user (bsc#1133168) - Added patches: * 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch- Fix domain offline after first boot when resolv.conf is a symlink (bsc#1136139) - Added patches: * 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch * 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch * 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch- Fix login not possible when email address is duplicated in ldap attributes (bsc#1149597) - Added patches: * 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch * 0014-util-Remove-the-unused-function-is_email_from_domain.patch- Fix memory leak in nss netgroup enumeration (bsc#1139247); - Added patches: * 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch- Allow defaults sudoRole without sudoUser attribute (bsc#1135247) - Added an option to skip GPOs that have groupPolicyContainers, unreadable by SSSD (bsc#1124194) (CVE-2018-16838) - Added patches: * 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch * 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch- Create directory to download and cache GPOs (bsc#1132879) - Add a netgroup counter to struct nss_enum_index (bsc#1132657) - Added patches: * 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch * 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch * 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch- Rotate child debug file descriptors on SIGHUP (bsc#1080156) - Added patches: * 0006-Rotate-child-log-files.patch- Fix fallback_homedir returning '/' for empty home directories (CVE-2019-3811) (bsc#1121759) - Install logrotate configuration (bsc#1004220) - Strip whitespaces in netgroup triples (bsc#1087320) - Align systemd service file with upstream * Run interactive and change service type to notify (bsc#1120852) * Replace deprecated '-f' and use '--logger' - Fix sssd not starting in foreground mode (bsc#1125277) - Added patches: * 0003-MONITOR-Do-not-use-two-configuration-databases.patch * 0004-Strip-whitespaces-in-netgroup-triple.patch * 0005-nss-sssd-returns-for-emtpy-home-directories.patch- Added dependency to adcli for sssd-ad (fate#326619, bsc#1109849)- Introduce patches: * Create sockets with right permissions: 0001-SUDO-Create-the-socket-with-stricter-permissions.patch (bsc#1098377, CVE-2018-10852) * Fix for sssd upstream integration tests 0002-intg-Do-not-hardcode-nsslibdir.patch (bsc#1098163)- Update to new minor upstream release 1.16.1 (fate#323340): New Features: * A new option auto_private_groups was added. If this option is enabled, SSSD will automatically create user private groups based on user’s UID number. The GID number is ignored in this case. * The SSSD smart card integration now supports a special type of PAM conversation implemented by GDM which allows the user to select the appropriate smrt card certificate in GDM. * A new API for accessing user and group information was added. This API is similar to the tradiional Name Service Switch API, but allows the consumer to talk to SSSD directly as well as to fine-tune the query with e.g. how cache should be evaluated. * The sssctl command line tool gained a new command access-report, which can generate who can access the client machine. Currently only generating the report on an IPA client based on HBAC rules is supported. * The hostid provider was moved from the IPA specific code to the generic LDAP code. This allows SSH host keys to be access by the generic LDAP provider as well. See the ldap_host_* options in the sssd-ldap manual page for more details. * Setting the memcache_timeout option to 0 disabled creating the memory cache files altogether. This can be useful in cases there is a bug in the memory cache that needs working around.- Updated sssd.spec: The IPA provider depends on AD provider's PAC executable, hence introducing the package dependency. (bsc#1021441, bsc#1062124)- Remove package descriptions for the python 2 packages that are no longer distributed: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config - Correct python version dependency of tools package. (bsc#1082108)- Correct dependency of sss_obfuscate command line program.- In an ongoing effort to reduce dependency on python version 2, the following python libraries are no longer built. Nevertheless their python3 counterparts remain in place: * python-ipa_hbac * python-sss-murmur * python-sss_nss_idmap * python-sssd-config- Update to new upstream release 1.16.0 Security fixes * This release fixes CVE-2017-12173: Unsanitized input when searching in local cache database. SSSD stores its cached data in an LDAP like local database file using libldb. To lookup cached data LDAP search filters like (objectClass=user)(name=user_name) are used. However, in sysdb_search_user_by_upn_res(), the input was not sanitized and allowed to manipulate the search filter for cache lookups. This would allow a logged in user to discover the password hash of a different user. New Features * SSSD now supports session recording configuration through tlog. This feature enables recording of everything specific users see or type during their sessions on a text terminal. For more information, see the sssd-session-recording(5) manual page. * SSSD can act as a client agent to deliver Fleet Commander policies defined on an IPA server. Fleet Commander provides a configuration management interface that is controlled centrally and that covers desktop, applications and network configuration. * Several new systemtap probes were added into various locations in SSSD code to assist in troubleshooting and analyzing performance related issues. Please see the sssd-systemtap(5) manual page for more information. * A new LDAP provide access control mechanism that allows to restrict access based on PAM's rhost data field was added. For more details, please consult the sssd-ldap(5) manual page, in particular the options ldap_user_authorized_rhost and the rhost value of ldap_access_filter.- Update to new upstream release 1.15.3 (KCM disabled) New Features * In a setup where an IPA domain trusts an Active Directory domain, it is now possible to define the domain resolution order (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names). * Design page - Shortnames in trusted domains * SSSD ships with a new service called KCM. This service acts as a storage for Kerberos tickets when "libkrb5" is configured to use "KCM:" in "krb5.conf". * Design page - KCM server for SSSD * NOTE: There are several known issues in the "KCM" responder that will be handled in the next release. * Support for user and group resolution through the D-Bus interface and authentication and/or authorization through the PAM interface even for setups without UIDs or Windows SIDs present on the LDAP directory side. This enhancement allows SSSD to be used together with apache modules to provide identities for applications * Design page - Support for non-POSIX users and groups * SSSD ships a new public library called "libsss_certmap" that allows a flexible and configurable way of mapping a certificate to a user identity. * Design page - Matching and Mapping Certificates * The Kerberos locator plugin can be disabled using an environment variable "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the "sssd_krb5_locator_plugin" manual page for mode details. * The "sssctl" command line tool supports a new command "user-checks" that enables the administrator to check whether a certain user should be allowed or denied access to a certain PAM service. * The "secrets" responder now forwards requests to a proxy Custodia back end over a secure channel.- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to krb5-common sub-package. Address bsc#1024836.- Update to new upstream release 1.15.2 * It is now possible to configure certain parameters of a trusted domain in a configuration file sub-section. * Several issues related to socket-activating the NSS service, especially if SSSD was configured to use a non-privileged userm were fixed. The NSS service now does not change the ownership of its log files to avoid triggering a name-service lookup while the NSS service is not running yet. Additionally, the NSS service is started before any other service to make sure username resolution works and the other service can resolve the SSSD user correctly. * A new option "cache_first" allows the administrator to change the way multiple domains are searched. When this option is enabled, SSSD will first try to "pin" the requested name or ID to a domain by searching the entries that are already cached and contact the domain that contains the cached entry first. Previously, SSSD would check the cache and the remote server for each domain. This option brings performance benefit for setups that use multiple domains (even auto-discovered trusted domains), especially for ID lookups that would previously iterate over all domains. Please note that this option must be enabled with care as the administrator must ensure that the ID space of domains does not overlap. * The SSSD D-Bus interface gained two new methods: "FindByNameAndCertificate" and "ListByCertificate". These methods will be used primarily by IPA and `mod_lookup_identity to correctly match multple users who use the same certificate for Smart Card login. * A bug where SSSD did not properly sanitize a username with a newline character in it was fixed.- Switch *all* URLs after fedorahosted.org retirement- Updated project URL - Update to new upstream release 1.15.1 * Several issues related to starting the SSSD services on-demand via socket activation were fixed. In particular, it is no longer possible to have a service started both by sssd and socket-activated. Another bug which might have caused the responder to start before SSSD started and cause issues especially on system startup was fixed. * A new 'files' provider was added. This provider mirrors the contents of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose of this new provider is to make it possible to use SSSD's interfaces, such as the D-Bus interface for local users and enable leveraging the in-memory fast cache for local users as well, as a replacement for `nscd`. In future, we intend to extend the D-Bus interface to also provide setting and retrieving additional custom attributes for the files users. * SSSD now autogenerates a fallback configuration that enables the files domain if no SSSD configuration exists. This allows distributions to enable the 'sssd' service when the SSSD package is installed. Please note that SSSD must be build with the configuration option '--enable-files-domain' for this functionality to be enabled. * Support for public-key authentication with Kerberos (PKINIT) was added. This support will enable users who authenticate with a Smart Card to obtain a Kerberos ticket during authentication.- Remove obsolete insserv call- Added /etc/sssd/conf.d/ for configuration snippets- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update - Update to new upstream release 1.15.0 * SSSD now allows the responders to be activated by the systemd service manager and exit when idle. This means the services line in sssd.conf is optional and the responders can be started on-demand, simplifying the sssd configuration. Please note that this change is backwards-compatible and the responders listed explicitly in sssd.conf's services line are managed by sssd in the same manner as in previous releases. Please refer to man sssd.conf(5) for more information * The sudo provider is no longer disabled for configurations that do not explicitly include the sudo responder in the services list. In order to disable the sudo-related back end code that executes the periodic LDAP queries, set the sudo_provider to none explicitly * The watchdog signal handler no longer uses signal-unsafe functions. This bug was causing a deadlock in case the watchdog was about to kill a stuck process * A bug that prevented TLS to be set up correctly on systems where libldap links with GnuTLS was fixed * The functionality to alter SSSD configuration through the D-Bus interface provided by the IFP responder was removed. This functionality was not used to the best of our knowledge, had no tests and prevented the InfoPipe responder from running as a non-privileged user. * A bug that prevented statically-linked applications from using libnss_sss was fixed by removing dependency on -lpthreads from the libnss_sss library (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for an example on why linking with -lpthread from an NSS modules is problematic) * Previously, SSSD did not ignore GPOs that were missing the gPCFunctionalityVersion attribute and failed the whole GPO processing. Starting with this version, the GPOs without the gPCFunctionalityVersion are skipped.- BuildRequire pkgconfig(libsystemd) instead of pkgconfig(libsystemd-login): the latter has been deprecated since systemd 209 and finally removed with systemd 230.- Add 0001-krb5-1.15-build-fix.patch to unlock building against future KRB versions.- Update to new upstream release 1.14.2 * Several more regressions caused by cache refactoring to use qualified names internally were fixed, including a regression that prevented the krb5_map_user option from working correctly. * A regression when logging in with a smart card using the GDM login manager was fixed * SSSD now removes the internal timestamp on startup cache when the persistent cache is removed. This enables admins to follow their existing workflow of just removing the persistent cache and start from a fresh slate * Several fixes to the sssd-secrets responder are present in this release * A bug in the autofs responder that prevented automounter maps from being returned when sssd_be was offline was fixed * A similar bug in the NSS responder that prevented netgroups from being returned when sssd_be was offline was fixed * Disabling the netlink integration can now be done with a new option disable_netlink. Previously, the netlink integration could be disabled with a sssd command line switch, which is being deprecated in this release. * The internal watchdog no longer kills sssd processes in case time shifts during sssd runtime * The fail over code is able to cope with concurrent SRV resolution requests better in this release * The proxy provider gained a new option proxy_max_children that allows the administrator to control the maximum number of child helper processes that authenticate users with auth_provider=proxy * The InfoPipe D-Bus responder exports the UUIDs of user and group objects through a uniqueID property- Update to new upstream release 1.14.1 * The IPA provider now supports logins with enterprise principals (also known as additional UPN suffixes). This functionality also enabled Active Directory users from trusted AD domains who use an additional UPN suffix to log in. Please note that this feature requires a recent IPA server. * When a user name is overriden in an IPA domain, resolving a group these users are a member of now returns the overriden user names * Users can be looked up by and log in with their e-mail address as an identifier. In order to do so, an attribute that represents the user's e-mail address is fetched by default. This attribute can by customized by setting the ldap_user_email configuration option. * A new ad_enabled_domains option was added. This option lets the administrator select domains that SSSD should attempt to reach in the AD forest SSSD is joined to. This option is useful for deployments where not all domains are reachable on the network level, yet the administrator needs to access some trusted domains and therefore disabling the subdomains provider completely is not desirable. * The sssctl tool has two new commands active-server and servers that allow the administrator to observe the server that SSSD is bound to and the servers that SSSD autodiscovered * SSSD used to fail to start when an attribute name is present in both the default SSSD attribute map and the custom ldap_user_extra_attrs map * GPO policy procesing no longer fails if the gPCMachineExtensionNames attribute only contains whitespaces * Several commits fix regressions related to switching all user and group names to fully qualified format, such as running initgroups for a user who is only a member of a primary group * Several patches fix regressions caused by splitting the database into two ldb files, such as when user attributes change without increasing the modifyTimestamp attribute value * systemd unit files are now shipped for the sssd-secrets responder, allowing the responder to be socket-activated. To do so, administrators should enable the sssd-secrets.socket and sssd-secrets.service systemd units. * The sssd binary has a new switch --disable-netlink that lets sssd skip messages from the kernel's netlink interface. * A crash when entries with special characters such as '(' were requested was fixed * The ldap_rfc_2307_fallback_to_local_users option was broken in the previous version. This release fixes the functionality.- Update to new upstream release 1.14.0 * The AD provider is now able to look up users from Active Directory domains by certificate. This change enables logins for Active Directory users with the help of a smart card. * The sss_override tool is now able to add certificates as local overrides in the SSSD cache. Please note that the certificate overrides are stored in the local cache, so removing the cache also removes all the certificates! * Invalid certificates are skipped instead of aborting the whole operation when logging in with a smart card using SSH. * This version allows several OCSP-related options such as the OCSP responder to be configured during smart card authentication. * SSSD is now able to determine the name of the user who logs in from the inserted smart card without having to type in the username. Note that this functionality must be enabled with the allow_missing_name pam_sss option. * The sss_cache command line tool is now able to invalidate SUDO rules with its new -r/-R switches. Note that the sudo rules ar not refreshed with the sss_cache tool immediately. * A new command line tool called sssctl was added. This tool allows to observe the status of SSSD. * A new option local_negative_timeout was added. This option allows the admin to specify the time during which lookups for users that are not handled by SSSD but are present on the system (typically in /etc/passwd and /etc/group) and prevents repeated lookups of local users on the remote server during initgroups operation. * An ID-mapping plugin for the winbind deamon was added. With this plugin, it's possible for winbind to use the same ID-mapping scheme as SSSD uses, producing consistent ID values. - Remove 0001-build-detect-endianness-at-configure-time.patch (included upstream)- Enable PAC responder. PAC is an extension element returned by domain controller, to speed up resolution of authorisation data such as group memberships.- Update to new upstream release 1.13.4 * The IPA sudo provider was reimplemented. The new version reads the data from IPA's LDAP tree (as opposed to the compat tree populated by the slapi-nis plugin that was used previously). The benefit is that deployments which don't require the compat tree for other purposes, such as support for non-SSSD clients can disable those autogenerated LDAP trees to conserve resources that slapi-nis otherwise requires. There should be no visible changes to the end user. * SSSD now has the ability to renew the machine credentials (keytabs) when the ad provider is used. Please note that a recent version of the adcli (0.8 or newer) package is required for this feature to work. * The automatic ID mapping feature was improved so that the administrator is no longer required to manually set the range size in case a RID in the AD domain is larger than the default range size * A potential infinite loop in the NFS ID mapping plugin that was resulting in an excessive memory usage was fixed * Clients that are pinned to a particular AD site using the ad_site option no longer communicate with DCs outside that site during service discovery. * The IPA identity provider is now able to resolve external (typically coming from a trusted AD forest) group members during get-group-information requests. Please note that resolving external group memberships for AD users during the initgroup requests used to work even prior to this update. This feature is mostly useful for cases where an IPA client is using the compat tree to resolve AD trust users. * The IPA ID views feature now works correctly even for deployments without a trust relationship. Previously, the subdomains IPA provider failed to read the views data if no master domain record was created on the IPA server during trust establishment. * A race condition in the client libraries between the SSSD closing the socket as idle and the client application using the socket was fixed. This bug manifested with a Broken Pipe error message on the client. * SSSD is now able to resolve users with the same usernames in different OUs of an AD domain * The smartcard authentication now works properly with gnome-screensaver- Enable internal testsuite- Update to new maintenance release 1.13.3 * A bug that prevented user lookups and logins after migration from winsync to IPA-AD trusts was fixed. * A bug that prevented the ignore_group_members option from working correctly in AD provider setups that use a dedicated primary group (as opposed to a user-private group) was fixed. * Offline detection and offline login timeouts were improved for AD users logging in from a domain trusted by an IPA server. * The AD provider supports setting up autofs_provider=ad .- Update to new upstream release 1.13.2 * Initial support for Smart Card authentication was added. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. * This release supports authenticating againt a KDC proxy.- Update to new upstream release 1.13.1 * Initial support for Smart Card authentication was added. The feature can be activated with the new pam_cert_auth option. * The PAM prompting was enhanced so that when Two-Factor Authentication is used, both factors (password and token) can be entered separately on separate prompts. At the same time, only the long-term password is cached, so offline access would still work using the long term password. * A new command line tool sss_override is present in this release. The tools allows to override attributes on the SSSD side. It's helpful in environment where e.g. some hosts need to have a different view of POSIX attributes than others. Please note that the overrides are stored in the cache as well, so removing the cache will also remove the overrides. * Several enhancements to the dynamic DNS update code. Notably, clients that update multiple interfaces work better with this release. * This release supports authenticating againt a KDC proxy * The fail over code was enhanced so that if a trusted domain is not reachable, only that domain will be marked as inactive but the backed would stay in online mode.- Update to new upstream release 1.13 * Support for separate prompts when using two-factor authentication * Added support for one-way trusts between an IPA and Active Directory environment. (Depends on IPA 4.2) * The fast memory cache now also supports the initgroups operation. * The PAM responder is now capable of caching authentication for configurable period, which might reduce server load in cases where accounts authenticate very frequently. Refer to the "cached_auth_timeout" option in sssd.conf(5). * The Active Directory provider has changed the default value of the "ad_gpo_access_control" option from permissive to enforcing. As a consequence, the GPO access control now affects all clients that set access_provider to ad. In order to restore the previous behaviour, set ad_gpo_access_control to permissive or use a different access_provider type. * Group Policy objects defined in a different AD domain that the computer object is defined in are now supported. * Credential caching and Offline authentication are also available when using two-factor authentication * The Python bindings are now built for both Python2 and Python3. * The LDAP bind timeout, StartTLS timeout and password change timeout are now configurable using the ldap_opt_timeout option.- Kill unused libsss_sudo-devel solvable.- Obsolete/provide libsss_sudo in sssd main package. Sudo capability is an integral feature in SSSD and the library is not supposed to be used separately.- sssd.service: add Before= and Wants=nss-user-lookup.target correct fix for bsc#926961- Update to new upstream release 1.12.5 * The background refresh tasks now supports refreshing users and groups as well. See the "refresh_expired_interval" parameter in the sssd.conf manpage. * A new option subdomain_inherit was added. * When an expired account attempts to log in, a configurable error message can be displayed with sufficient pam_verbosity setting. See the "pam_account_expired_message" option. * OpenLDAP ppolicy can be honored even when an alternate login method (such as SSH key) is used. See the "ldap_access_order" option. * A new option :krb5_map_user" was added, allowing the admin to map UNIX usernames to Kerberos principals. * BUG FIXES: * Fixed AD-specific bugs that resulted in the incorrect set of groups being displayed after the initgroups operation. * Fixes related to the IPA ID views feature. Setups using this should update sssd on both IPA servers and clients. * The AD provider now handles binary GUIDs correctly. * A bug that prevented the `ignore_group_members` parameter to be used with the AD provider was fixed. * The failover code now reads and honors TTL value for SRV queries as well. * Race condition between setting the timeout in the back ends and reading it in the front end during initgroup operation was fixed. This bug affected applications that perform the initgroups(3) operation in multiple processes simultaneously. * Setups that only want to use the domain SSSD is connected to, but not the autodiscovered trusted domains by setting `subdomains_provider=none` now work correctly as long as the domain SID is set manually in the config file. * In case only "allow" rules are used, the simple access provider is now able to skip unresolvable groups. * The GPO access control code now handles situations where user and computer objects were in different domains.- Update to new upstream release 1.12.4 (Changelog highlights following) * This is mostly a bug fixing release with only minor enhancements visible to the end user. * Contains many fixes and enhancements related to the ID views functionality of FreeIPA servers. * Several fixes related to retrieving AD group membership in an IPA-AD trust scenario. * Fixes a bug where the GPO access control previously didn't work at all if debugging was enabled in smb.conf. * SSSD can now be pinned to a particular AD site instead of autodiscovering the site. * A regression that caused setting the SELinux context for IPA users to fail, was fixed. * Fixed a potential crash caused by a double-free error when an SSSD service was killed by the monitor process.- A minor rpmspec cleanup to get rid of five rpmlint warnings * Remove mentioning of system-wide dbus configuration file from comments. * Remove traditional init script. * Remove compatibility for producing packages on older OpenSUSE releases.- Update to new upstream release 1.12.3 * SSSD now allows the IPA client to move from one ID view to another after SSSD restart. * It is possible to apply ID views to IPA domains as well. Previous SSSD versions only allowed views to be applied to AD trusted domains. * Overriding SSH public keys is supported in this release. * Move semanage related functions to a separate library.- build with PIE- fix bashism in postun script- Update to new upstream release 1.12.2 (bugfix release, bnc#900159) * Fixed a regression where the IPA provider did not fetch User Private Groups correctly * An important bug in the GPO access control which resulted in a wrong principal being used, was fixed. * Several new options are available for deployments that need to restrict a certain PAM service from connecting to a certain SSSD domain. For more details, see the description of pam_trusted_users and pam_public_domains options in the sssd.conf(5) man page and the domains option in the pam_sss(8) man page. * When SSSD is acting as an IPA client in setup with trusted AD domains, it is able to return group members or full group memberships for users from trusted AD domains. * Support for the "views" feature of IPA. - Remove 0001-build-call-AC_BUILD_AUX_DIR-before-anything-else.patch (merged upstream)sheep27 1665991126  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`ab2.5.2-150400.4.11.12.5.2-150400.4.11.1 sss_cachesss_debuglevelsss_obfuscatesss_overridesss_seedsssctlman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupdel.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzman8sss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsss_cache.8.gzsss_debuglevel.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsssctl.8.gzman8sss_groupmod.8.gzman8sss_groupdel.8.gzsss_groupmod.8.gzman8sss_groupmod.8.gzman8sss_cache.8.gzsss_debuglevel.8.gzsss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsssctl.8.gzman8sss_cache.8.gzsss_debuglevel.8.gzsss_groupadd.8.gzsss_groupdel.8.gzsss_groupmod.8.gzsss_groupshow.8.gzsss_obfuscate.8.gzsss_override.8.gzsss_seed.8.gzsss_useradd.8.gzsss_userdel.8.gzsss_usermod.8.gzsssctl.8.gz/usr/sbin//usr/share/man/ca//usr/share/man/ca/man8//usr/share/man/cs//usr/share/man/cs/man8//usr/share/man/de//usr/share/man/de/man8//usr/share/man/es//usr/share/man/es/man8//usr/share/man/fr//usr/share/man/fr/man8//usr/share/man/ja//usr/share/man/ja/man8//usr/share/man/man8//usr/share/man/nl//usr/share/man/nl/man8//usr/share/man/pt//usr/share/man/pt/man8//usr/share/man/ru//usr/share/man/ru/man8//usr/share/man/sv//usr/share/man/sv/man8//usr/share/man/uk//usr/share/man/uk/man8/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:26420/SUSE_SLE-15-SP4_Update/d5638734bea639f5efc8de481d762fc3-sssd.SUSE_SLE-15-SP4_Updatecpioxz5x86_64-suse-linux  ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=1de73cd905fc3a7dfa5cfa838bd50479bc790ee6, for GNU/Linux 3.2.0, strippedPOSIX shell script, ASCII text executablePython script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=bae12dadb588106758e0f04bf770f531a0a2a793, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=9f1d929284729aba79b472d49f94605591bd576b, for GNU/Linux 3.2.0, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=c4f167383811695b0374923c7206e63f9da7a17d, for GNU/Linux 3.2.0, strippeddirectorytroff or preprocessor input, UTF-8 Unicode text (gzip compressed data, max compression, from Unix)troff or preprocessor input, UTF-8 Unicode text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text, with very long lines (gzip compressed data, max compression, from Unix)troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix)+ RRR"RRR RRR RRRR!RRRRRR"RR RRR RRRRR!RRRR"RR RRR RRRR!RRRRR RRRRR"R R RRRRRR RRRRRRRR RRRR RR!R۱ax ^/5utf-821ee5114c259d5719c07620dfc10bed04d73629c7dbd7a73dd29cfd48bec002d? 7zXZ !t/] crv9wǨf#:d~gۭ6}50 ygX^j-ﭬ^I\/*܈2 `PQF xj3b>A``xh>1$-(g,XM{A.& K[I7Xa-M ]v9SxbeOAHa]{u,AvUiWtƉ知kruiY-}0lBa;ll-qֱX_gfKo}FGh3`JM DZz`tZq AvD%@='fJ7^ݨG\,SՕ#PWK mV;)^=nwٙ+* &g h>83b8K&I~F`&*ޜ7zx>պc,8iVb]n,ڣ q[. ]'$_|$齋K5( H$*] qw9!ظ5 6+AxL+K #I\d[-~NecXS`#(rO4]( ,GKb)hɤ `2ts߲bK˿@]P咥f} o췲[$Tz$Sc*wDb٣*YF p[ӿQvd?sA+3p̓(̃'V˴^%S3̨C*%@]Ϊr@BS'Ώø=nu1߸}D|Lv&":]{㇯Ƨ NKNcLn8{ 芅1qH[ڑug?rņ>`[D>Gmӊk1yb<[IcKM廛v)r)~I kuXmᕥ*VPNqoq;Q2C[Q3AKA|zqpv/}RųDKb\^u68L Be w-b&>,#LC zpp_KO:I 4V&FVo3ܶlmQvEmvY>ʶL!^]Q|Prg>fͧM l< =bsoj{-@j1ƌ>%3ǠN0+Ro\5nM(2OFf`AgYQe~n]W tNI5frun[ܤNWSBo{iTNv]Z*+Ù;#eC7hu$QЈO[sG^kDyĒ3 Tz1=1B2TcCh'$UQJmTi&6X#9!Jw@YLcym)itR瞥BTW7@x{e32Ma >چ 0tAP-K}IDqfj 4I=kPPFZLyf(oeaB̈Nk^LWV'c.6nQ>6SR PD5#|}ф{:r%[ y$ /קE^FEbs"x}03⸳4n6'|qT>'`DGVs* p?ÖqY7,RM H_^%sh­uS* !4;H|CR?_F?epomPBT3%R%3ayBCHrw X?L^**,q  qH fmQxtw|{, Ĩ349K OVM&&ɰ?0 - ^;yxU㖙3R88gt)3۳"t*TElv? q,4DjGU/E:؛,D(}IMX6"5Q 3]Er3ՔTݲfK+l쥑H6Lgt%r7R(mb<|١ "(HHxeYMh2Gh1n t`Z_:F)% ǟ^665# <&a/P䉖)ohn ~9]D%cɹDrTkl{;I=h*:h<@h:@eλIO>2{+.VtB'VKmf쥷}G[ b /ؐ1H4qAorY,Ȕ7&"x }ƇSsI}qH%mN/?~/B4?w! ~Zh"TPUl$PB sa1(4nU`ٰ(!7&9|Wc S>'bI̭83`lO(zؘ6s5 &SHA*sچ5gd(t< ^- s/T? 5z=DvLD8]ppwٶNO O—@Z&۽!@8ǛQZ,J]TdsNxzE }3*hq=ȡ3G, &v {\h.~9%J`ׇfi@1p^K u-sw_7[ӹ[M~%`KM٧?v%#M=Rw~UB{u_dWʪ QEߙ3# 3R<\lluD&ȧG)”_~f/C/ <*I e)2޸  9RJl6b"wܰ ޑs  r'8$QRq'j%3^w X:z Gߩn;AnoXs%iPo :OIF,fZ- iqVLV~ZUgCwy :W<>Bu;@pQ?987M:wOM4QZǰthfb,4F1&Z'QFƟ6^VΙu5z+$Ca$\C`d* ]:N3Il_ɟË=L<J`WR@o-+/vb:!V&YpY{xˈꜪ_5F8:}ʹ1/}n*O`p&,j[Tٟ1 /vhl͋H<+}g0602T-w{̮7%QBG:mg S*EZמ=@2 +dѲÿLwaGd4fZ8]dѐ)}4? 6w+F?zHt,=CM uO4|0׹QHs闄=ხ, ,%ΪԱA+v:QF~v>#f G&?qͨ BjٝOf}aK"4d̞ =l'z:50p~Zf\H ej$-]>"&? V)Ґ -%лᣯ9Xdxhm (dC_g3v*S[Э_r8dTpE3Lѻ4q) _3Goa0>s_)oMRd0NK :=\@ l %ěWx8`*3Ivvpf`h)̄bmTc^ir{z@Dݢ?Vwk H^?4 H:r,l=RkIQx C~B4Ao!_+pjuAy4Œ$+d4k",I\zڔ=1+Pe4 דU2 :fSҝX&KU0Yo S:\F9sfs2zq ̱DV( ngM#=[=:$]Sӛr/yORKY۾ñxTe4<w`#ih3> ;\ƀdLi@ێ@%Sb|"HoTyDTٰ桁gn7_~b>.w]wD|p}OUII<V7k{'-9KL/"4o%* 3ߌB3 Nֿc>o_"j )Z1Q)/N ;´ kl(R*'ȩ>Z*Js0 (9ڑi~G8/Hxu:)\.DϝUt/$wnՉeׁUal3y|#5 9m!8<̟Q\ +_t٨n-;.3w 0NKB;XLzMQ~-<28ρmUE[U$XO9gϪm* PܼN9b q]qDPaMǯK;kQX;3w%-Y^24=trkƦ9~w+% G:K Hё?~_jT<.8ޒp; #tFA%KʊN.ƫgr˽PyKe7դEQ0VToH%:]Z=&k+(_7*08LkUڛPQ7LInd0_$V% )RNyܱƢaD1G< J5'2#ПV_N=\ruj}ΣXk,$?fe!7^H"}}'qȪ4+[V.ȁwH ˸&Hpm&vi?iBNuTU7, 'ܦ59}+4C{%s:̅;((#"y 7@N A; MTC'6ޞfya=]0_U:P LF,^"-nPŇKTcq g^ICVsdm*xlz Tظ,wKa[S_%H4VC]8lo RYpܚŜJ SP@'"5G8v |+ALr98p1%!eru.o*O5R~ؿuOFø2X]6|b㣲6>T}AO6>e++/O p<`Tpkox-w0[Z+EOre'}i.AEn ֢Rݹ뜠؋ZLr UP %a1ikS. ̖d6bt UMzF32 āZGgv5:XD>P_ [ 2k\z/`)7XZJWWf/!cu5<1i4-]ck ~ |28iqTn"hHUF~Y?d ,bG:8&շCJJPv ]C\D0/?s32.57ys~>n=X=+6m!n,!ِ}ck8c9$ {N+5T͸4k[XV$c;Mz(V6X? Sb\a2\02?_ct~9[5!MEd8|+0kh{thJ ׭5%gԘU KU)> N !oH9eZ"6 ԟ}MRB"U|B[%@!xबBXX?km?OKef2%pQ˟7 Q}@vTDX\Ęn^s@H9PJ{`cP$'ڞ9R"Q/T׈&UÂi4?Nё2FIvTJG%'dp AKRThq0 *('Rmu$~XgLwDm5uȩd!ҽZqaCV t?Jljp?l _9-Cu~i+ү1E1XD ݧe+UDv}ػeWGFl4oZygUlGLkzTKU["4]{Khj$j_8ʬ27TNI"7b!W1?XǑwaRM6v{_ yl}|(`ͬr$Nڎ3'7%,κN9{+++ݲYunƊl($?œ0}֝Q`(azi!ۊKDh bMǧ4`et] Teu5w3iϣ ''ĵ, lr cnԇK7.!^ԜkF; W!P5ufW׈­mg}@)6t"@1R86ꁶfkO5!AM|<7ډwJYR-5g{` $Fά1ntj- 0?mm1۠g3yY35'(c#M5c&]4crBD:!~D張3Jʉ8rSbˏr\|*Yh;='MBE"y=%ciH feA_RѽҎ2ήj;>k׏y-?8 w0#i瓖znxqo^ [-ƒx  o!D *$kp$#@a2u?GηL |{LS_s-v |m2)w`4ǹ1 /,cHV$x]NU7ߴ!&V/na/QVџKN H9~w-E4Z#Ŕ%oR y)F^pҎZ3 5xh7 d nlBb:hӗA: sjAO>al> +즴f>DÕ+(~%;,ڽ:;ﺑkDam_Aͅ2Wp$o+*FI-nφ1}DIʢg~LMjf p%!ygSt d_ؑA߷C KU:VhD5Bk#yc/Uw8@/*4x(Koc ͨkm:T{J kCYp$r['N2#%(BUdk׹N:vx L%3g7H4?hT& Uп #P`^fK#&z :X;GqNcTxHo QVOÏŋRC~c/YWA@u?atvs] 'FU%8"K7r()vW)F 5(gR /k1u-P},El ܐ _xoae_jpC.休|X2]?&y.Raab8HTÜ;yYMVrH?& Dg,RsRQ\SKiawpCPAW"& `069H^aryw'_cֈm֙}D9$a epS=JSg裭FnGV&'N~\Cgpox]mb~)jEv/6Dj_UޜE>]Ƕrn}>aMcƽ흎 lS^lyg-kR*vo= E^XW6^ժxSEpH mn;qp%X5n%⾚a0t+x73 S#E@ ;`9,Q"ˎRº\Ľ~z_>5 a Չf lc5X8yӚ'CBʞf3UǠ蹿Ҁj \DZ$lw񺫑*?)3eۓR޼=pYOemG {0pi B?AC-Kŋa>dDk9Z8* U-PЏŐd~< X8[!Z](Th2y"hS24e?#gWv R^41Qy:9'X )y;nhg* 5YXpRk+LT_[Viʄ 2ytm[:+G.֑cPj 5MuM/4zl q9 s& *n_|!')AaO_+$M=Lob?!ȥ + ng>y>RT~t:/.0Uîaʷ@qp+NƧ%KO"6y.{R{J .KcYIw)p9I8vr5eG p9 te}nKh񄖏͑9_=\L\\(TtH[ٞbtQTFv5HW>Ȕ?C/qPD H(Y >;y"Ӝ^ ǽLgF{a9MY#Z.$OΐbvƏ)42}H@['dhp)qN/0!s9Z3b\kLmԑ1a/ITj K.[ӜZ{阃' Y|xkHVeaSM:'~:OTY(NsIҾz#Nڲ3P~3@& pGB'۹ZYV^+Kjg`e:ӂ/QQ$hg 1?,DLiEAP@?lipI$pmx eھ_ұ`$hr3(Mzk@u=e!ĕN2nwNZR}ѻ B?HK R&$*Pk0Q1K(6mFU.7kfI_~^A ?m?A>iڒ7DMp\h\H㋷X7υO0a)Fwf6mD*T{;[:,HԻ4-{:ͫ}mB˖|H.' #| Z&J#ث:(N}x.3VK7vr}NGPN5}p[~-Mo6a-rBU:MN7:ܕW+x_m##bk64:+|wֶ.Gᖒ՚ \[:[Oٵ i {y(C[Z'\筁{_2W3ILhIf8zar-PdZƧC\ c ]U_='D("5,c'L3g|( sms/JR% Q? k9ժܪ %;![]yמ+"Β C [L5q5~+_2~}1Dň[n$(8j:J68y$u_-?f>9#'UG%-1] >[lq..&X3WCIM*7N΍Owa{c70HIO426q}p@?$0%zbvn'ކКXĢ;86*%&b^YIQt~<:dX%M g&?s,\#hQ~M m%l#n+b36w7(\`#`$:[W)&NPm&j{:z2|\ G%3$YGEƕQϾiOc:*3}ͫ [0G:v.kH]M28ͪ^.WЁ;6#oVEvܺ[W>Vv˵ULqݯJdX|zNzj9iv BRHB5.ҮTziZad% @%Ka'4Cv`:KwhNd\.B@(] { t0]7O,BGܐ_8[ǚЀk{PP{jH,!I ]/Fx0~BjϦ Ҡ}@K$[,I !#0\"r 9VQk'&<5q5GZ0ЗӇh3<۫<^{fYodɉ1@ܧ9W,(v2l*)M5ӊz9H) /x&a62q~5zpvJ#ɓE*Zމ;oS?Vَ>==UП3B3ȲVHt03XO4rڒ6%BWfl3۠rrC~txY`YqXVCWz}#LB[..Bv#uAf#${}aR:P._tHzS>,~g$hQ.'llzg+DdX$Yi+_;ŴI@捅GRP!briYJvFK r23l$p8u Ӹ=V޳]x*fy ²sJ}І|.vŬ;(p61'3,<Ey  Ja+p}& h2X|YQk.Ըjj(ڳE8Ӻ~t}5ϥ\E񻸺Pt[}􍾯-TPire^#})n+R@))$Pπj+6$zB43O5x| ZX->P^Ffx'ØDuWN?4 &ykQC&ƺ¨%jsG^!31aUJD7&_# ?O5XSJOT~z[;&srY!tJBp|x+Ů^= 7RZCa cDT%Գ+5BQčƪ b_ih8Hл, cB岭.| B2G[Cr~>*gմƿ=ȤSpo@!ҹ?7f2n7a$g / d<<ʅ硶+T&FtHkeG{t=LRdK$UFpa=yv qHaD9sUkTgJBRSS,A1Q%5M޻\tR& 0Wj5=VtZbldEw)a}㦷_ed Wgɧls@dHϒjH< K:9]t7I'WW p7)OƢgY)\ɩK6w0PO94WƵ-Dߕdګ0aP頑jژc&w vUjmBFY5?U*6^da3.}B77!](x(EXm6;vN&45E3-߮ș. S1MO޾g¬A`c@ UiԂ(8(WNM<@&>pSku}Tu״nHf?>h8hOc3I""kwxS(1  ue~"۴]i#?tEƠ.f #5P.S1]Jηvj"P,Ɣ4@y;zsuW܋ă,ޥJvWq&cHy$3jAw[6y%㜭%1^vyQitl30SAWJl]a(Լ- R8x-rEoJvDG؄b[ L0B y)Z@<$+FꓚA%neG-&)mN&Mh=܄vSU{Su#M"!f{ު*f:,Ѩ.(Q9_&X%GBVP߶{6%"SY~"R8G<#~Pᙘ2diB!'>w3j Zb! 6èI zZD~F}m|^$WP5l(PIrAm7Cֿʚ^w"Qm"sC\ ef_19次6a6#K"#&Ճ,= F^vjBK(G!KLk!v*qQCK%:?^FO#[vLM&VZ3zIc)Wm(uBo2OED()&rqTy[!>1=(RqEu OtZ$=@rAǜjNn G7Q`Q0DMCLZ{<؃8SP:44fRW#"-{Soi\ьj4zc'^QAI*\7'ÒYi'!BwG֌C4QiDqx 1hXeweIQfLDƺu=bT},Vµ O5)l=H6W?nlGmB{{**'LEH:W%ԙ4>꼶m!Hӡ⪠X;QmNMe";V&Z"{hݷuf<|Ov rڌѨ WG-nb3O(X_`g = .8oBPi(_4˙=[Ow* AKmA gl xbK' ])6LRzվdv:|mVo5L.Y`bƻXmnΥHWo_nYhi&dZ-M *r M%w^(`/&d\hTx΁O'4 Kx:mc'LR ʦ /څraL <3'0RA( U.18˜4%wHS r Ya̪wV5={1,ǩ &^yqupU'̆vm.Kx9l$&I5dF{J\&6@AB[(x}~jR;trfS-b YHh4^(oʣ3PtkQ͓Z@礧;` Q>|Esۈ-[w]U  ]}Ql[QYnXso)uu0U)WmH_!CЅ[kEq=wXb>PJ$p ]0s[O/ϣwZ&R>k#&]AFޯYZ \`]TKR7r &i Oh虛]50:tr{~)a~Ui;zO(N"@$ <5 %CWP$g}@{w‡O FHh *+5 Y8.k B@h^5r8r ]$0S>akjlQ^Cnn,MFT]3\$Q;;Z=p!3ٺ1AY,@n[6Csw^9|dCM9/ii"W":A)('5h`m(~&{~.Lt0RQX/)H#+cqZ t]q8->@ st/ Նg7ϿvW>Iq4WM,m쀁&x^ֹC}#2H1xuVջl%pPl*bl)n'EUGs7YiEIK8UEg⋦I9w5r{ܑC`{cp[9 t r{bhJa?iF ƺI?=|SE*bIH睵5Թ{R&Zv,QϋI>B+ᇐ5!(D\ W|L8=z8v&9fn\.'y:1*a9Δ|t4E25_,x0k' i:z:` -e>eBchgH54q +-QM2ցrgrS&˒_Pbx\QgIKXk˙ 5(^ t3m za`߬lMЕ R2yMBZRѠlCmVTiO]9sL(p6ti{JFA" }\=);^8[)ۢIm`])k{"k9C:QFᕧNr\0eCMx:vdB\*vҜBD۴ך=ŞTAJXvηlw&ٞG.̚B. 6iJĖdq~wBcl]pk~zD@Oh*@JՇb:rpZu8h:*.|'{r: =l7>Mi@WF| PBej/eHkFstgh{Й鴌(sWfuTVP+ىLd䠰 ۱T>Th0&BF3G6QI0?]n;IZd ږXW.@R$WPoFmU8/I,(6eя?]Ȩq>ɜ"Qݓ驏u;0%|65)mfQ *5L\ ֨Eҫ0*qw^j# ڇLb4'Z)jY6f ZVm .yf1ܬ'rSlI? ^|V&\UO^̱!=" naVÒ'x ' gFEEF(X"aã { v4֣b3ax!ԛgNy۠N*=Dku{f'sb=Y)pA޸n(1θ_W#}x*qΆs= H&IYN{|7(hKLt>3wC祦kB^YCeiCd'#:VɓuȔeçτ7d冠ܟC9zhbHS%^Hӛ4/c'ڻcڋKd =xُq]h]dS$&Ԏ)rD#}h&!MeE=l@:$,!}rXa8g 9|6q&q@槻Kć>>}`oU6KW@,wR'{346XG$laKD 2Ϧ_#BP1A즜s`CΦq>?U #cXb(mD% }p2Yk&-_GK(jB ЖLOsomq c/ >Oox7}o1.S:6!f8H"7TʚJޙA [L:XW-^cHj7#Hn Z\áDTlo-_L{ˋ>^_UHjKIDBk԰=Nw{~J!%8v EL{jGsj^9fFᾏ# KE!51|cF EG9 =ϭ`uDՂRh'VmE(6G'cwERi@ɥߘ/}yLM#Ç&J:(}ߋZaU"*]<MviuIݱ1tg桔]::RҚ^bQߑXϰ6RXS<3 ÆC Q`~``^byNߩYӢa P F9 ?#\i &|;ODc0P! aGg+͐JH}܀t`}OK$MʀWL!~_(e2) .chR=\ ݖ :qm\@B`~XW1&N4 o-Apg&q}yJ>Ft`(6PZ+.IVKF.V-O!lq(}nUcx̴l IH>1AݢYރj7þ2{P"2ernΛݷ]xR 0a\X %m{ьeD2 o "hjt_jFc Π>ulU=1p fwoڙWmZ@ZU(pMYB#p]۰6 sH>.cW0Y?ἬQ޽R \fOq[[ϴZ[/=ץC/z GzdžC%-gZ[B'[QWC@pګTF p ^cH!+\g6}[c{σCnNIALj9"OjٰV)9 9$E`koIG+:I B&EBς.OߗҲW d@ AQDC ˵kM`n-lWM`Skc﹉z ڇBe{x2X,˗sXhZZFE! ݕAf^d!M÷]ug~V>)ѽ!^\x > u>'d5&E*DmN!Xiȕu-kvr-XT? dU P6߲a笵MȐSygBOuRi6/v7]FxE.z LT-dh V0`'*Θn6:nN J{d|O@'wjf?R֜IM ^ heh?CniuUG*@qf\1ǟޝފS?yvhO,C'Y|;=ƾh؊B7aS½ ٙM~!X,ߢ8[52s X(qY <"AHUn̈́JlVI0I3JăV^Bq}H\BeΠ2p7z.> 8K,6FESg뾲Dl :{ meM5bS1*0O?''"ºl6vx foU"j$0=aP8慽|`j^7mdzz|kQzrW STSзХ|3: hZ|*_qsıkvZ]4O*>Zr XvfToe0>I}vGC]'YQ℟5%V?Bk}|8=P>- xLuKZa>R wE02zZa?b_s]uI@õFί/f5g9N 鯨[mMTNuhcϼ ڟ6[qZ$ӆzQ/1-aKB=1b !E;90yc?yLo{.I;]_z4$ F0T珞%c^Oj<LԂ6l.҆o&fB V.yY 0#'%#+r;,ŅO¸'Fa@ f4M(,fHЃwm۫ՌBߔFyW3|x~K#:1wklw!*9-$lu?KbI*o,Ћ%s+!Y']DHI¨̔ԨDnDPܪz/kESǮF]TJ"l17|C F _ζV}"BkeDO H)kB0>m;5liR698ξn΂1Wӯ^_X*Yl%bXF@-qfħWm>|,oZJ"0BtC)!8~`3Wσþ:n.TM(exک/8e-^gz51J~,@! o2=VXb<rggN[W@f# Eҁ #rRRxDZCKjNxX֗N@\4t䱕G!{V~º9 _%{[߲,^AqD3 ܧBO79c3gׄ[y]#I❧+1?W ͆Y$dLw8PMlWV/dD?In(…; Q-N2I66u-:}|,šK ΞxN`.k'H0|th/&H3 劄x" m}2۲X8%Y{0_1]T ϓc=94Unf"]s ;3)) &\iS ?Hl\_C%vK1a~ S_..g})p%4/o/}P2b̒E RUxƿar:M|CoTLX;y U7-VW]eOs2 5u"/љɎԄ7_9Z; 0%S`%T6ޱі淂:c^[pc^ &ݐ'8n?Ѭd%6hDaF41rt$+PǗ6 W7@j2#S + (ƤHrwn;1ܭ8.3Y܎(] ?P {С+_%bd ۹ 54zv1v(<mPWMA`>Yr$ym?k0c<~v-@dlzOFP"Xm#KŒz  Ȗ6o+ .;`kn\  v!ʂaRPl`42Sa{-GmŐhlūƖrtzhY3[^Q{*ƽP^Q˞ԟɤ|6xcnXY(Be>Rf-fB*lȞe K5i Y3a䁙^x˲Iu׫˒]4xr9+x 9Iu@6/- 1[yәB/o4W}arٛpXH(t!(ͅ{ zEm҉ v~:+f!v .9clyC&L0h'2!w7`A,3>4c/+;cO= oQwG͟8/Xam?Ζ[ӴvAɗ-ҬY7' J~.3đ>Cك~r21ƊjoDŖMM/PZ+\8O7RB{Pdt/z)[yKDNsUJ9zaI5ݧxb|~*n Dɋ#7FlLsZ1ijn%2pDX)IҟaIrO#RHC$ V=&ilH9; ׽/of!Gȥ=lVhSFaQ‰Vq(hS, +s=hEc 2Avzۼ5]a$X6Z)q@kgxVlX*iWӂ,萭y .;;Z4'{aS$Jͨ_},Ѻ4+[-9+Qj7ѝqml](;gT|t(A&H`9~k"67uVJRӖ`49S=1q%}E8+ߋBt8Fɶa7zWe~ţp>+7IHk!6[ȱq6lNW6sV8Ħ-Hkl3@Yo e#@q_gARP Y7鴑;+nJĈ\޽""ƋXjU#[{~CJ -['q@~ѕU0e rc@v9sqx\K(Lc)8Pd똪~hNUoI"m9U{Cp\e,iU>6$&j䪛AȪU7'ACfMk t27(#oLܨ)&&g4`~=]! זXBa'!`ښ&1hJ?|fՊlXM!?x :? ]GMOH@M/۫M/z5 ߬~ d7 E6|0Dl R%2Yv.@B0.џ|\87j)(G({UfQT+5n<tøy3^DT%X @IxnB#+0cyH<Ӟ?szGepIx>0p%P,mB~Y cs+™/1l.O3UZA?PS';IҎ7ovy<$H=s!ZoTL'|_ xx- b.=t9A4)D2 [iN=}7?^H#҇b?}d F11x@JT`EW:ot41+(Tf`,0;%ΤLGZa {`JT(LxebUNU/imKW[Ԥ|Keq8< A\P{k\= [h`u:"$)gQ$ !=(.NY$f/ ;hYCmNLDmi/lՙ‰\(h~K&3BǮd/X̜:| [<+íW)& +[.v Ef.?OK  0CQPyʼ9bc~#;r}wjU#@Q7$2UA oByf|&p@T'6<i{#6,=/*B# 1T-XpCϢu6y]D:fBN)Yv\ ;ۂ?IlI |kzOyAËvyTLY6*u=m8b4ڽ`j .-{$:rF "MC9@4H+&5q`\@ɷF9LjV/JZ/I\EJP'gZG9MG~ec=G~qolҕ}J*m G>9@@ۉdZ9};+ T1 pQ>,$41gU(`^։WtER L-چ'QEW#5]®d-KW;IA }:ԅZavsMӳQ߃{N> 4_\WEoz#en S8{ɮPfg/9pq JTC]qR~ؖ< VRVp@p@ Fs2W(Oi鋥Za؉XI-7l5[lZHm, d.eP^h%ޖ9o]J5ڹsnY:J.@~Nv3$.cmҠuÅ4J ꃫCqjT ֯&쬐 GƦ$uSr{Isu2O0iár[Hon (_T/R/.頖2DW2ch.ɑ"E0<{0eRq*PYR0|M jbS8ژ]&˹|sm"LR676u_26Rɘ ;@?iT2pπ{S6ɈA Պe\pzK9Jc($ӕ`ybPh$41xvZRH."q ikOqjM/i( Nu)7Ql}p-B:-{_ t^k%} ~ = 1v G;a/VsMı/m[M\R:\6TaNj(=z[.T_zW)erv.ȴºc92&t?4c$*gT-U)Ŧ/`ޞA5M 0jj"nMZh$57ት9B bl~r68;N &8Ql>}oR*+#߲΁7'kk$De\ ,5Mj;ʋRMIH.Ezh4YWdܭZL%P[lY  'q~&Mhz@db!X[#b,rat0 YBGxEq67L9,,Uh0|ٛtcW\'-[DsL;2urK_EqB ] I7zYE-nQn};jιB D5+^h F8sbI%-gUA*dB"gdzNͻI,n`b%ŕ(fĭC;`=BBcYCE@[.Ѵ!NkW;_;70goPB<҂0q_sR I 5C]l R\"V6(9 g\WkLc՝QһT;T{Ȗqߤv$}%:cKtxtm aFҚqI9cۍgz]z:N='Dfw,7.!l}GOֺ◼1 0M}7+soS;I fDy0My̶8(8k1gSPbϣƄ6)vl֑QԾ>v u( Ys 3 5 qx.D ? 4X6d$)Hm,\-H<>L~} .9@ .cWv+5s6v@Ni( 3K`^^'_pD=rYȳz=P! ttUJj]3V ko2q0D'b]c`*2XTw ~ӋP1>ϦBB܍Ci!`9 lE{!ktMJInY}$bKn;JB,赣9[*_3,(RH>Q5M5Ĩ +u]ubBO@W}^(xJ xVϚ= Bğɣ?Mb-CzQei?XCy ;^T/-NX_%0%_SyKrpjJ6r1 I_}ǟkɵU>vG{~}6EzD%Gp^K|$hIߝk SS  WUP7ۏBWup"**zʻ ȑjEASSu]>ILBU 1~ku+bk*߁F9/{'ЗC+yAnVRI6i\Plv0"kT (c$є[s+-tۭйLY^C] fi OPQ'8I5ww vQϫdN 4{~ߵk2U)z7ǵ?X,j=wVщIF^2ԩȕn ' ZO90ګ !Mx(V+tw!ețu3{Wٍ{wӘ~3e<̴VSz 7-{!u(OJ[0w6d~ ̭tg6)S|Zy֑gصw AUW~y!9LIi f2]4hwzn`G14l'D}h`{RWrQ;wZՑx|?aG0wPFS|7.N־w.sC=LSrv"?U/jt.nSUŴ)qT\|cG}!Ae[G-cn;Ϸ`dG6ܸR߄"SfVC@6A~e8-akZͶ?Z}ChJ?WbCm} vSq|TgJ.O̬Ӷ}_ZPz EHFn!F壂7at(QFbf/#qЀ5AS ዱ)! ua bmy~BNZ0UeN H%G8KI*SkE~K /hZcj!2|9Iu+|acVC;yf Tʋ3$׺W 1Bi}(B O0bp5/t+Y'2dKsBMD"pI;meRk :{2[?ALhkoͫ!mxr6;Rʜr /tq h8>ÂH.3V1]i93Psε+DyHk.1)V0D@e=Ec?2PdOG0Нki#pGhS&ɉbg ^jҺ- ,II`U+wB,&M iڱ.G[ ,;"~8يVonRejI[A9Y cp)8Ȃp2վLc)-]NE u1cH1ߕG{" ɖ'uy͉FL}Pb)R#H`)Q > vM>DBEżeZ$1,ө|=eCut-4t.& 8ukL(ū)4D$ks Vn3suEaBg= C4Uf1*Y:>jP1ދXIcG}hz\Lzc/~WK{u;ϯ]}ʑRDDfȴ|yi[$|'q }f_!Ǻ;Deۗ$Df*Dw3{~F}h:Z,ĵ.w1 rx[3:b -+AZ4=⓴ HQru'$<:Ke@c- 2aOV u4TFW  f+=rC%=~*Bfjzxr򌼶xz`;.!^0Uه'@w"%b9w.^dQ6̂ʙ? %oad"tЋ&;:k0&bTxčԝcW?+VX' r=;"9:1a(F[T ehlwj!QosزtI@6G?cZ[Q1+ %sz0G-bT<_ZZ!>7>*ZEn9hg;-1Uid,$*Pz+f8U ..Kt!A+7[f$펦`QR&B ,cnBa]$9٠_A,.G.3~PʛGHmC9|" Hz&)|^W(V_#LI>44v%(qh+X,;B4_͟ y l%-QT@B˹t]U9av#ơh*::xr>/(;n$mZߝJ?Ҟ،?@"`~0cLXKȳ &p nu TgKHGouӋxH8xk1*`/I )>9gؿ7 -y`Yg9ZaTy Iބп8 ow-<62t+L7CfxmJ$"vV܁!6KSI!VFf.MіeGR1y$8-/aߺz9rS7S]@xs?''?MO,ԒJR@Km]t!o֭x- H2unƀݴ%=O^F*xê^O0qbǀ"9 X#eIh o=s V$T06A4T9跆~_ݵNa~!6y4W T-륋:pCyCdzy _˷3)d–pyO߇k%8EMus~O…VzBQc W͋<5^&-:h?ʋ/46lBH m E$8qgb:rO$KT*ծ#dC0ː p"ky(lᑋ(ӫK0E"=܄dI<(dV8:H d htϜhM.a_q6WEK-ie3Ӵ$58o: ] ڙ\}M;zkF~$Tt5ُM]4]_l=z7.[]ћҊWMDqgҞ'@*Ѿ; ڻᣄqz;tO 0h_U&E*7*BU K?u>0{%O+)3082*zVb?/ 1{p%dDs7K˜9+Xr5}wl-C+ZQSMQ6?'chKo Z馹uzjKg=\Sq%?>Zy' +s]HoR?=!bʉp 0Trc2לU޹!Yn)pΰ! ~\ rAe1w!Oܭ\ʪ v?NLjĥ6~<P]EQFM=λ5=fRDc}QKo!4Z ymKi)"cjOTۣ}e3ޖSGzZ򳥟Ր|dr< /4pszĞu~Zsq;j7`˚D=3ABFВ bV~o܇ئ8~*.+x/1‰Y`v_{~x%0hg\ r"7L^̗C BP>N ѦɒZ(Mkn^tfi!8.'\DC?aD:׭>ȀK5~p3_{ :A-_XPwWɄGo.C+b燧a #u17aw&ͥm aOy7Ϗ7ǀ]yR8$bZMCoJEN4Od/hWQwL,<> M@jIqZ\tWHۊH{ gJ5HCHfՇ]Q0rcXMIv#<hsk2=ΡVGn7RP~nF^%'y3mzB/hN;'mz sg<@ mv`,)v0 (m@:$3 ~rmEkzY 2ߘ' 3Nr:c2wy2 N#Ccmsasե\< i?GXu~Ȉ-O#-9d 7 rqHM^}܎L-'AbuFY5i}^b)U 715o"#aoý-7` v:n̒ seP7QZr +ST`'- Xˡl!Ugp˕k&&Jsq}y PA^mMfH+ՃawUܧdž@gĤeΝB'ڻZ椯^b%`T>l?K\lP&|́{btIa?Kyb2jb]-XD+lsBD3mlV {Ydrkui! ۨCh~_Ak r6T QƏMJ4oWX+|+SSࠍσqkPLChN1* ΄X)=Fm5Kd j-IQ"RFw ԗ̈ 0{ITM]}\qZL(1pyyl+7_.bo\\gyJoQ_ZwKC؃@/g['kYqLԿI\Bf!dgc$b=\5C&88Pt#Q9IQ M~A]MEOq[u_B@5sk*#.bC]4Gz'7a0BY}}Tj=IRp67a.Vy8DnWD{&ʎ se$G43SF[m6"e[]%`؏" ½u F)e$qJr+m$]yy-"ȋG3"dZ-uW>{D` MȂx!E.TQ(pӉLzPP{Xl y P4!됮?D? L k2 hϞH/Qr dHt RXlvXLe31U8\1z}ueDw-@%qkϫqבY' ߙ˘܈,^G2- ?z :0#۬JrWLx޺[kcs2%[a[cO(ju]aP Bdh4L)S&ƥ kXDaG<ˍ#͋,wSok9SnP(`l dPeTd@ٲNAļ3;kF=qK|P5%g"(G{vcQtII(kMY FAkާy^CDwMeqU*3<'K˝#lZ8WG?xsqDf35Wv1R3%_7(aS{p5ez2ز z{?Pv7͞F jpr LmMh2P[OVȻ|\ d^.?`7LWwG: kܓ$vWԷOmk;a #`9qtHI.liDw-3N<OVzbXZ9mo,܈:>`)f+b^)FpR'f}bup N <#=Aʣ/]S/-ܶ[m+|ǂJ5),,%3wݪ.fcm^dd~=nE;f5d$JUdN.X3 s$+BdljCl 5O4[BswEx{D8X?Ўb='Ā]6p A}U5_SPT.R #հVtgo0}94Ե۶+gEP]g6Uy n r)`B=Z>okKߩE.yn|Oٔٮ472$LVDɼҪ 83Ge.[|nͲ3E:[tEV;H(5hNxO3uːP;1:"B(lni9p#9+`.*7Fךݝ_踼f;]Pbzʩc0˵p}w3d*˙lBDoO%5[P"2s^ՠLWfɢ&R6"Kb@ qx 9}\pJCRf&q%刦Yp(,=]q&@ۅ=@!r{t5`K;50. +B|BEjtɰfwИ8X9m',$8ͣFa(lZ>. KD;)t Y| L6UPӣ~f4'BUiGEOĎd] MONrN&Vӳ˝[d^AA4R~:b~.KܑH9ٓP™pk(+0ة?A%ngxRmqmJIvw=H,yd>{(\nHB.1nKU? 3}o^腈sN$1eި\?*"\c-m{xɷ~%~N.~"dﮟM /mkJNeK9Vd /mT+M$م\#G453 VmrG1 ͳixr@}{mC{H ޘ . Nc~H&=$X$x.z _o;sCz?_t?p!2p/<|UhE>,O"~ hj&r F4M΢cJHpjd}b`|mp͉G`FC1PuISpSBD2h 걏8xʰ=5h:KШ꣺yoe'E.30ybun{9NxL B~g4 >;o;.'bs *9*B qֽ~l']S T!2}O~Ԇn۷V243cEw'1gX'kR&*sӉhH,}^KP뢨|"\Yf[]`H ב$4p }eY?b Q}'$c7Jñ?ԁAT7h_\30zPW|SGXX041/J?4idХ9hf|5 pv'}1VG*cC; CɴCo!=ԑ, iA dZl_c%"Ӥ `sBfޗJAXY"N=ܠaI=F jMt$NawUѯyNy#pΏ]ۣLʵ>1P|M>>׃} -SI1$ZĕH^dUrv}w4[?6B46NF A5iŲ֚lGBS6{ n.MY1rl;.rJ.4 ҋuVXcKMe/rc8?2Zz\C# xegXd<`.?m]˲ e ftѱ;LssP)BVX\4P||u*>^7_I֪{>L34nE6oXwZO["fK(Vz(-Uwzs/1Q-RBI@r) #aPO:lWyM:S%cK{,}E[^M~v?"vpkYK2 "^ŖrzuY=_Oq;^qV:QQÂUt .c`7?̺o*uCFC_pӄC?6PN66p|΁Ģ,w+G\ɕQM@$Gj@(#aGP]VoclhYET-R"FR% JGzŇ93@4$uwzf<'Y2V4LDBF[f=мN(\t\Ͼ Zg_5P/^9'-lg:ywc+mmm XW3FӾ<ǁlCk9w>eΧ2K>whzc OcCZޏg1 `-;y>nf 1#]|$g?aձkz|ķ;_c۽5`K1F~{$/EŇ/ j}(4V欲E,qF:;{YŅMwRDž=զ57oΆjɕ`IO [^|*=MݬP d_1$DٯQηe Fyo,w!n] QGϻ5͎llH+rnq9K/1}5L^h+M(x0&$zŸ^czB[zEb)U k AlNfl2Md\ᢕPl-DH1fZC59|9fVd_,M9³%.^k=*` ю0 ,!lZ;vS"Y5OBLt8$d幑ŗ> h2t2T`՜f~ِ=tZ7G!%C*;Q<_A$T &f 䬮VYOφdUz#uG@QVg _!&IW410_4Ȗ^Eh,q4𡷕 8Ljb?${M#;qv0}iN `sJ`5m}#2XTi g#Ser!d.y>.l' EQ.dSx>ڬ0%Į A7-Þb0 h$)+bFjV&ܕ,$l/|,@YG2.*kuuU^Yoo̭Z/]q$Xv2t>#e^ @ifoV9-;iQ ԲJvr[1w֑؊VwM=؅U/ʼ 6jdzZq 7:VQ8|TP+lQ/o-8lΒ"ZiOhXkBŪ`YݩIBZWe'=4ѻS@:ԣs'Ql!B'<`jl"އa㊸Ž "I_˰O߼~`R ך {a0G|%pHHꍉ3M2~(sDq-h1WMLZV  fVGxv&u)|AG# :.\)e칅"u]=l+\⥗.<7)_hSr]j0\8ħ7GF,6ko`n⃆N%{9O3cz(͕'l23=rIUb7GduĴ1凾c)qށs.T~Mw1H \gB= ){<]avs糥+)YAjCI3GD+9`ꐣ~yŰ׷bͯ?c:iAi+)|e6-K`дw`?BRtZ#űnufRg]_!tNq[UPYaWqݰ8#I}<#e%'?E$˷@I2LM][Q$"L}%γ9O:b%r gn)_>IgI ?x,ʆx= QPV]}2:0C,ʿt^i]y!R5dS 3JPG*C*[ů곖?g/]:Xl0oX#%<+P@E;=S٪iW%tf{ԙf/۶G#Q1d T:vF/8 Oѧ(Өےk N3$*5Rk0ntZ¦y7CEqQUV[{AGpD"|fx?:nGy =Im^aNF)†^@a d͕7?>+:0HC<`K@:0IǕuȭ[.-~]_Sעj%q wsUFNeCg6EW qc D/&NP\7pQ"^6ٿ6t9 4_|Jb&DJpw)^J>[ˌ| ,k`[EƊBH+?8bKi'ZTPᓔ IXr]d =}?NFOҲjI5zyv8Rwc3E]pa?젷Wd[:E>3 yC#YEhp,(l:$57lW(pH 1@&{ *U h ䷈&gUgF/O0!vv\S ψ#N@lSFL?b}mQ*@iP#hg}MTlA dC\aX[U} me^֒c>=|uaNl% %D22!I g$bIS ofaV~U 9me|i JjuttU0Јq3խKiFD)Ȧed6CkH\Yj8{ Y:Bg_x~\Th}|Usx1 0^<%^9BW OГ̐dF顙ۦsab/ꛙ}3F5nx!>18:AQGV`zn{*ͅ=}א.jFÝKk 狵m#M3x{ӎRagLGii,G1+Dž Fyo~Awa{ޥXuHqĤ_P- |*je_4m5[a l+l[$`7p{:h $ILɋ6mHy$+e%JZB X0Og5LQ'lL~f2Ke: K+:zlRw43Jp?>t(ldFPq޺C˖l釣V"ؔJϳ櫗tXE[3* ή:B)RvY^RUKt~)YüHzٵ<#[DЪHofUE稧 x5_Vѭ,$9BPDХjFr$xogkʳ iF<9"UQAF?' jf"DE7}#|Ž-$E$?|5î\$ri!+t\*7M=sdX>G%?HcsZ^ܤtFa,'m#0#e6Rݐ(7;hJ=G:s_:5{F½y;ǫ2B`HA86}pyz%(GN{D,󙢫6ڨf8& 9["g4jhK5[4ޯS*SXyr2j6sua PwdPzi.j{τpސxwKltӄ`-AsYJ'hryGmSfUe  ;ωSVgd 7"(&um>q3S6 RY7\FWjzB+1s$=AJSRB|rmqP\tw6 pUQ-n b"!SNk%x.,(FZ[Y:72! ?Xt{] "] S)1{Ly$3Rp9O[h!z%f@! vi :+9ZFaA)KsrzNJAwľCleۇTg+aFv (w3ڀU1w L9~ I.Nju?,KCKY5ZJQu.vO;~~iP/VuoٷܵbsS#1xa{JUJA]!=J$F0] *$ qG58j4Zԏ۰G ''M?o3e#Mu$!D)Ewʒ9:+ jb}a ش,[dž;" NAn<,me8-,Y۳bYZ"S*ExjiOUqdB(˒A;WSʨy+_OF<@%gh8X=HWXLb(nIN1q) :ʾAkF:?m88Q"§3կtRѥnjIL]z2gmg~oܑ3̮LwJ$ef2UfQ߄`#]]"GgL"AQ1 j U/QchH*d."ywn K@ϿۊM'Q}'Z"`6;z+J7Fܣ|y #_o2 ri#K+>U37 ܨq$6f3i5\BX%(4,,XftH/ۻM @ e̋o$nFR4m kRÚlKe>K>O e&dGDD&s`Q_=ҚE@,8ƥq䇀{*PL.=Ff_ =s扶12l}O,2j]}\i?6Q%lHshzCO#~=w ˀV0iWh&'(0`߆?s1 (A*Qx͖4$/*`g"tNΣy RTFfu9QP0_x,9iU`"4w>/}:]׺&Ư DE>zbS&]~@f@bvEI>SL8-pKvĜv<CAEAwU@maJʤr _+uR6g-vM¯M(Oad$ %v85\j(w 5!\ ;UVԯB1a\ דIpJ!4v*3ge"KH/֢e`þ@{FsQ'Nznhq)@9X-{iT_<c%ī3g/ nw+T?"xэ<9a2`ޒO⹟ S_3Wt/srZ]*޲Fx!TH۹6N9x^+mxPaE#o[34;$}{dp|nE$<.VlB8KM,|f-k۝$s, N_Hzzݓ~Á|';Qb* P\b\,RgE@ۗy2hSVN^1)zyF2agwhC3b 1!uK0sL&̷۟n0]f91=4 |ηcYYJud ddtrM{g8UTjnYJJDGŭM3(z)ca!дRĢZ)d1q@w/M=3iE[Y! xxVY$SR]-.06Ĭ䊵61t·2Z&e`lZvw#@5Q~S ? iOA28"%ND#o=%?)[?_P\チ͑Z,eͤiw+;1!#R̞Fi8E ϝOMJbu bi;^mqԺ2[zAF)\>*yu~G/Dz/J0L[jˍV3}.+Qq}OQa,,'[AC.@ZDB,qv;qX.ٞ\oIWfr^&}Ɩiu-u)_7QfL]#+=Cs.q} JY tFg`.ei; F9ǂn @=^3Ha/Sx0ls\u\T,y@}$8B)bw~[OH Zٽ>G=<1qrVu(w7o*SpqJ:^yhvsZg( %$?4]3!_(!=#z'C$V˥"b5l. t ?M{Dʄʳ/W:MRFq|vf۬L6nI61ݾ=^ Hm~k߬sڳc8](e킾L#4_w wW'ko 7GDrZU߃zoa ns{0c̦r%raiCetQJ{Mګد~)k&s)B%,+ehLi X!Q|es WJ.d Qz=ү*h+W!!܌V<> ]ϱ;r)da[xģ:q,6XшwZRiVJ `䧥%_pť=!'E|D@..Nۈ~x(b@4rdAߕO0`jH 򠾃A `efDN |0O$ZpySπ]Ԁ,(S (_:m`IA^9zifz LlngUJVOmA\qŷ"3g$)ӀbuQF=ЬX#Q/{-UFag+Zigr6TAT)eUjsHr ݪDz2ͺ/;c%9c+4 6CjQ@|[y_NI*AİtĜ΋96D֩_2?Ġ\l5].)pYJ>=0Iv8]y?ՏfH)y,jf,3F$3-̡")oa!(ŜM:`TSv$i*tlQlSO]*QVieꝊX ǎd$r}ys) *+[ŏ{KiS )vVY.w\#㦉g2UҜa%[IjSK.n@$(o(n}͇88G.e"%>є+^BHBjQiB;b(%kQ\%_h+ api[TwI z?٣l-bh1#dH6UwbVrL8,.)|_K NEn ҏ/:%r!#8`4tuYP]g>1 ZhN[gؚSJ}Y-UK]6 4T[Dn,D9[`;]:^`01 3SrP  Y* CT.qyteLħm]5^[׳~z|$3eUޙǎuY-Wϵ$*kM< l(8S.TLIe3|%(i9@$+ J-|81% )ڢ%GqcP۴a_\o*0@2qh-7}K?c1uA gI5;'(z޻RLCU-|˗a- Jx9,p,s "K=xQA?꽿JOaz='Gfhٞ,h\S% axc;Ur}LYhoo%Md(SW^/?Y^9;k !2>C;M;B|"-jXfZMt}AL8n ek UvHa4~Q:7^= @]_OW{˿XaRm0ՙMd~Q@s |9W8J"3WR˃j;DIJ Ԅ:y.x`IJj@GR]ˎ6Tt_h u=zMEWH=DtmH7 (ݫ 5vjrV.:`NȺ?hsC!TJXѳzf-;gkXQ'0Z*xz h&u[>^l!n#|}d.ʜAyDPꐞf&D.'c!t ,&=m 6nlgy\'-8ped'Y K%o/2=왉I6<;7հ1톞iH$l7-1Fvɑ]BEW-ƜCWN閈2@@5B1"zäFuZt\X0>!! W`>o GޜTwC+f?0˯wDf'#{5sxs QU&_/q2wS\u*r$hp[;#'a_m{`_uQ{ t0]Q3^⃣4wqһ e)f wJˬx&݊l>A2q魇3ǭz#!qŹdbES@ĉZ^gGcZ)ΠJـ$PFҀ lj"({Y6}[)mZVo$h]2qd9|P)x9 "C X9K6~NH[>@zͮ5s<@<8o^!M7-{kmVvVsp&?L, .挘h`RwK:hGapƔ88F>%{Q^i5 Ĕ2v?.ciޫLJx0cPnԔmi!d.#SU}qpRŷ_DU4');lX<6@=ā^swC%ooR{E}঴ ƐWpjQaa%lcSF4wDcMrn䛑(>y3hÔ^;6͂@CY& YIȹJh= jc<IJ1g`U9APc跆:i^Y AXV:?Go PT1_{Hn܅D|izcM5diޖ;#mv[K"lqeK+qh ]g~몑n z~ukAA+e$ 1#m ʠ) 'Q7/~7?[bcl\~?ob3Q;W_A{T[A<0ф'AijEՖf,L.P17n,2BǡaU]&3匍W:Lh w#Q&@`lrx7G&C3Յy.iIKԙw>@CvW z7$XKz#*Y8Tl8;R#T vG?8DM⾙!Y+T>V 1;CJ׳K+V$ X8 ~˒x`cXaL05z~6)#b" U%o?.hbFkmQm':Z(e,H*dR%bMDIw#bXhc`sΝJn24N&of{%qf=wImIveF-PRcI?'2~eűn0;oK=JH/2# Xb+=7izJ<.z}Պ70z׺.XyjmHӷ<*S.UŅ-W@=E/І G)|3#D,=U"S6)e6 zum"Eݾ.1R~:az,wZT+fZՃ!|!dG=oGEJ6g! l(uFZC:˙<~7xZ!qJ!qÅ=L)%S Wjl$wg?a (RbTI–^,Gt #1xp,p"f;'G4-/߶2F+,*mbuz Cq#PF"w@*v;%+nNj%cf]%Ȳ?J~ޏ \6EJu{Bc*nxq75r?9#:mpSCTх*v=JCھ3:%RCS##qrA=cPQqx3hp5FDo^7*b=J5}Pn ;U%S6faD4/[#aP^`e1I\A[IVrd:^hO=|>{I%eTƞ}T9x6  Pz_w+:t=MĚ-[}4,&Ne8XOEkQU$JtG m4@aG@4%dk FmvtGy'Uܵ<' [|=Ybz]!w$",N{8,)b@hܶ/|6T]*9vm ~1_ }-B۵QLdbZx܆$4)fB~_eͦC/g( Q&mʟÆkd{<^^fyy= =*JTG#2wl !w^d,Lp;ZE1l\CJEx(>}H얓uaWDA!bozS:ɨrf ,/lF@Zm(7p-\g`xCi1Q>>̿v$SM7Ò]"Dٯ.&U4d{HEWO#f*P>h^T!=uO3h~2I^G] Fw- `'X81i: d^|[1=l؃zdZ@ݢ%$sP">i|pz'M4le dž?}R:ƌN73UAdi6}k95M&jlmw5BAnkB3*<\¥Lc˂b.[=X\~]O +fZXXHfȻ=n.HA{c!+}Z: I(DFJTd(w¹EBo=άhdЮi7ubĖ O3fEw'4^'aTO>j5X*- ^QoNSk7$`wyč.Ӕ%K^~qD}~-\4{2/"REIV?X&NRAB\F1847Rr@|kZ׆O~0b 4պ- 77Yf-C, lw33]2H,љo';[9pϷ}h;ΓXӤ$9B=F@ꉥeJp$+Զ D+ȭ~9aI)׌4B?ţr1Jt4>߈:drzk5WԂTR8:,;AdjH+&ߧ\A6)S8@LRSj5?#D?.X]{!0aMi=2mP$ttcurf^/'h@}|~+F/BW2 tInmq9~5ȡ0Ieᆓ%CQ۩5,c* |'l v0Yu]{e9Fwll-&Nteh15@:Ջ _>z/ͨa ̕U DMțHnz&AÐTӐ8& TEDMں[;tsK.m$E#R2/&.z8>tJvN`dAsDInnȜD & =!?RR,yEǏtuFSvY{y2x`5)oBMt?"<`.䁝ݰ5$2zaO6ѩ R@+LfUH`78(r`11J>\k7y&.1nLw PBTGpJg-̢f^Ѡ4H}sQ[OFB :(Y p^ T4)#]\joIRH#.*z[Z/:BdLG/v[Bi'0{6;QoHtH@OC@@Y!Ռ{sMרp4?glRPoswPCDzu4*n{b v6m+k$ͮ*N \@X⫇ TlƄ)8;ۓ~춗DFled6! 8˹5;>ȮW^Iͮ9=fJ5 Q ZI{UeJ}PR^;Aʠ%Vj" 34e͕)=j& d%z'ZDIIAe,B`7A,Bؾ=+C$hS3-kǿ _ߔe#/uwA(Ɯb!b @t5D~s[Ic!Ha%Ku`׺ T3$o%ćwjMr4,3݊^2("ȤAe0n94*Is꧟ϵT Z/]zP[+{HduX 6xH# WIi!a#CQߢNwb>g/+-= ߤr*zJ3ÓO [WjRS}Cޥ⣮bU9 m'%fMCxū]ɱ u}݃.͗U_Cjv)jԃટ:|+%'F6ǿ5hlkP\s@ MM;ősB<56[uI|;qLWہ/ϑ 4/wZ 'R<0@2~*ܛy; t.l&(]Rʏ<}~+~hjݐ:|:.bĻ6ǿ/qM)lrk)lpPWOnWJRLRi?uW^'It;m]#@5>Y 2JG :Gj@ȋ[mG܇m/>/Ĵ3X|ˈLi;=DM{Z պh#2lNB ;OqD!C ߋqSfYԇG<in>?Uj\=f;/G_~P1Cv% 2 \僼2`Xpn_aLɆ45?l{d'6HJPbܕ>ONV4LU.p VwW,XBԹ^`k[@5rbR#%hsSeyvuQz{Q<]I!Rĩz~o9^x <~mKΠ==5힦z^+I fR)Q‡Ӣmm.9u6 FQy_C9Knܫq35B3IkbģbPWV%"9=MPXvɃY9)0䝘j-GmF3~&~#84*0f/"srCٲC'N1a}ifCy:gVf (UeCtI?"> >*[h/3ݛ^[&g rU@AZ FqB{3V?O oX!VK0 A# Ig;_߇))oLے𵻽fG"=ުxuq݁j+$5`<Q5 mb)U;XEt^(> Qqu9UwAdB*.z ٲ0bM̮#4èߧWR 1|1TH0<۲ZѼLDJ=ܠI#<<g!lc*2eڛK@#4TXXFVtw/o΅r?l0:B.*?0ԔfyQ`bTmΞb׊z? ֘h\ =0--{&klԐ]W=#GO n6][Pz7,֛͢ɕ8R9 FPA)@RnyL"<ӲH i}L|83[:t}ɶAܱ<[w!M~þM~$뺈H ԗ&4l _--8Aк'/̓6ϚT*{DB<ox{[}v]DNSCYS#:ԋ 繝Z6ԾĻp 6utN.s7oobA ĘK4`1X=Տ9ܫsE9<6]I8p\DHؾwPO$c~df=X(>*Fi9s?2]؉4r~#抎B$b }jdO9V9,qU*h&uƋUߪQJo~j5t:#W*[exٓpLHH38ZVFVEebM[]ZRBydSvbM>V^=UشqcNF_[|87l/B@ʂ=bxo٤XOMX"̈k뇐Y[oi;p`$}̻,NYэɩcOH ́!Lr9TOKܡgbl<]ѭՇIvkdk8M{ tcL,@"pHYd)W-qݗfyi 鶿k2NnmgԄ @x?)(;,>AwB0, ;6WLڙXfYeaPtP1D[$b=B*4A`F)#>cTMA.A6%Kzp9b粷 퐋HMɥUY3a7HI ҧT8+]Ġ£M>pI6ˆFKs?jg~TokO4@GhȚچXZ2eH ;@_]&ݍՍUdipQa?ؾP+w*,NQ|&DOAkKRK y]RS7x/TTzFccœ_*z)0Y .omwɹ$ijC;I#T*i2kGgf%5*JՠA|:ҝ3ͷ8<:s)*r>V_Q*r-N_+2n^"Py)3r d岻6KRЋo*|gq*PdS3?vDz)s6[[x[Z|fdN|q-3d 9W׍mZSu _ ◄1s_[-i/(yD×mcJ xN;1D`7ݸ`y0 59SVUc`ȥYmjp4J9:H1 b9 b(#!Tsh$钟aadjM1"tIǫ_C1aJnI@G_E yQ HW?$zetHf!!>n6]7ۅ>X:Gz bf|ꫬ.E۾Kp󛘎 d.8ϭL,xK~$+>Q%m,[Cc8)dkp$#X˩B-D٥7f+4 ;ˡ{po3M <"7xHI͸,]. uo..u0(D$p:|ʻ4t&73ٝYYi) *B'S*Ro8[oo*5MrJ?1u hW*M5B-˰=IO]3 eamMSѯ-em+jmvoOE 9z7U4Uv( ?e䚶V0vlF'(hX=1.lSibF.5$˶R6PQ^1kgR \s'܃e RrIƇjh@/%^3)5I0vLF/>3 o^3MNQ l>21AQ).Ӣ8K9ɺ Xy,,X:3:mSSi]Ƙ&'ц9&c;vreV% 9SC#8nTSbYm $^͖(o:ܱZp :yc$YVwYo O;Ŧg0O*v .zBɐDU&ATLlm=eϾWi]ZCK3Y7@zy=dE Hg#/O9pY:aO0}ʢIZG _9.`hu2ʒ\ CGGGNu +zR`F{P?c<["}ޮ5%p;ﭥ?VzPo #Nvt()-guDR9p˂ov0.X_&٘q%–ooĿJ;lXM@{tơiH ?waioÖ ZImWtb([ꅂ!\w1ֽZA9 X78"aWGm(GH8=MX!Xk+k6S+fk:1= 7M1cÓg|kK>f ev mNad;W=!J\Qs|)hĞKOahaq*gU@{ǩ?]nP9IqF?͓ZNG-){n1ٶ 8Uoh *(*1C}A3+( fQ |EaMiFf_MQ=`k*=8x7[r~nc|,Bܘ+9)LZћ~sIc{v`ݴ;X-9t5VUcխM_&mp"sD0-.$];a(f0+yPL%|_|[@c,gY  &wWΨ3~ͦZJ{O]J*iZ۟Ca'&sŗQQlO` >`>$|L@*NX̀NHO-ȗ"04@SEa+\@U stˆ>kH@COu4m2bБZ9,!g h{W?!mne)E7[5Tdma E6h&T!0q &X;+C;쪼K\aLnL~Fxd&k¬ڥl>voeralT,. 2&,!7bJ|1P&]gJ/1U?GnhtAÐ'erru5&FLJ)-)"MP:ѼVF KKO + b7`.^/R$o9Ѐ㫏EF8FrhB/茑D$WOQ p:?2S*3̵䢈jL:#Cn; VnSeӧ ׷Si5u0CMqclBVBa1ƥc*{]l':Zቸi~>;e&/ 5/1jpV@=i!{n=&T# x+os:xh> sF̊^xM^=إњ@AjQ2W'P{ ~5XZWcN1^\%Qc(̓.}/((YtL4 ҏya?;pEȊb-m ⠟a.ٿ Q(>YRNf5NGuT&5cU:M Th9Z[u#I'_B#vBL;C%%&Y[}60ᒘ;љu.|CqX?rf^MbrI-wϲ}HRk{&&bΰ%~,{0T9OyUUDl#:`@2ZZR @Ew}#[ Q]'CܡhTD\R[RmEm7KJ3\bL%A̍AGF@Ua+qeX(_δy̨whŕz\OgEJ)F@2.~*T%pl 0:(yaGߡDH V V4%΄$+ޮ L‚p9)zx"RjWYYW<sb0,5^f3CBrfc4J1 jy) CvxσT XtpN'WlT"xeݵqh2T CRwlF Ra➄,zOx#Q P .RHPF8S0u0~eHyP7ts91c ;e(Kj(m `U&6?W-۶;tّ*m1 ?q95.ly\S`;=ɉy ܜK^ \2P͋ krKx9NAbEkrL>LB 9l;QBل,-zN0ezkmU4v>J;ٙ:ES%*u*8du#J> U\BHWY8BdƆ Qp}Ft֕|H0z<:Dd) }+z9,[~6m9ʔ]|`-*EP-B)~ v ʱ `=UY)R?Nd.\ҢA5/qـ ;1m+3X0)X's;\V b[!ñ5s%t^{JZ#1aQAS4j|[ڑ6=iNJXvِ>V]a(8 F' PQ/9BӋj9\4mO=ld!3n]v<0x%09ZzqS2 0S!D1HɳI z4`\3ˎWvA4et6\OϖVmAA%Cvظ%.@J. SVF7ڝQ==߰#{X,z}8{/oW[RlWK1e*a&E|ú'*;G,A3R"N%b$W>n֬*R%U h;NKi8}kqdnhkT43'K0Bgv/ظ#Ig`M86{Yzi-5n1&.9:֎Fϓ.d=?+X/)Z7ub^#Ki"4|oV Ci~8_5i8ϫ:tz`m!jtRG"j ^J O, 23i>$-!EN=ckiUSޡroEMX#3ׅ+aq|'_9nxl!2~A%LPT,Pf(nԘHm wuTϫ\g,_!*qtc<\-"m;ǝᱻnnm>O K͝N=K=Lk#?KY|cZy"꾝 b$ C)l m`R}~sBLQRn,l+42@s$X$) Y@: cQr;#dog< bU񑝘xp`t@]KG4iTJbbH^ Ec`~U+ -v&PG8^Qʤo_?&H|E*nji㨴Lo@]::8N*c47 PzK)THEG'sX(<+wVeQ$=8, <໘XSKUCY3/f݅{F{,gW[kP|k+(/_Uvx/b\ PҚFr,H= `FZ|yL2zZvjS*78UT Żc_ń̠S4FErm?ߥmd( ܼf dT%"ZoBςa擨5DuJUJdvm]u{ ﵨ>e7o]jʑY;MC* -J.V"WU3S= .M9ϜÙ)@:mfbjtu`I#~~>SA:@ JupqicgYʌǑEMW{Nj>Du\>"V:3iU 5.E ,SGc6_R[K@ID NO,@ $uNfĉLX(4?۬C.DᴷqSvE`e ίT"AĴEGy:[>ņJފ^!SР#M:8v !GuU'ԜUQ b('D+s!U>ߏt'ԅCm~P')mJۛV9Svalv>RAk3jQK$O @NCꦗݕS.o"<:))-_m_546Xrlw\D[i?ȳkU3l7p7/{V|$ه1}>[N2 +w`mEWq%7b`A\/drE&;k#5_O؝uV&'F)``Gsr\DR}Mɴ=LV4!*R-=hyu3%͚ d8׎8kb R{Z@ [g עmԾ?/]cL[ l(t,s}F M]Ft&y{{TV,vkN TDnsy0|R,p53e]<R B6eoQyXG$ً{<I"E :T 5OFeGm%H+rbm oc$yF-tcXˬ1H|? Ծ^a\8 x̹I%Ԩz.58Mߖ㣕r">jmv9Ct56 v2NE0QEUytSte}w (UKRS6Oju ps%zU^@Lu"s1|l+NxE$<(ޗ,sk¿* -p XQ^9*pP$wR g:HSf-H'm5#B~f39LUFv^[*C^!bdFу,'AՄ `*A),Qǚ94ɍe)|-iqot%S-vG–ocNuG%UͬUE=( ػ).U\#Ck 'Vs1C'_N{A%5_;O(<ҫ/t#c }Q"Jc#Rqu꾺> |\+\}m(vh\5? UH]k D#A>_j`u*Etk8DjGi" ޿YZI%6CX{ bͼ0dBF;@ٳa,|&9eEM6cZXtV6q(R*Y{0c} 0cA/}xVt_Dߥ'Bȷ,0* 177΂,XX;,/#w+U.6x8\|3 ۖpB;eLjq{Q`GMAr8`6 \̲ʅIuev%<@Mp0r See\Yεii* /+bj}b_VL<1Q,׈)\[\OæBb︜*lS\y$Zvq[pzI+ yDZw]݅+3e1eZDONFZMi)wyWy^?u\YX,ZI/hU ? Iu3yghM5 mRG_$͜INQIsD1…EI{s8MGa:]IUm{a'q"G`+u^@.=x4ɄT|U9Lx?~?-NjY=ǼN1#X BEAv ù͔\T| Y$"qdfF{Ƞ=$>xQLS&mϠ&Źw}ءȋT18m ?Z|\cfqB7M$b>[N]t=#;ƃ#oP$8㝄Ӡ<`e[l%u؄KY1@.#BveXθzJu,r0c}7U n'C&>ȑ|ߤ|SDK#|#JQ|o˫BF$F\\4P=|v3BkqdG?;7+c/ju*7_9z^o@7#zY`j;͔[=7$~%rC xZu2gNQ 8=d :2E>H vd&v:۬1V%ALȭZ~wИY ]htbĎ߫q XoFz*8)3;AԼrLeRVw!?$$dzmŬ(7w$36ꂣAjթՆqotxяm L)kDq`]2mq{9G wƈ'(鹭ٷc4"#5δ@:.QL|m`DK {SG;: CPi`Mz. WGSC0c\y(Uɠ. Ype<yň%2@ HR,eiNun}n&f/pbRxMJ]֫1ς&DEYZ\cWO瘴:K Mi:eZc*ّPkRK6_Vuv(]q :V,YAA-BtNRj'Gio+K*otI8wY`A,H[BQ[O<ݦ;.j[&a퉘Rji I "Z|14bޥ/jk1`RU2?60:5g+i"RGlg#U 񿨢z;=yq[\/4i4>,£ih(jՋp>7uCDICz Աɂ5 ]nW)p4a2o0ll46~?]>D,v`C3Zj=TVyZ%W@hcͮd n?gIMoXX-j0 Ld/a 2T~ge@ +'0FXC)UC9x弻0)BG& H3KFAS@)$K]' !؞c 2bg[כu{Z~#}|'bHRs9 Vo]kv8! /deVÿKD8f#Ω2kxndUf}dMTU+1 Tbfa}H.Ć+oPdRVvbEs\@KLUb4@xޠW0=oԐB\ݒBGm5+LۢܽQ?>v7Ӈy_Yד"'msV;Ш|Uw64g r =:ɖȵi>VR 9QE /;hT SX&Zx"hb6H`ÔpXcO:]>),-eWScrb bMg@t$ =3H3 @bUScLPj0yCc[R8 CI1 A108Ҳ';^/<}Jöd4Exk\rZ`ΒXOa#uf>Ξ5F)6ZDJhNp/`gh ś RBry\$BZ{ R"o?HF8BCTƙ`D(T%kY=#g3gv&vtp_RU! eݬ]aއNC}2W fvˀL,T#dEô&}[O hGo+F:!$7i[ d5>l-S>$ŀNxōF/K/RM\gRL?i]:wʪ#.2xN'X\⒖EqeZ.NDgPܲ򫩠 DB>S "u s>4HF=fW<<]fyR \h~|boe&RjL8%_o/^t'#>E 3*c-yQ KbpzCZar!܅wl{LWwݝz7|s e?p;g ,>}E=~7ظn^"G_ux.Eגøbb.ZBzݠD//l&<rHxq(pA<PҨf&& 7^r{ I`,6cEh3k2fL5?ARSU'_ll{Mx/9tTW;#hF A0\?^ق6M0?;Q}r4l$$ `)Lp ?-L"[i⯾AjjݎKTz2'Kz%:]׎Qf]z6ؾ;W{f1\>D̐JXH>rv䈐XM4h45]ǖ)˗ ~g2]- wVr7R)=9#Hϙe"yK|UqYku!ԷϰDr>kzj6/xk~lzk?$D5O;ϕ)N$mtp09mBzJIg0c-%X(MUgI}tn}E73ط^`CU,H2Df+L:BQ#,[(?2ڤ i3b-]uvmnL7_3jC,,GVpB>e^ C[#g鿨zH*r-=^/3wpE^wo_3OW~H9ʞyӰpI2FmKRsKe(MP'l'S|TZܧ77 3愊I8n7m@b߬S }; 3V*Chp(c;V^/ QKUl)[LTlW@\^Yt"H_Ke HJ%¶GP?,e0ϝ )R)QZaVj+"M<3x4* Y~~!I4r9^kJU=t'솻,v@;Qɩ܏:jH+G8]t ĈPj\Ӓi#k#ٌmeC?0 <౜/BQMBرn / b a#B}>)~|=ݴ>w>u.$=W|+l;[/2g UXjR¶:]{zru:‚.Q\CjKK\@ަ=X28U6B0U*Z~J[T|z<岉cy?G3%!w/Sf'cPO](Z꧋'SC:g(n<3.2M3Vױ ]ߍ _;17V:M|+go)K'x0jϮiE?\܄)sY|% ہ)Fɣ ySܱ2VncKM[].fF,1TDlVL\O õg]M7fefڡuh Rd`rDZϡCaJ>X<蓀T#4Aݻn;'bgWџ7@m?DĉVEd(T8R} <"Cc! ``r1;Odv߅UKvQTk822a9k)[Bk>5FCm]q|&:q[B(>TU[yFd9Jw(tGx7l ޔ%FHvĔ m1甂 *ҚhDUɇԱQ_Vg8ʰ7)# k_< 4nOmKd⫪:-~ fY-( $"4k'Λ)o&')Y,u!BtLBR11ɌP+Sluef lA"s)$`(%jdՍV#1zvYҷ?)BX M36eudƀ6g=-AZ4A(~6V'߳.$Up.[l>+/^Bd3C9pB<(ce^XjD?Jsg|jbŊ xR&Zea_fg4өӾԈirr>(Upk4ncs+G^0+Us_7 ZP;:rLYkpb~xOzg?JEkQZ~ՐgJXG>ZRKbI育|IgOS^DMLX-+=io'y޵86zeˮ?ȿ_G{NaÜfnZq(af̞7:P\ӋSY dnby2vϗJY+2`% lпh $$ۍN|LcbEmb5)fԹ< M) {m_zK﫲۰3oɿ$ݥ똻R?jΈ׉Ű OhIC;6 KXh’*@yeܰ\wX Bv+zߔB!'_g<:p~>_*qms] Mٔ f⡯2ֈ=`rJ ŜL#,'AT4w֭?^˗:fC )|l4h0d PimqCk/G Y c3 oѨ>Yώ[1hO6z Pv(N)="xxrxs| 8fpFX׽FJ3cq(Ը$>9|<~yOĶ.'nE+&w`G>/+wK)aGn$!N0YY l͂-'Ge2lE#}cyT { ým5̺ mKu۠,oE=;>i=rzSa#WΣV&3[W~i\LЇhX', >Mx f_fHǟ i"W+յƾmSܠxl! 6bx"V9Qѯ L< g kHvQbGnUҾ⅒̊|QC"hre>Ԍ|sfF*pl<(@CMa!7@NO\cBS]b Vl^nyH0Ҥ䵳dư1n0K7,eVw/vI`̄Gh5ӗOq|-!$O/E+Wɩ'+G_)ngw@Rp'\> _ K}6 G sD](}8P'se%?Zm9hbqvXJAP:Gs2om?Сz-"{IAnDHQzT[f)Qwt'g~1ٛ~$Շ9=0Y'kjl( 1#lO' *]󴂅PFC{+pTTΘnL}%'9겙xӦ jx9ĝ wNo8 vě=s֜o:_gEwŭQ!_tmBeT![rV3djj_ g|z0Cn೙Y #|-xFR(%[+E oxa\0Nr`IuGFkn௮G:85 ]&j6,Q=uk_F]b |Bq\rD@7c+ෟn^X9gZXݎuȶTL|Ғj{G.[+ŷ ^|~s,}Cc V+bȮ( صr aNj lMz]&y.~8[{aw1q]plw}(\P#__/6 )wT6J/C㱋iS[7KNĐF(b[6HS*̋*~VN ;3,]g`+CkIpT?&߬szwL 8K:Z QKa`OZ݀3`Yhnga,m BNȅ<of(M1 {Tz(Oyj ꍋPkE&eIZ.ϭlLL`o܎:V l*)ju żϋ%!Zl8zqKX%*Zoe` _]=fǺ[<Nw0^_pбrH&of1ZD pFE42N8Sf!d+xz%Y0i7;|dJe<(F~j~m@]4~`!VO\h0 C&{g,A řH]+Z5Ay| F\`tY6*pJ6E($=: uybA1 \EϒTLޒ+2,݁EMEl' 7ᕂ| !ev?mv '1vpMk:ysSǫ}wō|  !S:*" I8)\R27ClyT-{)muə%v!>k QǪYo96CBP}h *55;}ē־bIfO9 Hjjղwq]k Gt!U\?51ɒ7WJ JYW=8 +OЋC^lGanh^Y8jH}f q>&4c$_DM%"h$uW.q̼R2˅г"bQ л%^zli<^S3/"l9 -}|qɄA>W,,ϦQdk}hiQz2QFiG R(8㪣:IzvA /nbߟtSFr~gwb(m/q"nECʽ\VyK,04ȭr48~$Ε)(/f} My*lU7Qwx+y}NkȬZ w֞bB0Bkp h|I7)<9CbOU2ǀ|&Rz@r$0 ^GZs/BԫKaɩ ȋ{BF#+5 h2sQUQN,[*(mԴŧU@~Vָ)I7;J zjx(\*xtJa5ta4/b,oo=-~ޥxni6B/x-UI*@e%X!?ʩ:k1#8뿾gG~|).!3vc\sQv9t[I0~茻#v!?ʱBE*-r:PfO2(έ}M$D M HUJbj[V yoRUa 6~seVY~6d \-\({^Ttڃ,Sp?%yl>B҈kf,lWo Z(+D9)UVG`@ +q1DAj|ܽ#`R8?1 hw# -T͝T蟰F "t23ĜSTORH^~Fw]'(eǎ범+4uN{EcHX%0~K :p(dg\O@ENʩîڌ;] ẃU|^w㱧J2Oj)(8į "Yp7Bpf"&>x*1W4rVkh3dɓ"jY $0qcg?QѴmKjyNiBZCZ.EjG u|>d!-ҙuVU~!U㶨dEh7)pN͚o֥4O XZ SH낣5}QN#9g"*2z+*i3f{Z`Pޒa$ UbcEs#: W&:*1⏹`yg6 bRH0F`B‡߱P5Ï_Krg?u3+3 T˧ʬ/ʦ/Zuةq-oU!*DžoF`ah;)cTG9`ڂlfz}F[TTe&  ]lE S\SH\. Qz?kR]rfE-!reSg;*UŊ'[ېhwΎPeX3;Pa ndtW]Gn8+Q1lPO$⟲4[bâ)KluAA* [4K*"jƤ4< y7hvi7bѕ(2xn<]+ǐcpiծCMH4# w#ډvH\$7"w1 (fhhkG2|c*;-8zleWvt#Zˑ@vePљ/K<!Z4|pq=BnEǗ!4$ p@R ]M5zO͉t?C⃠[wCO[aZ>"IBW_J6@Hny`[4s#&)B YL:Fʆ;6{Dٜ!oI䈇jɸ˯_X AU8- WH8%m3s8[M씾%8Ҩ۵5?P\m_@ηCsw>f3_u.2U4(-х$5kek(/:챼#=6AW~HxLEuSY%`K-c9ļIC,5WU# 里`+C5mz9Z_ѸVw&B#/'FtQr{q)]bk쒉|,!.P"L~pi>3UENr (J5`fC 4ސz btϯAMRQ4j RVi!D~`jE#p\<͓*asB|4@͘D8EO,7` ݏZi[^Һq1cm~2sB o?5Āy:@K>˜ݝgGֵ\38:iI3:„?hA-|{7\'&{RTa,;cO NSL8iwORJc *KXpUSI1W]7GAX/*-t*^>J2vN1\E`2x;4oTYݞ^bqka>fхO$2:WaC@{W[Yd</8r>7eZ{S0V3Ø)R&i#STLpB5he4SCem/n i|. 6,[Y ;$5`;0xǰH.[jA@J?z#t!Z]NG}*F/"|| `Zljlx͓}M [i*1֨12ڒcNDZ1ܺC=ιQ#/+?TdLš cTQEW/9Q_xT%jG(Y [u'@ڧ{2I)X 2|}$#Z5Q{H!\H6Qc5]Łˆbˑ:zQ Z؆>[ayF-?=V37|&j{S2DU s_Hs]텭Y> R[:cv >}cW{ Ruư]l((SrN=Ga$ߢ|˞%{+mɹb׎*C-_jz-8}r̜|MTUC":}YERk9?3Y"r: |e\s\ޢL, zi} O]sv\x?Kw&Äw1.wV*XixL-h ~w9;"'~|L:R%{'U'}[?n ֬di@7 꺉ꚻL.b|e?2T#L͟M9Δ?Wi ,|Zamuw6AyG+rt %X{wt >s&>N_@_aan48\"Y) R!CqW .)D4q\[:N"˳zA\FR;8i?uFьizD0ɂ|GH-\f3~D&FT~ \hXضwh\2̐mqeYMB}JcNt#RaEP05)}_O/f[u)>ͶX= L?q_@qTωj"FVݡf%b o,s,l=flDfN^C-Ōݝ>v,fQ?p)t$6gXgw}R=8Ik.}yL1&{h7p9_f8bn'e4+WXrܠ^tvF :yMiүXRRԞY#ͺ1K;q6H>WQdFqo/z< :Ӂ\ZOc? TiN2r[^X6j?* 24 ^9rtLjkN¼Y ~P{UK A! 1DV솛<5]5pRe k.vwk!YJ[KwQp:<u|xΙ9 7XcGv#v4Gx?j]3Gy 0GcB~2RHbBՋ hF7(ꐢ:]9&W꿫%V-KR#vkWٴ~q/Nվ P"dZPIuDbؠaMXB h BSw>Ǣo钽寘E.'4iD hK\+zZGX{Nj;h J}5(ED сD֞K?)j{͡k>Ԩcx [؋ڪ q:->h́Ҷ ] ݩn!3ߘgކ!;u(|E& <+v B>v4!i,4 ]E,hzol೰x~SV[GAsخlHȯG*?ɖ!Zt񑮮KDݾlUE؜;ԫuhsׁKkE`}' GP5dP傅Mv / C1 QBmE):wdzŭ"z3WR*H\/Yz⊳G2M9 &zֳ3_Xbexz?H[Vu^6"r ӤǸ]T;EXEFr"s)+?vMΙOOݲ*DvO+\cgk=Jm4 Ւ"CHm#}IwB% Ρ[m /շ>I xDk=n jPPN:s.stZqAg9D9qL;$urTdqRdq-yN[T$=FgqƍJ̒r%ͩ-ͧ?:ѽ-,$e^?XOOC*@oԙ F!\k?4qu 4 21^h*3ޚ{FBw׵ RLjΧ r}uu7#ndPoO&eǯɔ[ɀ-BO4F66Uz d9͏ 8V,ĿyBzƤfgolֶX*30 JT6퐇2 }#]4BpxY:lz*w\)^9!bO2 ;i}pi"}In'GN}%P-nCaȫY:ޒ}B TsY6=.I_Wfw暌ftMne2|h531Iƒ+M?ݓJ]#OtH[IO.5㏴&1 Ba1~>P7D}C(l;EBr%"R m^L:y39sgƩԡ]XXݭ5G7 jqCN4TjiD Oi38f)2}VzB8t-ȡZPi4TqT\vHz4 l3 '?!]줬8PQ_,AELvp16*BYpq#E mqG?)լ'lLkJonφņnBRTo[0JDO5p3€w,>| uOK2 ^a쓯U^dI (;1DyM7{VQ|w DOiݡzKX>f&PD/{om.\iܥ봈:]:?fyx8~;$[_;&Suv[ sᑱ&Iӱv.޿K渔QOo{rnAh@.)#{1 LK~L[ZJ*"J/2ZJA-DdNqgƟȶ<0ҋm7t1{o &5#yoa=%}d 6vMu5`KpfqE/ěEOoI392VI[3~x J xUI 0qk)c, &4P C ë.+ž-} »zCi(P#vQzE{m&pE*(@!"06(bkQƜD<*>MWPb|/'E < tCXH[qYD3-!H,Wvm(:tO)r/[۾A7T L/ b~Gn']]jb4iNbԑ]f ^g/($. SPf/6ɞƷ'+GdQsb,؄"mX2!'I6[|0,S+{>†xX*E1()d3K:U%&gBV%wav,E|ZG}ل.Z9=y.%odȹX-dغw dR?K٢)}Z4~HLQwHB?M䩋[ʷOYm {4+ʅf3b wV>1$dvNg Mh# NqTF~0!CLR-&xl~P|F#Oy\ t({ l6ezm΋8AϚ҇7tŎB/*raIMoKt 8 Mh٣I/D.Pꐱ^VXPs+=?)0Hы"_?%؝NŊ1t038N>T2 /uGt9عPuHaGx-4ժB L IsVdN) P~oaiuai-0{7({E7k {9z%cdqyz%Y~.ut N7D~\#5B=EcB =t$_s-U]ܱ'q B:mO@.8h]B[ڪL `/iif8%"a=2.>):Lg> ?j'j(DeMA3.# j=D6Īf~ˣQ[k[z闼Ŷ0:SC՘k2eDI,+1R^Qӊțv~\A:VDd!.ufӺྼV?TOM۳"f_pƙ:jWWAڵ膲ٌ"E7yO=]Ǎ&-2# ]_C .{vNԭkلxT|)˹i8yn;!84(a= MrTNe=r3&FdRpO^agG^)(7? r~@rƮ֯U IzRpZEe5#΅d1j)حa&F72+`_Rb릭f|G;KCy;:\T)3O1'O}joQ)$;+sb3*.r /LnXEakX|Y[i۶~ل.HS?)JˀF9 ձB Reͻ R&.[u%b<<9{b<vb8xlDMi o/Q>KRlɒL_rUq'}y0%bZJ|4N+sF6E\Sσl+FZvHNJq[CC)Fs+r4/Sݎ]_rg (T׍i ϛL:|ߎ;K%d 7Lj $Ҩ(Cm*yQx<STd`QH,oB3rP܀|*;i DD>iC&?jĭ6 ,u Ԩ~}WDXje =rsC@{س#Fꯗ 3@>3>>cZ$t&P/Fm$E)!iDqҘm(ѬJ"ɐV~(%+f}d#Mvb:\0j.Y 8wQn^2|YFa0aǕ'l9}O"fLuu]rRpAEk&s+ :|I;VhF$0ФvX`Сe4I)|0Jܝ8CrnRWckMbF[Pvգ5X%T)ǤH,(w iC q1Q#.)1n^bo$|`%n% PNKit,YqEx4%q钩݄X)MQ8,7<~_bf"NIbd<'+SNǵjN ዾ0 '4Ww\6xXሦ u0K<]@D!dkOML+ -Ux:p݃[+tuq%͵6ߒjt9s-=@5% ӛn"$A0 VR),Syӛ>?=+f=x4(YTR!c7`W\<^f1c1^=-㜕+KmnLp7[p b䢂Ť,=mY (iGp5 <4hFJOHγ('#HmoVqxJ%KZåܵncF6.SVM ⁩'ЏHxH$bYCh|c]PEعWoEɇh4e.b) 6~[ff~5Y29.Hlr3& K[rlQY" fޕnLь5َ#J qڭƒԆH|*+IVQ)@}X,Y[[l]aq̮BcS=vJ :¶yr,g7x?5 Tam{ds)~#V,ټfSpVL<JPAi$9@^#<=/3\sX+/ Ma,c?٬_YN^kh֟J ݝ9\r/h6eMKs)nQX(~1YABMCx>!w^[!M:6.hMu!gJK$] ;+]}S׀Sڈ)|#r-/}r[~=E-gE+S"y.\߾ǜ6J@y j!ڏFuއ㤝Txf@ݧIc]\YW9ju ń%r2G^{LN_T6HMr$]/SF\'zԓi.-51|y瑈k;/\V-zE.i5םw|0vNr?&Oo5?[_8-? X*v!zvlHQe1HD_i(G-}Qq@Vk#YT{3sW [o]&aOw~U6QǸLg\Sqni5K^ih;Dy$%PHdy@"G8Y\P?}WP:,ʒ"׊e>v(.b KEimɕ -{FkoF30 ӽD!}ҧ ܎{Y(M*:"3[7ĖT >8SxߗȒ@Q0v`O"6 2e&zFB5¹'}SWAA6^.̮YhBX򴫂ƸCםkY\+݁qnrQ%CzPL/%:X}=WnOdGÇ+QD!&Chw}cm8l-b%- AP 9ԏAf_Lpb7߁ͮuOHe>cndSĕϸ#qo!EBN`ʋ#J1μsLQEbQ\e}魘z/k3s)GLI>Ub〵SJ1-s\5>~anamɵa)TU͍&H~+QxzyT1jF%B0Vcβȯi_n[BI+sP/9wpm~N.k6zV%j}juGO{L2 X*2J=VqyF8?f8ӻYZUq\e{RP X%D4br?RT( :Hlj',׈׏85u` ɇlJfK'W DC1ϯgp 8OlGvK3~^fyu '? [-j큛%! 3vi^73:/ ]ʠa x2SoRXꨭRfMNK 0EIT? CiٶJ񹔬Y}ŋt|/LP?-sG EaWD=>\c O*YbO`EpzcM4g: ӠJ<I ߟҚgNcQ =_ߦZ 4ن&6^`qwfQ#ZaUi֑3AMӨHH`<{|Uu)7/<XN0XM߾6):oapx,E" rB-Bޣ{x2\H˴VcqNcVfv ˻Al<EnЗЂ3CD |'cޞ\aAaiˇd39DDM4ܲ z$|@)oCU{Wz㐹=V(nb>#q8HopΞsv}MMY)f 񟌄MZ ^q  hFYtI>v 6,ze M>aT“ w :i+{_f&UO>IKc䦲蜇u-_-^s Q{Aˎ\luC~r%9&³jwL `SfS$*(ߕ sL鸴3*3H^&I+L⃬IGdvӤ/;]Ys e:ì."]crϗ}V0 F|`?I7aW D*F-&J) +吢U-ކ!AM XrssV~#vס^orD,^CW*.^ƫeAGu|X/;kb7rWx:yuwy<=MCr5Ή_@fZ զƇNlD7< R~s+)]ˠ{EVCϣ BV?šb҂"elIiC=FsS$;%T;m.0%_?n9Ѷ`蒌,oRdc>l& 4g&Wh[wE~%J 4(7ХP[IׅRuɭo#ϳ霞 ~ \{V-"E|>jqNYQaZ9$QrCD<'K)̗Hn[QHآn~ym +q /*vaӜ̣R|z@K!kX8X`WѵdQ9RU̥=pqu+u>S]gyϚx ƗO^gHώS!% opJ5UN@X_'BGD Ɯ:!bD3[Stόa:=Y`q9#'ae=vqKa|EI[*, R+赐9^:jrNFE;FFl&^< )z`:;`SMB+7cqH|G WC{_T('2:{ WWJLfRC<g9׸Tx?,9s1jN':.)&2(EA?83{K6?KuFM^ӶP'$D)q0xPxg^ W C] 쏎wIE|Fjr8$Faxk 'K 1I3PVD h5*`n=cR譹,>݋s'{>ѩk:8ROx 2%bll:ܒ;z?pB*!O ,̓jnp N] nRI2NdCD\ܶe=?\/+̪`B RHt*_,,^:C-/1*BK5.w4x μ+a` I)%я%aVEN"@+ nj#i/Q+=Զ IԳMHuzi;'a(<1ҳj 4oA:5׍-q&׳=!ߡ3{]yvՠ,&B'BBOt; ɤէCI {iD_r:_CRqaýq2}xUiGG!fߐ_!16;::$8cOj25|}M;> O#&Oɥ͐>@75kIhoߜ+OcNxw[k;+2eh+D- ^ð\LRbyD-ƗBX9A*Dz?#-{ҋ):K2}['Ҹph ɖ +H3GPc|џ.y7ho&h!$kUw!$i t8MP24 Ѹ')1Pa3װ30@Č4:= }/w8!LC8$ƕ~;;Xw):^Ȁvav(w_vnK)3B`5B/m|+J_ӻ%#䭞NDrX( Z d_H/غ .5\}TXll58/?_bS"0h 9ޡ%D!F"CXؠfæ[:T b7vgztpm(//71F ]5.]]iAvqBöt+]nN͎nLR,G]lGqbY03dR#PhDǼ^y#2r#9Mb,i`fRִp͸xrB)rn> 3Q'pVFKghYR;t^ f2!NhD&7ᥭqW8qϖ-($B+B0*ÔTЅGFy7+Gh Z$*=Nbe=D&+RC5MK{5fn"gUn9+H+#aLHj ̩z3SԿDr=5E(N#a; 0BlE ik\6$M1S 8jU\+ύ|> ^sd$:;^&GrvWyۃ ùmgR@ h|[tt!O#\8@}3Fu-;,eV'yGRTcFko2!S{@\EWFN/I|Œ# ݴ_VX,/9`!!h̡eGuZ~ e]R=L:]wY.ZW=](mc]ZMizOXW:)-Zp$Ze`/xT|E^ Exn92؛h)zhOFUPF MߤJb/ش[(A',/&SEwnƭ iTrOpWoyۉƹΉF6>v$U{`#DCXP}{Z#41rMyUĹ/iֱ^E3!]U2=ʥ/RWS;"9~rnt>ph3Gx:}D ˊP$qŊ.DzLZ+G)EkK?W~8tZQ~ޢFmيqK (-;s ءߘ RG8}))q@-iyN -|8~]XJ?To91}Q,1lr;pXS^ *]I-gA%oc4*:4_V6x#7GefiT=!-Ї3x{aAT\ö3Xk<yzbS5_kukۋՆKgTNv'/zD("LD"258d%WnXM  Ccv"D H*)kǩzLziyj33<^~:o>u?hXLĂHzQ|Dn8>;Շ{r0kFz?A%5$0{0SaGJz i{ҳq|vjJ+0QlȁX5Ċ|%2?6&oLEYQbGG$ 'z?e `O8w˗q*Yc"*3Jc%w#9cGi<Ok35+җ4XCIcInI =qWx޼&~` hQ;k^"ӢNٹbjI$Zsg-o).?=]6ЅOijҦ0㵽7k3"dJ㫊?Jn-rZ| !yKwY)|rG$/?|`-Cmv:O^`JVWK#Q_D )HJ&.24Ha8砻mC0h$UlkWV-!J.. lEX⺺]@hH!A u3Ϣs5Ew>Tzc~?q$8\A¯TY4zӂ's 8g˹^gͽN-͑QiXb(7q# 'FQ55~? IJ|Np,D6[hoo?IJ`x &H@[G)i6ݨ0n Թo%Be Vѩ}H!ђ/}[X7W/ l<ĺv_ l3G#;z7"=6AUd|vCʉ9*Ϭ)^D-\ :Ľ1 qq {Mqa@E#ڗ"2Xr k5sR ~}Ӈ4 wQk\?EāhS31bRUՆ~d9y`i,(/`< Q<细}Q&gfCsfSog~\|#Zs\mW{*u=5xQ(+ jNjq ٽ#r Q}'(OwJ0/YR_-\vP1:јKlgy{e? 0ݺ"_bd0J!}B )ΊKK7OtY.$A 5kJ~1w>[^[l~g{)D'L6@m~$R0siχ 0"}_yu(Fk!T&{[l욯]tEB<OazV R[Bzלeʪu!8Q@ffzqS=-όW4ޟ]"*(\\_R 3WPKG [gT$ x-jOaZGM|%5'7r˵c $ĮZv*!v {oR[xϛX1@e\tşsAy_ v@B`1X9sK6ؖNng2u?_dmzij' VÅC%!88A($ה7D+>&SW#af_Y fK؈{{f>iiN QƇ ԑNJ^a-kl5XF6sQmػ%4Z@Ѕ. ͺd ΀EˋnhTEX@Vx#FV_;ͺF3`x(deUvЮo{)ϝKs*g{$ oeB q92ٽRBƠ< %5v߼ ;5T;ZN9z7\(qD^;~NQhWR+W39.7Z0|A~2g9fA(klȹ8AxLE$Cۇ4 v#w l"#B5RŲ#H*֯iq2g^Ub 2F/uQkX<{CNT h[xZx\%KH}Ne)4!m);LJk`N{ Gmn&Vb2ޱxªk5w]{?4[&<,fߙ+ J+JT^Z 0]&nL}62s4!&) !aeeLl~nhtZ^݅ttNT#ofj2qyB}^-H9lvl< )8A!1H{T2o ۽&.- NإxSIϜѻ^k#^,򙡝F[XtUky0qYcu%yKԞ䉢㒒[*w5%`S@$%,~ƈ'-8dѲncet|WY8} W S4 4U9otGtw)b]1 d~$Dڂ`r:::257c4w@Wr,yႠPh_9);;k|ksG+J'Npօ~ W _C `)ۋ% ^M࢘I+!&?(A%8x9|/QwڠH~- Y3Z$+; U@6d{ϹEfƊ0W|u@*x؃͊t(sBzTO'xh3c]$$OlӢ!d}P:%yokE"Ck9 #wYtĬ7ytx]kGIUO#p^z@ļt*&%?k>% 'mXUƐk& #53غi P:wT(q|@z:|((1\dHSͬ~Gs ęҲxG3oN/l~y=m<[@2Rk/8Yƶl]M8,qc)UT%e?x^1D7۵-Y,}bJLI4)C[?[Y{֒ע~D \U~ -n-+X e%ƺowlLX*CϺ.mһ" s?L+R210پ6︂uuc.m;g1`W A&o|p4 cM2>j5bKk?t>mLfG{%`$7_;ZRMs7_+ }i|[Ύy jߕ bX 37v25jSn{X| U"zAB.b؁toxaE w;[&y6 PI!Wm-/)\??cO y 6L'½'QirQ $3==gÐ1x*̗^nPB ȳ̅qa)|^ Pw: ,"$hfm}&}\ sSo,3!ST﹅T쪻iɼ~xHxd5y7N=eTyp| @oUSi+D?Ua:LD`n9}6yeXBx/ Vj_RԛQ; #-QBhU6QPj=,QDvBxsby _"j C˪~4a 󦳛Z&%µNQ8p1r;]gM;fE&u,Lj,ipk7Pc73*(Β˰@.(DWs bep1Xsni=O kǘXj[ **į.ƨ`eqMmbWXd0BG&4mlK\NRYؼ]~'=+ʼw9(NAQc8\kR^:b#%r\/?RN)>BXSEt3-yNX{ mdh*+W[H4P>.VVH~+f6>ȟQ~k2g%܂w rgy?t)Gm 2' F"l_WXQ~01b(sƺ p\]Q$8F7w?_ F6ptmmQޔD7fqt%b5Q5nz]fV?RfhJ*50|mJr`\ F`fR b㺄X$B] "(ўF/C=~q.py6 iO(PkOSwe!?:0f^((ILR|S$Xsmd٧H]ɹ+Wv%'GfY;WntsQ$92S:gB"R3{A8<[<cNiLC, >HjTrTNjSDdQ{i(ίwoyfhh,%=]a$_"bd[7)3+4$X;c N$;QXPJ-ǑF @k:ŸZSdvy1Ѐ"o9SȒ4oLnɞ7akM #T Lj>>nV3Z>Sa[{P"\xEW3toe ݚ}òZ?!gV=#vȃ5̟ZÔJ7!K`z4l哖+DەfT*eHky|K큺vCgÏ_a!\Ȝl)z@D`ɷc_|0{ܺ_,Ʊldgy| LPw)zmԾLXF^v5K Yx 8kc_"Kk **%YؔOw"ǡ:p #=?t& Q)+Z%ى\O+wBaWȝ(w? ñ*׍wq"R@5:4]:XвH'xN'9 2Mc{hտ;@Й;&g$uW[k>o_8Cd.GrO z7iM o.):c4AU!m\}X!( 'sD9*cu뭏V&j˓EؽbEh)*Cssf#]ׅݒ*յ"#M@1wPy fBݑZA\HN7 D`v XqTBI )VUWCC[|S43w>t~\?]/E\xRNʬO`>I"ѲA P>B*67t]F$9}(:Jv暟?HTm2,ej-BeT,YH\N&oU-4 <}l$^ɒ9Фο }c2T-T뼟OA{9мB nHMl  Ȧ=#T@v~2FoD9["erf=-=B;>B)mitRMH}##oGv] 3lJ4~"D?.5%-7Z$R>M+*}t1xo/[Ja>f@yÅn#dj]n XDΕ _bkT;/&D M)A^r^nNhՎ5P)O+jH4=4[\8\&U[(#C FYKI_k^5r7AUj:[A>}A73.>t4U# QcWNdNCkg SNHL%\󉋀9:˰XA/aJx)@섢-B@ܶ?w b;*s m2ZGN—݂ YfA|B[[*UGU;~cl"έDɀ Rg|,KiLWEoO=sQg:;GuUq˜[}}9 ԥOT:`-xvC_y]58(}>dKI5Һ2I=I1'1#}d _}=2B!2w`tu>[ѠΔ靽3Kq}UV2Sw=ao)y` qڃ}#Pς0\sBm > ҿ]@mS/Hq_兽d%|':̰!S7#@2KO|tq ѺhY8&UDM QyG4p :C sHYWW@\{ S?֫!ELm$A![XF{c`$α_jK;b~(sòaFǦ$[39sϻ(k* ;_鷛Y6 L2KhIJ,AYEW|Ɂ^)Kl1>U_s𴙴1l"γЦB /ӂ*N̏fW.լ_&}E2~==syʞ0 TWW1u[|#jIB\E'mF$yHzjvjp͠ rLTƢY a l~f RZw\zs26cr =CGNI[ndVI_}hQbd] 1&T%0f.i><Pk B2khpln bBvC6 }$3(*hM):U'CLQzGAU q R_$RH츫s5b#j++6 fM(/DXչW_8BBQ.((2NGct+!|9:/lݚ8ҁ4dnN0FCDs 3:en+Jm 3 S=yWe`#Vm5Pœ,6Õ/R6B/#i 9d&"bhې\n” _8!Isr FBfxڧF.t:L3la;3MujS+|/qlF'_HLPd%NޭKY[uƳR{-z@J$(>F)UXVg*}Z]jw'JGC\V "R#yD01Z*`C`˂x5k *:^B$*wќhE S$6C7n@:b_$w{ln|2 *y@ ~0_5 (|.q%K=1hbr-8ށfv0Xѿ`ܪ[`ʡ[nTٙVxN%n5:.xeT< .;Ihf"1s{lwohύgR%ja` nJor-N`,"Cetx@?ULbɪ琋N|8A1X-'Ѳ^(BvSնbI{ Fq vbveF\/Tk7;x%ȓ>>qMX. BxՓ˜4ll/An(+(  b"'@QN*z?L#k/i9IFВ\ںU(w!pS]D t4"8cV cTc݋?b7̃}=:trYQ6w 9=6Z4N~?Y 7"_M2 ԉ!# ̘haq~PjqVyY־HX̃,3 JLySK}BYSg39& 4WFIØ3cZb!6l,B3Wf9oeGK LʄJat2VoxgP=hDgܟ@-.ε^7tpH=G$+'%NwwӞP6HK8iZT!ʠƆPe9P7LAy.NTcs`~g`hTrXg2> KG䯮؟ *47׆5j&>΀!ʑG:Ҁ&_BGH \_Z~=;'qYrx9ݖL4*>>. Ut4D͂Xz<^ÊD!3TB*h7e\\ENjjY n`?-3'}~o\9 kBc6 B\IS^9w-}[zM^ Vz|B5JVmq;? FR,gο@SOױ ,W^mc U_X QtI89YyOF'j|ܼ$Qu7 $I2fDϓ)QB;$,F?а k"sRH mh݊[y}"Dd/qq\  ޞ7.#]@f[ZKp5-g=9a"Y\4wgK cQG:. ^1Bhq@} o 4 ~K*B)$((z7;[G&yCg&'<$yrL3n`Vw(up *ɖ?{$g)N𛩟.&{2]ʸ%YS_WT%~{ 1劁Hr\0(+ QNh}SGK~?J?ԵyGF}gJ/ E ' >mQ;ML`3#`SFIpJ#\} @n;P-*`}Rm7s Җ̎6C4 \jC ĹOpk&E2dSFmCu_N[Eأt p5V;[,އ6z,qKb*c:Ex @݁b1)b}j׻3odFKSfjKeh|$r=:h5v$ś'>S{^8( 'e@Vur/Pyb>IBR)`+r5.H*@EQ!`IT"߅̀ 9@*HcDH$ c-%72\Tc_TyVBjn[Fꢴzpw:Ck+d enLPxn"_3,nma\-.'1WLז[2Gj?+QB-л>RCIO28CW=Ҭf#SH$ڵF/6L1zpgQ¤Wu4i_~v{ cޝY^(9`Lg) k< Kכ S\?8ٔ9#]ŴP5^)j/Bb.?`==EPm3WqĘ# FcUF${GThxZ4ӕ$Se՟ז%5Ҩ ~GK64VK ,|)Xh01\ч$yܓM}GǍ9y;uuŤB!XVDj߇4fSC&rT2 ;He&+ #n7ci&&grsҹ7`8c(\%GyLN|!YĎ9 !>02> 3<~t~C,J#RbܲC8$#Ӳ5pm20e>'W:A'V ^uգ*s&WAJ`%~ᨎIz\~KWZg8wKzqy KW.GCHj*߱X$dYU]E CXBNPhaxDŽ %yiG{' +ӻAPX>vnT" \j-B(\ 8lNCt6J|{ L  D*rybjG.McRN6 )ZWܐ4R`zޙ QDt7"x4x_YQwF\Nk2 h9v[RҔ_fIvHm5BXS'b6@YS)([~c@R4H!1idٜ[AaLr:;AZ?\LFl\o0hR9%p@|⯚o[ Yn36xŌDQA%+Q{r|< U/?A^Ň#SQt -Ȑ;M 5Q:^14.8cC(LI P"ggRvcձukN5+c/xhA.o@ֳVBEfqv.C9"F{X} JKEKܩ 0`^< oR6h:Z*S%f;I~^}opM9WJKO1QI'ȐShblzq`}>%!_4ٳ6xMCbvn:Q&'aLQwqdnk$˲L 8c.æq, 16=[{r|u1D٩<|]O<&l.o+X bm/m rr"j?}kqt)6 _!-ִ{箮K)IWDRIEZG8^ NDno>=8w)Zi\K9?_- #?!QkյM;gUE #dcxC?a$%T^#'Y&%(v`;[:J}v_nZ*Nd1 ؃O-ӱƳC t+Pf&)?xAl>v gV`2aaOUP?L:z a<{6|Ҟ)L {Bvmg*FC"Jb@ *J yu&q}~eHgӺ ?-b=aZOnd)pAdi }32[%]spf7j搃. wMR3]4-'II#P; LKNxJE"Kǟ_ A|1V׉Xb r f⡧:0cz1(2u_~4Ƈ>FMS$!Mak ?K:)P(#fկ@ߡ m' ~- (2*$rF)It^>"ܞRLǺ6Dc^p { 6C_o K{|9EJh ؚ0<%5C]T0*Ǹ+XS@D/(P-wܱj6˂߸?9n!,ezX@Nr'"[s=6CSK"j ?!A6XJo+2+%_pNKw>FėF$wۆK4e$#@yljB@<1R[CWpֿG4;~Ҷ!0V9TUr[w}cWqY gnj_`کJڗi-`{Xm4 /L5Ai_(bZ#E1v>X4]v7X& T%xڊ5q (D%3hC+ѱHz#^ QcC%/DFֻPDhLZZ"Un]M?T?"d~N4){{`nľ3tҳjtT~]v[ͥjF}#'YlNFӕ^gɍ% 4$ !>H{淪 ]t Uu/5o."*Y˰a}?=C \%I\ }Xܠ R)-`LTm!ܲO36Fb ^XP܋cOwY#q2,wpJߌb vqZ8QXucue*pc?^FD35o0o>Gt&/7tlf\ҁ\!o8[n!mf[fL<)YYeR6ʅWNP 'В t1%}C#D/oin󕅧񰟪RWp@BDfNwP4ZJ.!:4wM9g7*ad߼P@su*m=(ѡGk:}&7ʌ)y1[0y(*? xy˧_~K/_3=-q5^QQ˗h]hR~|lD8V %k SG|&ˀ8  aoHDЍ`7<Dye9`UX?B`AAE.|,&ra{)G(3D| :a)& N _ Ɔ>@-09L9L0@4IĄ*wxoң X/ 7k` VAjvS.k|DTMN?+Dq񡔧h;:d/!^rʪlVayWBVq^e`"?,"S^7jdfo b{ L9AA֡fFGcZv@IGvzmbZs9Vzk!ZZwݼZk !I?d(I. Uk=QPsuXj#j 1P[:*޹֧< `Degh:> [OGLp2$O9Q*Yx%~1U,pDJvҊc$G3%p2|ڜ˾|~l5BzeUL(+Ťb@[߇t]#IZǒ k$|WJ"pWk\EmѬp{:hNq;`4bQAEbk~ô^!%@`%+ TD3M5*Rv!& дIzO 3DQ7q.+&Љ#=Cf/Li( p/X+&wKT}UjĦhf{E2܋Pm{GЄV*xq$7޹cϷ\f5Zdݑ "#!$W PaT;@э7H>q3<%Ix 8|(]֞ GTVz>eS©\>}| Ovw#:2֕F,͘HFRszO 9Ol5o} !q4[mKUb6IK gL 䡲A] t? BNB*Է'ŞmظY=t=iCdhu#-Юi]$0l1~o,B8<))[63}PzLg=t+Y=HF5s$qN(5"EA4}Ͷ[\R@ʮ4 sUFudi)b,G.e`B˦%3 yreufоa⢇Jїo&vI6א4 n,ñxFV*P0lOmhvvKW(semӐ"6_r@;@Z?Dg)*fp#P3H=4|03ڞ4ljg`uy:H~Do9z=#yBxYGI'h4'ϩ (]Œ<&s[?6?mw,!Qwq&h@*ELMA) zqс*]xue* Qa*t۔jM> YJ:!9*{Q*Z9n> (jAmA*bw/wbDGzq̙]] eI>_o,-St@u)y~LOVElFbݺ=.R =@7M;T( i@ ?6˥6Wm0;~G üq iՈ ƛI 9 !$*c:ZEǼj|I[|}˃ bo UϬ|L0 .? x%X=Z6&:d  pM3ayj2M5H@`d ^]Zv%gvZc2v-0JQحoch^<9/FLid=I;<@Hꎹar:`mUOGS5Smci|%̗,,qƂ Yʙ2^[e&kV>&YI0 `nm T`ᏗL\{,!lztXh00Gŷ:x,Va&#NnYlE]]"kDΧ:B݊Xz m64 kd>=;VcPFIHJb;hzaJO?PZt'yPwQlpŸDz,Ď:KQ16lnHqHdFvF&OϮ:xms1)(%嶍|MK쩚Rt`HI!-I-dJ&/Tt@AKs =~*Ųucpi05"FxI÷YyWIOn|YPS\RzLSW8kdzKGXnS-xy:ajG0ΏL)=peNvz&AD43Z9yr,KsOL 97k  _Q8e=u4@]:pFNȋ)qh_͊|挀_ךvZecnt6 gZk&\5A7 U8:iA;w2W U2jrXC@w.p>IOP;e<*SY7\?UfM>FV{`r_K7,Gr+#$rJ[8(ybr^x#R8ۜ>N}444ka $1>Fq_neSX1[öD=L:'QN@0WɇD40ZS(H 2 v5jUa/t͵D6ϥހv3T'x̷+Ld6_=,o/뾰H53ppWT'cNڳ`ڍ=s!ҙ^{WS{P遟!ZJ=[K3kgUgV>& GI3AGx #꘺kH$=V R! pǢ{?a&~e;_`3v??hrFdf3`=\5 _Qju~ͳl`wiAGq-ꁸ{5/L8/MHwҶ ~Q΄ᩚ9m 1SK|՚X=yʎ# N%_qd@q+3؛Tߨ/@̛Xf%ҒXJzԑ׷Ueߦ >Ki)ۼw_Ox1qNe}R|0(/ZA5YLG x,K`JJ NϨMwMp (Ȯd:Sk٪SW?bO WX9\8nм8JW'$,jG.=+ Zw(5Q*|:#PLE3 :m*fh)nA,QVTV舉w 9;I lj`4ے\-@f)=AJ+,'^9s&ua-S liL惔D[[z0qXlqz .N.JT֤-m4#&#WB =&Π~đ beUXє/wa?'Mظ/'Ffie0U.S %uć:-""$*PIe^DJNRl!Hyթ0Rƪk| N 3hwWD"h9Lyx,P_RnO}yxhkAF*v¥\y9N+J~-b56Lq+t/Ƌr90ݹ&Վ"*XƝg?8,i)?wI5J"$)gÝʿH(FTp p *|(a&]Z?RDt_}Rƹp@ sڷW/%m-nߦ]=4+4L :uPȌF4Cl~΃5> qI*7) c09 H;E?\ 'lCƨOv,$j1w97А_ 3A}Źa""8R&Zkސw 㝋]muI6퇨1FAVcL\?zʼ5&#/D`ԥS?g=SC7MNGIbK˔XVdO٠/lΫ|8zTƳp1lGش޺#b,bQF3k%:PxRkE P/Y)i+7kM08O |C3M=fY! y9FZ^qAj MpFavnkz; uUeٞ{`zUj';8X#G ^L bE@;iGcM h ҳZSy}]A3T Ö/Au.TLE/M(E*G \P14).A$$3Y-a!8'R3 CĖxG+ &WFeE^b~NU NI1|t:g\=-1}9]\Û޵/3O:mNk+?7" K^fu;)B\~7۔67# p L]t' n$D\/ a/zZ:Gb³R!2;wZң'M|[qLQ7xk8O o9g^ЂՈU'5q0{\B!yNRHw >QR{vTb{8Acd-gwLy7^$ 9,9} (S24aSlkxN충6hk:J4 rTkw5!_9!|yu&sB+ WO$wR Eb7/)_HJzgBK "XLInhF X'd&6O(EcN-9{QQ1XiL&8Cn`G2d7ϯ`&Lls (m 'Юx_>q0J< _,}2]1p4v!NJ6wZ˙q@{kc =91.ݕK~o8G5H1iUf19IRY!ep<Nb0A,-SEvNj>H[-u.ے0ʫ n/^ r|&^6?2׬rW+$|ڵ%g?) ^#iwµ)QIbm9P4095O4x a1w4*"FlE =2 D8"ow34ہ~)7fF4dOp", /\xQݺ> @(yg,Yn]k~'_uMktgeU\Qc_k̾tc[`,_h#Pާލ61Xȷ_C{NX37~{Q * lQxPt`Š=)*ɾBj6t, ,7ZNzRBtIx["#yəE_, $춫J6ϗ 4.v>Yܠ֚pvvesY|/Q=QYXn, `_Y4?rzcU/3g|qo$h? w7{ yQ' -IVh]aFKTJxm4tI2Vщv)REOEHׂH^lFhŪV2 G!,+ciʗ[Eյ/=I/N܀ӆ4 OlCTU ,p$ANd딃w<;y㷱=M|@M"ȼ@ Nv.{z7tLOQʾ4E °!/Q(oi2Eۦk+ 6);+U;AN.Ef̮Q3Gm=#jH }wLFB"O2> 9蜭aOݼ-nY@#pJ~^DJKR=`dՆ3p %=:m2Չ(li3b(}J#zHcB_Ϡ-64_ ,.(-f]P1x4_=`*RUTʢ}$JY1&xHϢ̦kX_,YOHźxrVċ?䎢=QM,.t I0]tATᄗ#!>?TĀxmt% =fgt[mOկm) X?XBMM'rCAQP'$JjBR.]V_lppxDg\f:mȚsde 헌BdM*lFbNH/B$@k6EM ʯ 㑧=xoD.5Ao&Bu Zm#?#<ĥPŎmK= н<ʆ}XLBtS 5ruz ؏HrbJ> X78T쭆U73h/'K՞)Y*MoD`` J/{:A~h[8"=]\yF ,M-]:67.. F[ayZa7{g BC- rOSqXr`,nlhs!EuՃ&Wh^tBUIVT$?呍C* Yˠ4+.,hXCj)?9yTgXL˔(Mm鯶|m0.BK]ҧ^OI6t.em/6?`Sf#OVA$KV5u98jG 0JQ( D勒oҠM.{Gc6,Øݷ9b[@5d>. =TUA RC"ԮkscR!Y+8B@)n$2l)vqy k\EIM/wo XF\<˄( 4;sz čH# kbobEgE~{Y+˜QrJu#.PO㽈90<0D rXiX[loWroDU D:c,ƽq_"T9Jp y@T̝* %*:${gnA*bk. !zg m u&ƙv5m&wV' ͍c-!{lh 3Iw,@٪c͊5Fc7$OFpiO0i[@C+g^ȣ0*#Z-)3Ca> x/edm ivdHB0^^7SZ$y9 >?)uߘ4/^;woT1e?D0v'anE*zą2z8QV3/j\[ym{1G-c^|#6ʒ!pFq5å"1&u)6=7mx ( lʕ\UY >SV)cuk{1 N`Z8,akZӾ]tQFb Nw@q݉3eRL6([aff ~?'#s.wQ1,}>&r ^%PR8R۹GGn35),al3܅OzAv_s@G)2 1)0]t N8*Ht82b35%k7VOKY,eK`LN Ky0a Ah /7inSwD6N>`1o{hTl`_|9džI(;f 8 sپǘ;6r(WmGW,2+Xdu󩺖RVjZe 7QYY|)4x? גХ[﨟sUTn$Yv#{ -X *u^)'b^ {Ĝ6`/<W3Lo8G>\hn .0M4ԕbj1>jjx^"CX)g`~qXΗ :=-d/Ӷ;'i4E-#в^㴴yptV^JKIIZ3\(+Y>LY ' "Ls͡S8.5(ѽtb?@\K"ិ퐄əJFQSNܤk~ZB'H6%V- aX7Ǩmm5 ɏba{J[wjM'rC$Gdu(^buRƞf+&o#"L$Eȡ#Kj_#PO))=F:qs~JS?FW-LriyڶXS?r"J8Kj3UD&QoybgǤ5K`ʡR @H ܗ];2%קppk'8vH֘ n ٍ6-yN^#4䝏(ބ EGNL8ˁ #ߊaZ~*okH sSc_3aXc&L<㌎-yBOK,H;7}k.6.^R-@~D'tՐ^{<*x+s5p(':t] I=*?rRBǰŗksŽcp[$)A՝%徊RɄBx|R;k:(3[݉a8G_ *tH堐>HK{o P:^M9񽊃KjTk /d\\գpf&KK ˛5;#]PgFs9 L܇ ~!3+cC1"ǻPCzjӸl@?(3^°j[j<*DH.6i6ݫklBKvCdc&tUv S yf݊5-Zt3^.w$=;/֫i?\,L!OJ1&0'#qbow^~#,’0'5G~m8&;9j\XdqUQ?Mh/L-5(9vqx6L}$]&1G_9A#9-U$;zc-3WSdh=z)=u:Q]. y^ @X$h5X ⊶/롈rf[$Pu80+"X, ~N鿠ɛ*Ճ6XZ0$U_+Je)uB% F2%aΠy IAFU"^j348\ (s{c:X䖙G * G:ISt {W?dE5Y3: QRj=jkK5(.D٥FZkXtvM^~q3c%6EIUIGc7kviid*zVIMAn5-Vhc6fyИǪ,LNl&rK~ <%\պ U"T'>J`4{e*w|cL5l= /2%Mр8 lεMkU:\.'L\`oVWF[gypBl]BʱzkP4YW_g7.7AOMr]&z\eS=*R`?YiqP )D'ΐᒥz߹a|S'Z/`o[#IMóVa[83%>s-&/?iAob^K)[AXu=c|P~8{o6hgL\G\(<=PiBi9-#{;˗^/+g)#5RI-7eK#Iv:&!oriV"c4^f3jM1;&ZbZR*>~jOjT0$ F{@g)傼smPYx ABg> K,l)58[rB%? dۉ98<~tդHa:׻`F@)gw1]D^` ^kB ֻ\X.{ϴ F,68(},|ȡ(|Q,N#!h|;7 s-M W ~*L?9S:gM>sRw~R0r .W1"4zQy (!Ko'Zi':àflsD.Zi #L  h8WY /@۩HxB0\ETO-,K6,?gűhvkRO,Аe Z{gV?/8y#01%KsL}`ϔ-PKΚcn[5 t)q<Ğ_H$åw+qSLX_:w!tn\oC[&T4x2l21/v6WU!.>X뒐N6@(u$tFsZO(oU `v/ 7[ B$vqHx&fpKiRM{Pr0~SQW;̳mc|rqܨ!å@L/*!3x1%$?8 Ū~`yr4Z"myVYS}+LsTom*$.uN e I[x]]¦ěTcA~vY9 s@ RUm``r_B/s؜%3!KL#XVY*_EQ cWf8޶ywhs5ehq2URݶKW/ò^99N`K 8|ũnpXMKjp|,!ZAFBu(n{2v0s %{=ؕ pC>"f6m_:ēW BuA[B\ܫqFkr<Ԏ( A )p* )Jk;ԒVQ+Sߡ!"6:*(> #I0=62ҳ-!E{bwg.='P oi#^SKDRo 秚 م*#|^(9*:q NCn-8WrTn,A2IxicQ;3 mчB `r${Kltk^xfxM59hU}HXV 7ʬcslYIͤOIKJ1C渰&)@~;,H LCjyRc9a|7̨ ԗ Q)oXCo VQ7(ԒNJ?!||xB͢;҇XiJ|'Q[JTrj Pk"`s$#BX(t+η|[ZW/rlZFŒeMڢ iXv$ջ;ppmt I{Iq,ַFEBHٹ#ĦL:SJRb܄D4{2tmwX^ dϧ0P\Y (OJbFe(0@GGa+& }J N͙Gp'*y7_l$o&-j>? }2!xnhox{=hPgq5݇Q8@?wBjȰxP^Ǫ'5fpK xwQ:oQSeY{>)„PLAcӹXI }n?qlkl`&d[df>Tj`EЪeSjNJƆr9ɫJg~xoVjj',_Gu:$ӿ%y Fu:G#';Zvbō O2r3''hդɳ̢U6XtIO-E{YLb}2%kaχ#<\6tRC7k_Bu-Dqmaw_VʁmUy`9sJlBE ~G[d$mg|Ƌ\=%AB~> )mDb *M5s'FOEU^2U)"|)oy ˦ o#Bi<(4*ۢJQ29ԅT?E KNlsۖ|~xy3 GaQwz߆ 6}_8Q9v7ewzʁmP*vТz6SV\h}~XeFׯFhEm2]Gƾ!G< ;iy^LD|z+R0+ɀc_f~Bɋ,!FL 2,= ,!|a>s2VEn+# *5$ <Qe̔N e°a+gxvQ~lE׏/ʻT`iwz"qq|p|'FRKޣCx,`ekYm Ϭ5CJ<:`) FGᰓ9؅}h|`" ?.Y8<>U3^@Ř=;[cp/Zq󷐄n".?pTQ Č8ZNƙYl.N1ԯ"/4fqE&I4zvPuuP(^Vg8DV.7ZN脛{[K„ydT&Q@lU`;օ-0J<hmi{>9 aT*$&7] ~(x:X{X%Ps%)06ڠ dVݔ52x 5SlB/ V+],|tCyyZy:ϿNiʯrxl^Iӌ%_6|Jvwc׏R:2xpЅtWF 0'_Z򆉉G57B`@ʽJd[|bF$b:<[h, C%+XoH:Cb0-'m[{fڇV.u{ k"NMS- r2PFO1"k%7 $p ^ 3t!v,";͇Lj&o|$X:g$#Xn,hk8J61¨G4]F℔ʳapvW_S~y%w;% $Ÿ_|P)** Cho0O;FM9cDU&X^qDiFpf- gDE{6EE}nH=rwt4tI]i Dk.iA߽ kklT)_ؗ㢥Y"b黏 B|l2M&CrU4"E\yFRˆfǂ~H":F!yVއD5E&PM)XS?HvDdpRe~A[FLϦ}fkubv=3syKQ\GƳS#M|#0CǚP ? 0ŵ@δЄ \ǻiyOpbQTTp7Snb9!:#؞>Vf\/xtl&%ռ$t)s/"ڪQx!# c6'Iu5FFn8{*/VLwO))-o]h{,>V4d)C#Oʿjz-G[jUQ =s8t!!]z <~u]=? m1[ ]pj"l }"Y߶| Eu$NDFxJgAiV^/ݐR +fX5~-a2 Xy:wYݳܑȡYkfr6v˟.Y5dUP18Qxm$f VO_NCJVyDRPDf* p[a^VU:s~̃իwMc׀p3ͦ[qa fZ+|$2϶'I5݅ޗt*\n*u&$oueq #Ւ^%#t1Kwunjqs͇`DnDcXӌsbܼ %~Gj2p/QϢ"@w; Xlx̕J=h# ۑM>m?Z ȗ,MS޸J-Y /iHV-&u=?}Iɕ%1]=++5tAH|GtceC҉8 #4vl_3v}J%AǾ2*mLdBQt?$WA\VaVzÒ߆B^ IljUq"U#:c nJu_b_V`~(iWZӊE@LJo2RwQv;]X+waV6$u'KY(egjƋz,/NZBGÆ.Dk(ⲁ%$qXnb3:OF[QU!]Yң˞6[0/Ѳ [GB-'8c:>~귉<@Xݧh:Vuoy.3H(?dXj$p BFVӌZ!FkoM1xPy윕ԫ)MRmXۻꀳ~f_ T#WTfIF- o(^2wq"ct`KAŁZCH޶l n(_0^"$AUR<⨤`]Vl#L΀%"@\YJeg=srSյI`#r xq4lۗ=t\VB,~'g{9_QaknNZqq}D5j, rUfėpJ-4^r.8z^:>ݤAmZX2O$SdM@'`QsΒd?Q5~6RoRC&I,,t *A~kC"B{VԽJ|jX0g> OܝH53{V1IWTU>ZzftD['0&dtlGw 4C4PؖRfEֶ>jI˦k5O>Ew:^0~A¹`7+Y1iYVUJx!_|r;ߤ)"Nv`qaZ6у/`GT[NJix0ij)2JAZ(P@f3+x&eAb/ Fjd^,j;qvW*0TJW?/|%a,k,li[Pbl7'\k/ XB7 3VbyܯgŹwh8 d5ݥr1.5(%/7aZ<EiS'`;,~RBka[hh7ŏr3:mC&K8EpI;A-ӣS_VWݰߨJZ{/oB !d!Lb1k.6Y5wfTB-  { >iX!%NVC]nzI6E;6]NeiB- _pA_W(,fdVGT#IJ@0苛*S~HC^_AA/OY"$aR g:c F1ߩWDp$yN=ӄ'ztM8V6ojؐ %Ylި}pHaq*Jƪ;|2'rN@_R1 G?=햁_ hoUQ ix>C$Fm1Et9nސk] $<]5$[l{P~NhޒYƄMPW$$-%5%ca1Ul@B& 7ݧf۾=lbzDY"xYP5ò& q51אOdae 7TC*y`M}SEOqe7&Թ߸T=\ApG3>lZ*|_$󓉦z{3d?ׄ6[pG1"bfl Y%7N }zʨLZ~m5韛Z3=HsbpNV=~BP8=*V{~NCE?(JLX#VHb.*3IۮߺJfO|, ]LԷ+.nߒD ^r96/oVt<~+/W]暿+uHԕ_~hdgyDmzh};%XjjzurqB[}y|<.AId]$~!qr4\GJlC5^ʗS??\ (q|HFѦ9xg>:hS$Vt#2̝N|)D[yx)ƗQEU7ťXc06Q -14b*;oo&O:a=з#TbYxMVœc4ckY6\Oբ.L}վ1~fW:<箏xղy|`qZ~jZkωT J.7hYҜ4J vqZkj b$=KT8s6} 1=nU *S[ ;^86i\kiL7.H)PQ8%HpIKҎx޽ ʕOoJjzw ^CpY ZCq85Of }f.` ꭹbojrI}OҬ"3Z%Npڏ.ZE!pZwϮbR8U5_f4)xz]UD. Wbſ^*dNmbmɛ<+ JWn}.N``\樹Vk/OK}O}4ؠqi1 uDn`x}O(Il6vu298yW5U`2t໠1_%Rģx{4to6kB#aZ]IR^sI,ͪZeQub؛f\dC+]j$_v"N!3Eh`ض<aĀ:|"v~ B֞N #XZ;=؍`)m J!v Ӫ GWY81-re Z':81WL{٩.wɧ}3=8YSգ{!oJ*"ƣQ?g^"鎴1tZ(BfD PkWCӝ-u`}3̾Bm|+骇P0 }g,&~U:_)!@oe m NdQK8DfkeDd=Ipcx~cHPݫ׵)EV9>[>Z)f ]W^6^P\$bX a չܛ[ mCJs|c,y]PpznJh&k6s#FŮed<6NjЎ6ou*σJJW j6RΣ ӱd;t?I($*@9LtqKJhv|%jJ&WV[Ω$/:{wyQCۆ?zdx/IU;Ӕ8^!03^0xc$tAi=E6̐jвݯDiPwXu\%x|s;!q~Gօ"onUT'qŒt vѐ~uu;T!~r0FcjҨ=֠uQ<ML"K604]}Bkx՗~o8 f,KBw ]M%װ5˔1. D?KB KrvGQ.du">C`7LGUlLj,dd_"Ӆxf8ˁm*O),V>T;~ %aXO (Ġ 1֪Dp° qw #՟9o&̮rd)?:$d޿ ?•4;X̒?6 t(xC*眳Mޅ0I3RGA̸Uv 9~RT8]QGþ֖`D$Flj3}-Xw imMp!ػ6tޙ"l:a[4j#8[E[2KGXK1Z$fҖ$ ȷx<87!7bT<.uh%JӲJ >9iLuvu \ÀKYxSqlq~NyQ1ԙ{nÍ * -)9#](CVK,d6At`9 iHKz ױguVi wS܀:&ʤV! kN^i$Fd'U@֧ӕr{}ӽNY*c]\(Wd%IoӥKBw~$2~HD@QLghz^pBavh#{kLRD.& kJ?Fvdc׷2Pz>_"UOTe[5cY+mo8 nz(V6U2#;/Èwaaw6]WKdDhBA]b 6] y&'Odp)cuPU,E#)@^2O[с:ev_@v`ö}sZuL1%$:!?2UY:*$_2 GǓ-sѲ?Vq_wB >$osO:tRJ.–Q%? [DXw<7K%%!(IW%6La \ c|I`FL e;2. W`J_T<:Bof07=w[5 ,4|f#nUAB͹_d2zGoRIs fWI${5w"}IB}2k)Ļ:S%1S] Dix#Wqfl`Ľԑwn~KK F<[;@WA:A^uL-70~$vo$lN mZv6 fu3 _n<7W}raE_qަ /D0`fʩۿݺGcsqwI⑸h ƃ*S-_Q-)_ $#I dC(p?aw=a-Q6nj5㍂5k+Hs4p6 +/ԃn"[Cʷlh[G~ i[׮`篾4{SK"4\95ikx R~O+ &k Ė>H!( Gf9(Т+/X~TmD{bW>_0S~=$4|X GJlC_ TJg`Jb %49\"{N{CwEswu];#ע`+e+JNz).z:{s;^izCT7i-b|Q8gaHʁ#6`_p%[M+A oˁ4ѝh<PyzM ɓ3u݅ /Nz΅t[b"|Oz53 yܡ;&Jjj[OEߓmZDq!BN!?&P+ptt7!$fB C@й p%з |wЏXb(a;a/@x$rxohW} _GՊI0&Em}`6 ք n@_cnTlo4>Ӎ|ЧZHͅW (I`|OS?~D۸Y8d(թ=H䉲VԣxuL8'~6#>Ew̅E8a!, wv߸H RT;xR ۥ8ͣ1S..4!i񐗇wC;UhAz3!90ɲ(l'Q>p QT׏ܾ<4}Tf~m&b*#z Gˆ SA=dS|G5{Ԅ2R5lZ{S;lH} (逼z t!I&o3B|3!VC**,g?>j5h~2㭄.XkU;K|0irxکb{A HDʳHbCZ'qtkezO ᥔFGo^Xr70TD ʤm,G=ƃ4+-Ņ-ҡ\'rUAZSCS{~62f&y,pj<8yKZA2G뇽nA\l5p-t^OOӹ<:no42c6v{DtװH~.N2.18"|sqՔoo_=]͔h#]Dl6ܕldz!Ӝ+%|ra\X-hLǕ(`,gIg(oHQ4.{h.JFg`uV_ &:RD@'08|l]zՑ2ᡷ n/DiH~AOgx@y/-2sR3ZI[.JF]J)Ms)Htp D@gr#p޸Bc HE"W}{ Q-zEjK e`U\Gl]7~c\EUq7H,8kU$@TQͶVDD/Á $8gB K+Oq=gl(K/F6:M>g ~Ż(3xc.o-'kv=rH<رnuef*xR VINB|TC8+Wa9c̰ߌP j1p:IY`w8?6L,GVhdAdX]@Mp shHg}HAgtK7I[fI >ᢏ.So7$ ^]tyng [^qE?Jgk3 u+1]N#e|U&j5u(a҅FhplՇIT@#3} 50s|wm.rPǰl6,0ww37ʨpp/JqD3_{bV]a#Xa j7eR_ V^ԃxp@Gbb dP$qY$*dR)U6!&ZxRsuseZO?[Dˤ]0q%0GF2{FZ^_x8EDQ`Ɣ8cii5nk^ʸ*L;,Q6,} mIStΏFl21yp Umhۀ5ah~ÐSL'Wc絛& T|0M@!ȸ",5gmA\Tk}ߨt}Jō)YJNn=N /6BITr(R/FƓ޲!m,cgYgbol+BQz޾ ,T唭(?Ux?LjByP!vQDAy  YqP=1wi?vt5~&:Y$8,K{"'J,|G6:e6)ZqDӌ&ڲHJ><3)+XҧX$4OD|iۡ01h2 _Ŀ0  6;@E&pocKjWtaHPW}_~Jd X6M'ԋ.`\p#G l}vUeQuV⊀">lXR Z*B瀦XY&%8 .nRԞ0Қ ffI,=רߚŻLމbUn# ʌƘqeڸoFSk1^wo15vjn$v$T3 #F|%UJ=ug0~NdUn82N"'KPk( ^pۻC~V]ʸ[}UsX.U4 ^^Bt]|fҢwt&ʎ"W`H,g@c:P4x^w N S?afϚ3q4tzGl9)wIN O+ ]PC"M{%6"i:o̹d6nXse7t>B9'b鴗<~r?U >K4!E1O#RFȳF7m6LCsd&ҹo8IwScY:̞QrtTHG/]=u˽kRf@n%]"u7I> ZyWzݷPl ϡpM@oL R%)]K"JG AD`Ŭ3;$`*;V%PS zb-1pIC^,.G T*O,I &S%3.G{!kaPq\| {;Z?0Vczyf Y(r RP'^^&-A*RŖGRŢN$&RTQ LioCƷS臶4B: }\eC@a{EֻBmC/D2Z?B0cvSVm^*V$sw{Vp9-VI%9.`ii =PfD3 7m]Nσjosݩl1~-ɽV%{j& wBf6[+^l Z𺻖jQB=t7JLHffv }ԀOyK䉦K <_se ~!4*Q4D}j\=G2 9pY!1=3PAÜ㳛cei!2?iӳ t(Yr<\$ @![uϤC?&{#bs,6p|]sl*{U`D* |K$t߼t }Eiƈ8Pd\B;J,z ȷ+ m/*#O& .GIUs@zyu{=76, }Cؙm7LS'PXXzJs2wQiR!*XZ緓mkZ ( XikcT*2p=Y1]/<?MZHᦄ:޻`#nfQet(6'd6wzfsfPQXaʦo(+{..\j\kȄ/WʘTj#PZh2QBfI#@<}03l_ ;Q&48eΧs K@ aޫ=#GᅞN, Z?'5tUKDV{V ؖB&;pYƖk`Z"PY >7XhƘE V;N6~Jq H[uߔ!i%C,P]}IY[G`7ra15fN AQn s7/|ITvoW#+F %pAP<5)\رΨS͈YUaPšAc U= %WEY4(qI=ʡ\N~`O *%;qc&+4t1@1%s*l.rqOCE+L[jAˀe?@ ,݅OϲSe*i., v+Hܟj#b}h`j$6MhOй3YcziQRadIhqPDx+VZW:=B̯uZBs,z9"1[@s?g`q(›c ofD܌y5i&Q*dx_EI2?EӆW<{k!xz/УmgV3F9"U6jZQZwi\'sMQw$ѷ,'\;iF B|<2I,fZH@ sN3C9KtD&QrKxU0*d#+iGtI)< 9c |zN0V ̸n9aF?.=lVIgOp b^涥y$0(SHlPeW.2(|ե*KyÜEJDwuxMG\"J(8.'PlmgmݮҏeP$lkjInޭu[$)pn0T\!9"iT/"jf :0FѴQ/y :Lo),S˖"/˹78e$A<>)^M UbZ/-9PY nRrB5Ͼ\:{wƣ_3$VݭLxFx4->z#kc4buXGcY 'R/oaO(V qXʣCB?4A 9!g*Bd]sbSjU6޻;9}Hn;Wâ teHLv<!Z7 ^N▊7chd{]gjڎ+xb)z챦/ f+k`zOLu:  s*ED=e,r_$-*!#?F8֯]A8wE"|0 RQx5Y">j #A*!6A] ٩/(Pqo)DI!AM.Ec+QqZzXUMbKHSe]*\sAܭpz '=욘^#KW^E}W[ ,ek`m V}ЫtZlm!ԇkQb4W#L,䭨 )A\'>xwy3%u*5˨&+oAKiLx,BIi|"(V0_)X~ 4@IBSF%⨛,і\H4wM|g0*Z^16[p۪t- %Яl XZG^3ke9Tv>6B91@d`͜C7fbZpW~[χ}**(4=f5P ~VQ:3W VQbά s?cPE\V^Qa9 F.|TydɢW~Ukh@) @5)RN~p|Fn x=q1MKR.O6Je>Z[e6 xﺕ9ŏg_3͖EjsDj^b$rrW7M>xtk * +^ H#M|9 a,b6%6{RWOJ:e⟂t(ITRˉ~'a>8 -tv@n }öwc,Ob *@p? D,Y='e^lՏ EShtLmb&\G-Jl]x]Z'Y%Ht@6C^z88@n|I٢]aak1(G/ѕ^6w vQj ?3 *#ıe<^euröh2")a6%C>ttsw߲pS ,`f{͠o016" i-S4Vj>bJ0[[ih|^ h'_[0z` Z}fG\a#%b\Uc$d 7OY!ɋĸ V͋{4Q=K.  fW.3f&@D%ԉ)Ҕ󀥮3TCwNߪ.><׸Jgm;{ĪeWz aŵw,>k?maϱͱH 3zkPdV8V PEUf(o1C|a94y-(p퉺|vM-]3_Loɰ5`^r9A-SXߊ Qb}0l&:.6d,G?N+LfaeB$!(DŽf3cvP$8J׶ɣ* M$U ecY$rr_"4]ť瓥Kx?  oa6Jaʞо2AY -F3z.uud\c5 q'>vMWE?`.S$[2"ʁl4'ձ'hA5Ov՜k }|-.͊v? q:s'N"[ayr]LsvS>)&M=:6*uEwkJ2=3 WWL9.QUwK `6jd<,8LW{@Ztrj &z7~KEW]OZWZ{/a'a^AXKh&Z[^\ĸϞ8+Ϩ:ڬ+F҈ c{r7VFVs]%4J6T@:bRf]w!'?|zMSCΕV:զ+ȸ0@Ki"Oς&%1I@']V!Xx4)BԂLjrx.;sVg;f&B66(ǼR?)kWr\TM_ɜK$[c&WPE p| PFF@ɍ!#oH\5G:h~#Oۛ}5o(RoY<";I5tX)/}\S6hߴ8Ӿy!,Xdg4Y*7P`!nD/7Jsy\ScW'n~ܚaD.PvNa)6*FS@t]H8:qy"{C*aj0o=˧A3+u {5n )FSAx/4 w[W/7W1qPוE_|:";\3JJ鮯X|lg#SZkǯPz6EΥA:=1t^8^Ub(L}r:bd8Lg)dнc{V0%}YCvF`](+9P$JgPQ*\wߕ=fD= XڻUU.SoDx?m_I#5{SMڬڢTfyd`Ms].M:쭂ZiAsx . E#O@]Kr_*!"d#g=9eb/s[eDdgsy2x'x(("'Jp^hH>MyկJ[IglS"`9S c3 %5:KSWsLO{yڢU7 b.c/ c @H8U n!1sc=JtLr()p'T~U(| p/[hP0YǢt0[ H|5^R}C!0U[h+4 HqXǫl>?-s}_Ph8w7is#6[3O 0?1FLPtx|\cPڤX<4Iiݙ&6k@bjPZ. >LLW$2 a Sz~R 7{BGPN4 L8 `tÊ|~@;Z \Oe*IͣOGl$]rs7r.1lzJoZTȹ/AT0RUuNjw \(` d|6c'DCLҍGv,cSx|irB18³FRi~L]؅E=ϪPI/ Z'L)o z-t2|#MM˜+)Gkf"[ ?#2Tfg12da=c^3ˤ!3d zo#C;Mp^ F 8 /=VOڻ/ң@BM]3BBHU!4n~L/b$!Q]Isgg"th )q>X VN űT|/Ck>\K(hyXTx73p;qEdpY 9W;~yi*:VČe2GPQ{/V$5Еn ߲@m@aU/>!KjeXd?Y|: b{иo9&Zqwm%C?2c}-(Jt.t@gakos 8C3z4q$\2.@>y;T1 z ƼSY`@hd? Wj1T!8ϐ6S ?+0* g=JNSW0Rq6r"sx%cAzZk7KገCBW%(=aoyΎKt_/`<8jE2`k~:zкi"-"&PSzeDMVSrՑrL'd5mZ~$//͐11aU Θ7neDIxȅ`ELG@Er3 RKYzA\7:<- o#z|}U I^Bǥ8dҟfX'qR?U6#@ $-Rebefia4|Ӽow|=c'~$ \ц)jA/jOs8;cZ]æ5XCyPD SE_YPX."lx*+YMY9Q 9[5st7Hq_*i>;yXPlwܰ3y!xh_AJx2ۺj!}<?/8 C!M~3d("ef;J |P_̓agw Dpۨr I X!⼺jPXCB);ۣ>w965%5m1_b [XsY##>$Z6L_ { ʂUm6~.6HϠk';ȟbL>5E6)v#RRTH8jtۘ+M)S_;`(j!82Q1+peUDZ9Nسxi {H m<+g)7V4EUTf;ǣpݒia!b8DĀS/9 },Uo4O;sb,˫e}i;)9'/=뮲~Kz<%F)H`('쀘H쳋˭cO8cZ#L^tC],\9t2DV3R8lXQ/0QFM]@WNzaJ8aK࢜_"YCo#@9ނ=47ӓ䡐,1f(JgH=jc? ʙ,HHDHK}Y&#6!H;2CK.cd{ÈiA%OHapur.iӻF0.P Zc*`?HNyaݞ ]2W%[ Zz4cS|Mb&{hϭ z|Oz _6xK'kRx;ƫ@CgmGp"lG7H(Jj-:]9ZS^-ɣv41g Ifr[17f%m'mI~m uy>{a@ȿrY mF߁Gej׬(` 8\wҳ_d=U憏US gŎ8=@ ?bta2?0yb-zK'v?&\P:.?AGcQe sex*s+$Q 8O2'563mP`42 [Gғ?:bIePچ,p ,4v{1++8mUJ+r%Oˇmkuj]/Jo7MI=}A.{{Eժ٠:D0bZI qR%0 leo):PB)"r]fʂyu%Hqܪ eSJL6zZ)-(MzLK aO!~TY>pPNC{(K㹩aDϜKjpX]BEjs7 !y2&"5oyvV2/B''&((jM­b,oRd+O);)x0kЀ_7~]V/ #)Йh\DZœ:!S (dTZW$`G5nx̰ezLH~26!TǴmԈ%[yXP{Z)s"Cp7ӳuωN*Uwj9L[[w;uΘ5T~yF>ycgF,cAV];/pwM\V~nl[h=bYNz,r JNpimuxSZ%1ՌPX{Bg)EyQ,zyL LD`hAM٫^h&KP(anzф%B( NUPO`9&$u_Ca=rK[N h=F;)n'{EjQf0śL[ρ b!z<*O5·J MLF YYJ~s*tA6/+Dٕ@ncP%lR} 髑s*+tukJ3!&4KKU%%Lޖ'nsd%jkW``I*&MxK9\)"+OlxOlokU-ǀCN_M@ƨxf_[+@̘p*9oo 3VnD-zhW%c%! r?gDrBѝxȁyOVsN ˃] RC0}j;t>LӼ]B*p4lrt*V a_Evp,0UDØJyDZ>$~h!$c*rZw|zVΒgn>a>@afXd.d2ЈG n̉0˝U4s܄KZʓ񴩮rn`Ue;8r(T%iC)p.7bs{.R/je_V_iUdh U])o}cXec>hf^b!^vƶ;]EVDS&i [%`Sܡs!ODk:Ɋ'%[k|GaNMaEtTt]Cw{o.S@:BgE֨-1z2ҒÍ5OOrg`3*h4a (aUvzmC!R=Oh|eKhb::yfe4Zh/]7pmȶ ns}tp(sxĺT%K(ʿ#Rf m^$dOo-C3t'ii%W'⪄ yGft7YœuUuZ:kFlӓPݭT22TOib?VrGzuzA0@`u-X2N@/z5l}YA3!7a閟;!hO[,lr5duYzK 5AjQ?\I yHCgd?cͨ9jFxG], 笝5~yW ztdw1"_M0yHYK |A.LWBO %9>. oR&Xk^R.>\;R@PY@Xf1 1L~.CD<퓹׭;Ө+uLNYv b#eU'-$;00u߅> Ɂ籅5_\ɽ+lX{Z& l5>&kǤ@`.U㦛'-AD`p>僷FAZǿn$uV2HӘ}^U6uҖOWAS$- &[a)rnW +̘D Rd 6#o5E$YDhqsihY/yVB#SV FuF߉=7y\tw5D2x-X4.X1W*gJ5l8E)叉P]nVcwBhr?:c8̈ ~\{gQqv#s*; Ғ t xwC>N K'%ܐGdž_/&4zsS ׶D cH~_RWvKCX(!F!AQ?^B˙bbMqkUp P뫞]?0ѧ!3]ݴྫྷpYe" lO.4s[ce^i']d_R|v=S$7^FO1&5]Eaج]0V$Wb'!J?^}ߛq\Z =/v\9C /2ĕj)wm1K,>YClۘM@lp]|*{gXŪ{q)cr pPο =O]8#˔`A6h6|{+ E!,c r* j|R/FdA7!Y/&Aΐ݉B,o]eDY샖gep+c>|?Xqr O#X8Zo޶ =IJy'78?c/{@E㎄ڥ+]fLc u,%i5Hm9oX&-r nE=GjfVݒ#Ixy-g!_+wt+]4:mzz̛t>~~xF HƣbxfD8(U/<%L gw Xj~>]zY+էf?O0O^%fWdTZVRېJ<LF! ݰv2>uh"R 34i.5S&+u͞pԣ1PMe':4D_g>i~{$nPṔn{=s=rףIv.3SRQޮg̑]2H*iwxuR LY;p8x3J[DE.ksg5p95³,xlpϮ\qk#7"> _ntT.YēR@tRBVOCޘfwFYDHPL5E\.ãuB,JbґGCM@nB{^$ RNCP[s[YU;i!&tyo06 I(j?8I3? &m[b-Sg)k%?LmCt+ʅMR.z0B#ƢYxZ`Lq5tH%*_,a ZA5Wj0mvy)я?kě}MC7;:[|-<y@,})JH s'_.b^o'~puA;M4["G)8Ź?&V~.\}\Oo]XY$y sKA'ʐi0(7ӅU^\mna.l<\CV?xD\p‰E\EaCRp=^h4'bIYS lW/nS]f<]c"@)m\u J) p-i, hy~Hڤ&yJ]!KWGYBUq1:j"3vj}y&7NM4o|P*OmMV!Zy ")}x;7ygxe2 yQN$abvke: oI7$ WGVzj4M ^ x$?R»' ʹ3wׁ+9#)e#l_x#T)@q*=CQOҷ\">. 1eVM+,M8=qZK6,NԽ9Mx1h&4]轇w⍅ow3}|Iʇ:#tC9?aKoRhx$G:i/%ilt qCfԶ7[咭}+2]5}B-Au/V*Ƞټ@FCW.kMPQ?4e,%:a c+Çn5)Һlm/($eXlSJ_^VmkkVXu:>XZ0(8*%^^L02-lr6&o,h/a*z=ZzFh,).B{PMwod½D4zk7%p;*!% vD\I]b13U2Cl+8.M(2P(e%sk kӴc (xO-y 6wlAD;J^lo]T1+EvI;JלVۄ8s6~ƍj z6S2kƠ>䧘@4Fѐ sD)}x܊^]pqw1go'{F.hQbqHL"˗72j7L2Xm[7XB/z'; -+t[&-d+^慂400G7wb/T&7sy{u=[7%jiQLQMmǴDw2=`XfFdˏd#O@(W {Ǽipg+=wSѿ[Tk_-5mkHm;-@X #g,~jI-eJl@3 UH~F7Du`S@ro땃yٳJ֐Bcka jYI'|,| O@Le׶V^W.lA8z P S`I] c-S-:ߐf-J Pc~HH/] j>{,.3Zl,"Գn&^Zܱ SЯe]MIsfoV>c9&T t#ix`OEgzKdDsA(Sjؙ% LK㼔fǩ׳G#Rys- ?gfAw{uqW,vOoRTU~%MNN~Xs@X @33R s8ɰe1f@'-\t΍xv`mCpUK*}qxW,=$#^B|+~#ِWx%Dϕ7WgMCW$嬸CeC˲,3|&iW3[YL萱dOUʯᒍ ˾hK_M١ `!yg!dTlFtE~ioI: ?4(Cl/ Ѝ0+3EU_Twl 7PMsE0KEXy%M2.(x%֜kTžufUWx-I@w)P8mƖDK| LG!sQ`rz|#'e;5͡uтI-YB 8ZnR^ÝTBQGnS4&S½5Eof韙}w;" B]d-]YGkzp C>eX2m?8osXVr fc7xj{Z7#8?7Ҧ"RldZrOyipRA(Ads óK*ZxQ݋7M)8Ө1t"{D3;J~>s2 d-7z{J(?7x0zF 2>l϶ 3D9klzl+d e);X#lC{$7?L.>!9C؄ʏ#8.bAJ[%iB>͐p)1pكHz b vZ/Es9S0KωR"8ʋ(v^üf_W 8\⬥|w @*y!7\0΄tP#FͦoiHKg&T[WwѱvK;eT^s$HSb7MQN%BQHRT$a d`8ZqZm9 t܍RH.= rF." DM<* DIFx |q I/r/g.GnX] oi|0jh әBlT>r{]0wnlj?Kf~lVzFp;]tg%d3߬ 4Y: ᾆ?݉'Xֻ?JhHyd,xyl4쁽\ GŮ9Rxܯ(g A+}Qx:$:#4[* Qr'w1)G/KYFgI0O >֡*kU;F0Vrzf6Or(y؀@ZWzhe̖Q#瓪Xo&BDznH_FNz]9v$#{݄2pԍ kTtBe\wpf3t[Lpter9RA/'RrG]* %yg7?;Zri( idkXܺ}vx4. ܣGN}^أ=xfś P0X>mc}￟gܾUMM޸}8.c2k⠪}t 2O9aNͰ6 w|vPF4*3$P>ԗL55,$Svoו/"}iODZiA|;.=d1C\OJDgDJZk"ZѡX3eЀ,|j+ ({@Zll0ԢdcصV :zE%E"{Ae^V jpnHo6T1Yr1TpJx"ڎ5ft!o'1%R/ampKHTHԟٽ,^uN0 cK'""bQf ,`z:=zG]дz1kM2?K lt.\VlQv7yt1Fw `?o ?1QBx,LSMGDika-VՍKWf4.}R] bwm# D&xa3Ӭ'<"$U"g4c6>kF%[\)M;"|Ͳv#?ЂA<*{$r>ʤ_J"wZZ 0u]@*3<͇l༸@>TEzTJN=:hf5˹mbI̅Iۉ d N!j;9%T9M]m :&v`hەwhX%8-hڊ?X4 ιKL*qX˽;A3Jor ', P/SK,Fyh8?E)sDhbD6SQZ~RBG;Yq" kOW#G™5-&D-9 o/ڍlR#*|~eem缔}%kMV]#!>LVh />o[2gxMtw)&c؏ |B.z)o/$Tb՜2IFElj*k%ņZCZQIȜ=Yaek |(1>艒{6(Yr.KhXr_ўX`pN _ O9tp͍KD>%̏OB*'DNB4  T$7MBջt=է+6c-J X2@RYe`_Ѭ=ƽ[|sTm{#lt?Z7L>$da'ϞRĀWjhm` .1ܓ$ sȜӧ%;GQЪWuWf !ek^8^~ԣE)[|QC髄?y֝Vx5ٴq>Y8خY[OTL:*(uK?Yyjο]6m6.BrRx`fK(KśĶ'e$4q­)kl#<7f äv=WA_j,嗙ATFZI=&6T :DL~h ;ƶ &p4Ե6w +!~g^O{')7ބj2v@*-;T? 7jj_daK>O5`S4'Ѐ:ݡFk, OEMbՙA.H]9ȗ)/kdLwG0{lf: qrKᒸ![&NL[|!pmuhڶ| ̕c<fu"b L~5u]ӔiJZ<rqک#~V;.1@VADKx9 ىauai*Q _2ǜ:7T=nm#ygd/f㡠zzhI/Ҽr.4 > aVr_yY(Q ;e4Ao_7YMsYy8/_myY^N{'0.<|(C1§|J[}sU|/@[?MVNo )qZˮGxCC%G;]bذ@94 'KKy8@:<0pK SꋼL 8|ݵ,Y55ra3y~"Cʣ_"?3 CN?x # 0 Gc'[3bob0L j8Z=1-87 !ŊlvPU`p>ٳq{ ktx|W]a߈9fNǸdFR D ϩJq~%f"7"_ߒҋ'p8d&`G@kZ$9Ȭ0]mA-rb5(Q#A4wNd8BJHQ߷ubMFHoT8%31`0a$9_7U%Zڠe>68TsI9!MTٟqKc`۲cm^4MJk0ЮNԇ#[“зeJ JS<9+L-c?7}wrup4= z|썧BJnen/Vj EnA*DC@B hn9L#7:%ov̶ Z\7n|UH -)y (ѫeCI/S.ob}]lJN)آ$YOEqum,+Reu8 @N/G\$5gE+`X@8km HtOr"F |,ö:up'\|^ݖkV38D -r(R&jCU!f_~gU52Nu_u20 27WSm|=*m&S+WFVUOGZv ]a$GESk6;w] zM@5,ڽݼOwpZBh@j(u[ mv UcqqF@?RjF ou4,80-ym3H"4v\1c^8k.ߋEТêhP+z3XbΒI`ebw5!_4&_̆Z9eջ#O!=NLN %z3$s*=sEIPV&Y˵51y Rt bc^-]`|% ;H30CGU --No R|S{h!|qݔ xs>ޚ'CZUpСhBe6^!aRO ^C[uza7 CIlcMUA+PL!k1w̖q$,TϨxmؾ&#$0{آY",# \Ҫ3P 4KX5''8Q5Q*K |v1wbR9ls閟`yrdڐ5|Xtǹ9NHWpi8F:AupZ5/^ EWg*ht@XQD'RYMΣ.0:fxfw />!:܇eZ ؋J<}/:~a70Q1&bcOo6h_'Pz=KE¬<1_g iRO׊98dP T H$a&f=Op-`# ú5Ử (>¶b&EV1*ٙ __H{..kUWUh/r~cOit9EHgGJ6菪zk>3NI}5ǣ[Yp|;>%ᢤ& bV&{:@Qe#_^0][&j^E%n5i'hQr?0{KAٻ9J,e챶9tTcmOF®7+IlI cgJ@xBA ^ Y5O+ PTjr|ؔ5aތX *m6V=n%c>exK"Y$95r7!*2Rv) Oc W/lP[Su񿶎5j/5,HtÆ3h[~&&M 4*"#͚*#}!@Wbi⛰3IYT2c$L 9Vi05^D~v' d 2c8ZԴ2B[)c[)pȟO?v}VIB pFfg6ϫtݡ"`b {;^L|$kӞm3>ϒ05Be?䝥j)lSgtb-e4 q8jFx*L0mP4Ob.Kz:e<1tB*/$wddN)|b Gvҡ9CDzzAc n%6צeNh:Oۚ^_ZQV ʤJ^6ܼ&2!Fm-nPM)cYlvmcsS4C<k <̤4lѱ aYGO ֯ }Y_;YZ-"]RF @y ^cQL'I, FsO&Lw:1 gtд'$$]^[i!k=<~Ҧ9vA{A4l2VI+ջxRDWoIR u8)K $SaHVzd>)49r/cK(>\ dؗѤ { q(JGC,1tN)`q+)S4Ce/ Y䰫P H}!nI ^`_ {/@Ѧ>3jT1zit'?F Auv(}xgir4\n^ sl4eEJ +ŭ=^]fn ⵶pkԅD/݀w1z$h|$LUš\3v_ĭ4 :p8-.%m2 EH#3ˆ<.d@N_2B#̗]{(I<= |se] 8j;S`ϟ+ c#UH ?JZ*mK`t4+_IijAF:jǛUOg- _jfyHues3 4qϒ-`j=1I {7Ԣ-&\8%\& ,mCi;`ӺEII^8}SU.!v`9U?lHSV)l؅dUUf[R`!R &|:GI^r\_>*p&W6VD ?t)'U@+QIyykDp 9QOpuLԆsg-OQAϙi![CkMl@M #"nQ @q#WsdILMSN0v(ƚ|}H@!rmFlCeCb:IHN]_iE~ WHjs=ŧ3vE${MBn|'pw"21o{`@"2ҹ(lbWJ6*x^k>u\QSH0eL5o%oE%}^"l z~5| IG u!yqk4[:ct{%v",jƖ-I~;1AQ8MSD!PԶWDu|]S(, OW; l<%>^cy$Ta `({[)(Ua>FVXֻ27iQXRQ}T\y0giAߢov*X/0k>/Ulƣf85 6}m\R "-}ŞK|wU^nhă"&' ։iXnT QSиq&tuktÇ :A XŚ'R'^ϩOif "nD>zv=k`skd?Qhl SBs\ !y]!(N B-^/G8 x kMTFRFrb Z OfT1m*;<*TV,[w4ȶe\ WZ07ΰ, y(upBs*I>&ꎔ$bq,ŝTa7 NVUԽ m3 s'ٿ=+aW^w/ GbvOlWK4,u0̺q hhP7a#Ȅo(K˹~p:e i!q=:; Ts0=z]+)#oHIGzٞbE&{.zU-^P'.9ro12_ILK, osHQtY95AʸL1]x8a¦G/`XV>N\Rz$EN1Z4{㸲Ʉ:[co K5w|b$}p >0v A iF@&'.0p0JfF)BF@k,NedG܈R>м]+Dyv(mIC$鴟S Q=9?4F/rvVATsxa Hx'~X+rJB>HĚZۇ w7^.@w/EҷoN>O U_-\;ar-Dֵ-k6۩LT JPE%T+^i7|F^&Z gүu;M $jP`tql>߷\30ewkIF־7K>4:# t6/бn1YobA=~/a&%th9s"審o42鞫|G os&](t2z r+RO? h&< ֤sF/y p/7J2 OQD'Jk$,x4`l"\>șM} i3 M9N,Go9$Q18E˶:Fتح7&Couk$ӗ؟ )_1>D~}eLhaAr[=q`Gǁ1% De>Gx"T0{13co*O1&1jm>\CLj&^Bups6nnZIoSft䲺ҢDHG '1H=҂2h*j;\}/Od[ؿ Ȩ2v h[^\V &z.LFLѰ{ylZԑ~>-,8WD %6`:iMO鉟-ݷq\Ӥw$O&yգxf\AsW)/8s3DZG] !iFkXO&"nʱC8sF`̫r=Rrya@{#{,?ɦv~1T˃4hXm"({ 錽zK-)LW3eoē>uҿ~"9۾mJ}^xy\661Y¨7Siܠ ΃p7GϤ$ۭ](;r\4|{1x?iD0pNqTi1xeC"<9n:o9ĵx &CzzoQ$?4#_ C?0`C| t8X`-j烿rWy{byVxE?sT@x[:&㣖o<*dX$$0$Gdv`t`(>i5/:v ,yeqcK=ç2Gy~֎la#QD^NaU54tYl6C4m /*;m{*rL飡Daz?4:%b1p=m5g 98J i~/N7?d/]R5"eM}H'5}&!\Vr'[w`ܠivTz!| m/(OVli%&CJ啕=UNn>H`RЀfޘ2COSE29XW -DF !:͏ mxmrl&I`ZLi-@}'vuƻzy7*jTqQvB b`9(J0H0o,m'kՂRΛqQ*z](&L5v04Dw%_1[4||͔l $Viwk|SW˙vw1  Y.|CYb+ x*e6Rr}*'Ci BlX&𤭩zȄn#P{oBL0Ÿ/^΍߄!BF_~mf#;.nA/+ ˿LxpM~^g `$*zREoܿ?ԗxӐ+n~ n.o>I+w1Fy:N^'/F5{\/u(= 2/=7uPdw#X8ͼWKL;k7Z&0=kFfyk%c8`fOAY;~10eNƪ-ʈҊa./-J-ġ0!f_!'JCσ;lcf E{ïTGs6][p%exMn quS!>t6geEFq X4.mcޯ2L<KXGݟ}C45=jPwJek+SWZJ]gP޽ Q$Y2ަE7x|Ej|g6Wxƅu6Ȅ&ie(q'ys/}}G`TD1u8ZVVX %@-ThH/ƅu_WxWȑF&,a+%Kv uj|I0Ì \^_I48]!kԍC,nEՈ+ʵ=f4SVYwE%n\vdK:_.`"3% zIj;}5,@3z^R՗Ҿ"jnxx>={oV&e3=>ߊ%w~\er&T:UЛ00$? ==-JGGw-  T$ ~/yأY Hn08KWS3>MzW> Z4L]cXfIq5QHq47#iƦ6FF =$rݸ Ta \<)0g8nH>%Nj}hؓUr pp$ࡵdMWSA565;CP&1-9:Q7ZCm N8 | ;NW{$M^^#]vq^&uABnO'vc<"5 /v_R.װTb7'?4u=h^WdA\l>^@W>ls@c뇲_uI"$EwʹV̱vi2,\N_szbۅM8C 31غQ"U;2:9pz$cswpN<3 )c<Q^u w5.*Xo~^=l#OrJ%N$3UP vlv]NG~Qѳt~1~>`,3k1n)kPxܹ0uJ ^61鳌jFtD Z&vk>$BjXMPvĮ әC]x3:9UKi~_(^0+ ?!d&O5+ };221s_p;B5󧢐~rЗ-@&uqqq*+47wcJgQ =6rAQIhc}rowE!~λ{Hm[j.fZ˛F(Xtc\4f?BmqΝS8Ub`hׇ_ձ94?u{Soɺky0ɾ4?,K %ּgzT_*T/|ϒ zKÁRi]pd@l6wbczT'ۅr]\(ׅN?p/#᧒(,: rI $L+ YZ