From recordond@gmail.com Mon Nov 1 00:14:22 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BB1E93A6821 for ; Mon, 1 Nov 2010 00:14:22 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.739 X-Spam-Level: X-Spam-Status: No, score=-0.739 tagged_above=-999 required=5 tests=[BAYES_20=-0.74, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Awu3VbeA2eEP for ; Mon, 1 Nov 2010 00:14:21 -0700 (PDT) Received: from mail-iw0-f172.google.com (mail-iw0-f172.google.com [209.85.214.172]) by core3.amsl.com (Postfix) with ESMTP id 681053A6848 for ; Mon, 1 Nov 2010 00:14:21 -0700 (PDT) Received: by iwn40 with SMTP id 40so7034396iwn.31 for ; Mon, 01 Nov 2010 00:14:21 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=YAvy9BDIkfYnW2gELrBrxIdE2C5K3qxU8F3HCYR5NlA=; b=nqyiSCvEnskQD9sZERH/s6Wrv+LIc8q1HccgUneMRJepWKDiz3tMQFQUOu71wIMY+d JW8fRK0XYCuDWcmRB9ligv673Och5ATtHWDslmV6O6rW6C1GN54ACUFzWqkyo5l4ljIr z3vMS4UdRMWe/RMMYfRC10513C6+62kX/Oil8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=WlnK2ECUewoTRL8/5xdvYqh2lucGtDH5FjM7rsOJJxZK2IO41zkCjeCMZK0Z/cN6b8 oP7wHfw6az1riSzeSk66TbBdEYXxrMgbOwljG/ndD/szv4Nij2XkT8xT478HIfgzLCGX FMF9Ayy2SylaVgePQf5ppP9UxO5HxePy0MIgQ= MIME-Version: 1.0 Received: by 10.42.74.137 with SMTP id w9mr2726605icj.201.1288595660395; Mon, 01 Nov 2010 00:14:20 -0700 (PDT) Received: by 10.231.79.129 with HTTP; Mon, 1 Nov 2010 00:14:20 -0700 (PDT) In-Reply-To: References: Date: Mon, 1 Nov 2010 00:14:20 -0700 Message-ID: From: David Recordon To: Olivier POITREY Content-Type: multipart/alternative; boundary=90e6ba6e852a98d6060493f88eea Cc: OAuth WG Subject: Re: [OAUTH-WG] Dailymotion API using OAuth 2.0 draft 10 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Nov 2010 07:14:22 -0000 --90e6ba6e852a98d6060493f88eea Content-Type: text/plain; charset=ISO-8859-1 Added you to http://wiki.oauth.net/w/page/OAuth-2. Any parts of the implementation what were challenging? On Tue, Oct 26, 2010 at 5:27 PM, Olivier POITREY wrote: > Hi, > > I'm proud to announce that Dailymotion released the first beta of its new > API fully based on OAuth 2.0 draft 10. We are sticking 100% to the spec (we > hope) and are supporting all client profiles. It's currently in beta, some > parts are not polished yet (i.e.: authorization page is not skinned) and > only a few methods are available but the basics are there and fully > functional. > > The documentation of our API can be found here: > > http://www.dailymotion.com/doc/api > > Here is the part specific to OAuth 2.0: > > http://www.dailymotion.com/doc/api/authentication.html > > We have client SDKs for PHP and Objective-C already available on GitHub ( > http://github.com/dailymotion). We will add Javascript, Python, > Actionscript and Android SDKs soon. > > We are very interested by feedbacks about our implementation before it goes > final. > > BTW, our API implements some interesting cache mechanism, but this > is OT :) > > Best, > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > --90e6ba6e852a98d6060493f88eea Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Added you to=A0http://wiki= .oauth.net/w/page/OAuth-2. Any parts of the implementation what were ch= allenging?


On Tue, Oct 26, 2010 at 5= :27 PM, Olivier POITREY <rs@dailymotion.com> wrote:
Hi,

I'm proud to announce that Dailymotion released the first beta of its n= ew API fully based on OAuth 2.0 draft 10. We are sticking 100% to the spec = (we hope) and are supporting all client profiles. It's currently in bet= a, some parts are not polished yet (i.e.: authorization page is not skinned= ) and only a few methods are available but the basics are there and fully f= unctional.

The documentation of our API can be found here:

=A0http:/= /www.dailymotion.com/doc/api

Here is the part specific to OAuth 2.0:

=A0http://www.dailymotion.com/doc/api/authentication.html
We have client SDKs for PHP and Objective-C already available on GitHub (http://github.com= /dailymotion). We will add Javascript, Python, Actionscript and Android= SDKs soon.

We are very interested by feedbacks about our implementation before it goes= final.

<teasing>BTW, our API implements some interesting cache mechanism, bu= t this is OT :)</teasing>

Best,

_______________________________________________
OAuth mailing list
OAuth@ietf.org
h= ttps://www.ietf.org/mailman/listinfo/oauth

--90e6ba6e852a98d6060493f88eea-- From hannes.tschofenig@nsn.com Mon Nov 1 00:15:24 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 706F73A68A8 for ; Mon, 1 Nov 2010 00:15:24 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -98.536 X-Spam-Level: X-Spam-Status: No, score=-98.536 tagged_above=-999 required=5 tests=[AWL=2.204, BAYES_20=-0.74, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id HYJd9Y8qwx+A for ; Mon, 1 Nov 2010 00:15:23 -0700 (PDT) Received: from demumfd002.nsn-inter.net (demumfd002.nsn-inter.net [93.183.12.31]) by core3.amsl.com (Postfix) with ESMTP id 149343A68A3 for ; Mon, 1 Nov 2010 00:15:22 -0700 (PDT) Received: from demuprx017.emea.nsn-intra.net ([10.150.129.56]) by demumfd002.nsn-inter.net (8.12.11.20060308/8.12.11) with ESMTP id oA17FKgt021039 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK) for ; Mon, 1 Nov 2010 08:15:20 +0100 Received: from demuexc023.nsn-intra.net (demuexc023.nsn-intra.net [10.150.128.36]) by demuprx017.emea.nsn-intra.net (8.12.11.20060308/8.12.11) with ESMTP id oA17FJO0019329 for ; Mon, 1 Nov 2010 08:15:19 +0100 Received: from FIESEXC015.nsn-intra.net ([10.159.0.23]) by demuexc023.nsn-intra.net with Microsoft SMTPSVC(6.0.3790.4675); Mon, 1 Nov 2010 08:15:19 +0100 Received: from 10.144.239.58 ([10.144.239.58]) by FIESEXC015.nsn-intra.net ([10.159.0.28]) via Exchange Front-End Server webmail.nsn-intra.net ([10.150.128.36]) with Microsoft Exchange Server HTTP-DAV ; Mon, 1 Nov 2010 07:15:18 +0000 User-Agent: Microsoft-Entourage/12.27.0.100910 Date: Mon, 01 Nov 2010 09:15:14 +0300 From: Hannes Tschofenig To: "oauth@ietf.org" Message-ID: Thread-Topic: Another Proposal: OAuth Tutorial, Tuesday, 1810 - 20:00 Thread-Index: Act5lIcqGzKMEcNhHkKe9+QUHcW1IA== Mime-version: 1.0 Content-type: text/plain; charset="US-ASCII" Content-transfer-encoding: 7bit X-OriginalArrivalTime: 01 Nov 2010 07:15:19.0802 (UTC) FILETIME=[8A9F7DA0:01CB7994] Subject: [OAUTH-WG] Another Proposal: OAuth Tutorial, Tuesday, 1810 - 20:00 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Nov 2010 07:15:24 -0000 Hi all, Here is another proposal for the tutorial session, namely Tuesday after the working group sessions. Let me know if there are some conflicts with this proposal! If you plan to participate drop me a note. I will post information about the meeting room to the Oauth mailing list in time before the meeting. Ciao Hannes From lukasz.moren@gmail.com Mon Nov 1 10:44:51 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C166C3A6A47 for ; Mon, 1 Nov 2010 10:44:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.298 X-Spam-Level: X-Spam-Status: No, score=-2.298 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, MIME_8BIT_HEADER=0.3] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Gwdzvd5VeaYU for ; Mon, 1 Nov 2010 10:44:50 -0700 (PDT) Received: from mail-gy0-f172.google.com (mail-gy0-f172.google.com [209.85.160.172]) by core3.amsl.com (Postfix) with ESMTP id 6788C3A6A30 for ; Mon, 1 Nov 2010 10:44:50 -0700 (PDT) Received: by gya6 with SMTP id 6so3710534gya.31 for ; Mon, 01 Nov 2010 10:44:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:content-type; bh=e3CWbVxgk+4QrvOEHhqKlxoQeb30yhmZ7MOB8HctqV4=; b=yHjQ+yP0cALXysDljbWg7Sxe1TdO4K0VEny1nLm0SyaaPMpa9LKPow5EkPGQbfHbip +8LSM5QBf8Zuk8gfanfNwr3d0/ldZVRh1N6Chyx6l3CurQD68omu5DGBStlFGDSuvuXI fOKdy0953ruWqusGC4P+EI7ghLbKuVskbWY+g= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=klptzv5+3RySNCbmyYcZbsXhyLWWWu5AR6Krg5QuMML9hiE6uUiYn/KXo3EYTwfQaM YuF8C5f5gIxJP+F3qG8dpm4h1K9bOfXMD3YNHYICqgcevNCEcDZc9sXcqOeD8tysIGwD 1sPCpAQ4AMZpNdu+M5YJure7LwuME5akWFaTU= MIME-Version: 1.0 Received: by 10.229.35.16 with SMTP id n16mr15006946qcd.172.1288633491539; Mon, 01 Nov 2010 10:44:51 -0700 (PDT) Received: by 10.229.215.71 with HTTP; Mon, 1 Nov 2010 10:44:51 -0700 (PDT) In-Reply-To: References: Date: Mon, 1 Nov 2010 10:44:51 -0700 Message-ID: From: =?UTF-8?B?xYF1a2FzeiBNb3JlxYQ=?= To: oauth@ietf.org Content-Type: multipart/alternative; boundary=00163649a6f58246b40494015d44 Subject: Re: [OAUTH-WG] OAuth leeloo V0.1 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 01 Nov 2010 17:44:51 -0000 --00163649a6f58246b40494015d44 Content-Type: text/plain; charset=ISO-8859-1 Hi, Is it possible to have leeloo (http://leeloo.smartam.net) listed on http://wiki.oauth.net/OAuth%202 as an OAuth draft 10 Java implementation of server and client? Thanks, Lukasz Moren On Thu, Sep 30, 2010 at 8:45 AM, Maciej Machulak wrote: > Hi, > > We're pleased to announce the release of a new OAuth V2.0 library - > OAuth leeloo V0.1. It implements draft 10 of the OAuth spec. It allows > to easily build Clients, Authorization Servers and Resource Servers. > We've been using leeloo internally at one of our Web applications and > as a part of a bigger framework - UMA/j (User-Managed Access Java > framework). Soon we'll make publicly available our OAuth-compliant Web > application that also supports site-meta/host-meta and the OAuth > Dynamic Client Registration draft (as well as UMA). > > OAuth leeloo is available in Maven Central so you can start using it > straight away :-) > > Check out http://leeloo.smartam.net for more information. > The official blog post: http://smartjisc.wordpress.com > > Cheers, > Maciej & Lukasz > > -- > Maciej Machulak > email: maciej.machulak@gmail.com > tel: +44 7999 606 767 > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > --00163649a6f58246b40494015d44 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Hi,

Is it possible to h= ave leeloo (http://leeloo.smartam.net) listed on
http://wiki.oauth.net/OAuth%202=A0as an OAuth dr= aft 10 Java implementation of server and client?

Thanks,
Lukasz M= oren

On Thu, Sep 30, 2010 at 8:45 AM, Maciej Mach= ulak <mac= iej.machulak@gmail.com> wrote:
Hi,

We're pleased to announce the release of a new OAuth V2.0 library -
OAuth leeloo V0.1. It implements draft 10 of the OAuth spec. It allows
to easily build Clients, Authorization Servers and Resource Servers.
We've been using leeloo internally at one of our Web applications and as a part of a bigger framework - UMA/j (User-Managed Access Java
framework). Soon we'll make publicly available our OAuth-compliant Web<= br> application that also supports site-meta/host-meta and the OAuth
Dynamic Client Registration draft (as well as UMA).

OAuth leeloo is available in Maven Central so you can start using it
straight away :-)

Check out http://le= eloo.smartam.net for more information.
The official blog post: http://smartjisc.wordpress.com

Cheers,
Maciej & Lukasz

--
Maciej Machulak
email: maciej.machulak@gmail.c= om
tel: +44 7999 606 767
_______________________________________________
OAuth mailing list
OAuth@ietf.org
h= ttps://www.ietf.org/mailman/listinfo/oauth

--00163649a6f58246b40494015d44-- From rs@dailymotion.com Tue Nov 2 06:55:50 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 626583A67A4 for ; Tue, 2 Nov 2010 06:55:50 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cylHpVXQDjTE for ; Tue, 2 Nov 2010 06:55:46 -0700 (PDT) Received: from intsvc-02.dailymotion.com (intsvc-02.dailymotion.com [195.8.215.88]) by core3.amsl.com (Postfix) with ESMTP id 259763A69AF for ; Tue, 2 Nov 2010 06:55:42 -0700 (PDT) Received: from EXCHANGE-02.daily.local (unknown [195.8.215.118]) by intsvc-02.dailymotion.com (Postfix) with ESMTP id 87E67A4E99; Tue, 2 Nov 2010 14:55:45 +0100 (CET) Received: from EXCHANGE-02.daily.local ([195.8.215.118]) by exchange-02 ([195.8.215.118]) with mapi; Tue, 2 Nov 2010 14:52:13 +0100 From: Olivier POITREY To: David Recordon Date: Tue, 2 Nov 2010 14:55:44 +0100 Thread-Topic: [OAUTH-WG] Dailymotion API using OAuth 2.0 draft 10 Thread-Index: Act6lSaeKDDYpq+dQh66zlSQo8pd2g== Message-ID: <07DE56E9-D382-4A23-A475-79BCBC2FE9AC@dailymotion.com> References: In-Reply-To: Accept-Language: en-US, fr-FR Content-Language: fr-FR X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, fr-FR Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: OAuth WG Subject: Re: [OAUTH-WG] Dailymotion API using OAuth 2.0 draft 10 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Nov 2010 13:55:50 -0000 Hi David, Thank you for adding us. The implementation was straightforward, and the cu= rrent draft of the spec is clear and easy to read. The only place where we = had to adapt a bit was the "insufficient scope" error reporting: our API su= pports multiple method calls per request, and returning a global error if o= nly one had insufficient scope wasn't very helpful for the developers. We s= olved this by simply handling insufficient scope errors at the API level. Best, On 1 nov. 2010, at 08:14, David Recordon wrote: > Added you to http://wiki.oauth.net/w/page/OAuth-2. Any parts of the imple= mentation what were challenging? >=20 >=20 > On Tue, Oct 26, 2010 at 5:27 PM, Olivier POITREY wro= te: > Hi, >=20 > I'm proud to announce that Dailymotion released the first beta of its new= API fully based on OAuth 2.0 draft 10. We are sticking 100% to the spec (w= e hope) and are supporting all client profiles. It's currently in beta, som= e parts are not polished yet (i.e.: authorization page is not skinned) and = only a few methods are available but the basics are there and fully functio= nal. >=20 > The documentation of our API can be found here: >=20 > http://www.dailymotion.com/doc/api >=20 > Here is the part specific to OAuth 2.0: >=20 > http://www.dailymotion.com/doc/api/authentication.html >=20 > We have client SDKs for PHP and Objective-C already available on GitHub (= http://github.com/dailymotion). We will add Javascript, Python, Actionscrip= t and Android SDKs soon. >=20 > We are very interested by feedbacks about our implementation before it go= es final. >=20 > BTW, our API implements some interesting cache mechanism, but th= is is OT :) >=20 > Best, >=20 > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth >=20 From Michael.Jones@microsoft.com Tue Nov 2 17:56:42 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DADCA3A68D3 for ; Tue, 2 Nov 2010 17:56:42 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0vmAqtH2xz7u for ; Tue, 2 Nov 2010 17:56:34 -0700 (PDT) Received: from smtp.microsoft.com (smtp.microsoft.com [131.107.115.215]) by core3.amsl.com (Postfix) with ESMTP id 4A3473A69D5 for ; Tue, 2 Nov 2010 17:56:34 -0700 (PDT) Received: from TK5EX14HUBC107.redmond.corp.microsoft.com (157.54.80.67) by TK5-EXGWY-E802.partners.extranet.microsoft.com (10.251.56.168) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 2 Nov 2010 17:56:33 -0700 Received: from TK5EX14MBXC202.redmond.corp.microsoft.com ([169.254.2.127]) by TK5EX14HUBC107.redmond.corp.microsoft.com ([157.54.80.67]) with mapi id 14.01.0255.003; Tue, 2 Nov 2010 17:56:33 -0700 From: Mike Jones To: "iiwnotes@gmail.com" , "oauth@ietf.org" Thread-Topic: JSON Token spec results at IIW on Tuesday Thread-Index: Act68e/uJVhb1Tu2RwOMnVfaBGEf4Q== Date: Wed, 3 Nov 2010 00:56:32 +0000 Message-ID: <4E1F6AAD24975D4BA5B1680429673943245C862E@TK5EX14MBXC202.redmond.corp.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.123.12] Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B1680429673943245C862ETK5EX14MBXC202r_" MIME-Version: 1.0 Cc: "openid-specs-ab@lists.openid.net" , "openid-specs-connect@lists.openid.net" Subject: [OAUTH-WG] JSON Token spec results at IIW on Tuesday X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Nov 2010 00:56:43 -0000 --_000_4E1F6AAD24975D4BA5B1680429673943245C862ETK5EX14MBXC202r_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable We held two back-to-back sessions today at IIW (after lunch in space E) int= ended to produce consensus positions on JSON Web Tokens, including signing = and encryption. Substantial consensus emerged, which is described in the n= otes below. These consensus decisions were in place by the start of the session: * There is an envelope (a.k.a. header) that completely describes the= cryptographic algorithm(s) used * There is a payload (a.k.a. body) that is distinct from the envelop= e * There is a signature that is distinct from the envelope and payloa= d * Base64url encoding without padding is used to encode the parts abo= ve * The compact token representation separates the three encoded parts= above by periods * No line breaks or other whitespace may be present in this represen= tation * Encryption must be supported as well as signatures * The token representation should be compact * In particular, this means that multiple base64url encodings of the= same content should be avoided * Any need for canonicalization should be avoided Open issues identified at the start of the session were: * Ordering of the fields * Ordering of the signing and encryption operations * What can be in an envelope (a small fixed set of things or is it e= xtensible)? * What to sign (envelope.payload or just payload)? * What can be in the payload (only JSON token objects or arbitrary b= ase64url encoded byte streams)? * Do we need to support multiple signatures? * Should we specify a JSON serialization as well as a compact serial= ization? These issues were resolved as follows: * Ordering of the fields By a vote of 8 to 1, people preferred the ordering envelope.payload.signatu= re over the ordering signature.envelope.payload. Two reasons were cited: = First, this allows for stream-mode operations, where consumers can begin op= erations based upon the contents of the envelope before the signature has a= rrived without having to buffer the signature, and where producers can comp= ute the signature in parallel with the transmission of the envelope and pay= load. The counter-argument advanced by Paul Tarjan of Facebook (in abstent= ia) is that all languages have a string operation to split a string on the = first occurrence of a character. * Ordering of the signing and encryption operations How to compose these operations depends upon scenario requirements. Goals = identified include Integrity, Confidentiality + Integrity, and Non-Repudiat= ion. Paul Hill identified four sets of relevant operations, which were pub= lic key signature, symmetric key MAC, symmetric key confidentiality + MAC, = and key wrap/key transport/agreement with Diffie-Hellman. Some took the po= sition that we should define a small set of fixed configurations that are k= nown to safely achieve the intended goals; others argued for general compos= ability of operations. This was the one topic that we had to defer to a fo= llow-on session to be held tomorrow, due to time limitations. * What can be in an envelope (a small fixed set of things or is it e= xtensible)? We reached a consensus that the envelope needs to be extensible (but should= be extended only with great care). * What to sign (envelope.payload or just payload)? Given that the envelope is extensible and therefore may contain security-se= nsitive information, we reached a consensus (with input from Ben Laurie via= IM) that the combination envelope.payload must be signed. * What can be in the payload (only sets of JSON token claims or arbi= trary base64url encoded byte streams)? By a vote of 9 to 2, the group decided that the spec should support signing= /encrypting of arbitrary base64url encoded byte streams. They also decided= that the spec should define the syntax and semantics of a set of claims wh= en what is being signed is a set of JSON claims. * Do we need to support multiple signatures? The group voted 5 to 2 that it must be possible to support multiple signatu= res in some manner. Two variants of multiple signatures were discussed: t= he "gateway case", where additional signatures are added to a token as it i= s passed between parties, and the parallel case, where multiple parties sig= n the same contents up front. However the group also decided that it would= be overly complicated to support multiple signatures in the compact serial= ization. Support for multiple signatures was pushed to the JSON serializat= ion (per the next issue). * Should we specify a JSON serialization as well as a compact serial= ization? The group decided by a vote of 11 to 1 that there were use cases for a JSON= serialization, and that multiple signatures would be possible in that seri= alization. The syntax agreed upon simply uses the three base64url encoded = fields, while allowing there to be parallel arrays of envelopes and signatu= res. Specifically, the syntax agreed upon was: {"envelope":"["",...,""], "payload":"" "signature":["",...,""] } and where each signature i is computed on the concatenation of .. I'll follow this note with notes from the planned encryption session tomorr= ow. -- Mike --_000_4E1F6AAD24975D4BA5B1680429673943245C862ETK5EX14MBXC202r_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

We held two back-to-back sessions today at IIW (afte= r lunch in space E) intended to produce consensus positions on JSON Web Tok= ens, including signing and encryption.  Substantial consensus emerged,= which is described in the notes below.

 

These consensus decisions were in place by the start= of the session:

·        There is an envelope (a.k.a. header) that co= mpletely describes the cryptographic algorithm(s) used

·        There is a payload (a.k.a. body) that is dis= tinct from the envelope

·        There is a signature that is distinct from t= he envelope and payload

·        Base64url encoding without padding is used t= o encode the parts above

·        The compact token representation separates t= he three encoded parts above by periods

·        No line breaks or other whitespace may be pr= esent in this representation

·        Encryption must be supported as well as sign= atures

·        The token representation should be compact

·        In particular, this means that multiple base= 64url encodings of the same content should be avoided

·        Any need for canonicalization should be avoi= ded

 

Open issues identified at the start of the session w= ere:

·        Ordering of the fields

·        Ordering of the signing and encryption opera= tions

·        What can be in an envelope (a small fixed se= t of things or is it extensible)?

·        What to sign (envelope.payload or just paylo= ad)?

·        What can be in the payload (only JSON token = objects or arbitrary base64url encoded byte streams)?

·        Do we need to support multiple signatures?

·        Should we specify a JSON serialization as we= ll as a compact serialization?

 

These issues were resolved as follows:

·        Ordering of the fields

By a vote of 8 to 1, people preferred the ordering e= nvelope.payload.signature over the ordering signature.envelope.payload.&nbs= p; Two reasons were cited:  First, this allows for stream-mode operati= ons, where consumers can begin operations based upon the contents of the envelope before the signature has arrived without= having to buffer the signature, and where producers can compute the signat= ure in parallel with the transmission of the envelope and payload.  Th= e counter-argument advanced by Paul Tarjan of Facebook (in abstentia) is that all languages have a string operation t= o split a string on the first occurrence of a character.

 

·        Ordering of the signing and encryption opera= tions

How to compose these operations depends upon scenari= o requirements.  Goals identified include Integrity, Confidentiality &= #43; Integrity, and Non-Repudiation.  Paul Hill identified four sets o= f relevant operations, which were public key signature, symmetric key MAC, symmetric key confidentiality + MAC, and key wrap/k= ey transport/agreement with Diffie-Hellman.  Some took the position th= at we should define a small set of fixed configurations that are known to s= afely achieve the intended goals; others argued for general composability of operations.  This was the one top= ic that we had to defer to a follow-on session to be held tomorrow, due to = time limitations.

 

·        What can be in an envelope (a small fixed se= t of things or is it extensible)?

We reached a consensus that the envelope needs to be= extensible (but should be extended only with great care).

 

·        What to sign (envelope.payload or just paylo= ad)?

Given that the envelope is extensible and therefore = may contain security-sensitive information, we reached a consensus (with in= put from Ben Laurie via IM) that the combination envelope.payload must be s= igned.

 

·        What can be in the payload (only sets of JSO= N token claims or arbitrary base64url encoded byte streams)?

By a vote of 9 to 2, the group decided that the spec= should support signing/encrypting of arbitrary base64url encoded byte stre= ams.  They also decided that the spec should define the syntax and sem= antics of a set of claims when what is being signed is a set of JSON claims.

 

·        Do we need to support multiple signatures?

The group voted 5 to 2 that it must be possible to s= upport multiple signatures in some manner.  Two variants of multiple s= ignatures were discussed:  the “gateway case”, where addit= ional signatures are added to a token as it is passed between parties, and the parallel case, where multiple parties sign the same conte= nts up front.  However the group also decided that it would be overly = complicated to support multiple signatures in the compact serialization.&nb= sp; Support for multiple signatures was pushed to the JSON serialization (per the next issue).

 

·        Should we specify a JSON serialization as we= ll as a compact serialization?

The group decided by a vote of 11 to 1 that there we= re use cases for a JSON serialization, and that multiple signatures would b= e possible in that serialization.  The syntax agreed upon simply uses = the three base64url encoded fields, while allowing there to be parallel arrays of envelopes and signatures.  Sp= ecifically, the syntax agreed upon was:

{“envelope”:= ”[“<envelope 1 contents>”,…,”<envelo= pe N contents>”],

“payload”:&#= 8221;<payload contents>”

“signature”:= [“<signature 1 contents>”,…,”<signature N = contents>”]

}

and where each signature i is computed on the= concatenation of <envelope i contents>.<payload contents>.

 

I’ll follow this note with notes from the plan= ned encryption session tomorrow.

 

        &nbs= p;             =             &nb= sp;            =              --= Mike

 

--_000_4E1F6AAD24975D4BA5B1680429673943245C862ETK5EX14MBXC202r_-- From hannes.tschofenig@gmx.net Wed Nov 3 00:03:48 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C04553A67E7 for ; Wed, 3 Nov 2010 00:03:48 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.666 X-Spam-Level: X-Spam-Status: No, score=-101.666 tagged_above=-999 required=5 tests=[AWL=0.933, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id a4rE8iwj5kjk for ; Wed, 3 Nov 2010 00:03:48 -0700 (PDT) Received: from mail.gmx.net (mailout-de.gmx.net [213.165.64.23]) by core3.amsl.com (Postfix) with SMTP id 920D63A67B7 for ; Wed, 3 Nov 2010 00:03:46 -0700 (PDT) Received: (qmail invoked by alias); 03 Nov 2010 07:03:51 -0000 Received: from unknown (EHLO [10.254.0.37]) [192.100.123.77] by mail.gmx.net (mp009) with SMTP; 03 Nov 2010 08:03:51 +0100 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX18mFTFiYqYmiVDcvj3rDbcyvV3RqOD3dOuyJyDyL9 IBIwnfcWEPBsKe Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Apple Message framework v1081) From: Hannes Tschofenig Date: Wed, 3 Nov 2010 09:03:49 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: oauth@ietf.org X-Mailer: Apple Mail (2.1081) X-Y-GMX-Trusted: 0 Subject: [OAUTH-WG] Yet another proposal: OAuth Tutorial, Wednesday, 19:30 - 21:00 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Nov 2010 07:03:48 -0000 I am obviously not too lucky with this meeting. Now the social event was = announced for Tuesday.=20 So, yet another try: Wednesday, 19:30 (after the IETF Operations and = Administration Plenary).=20 Room will be announced.=20 Ciao Hannes Begin forwarded message: > From: Hannes Tschofenig > Date: November 1, 2010 8:15:14 AM GMT+02:00 > To: "oauth@ietf.org" > Subject: [OAUTH-WG] Another Proposal: OAuth Tutorial, Tuesday, 1810 - = 20:00 >=20 > Hi all,=20 >=20 > Here is another proposal for the tutorial session, namely Tuesday = after the > working group sessions. Let me know if there are some conflicts with = this > proposal! >=20 > If you plan to participate drop me a note. >=20 > I will post information about the meeting room to the Oauth mailing = list in > time before the meeting. >=20 > Ciao > Hannes >=20 > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From Michael.Jones@microsoft.com Wed Nov 3 11:10:00 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6271228C105 for ; Wed, 3 Nov 2010 11:10:00 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[AWL=-0.001, BAYES_00=-2.599, FUZZY_CPILL=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id L8JLZpVNiYfp for ; Wed, 3 Nov 2010 11:09:51 -0700 (PDT) Received: from smtp.microsoft.com (smtp.microsoft.com [131.107.115.214]) by core3.amsl.com (Postfix) with ESMTP id 5D20E28C10D for ; Wed, 3 Nov 2010 11:09:51 -0700 (PDT) Received: from TK5EX14HUBC101.redmond.corp.microsoft.com (157.54.7.153) by TK5-EXGWY-E803.partners.extranet.microsoft.com (10.251.56.169) with Microsoft SMTP Server (TLS) id 8.2.176.0; Wed, 3 Nov 2010 11:09:58 -0700 Received: from TK5EX14MBXC202.redmond.corp.microsoft.com ([169.254.2.127]) by TK5EX14HUBC101.redmond.corp.microsoft.com ([157.54.7.153]) with mapi id 14.01.0255.003; Wed, 3 Nov 2010 11:09:58 -0700 From: Mike Jones To: "iiwnotes@gmail.com" , "oauth@ietf.org" Thread-Topic: JSON Token spec results at IIW on Tuesday Thread-Index: Act68e/uJVhb1Tu2RwOMnVfaBGEf4QAkCUUg Date: Wed, 3 Nov 2010 18:09:58 +0000 Message-ID: <4E1F6AAD24975D4BA5B1680429673943245CB99D@TK5EX14MBXC202.redmond.corp.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.123.12] Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B1680429673943245CB99DTK5EX14MBXC202r_" MIME-Version: 1.0 Cc: "openid-specs-ab@lists.openid.net" , "openid-specs-connect@lists.openid.net" Subject: Re: [OAUTH-WG] JSON Token spec results at IIW on Tuesday X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Nov 2010 18:10:00 -0000 --_000_4E1F6AAD24975D4BA5B1680429673943245CB99DTK5EX14MBXC202r_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable FYI, I've now also posted this at http://self-issued.info/?p=3D361. Also c= orrected Brad Hill's name. -- Mike From: Mike Jones Sent: Tuesday, November 02, 2010 5:57 PM To: 'iiwnotes@gmail.com'; oauth@ietf.org Cc: openid-specs-ab@lists.openid.net; openid-specs-connect@lists.openid.net Subject: JSON Token spec results at IIW on Tuesday We held two back-to-back sessions today at IIW (after lunch in space E) int= ended to produce consensus positions on JSON Web Tokens, including signing = and encryption. Substantial consensus emerged, which is described in the n= otes below. These consensus decisions were in place by the start of the session: * There is an envelope (a.k.a. header) that completely describes the= cryptographic algorithm(s) used * There is a payload (a.k.a. body) that is distinct from the envelop= e * There is a signature that is distinct from the envelope and payloa= d * Base64url encoding without padding is used to encode the parts abo= ve * The compact token representation separates the three encoded parts= above by periods * No line breaks or other whitespace may be present in this represen= tation * Encryption must be supported as well as signatures * The token representation should be compact * In particular, this means that multiple base64url encodings of the= same content should be avoided * Any need for canonicalization should be avoided Open issues identified at the start of the session were: * Ordering of the fields * Ordering of the signing and encryption operations * What can be in an envelope (a small fixed set of things or is it e= xtensible)? * What to sign (envelope.payload or just payload)? * What can be in the payload (only JSON token objects or arbitrary b= ase64url encoded byte streams)? * Do we need to support multiple signatures? * Should we specify a JSON serialization as well as a compact serial= ization? These issues were resolved as follows: * Ordering of the fields By a vote of 8 to 1, people preferred the ordering envelope.payload.signatu= re over the ordering signature.envelope.payload. Two reasons were cited: = First, this allows for stream-mode operations, where consumers can begin op= erations based upon the contents of the envelope before the signature has a= rrived without having to buffer the signature, and where producers can comp= ute the signature in parallel with the transmission of the envelope and pay= load. The counter-argument advanced by Paul Tarjan of Facebook (in abstent= ia) is that all languages have a string operation to split a string on the = first occurrence of a character. * Ordering of the signing and encryption operations How to compose these operations depends upon scenario requirements. Goals = identified include Integrity, Confidentiality + Integrity, and Non-Repudiat= ion. Brad Hill identified four sets of relevant operations, which were pub= lic key signature, symmetric key MAC, symmetric key confidentiality + MAC, = and key wrap/key transport/agreement with Diffie-Hellman. Some took the po= sition that we should define a small set of fixed configurations that are k= nown to safely achieve the intended goals; others argued for general compos= ability of operations. This was the one topic that we had to defer to a fo= llow-on session to be held tomorrow, due to time limitations. * What can be in an envelope (a small fixed set of things or is it e= xtensible)? We reached a consensus that the envelope needs to be extensible (but should= be extended only with great care). * What to sign (envelope.payload or just payload)? Given that the envelope is extensible and therefore may contain security-se= nsitive information, we reached a consensus (with input from Ben Laurie via= IM) that the combination envelope.payload must be signed. * What can be in the payload (only sets of JSON token claims or arbi= trary base64url encoded byte streams)? By a vote of 9 to 2, the group decided that the spec should support signing= /encrypting of arbitrary base64url encoded byte streams. They also decided= that the spec should define the syntax and semantics of a set of claims wh= en what is being signed is a set of JSON claims. * Do we need to support multiple signatures? The group voted 5 to 2 that it must be possible to support multiple signatu= res in some manner. Two variants of multiple signatures were discussed: t= he "gateway case", where additional signatures are added to a token as it i= s passed between parties, and the parallel case, where multiple parties sig= n the same contents up front. However the group also decided that it would= be overly complicated to support multiple signatures in the compact serial= ization. Support for multiple signatures was pushed to the JSON serializat= ion (per the next issue). * Should we specify a JSON serialization as well as a compact serial= ization? The group decided by a vote of 11 to 1 that there were use cases for a JSON= serialization, and that multiple signatures would be possible in that seri= alization. The syntax agreed upon simply uses the three base64url encoded = fields, while allowing there to be parallel arrays of envelopes and signatu= res. Specifically, the syntax agreed upon was: {"envelope":"["",...,""], "payload":"" "signature":["",...,""] } and where each signature i is computed on the concatenation of .. I'll follow this note with notes from the planned encryption session tomorr= ow. -- Mike --_000_4E1F6AAD24975D4BA5B1680429673943245CB99DTK5EX14MBXC202r_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

FYI, I’ve now al= so posted this at http://self-issued.info/?p=3D3= 61.  Also corrected Brad Hill’s name.

 

   &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;      -- Mike

 

From: Mike Jon= es
Sent: Tuesday, November 02, 2010 5:57 PM
To: 'iiwnotes@gmail.com'; oauth@ietf.org
Cc: openid-specs-ab@lists.openid.net; openid-specs-connect@lists.ope= nid.net
Subject: JSON Token spec results at IIW on Tuesday=

 

We held two back-to-back sessions today at IIW (afte= r lunch in space E) intended to produce consensus positions on JSON Web Tok= ens, including signing and encryption.  Substantial consensus emerged,= which is described in the notes below.

 

These consensus decisions were in place by the start= of the session:

·        There is an envelope (a.k.a. header) that co= mpletely describes the cryptographic algorithm(s) used

·        There is a payload (a.k.a. body) that is dis= tinct from the envelope

·        There is a signature that is distinct from t= he envelope and payload

·        Base64url encoding without padding is used t= o encode the parts above

·        The compact token representation separates t= he three encoded parts above by periods

·        No line breaks or other whitespace may be pr= esent in this representation

·        Encryption must be supported as well as sign= atures

·        The token representation should be compact

·        In particular, this means that multiple base= 64url encodings of the same content should be avoided

·        Any need for canonicalization should be avoi= ded

 

Open issues identified at the start of the session w= ere:

·        Ordering of the fields

·        Ordering of the signing and encryption opera= tions

·        What can be in an envelope (a small fixed se= t of things or is it extensible)?

·        What to sign (envelope.payload or just paylo= ad)?

·        What can be in the payload (only JSON token = objects or arbitrary base64url encoded byte streams)?

·        Do we need to support multiple signatures?

·        Should we specify a JSON serialization as we= ll as a compact serialization?

 

These issues were resolved as follows:

·        Ordering of the fields

By a vote of 8 to 1, people preferred the ordering e= nvelope.payload.signature over the ordering signature.envelope.payload.&nbs= p; Two reasons were cited:  First, this allows for stream-mode operati= ons, where consumers can begin operations based upon the contents of the envelope before the signature has arrived without= having to buffer the signature, and where producers can compute the signat= ure in parallel with the transmission of the envelope and payload.  Th= e counter-argument advanced by Paul Tarjan of Facebook (in abstentia) is that all languages have a string operation t= o split a string on the first occurrence of a character.

 

·        Ordering of the signing and encryption opera= tions

How to compose these operations depends upon scenari= o requirements.  Goals identified include Integrity, Confidentiality &= #43; Integrity, and Non-Repudiation.  Brad Hill identified four sets o= f relevant operations, which were public key signature, symmetric key MAC, symmetric key confidentiality + MAC, and key wrap/k= ey transport/agreement with Diffie-Hellman.  Some took the position th= at we should define a small set of fixed configurations that are known to s= afely achieve the intended goals; others argued for general composability of operations.  This was the one top= ic that we had to defer to a follow-on session to be held tomorrow, due to = time limitations.

 

·        What can be in an envelope (a small fixed se= t of things or is it extensible)?

We reached a consensus that the envelope needs to be= extensible (but should be extended only with great care).

 

·        What to sign (envelope.payload or just paylo= ad)?

Given that the envelope is extensible and therefore = may contain security-sensitive information, we reached a consensus (with in= put from Ben Laurie via IM) that the combination envelope.payload must be s= igned.

 

·        What can be in the payload (only sets of JSO= N token claims or arbitrary base64url encoded byte streams)?

By a vote of 9 to 2, the group decided that the spec= should support signing/encrypting of arbitrary base64url encoded byte stre= ams.  They also decided that the spec should define the syntax and sem= antics of a set of claims when what is being signed is a set of JSON claims.

 

·        Do we need to support multiple signatures?

The group voted 5 to 2 that it must be possible to s= upport multiple signatures in some manner.  Two variants of multiple s= ignatures were discussed:  the “gateway case”, where addit= ional signatures are added to a token as it is passed between parties, and the parallel case, where multiple parties sign the same conte= nts up front.  However the group also decided that it would be overly = complicated to support multiple signatures in the compact serialization.&nb= sp; Support for multiple signatures was pushed to the JSON serialization (per the next issue).

 

·        Should we specify a JSON serialization as we= ll as a compact serialization?

The group decided by a vote of 11 to 1 that there we= re use cases for a JSON serialization, and that multiple signatures would b= e possible in that serialization.  The syntax agreed upon simply uses = the three base64url encoded fields, while allowing there to be parallel arrays of envelopes and signatures.  Sp= ecifically, the syntax agreed upon was:

{“envelope”:= ”[“<envelope 1 contents>”,…,”<envelo= pe N contents>”],

“payload”:&#= 8221;<payload contents>”

“signature”:= [“<signature 1 contents>”,…,”<signature N = contents>”]

}

and where each signature i is computed on the= concatenation of <envelope i contents>.<payload contents>.

 

I’ll follow this note with notes from the plan= ned encryption session tomorrow.

 

        &nbs= p;             =             &nb= sp;            =              --= Mike

 

--_000_4E1F6AAD24975D4BA5B1680429673943245CB99DTK5EX14MBXC202r_-- From lshepard@facebook.com Wed Nov 3 11:16:28 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 82E6B3A68F0 for ; Wed, 3 Nov 2010 11:16:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -103.599 X-Spam-Level: X-Spam-Status: No, score=-103.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_LOW=-1, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Lzij+5qj2S7S for ; Wed, 3 Nov 2010 11:16:27 -0700 (PDT) Received: from mx-out.facebook.com (outmail010.snc4.facebook.com [66.220.144.142]) by core3.amsl.com (Postfix) with ESMTP id 47B7C3A67BD for ; Wed, 3 Nov 2010 11:16:27 -0700 (PDT) Received: from [192.168.18.212] ([192.168.18.212:15664] helo=mail.thefacebook.com) by mta037.snc4.facebook.com (envelope-from ) (ecelerity 2.2.2.45 r(34222M)) with ESMTP id 86/38-19508-CF6A1DC4; Wed, 03 Nov 2010 11:16:28 -0700 Received: from SC-MBX06.TheFacebook.com ([169.254.5.89]) by sc-hub04.TheFacebook.com ([192.168.18.212]) with mapi id 14.01.0218.012; Wed, 3 Nov 2010 11:16:28 -0700 From: Luke Shepard To: Olivier POITREY Thread-Topic: [OAUTH-WG] Dailymotion API using OAuth 2.0 draft 10 Thread-Index: Act1bTQG8hW8Xq4nTfmMV5EKv98z0gEYd9QAAEBPZgAAO2WYgA== Date: Wed, 3 Nov 2010 18:16:27 +0000 Message-ID: References: <07DE56E9-D382-4A23-A475-79BCBC2FE9AC@dailymotion.com> In-Reply-To: <07DE56E9-D382-4A23-A475-79BCBC2FE9AC@dailymotion.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.168.18.252] Content-Type: text/plain; charset="us-ascii" Content-ID: <369BD1D31505A2468403C8072FE560B4@facebook.com> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: OAuth WG Subject: Re: [OAUTH-WG] Dailymotion API using OAuth 2.0 draft 10 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 03 Nov 2010 18:16:28 -0000 Awesome! We have also had similar challenges around insufficient scope. For some API= s, they map very easily to a single scope, but other calls may fail due to = the lack of several scopes. Similarly we also handle this error at the API = level. On Nov 2, 2010, at 6:55 AM, Olivier POITREY wrote: > Hi David, >=20 > Thank you for adding us. The implementation was straightforward, and the = current draft of the spec is clear and easy to read. The only place where w= e had to adapt a bit was the "insufficient scope" error reporting: our API = supports multiple method calls per request, and returning a global error if= only one had insufficient scope wasn't very helpful for the developers. We= solved this by simply handling insufficient scope errors at the API level. >=20 > Best, >=20 > On 1 nov. 2010, at 08:14, David Recordon wrote: >=20 >> Added you to http://wiki.oauth.net/w/page/OAuth-2. Any parts of the impl= ementation what were challenging? >>=20 >>=20 >> On Tue, Oct 26, 2010 at 5:27 PM, Olivier POITREY wr= ote: >> Hi, >>=20 >> I'm proud to announce that Dailymotion released the first beta of its ne= w API fully based on OAuth 2.0 draft 10. We are sticking 100% to the spec (= we hope) and are supporting all client profiles. It's currently in beta, so= me parts are not polished yet (i.e.: authorization page is not skinned) and= only a few methods are available but the basics are there and fully functi= onal. >>=20 >> The documentation of our API can be found here: >>=20 >> http://www.dailymotion.com/doc/api >>=20 >> Here is the part specific to OAuth 2.0: >>=20 >> http://www.dailymotion.com/doc/api/authentication.html >>=20 >> We have client SDKs for PHP and Objective-C already available on GitHub = (http://github.com/dailymotion). We will add Javascript, Python, Actionscri= pt and Android SDKs soon. >>=20 >> We are very interested by feedbacks about our implementation before it g= oes final. >>=20 >> BTW, our API implements some interesting cache mechanism, but t= his is OT :) >>=20 >> Best, >>=20 >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth >>=20 >=20 > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From jricher@mitre.org Wed Nov 3 17:15:21 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 246B73A69B1 for ; Wed, 3 Nov 2010 17:15:21 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8FyO0cJuX0r2 for ; Wed, 3 Nov 2010 17:15:20 -0700 (PDT) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id 1FF523A690F for ; Wed, 3 Nov 2010 17:15:19 -0700 (PDT) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id oA40FRkU022366 for ; Wed, 3 Nov 2010 20:15:27 -0400 Received: from imchub2.MITRE.ORG (imchub2.mitre.org [129.83.29.74]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id oA40FRoC022363 for ; Wed, 3 Nov 2010 20:15:27 -0400 Received: from IMCMBX3.MITRE.ORG ([129.83.29.206]) by imchub2.MITRE.ORG ([129.83.29.74]) with mapi; Wed, 3 Nov 2010 20:15:27 -0400 From: "Richer, Justin P." To: "oauth@ietf.org" Date: Wed, 3 Nov 2010 20:15:25 -0400 Thread-Topic: OAuth Extensions Thread-Index: AQHLe7Vhfzs+LhLyJ0a7m9h2dSs43g== Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [OAUTH-WG] OAuth Extensions X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Nov 2010 00:15:21 -0000 At IIW today, Marius and I sat down and started to work through some of the= existing proposed extensions to the OAuth2 protocol core. It occurs to us = that it would be a good idea to try and collect them, especially as they st= art to mature and become adopted. Should we start collecting these on the l= ist here, or on a wiki someplace, or what? Also, i'd like to see the workin= g group start to adopt some of these as items, but I'll admit that I don't = really know the process there. - justin= From andrea.reginato@gmail.com Wed Nov 3 17:31:51 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 02D9C3A6909 for ; Wed, 3 Nov 2010 17:31:51 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id NA8CuZ1NYV7F for ; Wed, 3 Nov 2010 17:31:50 -0700 (PDT) Received: from mail-ww0-f44.google.com (mail-ww0-f44.google.com [74.125.82.44]) by core3.amsl.com (Postfix) with ESMTP id DCA2F3A68EC for ; Wed, 3 Nov 2010 17:31:49 -0700 (PDT) Received: by wwb13 with SMTP id 13so61965wwb.13 for ; Wed, 03 Nov 2010 17:31:57 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type; bh=X0gO4Cdk1wQnfvgbPFuFDLXhc4a8uf0fJ+jhJWV+EjQ=; b=nHPNAMbnnm1FC++JzkqHGeYGH3CvQfZF5SVcX+QGjreot7xPSLPnphvMaVCDaF+cXv Vy23cg0OKuLe6Te5tmm0Tq5aSSuqNtjKDdjjOMeygnqP69Miiftt+WBQPfHm8vLihY/z JNtAymKAIn3swt5MLu1GfAIXOFKqVHGE9MHD4= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; b=l85bcEDNARGagt8M6W76h2OR+kFE1I4EmWsxeOqf8vMkjlyyYk+dq0pSrmZ6/7sBVa VWx7XyqS/zS4FWHXLbpEuXG695edZXZOr7Qx38n+mYwfUjFGktCIcj/W1jyZU2IkXjW2 aa9ryU06tHAbiQMDAqVkj/QVmxupSkYF8rTWg= MIME-Version: 1.0 Received: by 10.227.133.140 with SMTP id f12mr6361174wbt.139.1288830717670; Wed, 03 Nov 2010 17:31:57 -0700 (PDT) Received: by 10.227.147.143 with HTTP; Wed, 3 Nov 2010 17:31:57 -0700 (PDT) In-Reply-To: <07DE56E9-D382-4A23-A475-79BCBC2FE9AC@dailymotion.com> References: <07DE56E9-D382-4A23-A475-79BCBC2FE9AC@dailymotion.com> Date: Thu, 4 Nov 2010 01:31:57 +0100 Message-ID: From: Andrea Reginato To: Olivier POITREY Content-Type: multipart/alternative; boundary=0016e6585ed21a36b704942f4901 Cc: OAuth WG Subject: Re: [OAUTH-WG] Dailymotion API using OAuth 2.0 draft 10 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Nov 2010 00:31:51 -0000 --0016e6585ed21a36b704942f4901 Content-Type: text/plain; charset=ISO-8859-1 On Tue, Nov 2, 2010 at 2:55 PM, Olivier POITREY wrote: > Hi David, > > Thank you for adding us. The implementation was straightforward, and the > current draft of the spec is clear and easy to read. The only place where we > had to adapt a bit was the "insufficient scope" error reporting: our API > supports multiple method calls per request, and returning a global error if > only one had insufficient scope wasn't very helpful for the developers. We > solved this by simply handling insufficient scope errors at the API level. > Hi Olivier, I was reading the doc and I wanted to make my greetings. In these days I'm reading several dev doc related to OAuth2 (spec and provider services) and I've one question I'm not able to find a solution at. In the User Agent flow, I get pretty well the flow cicle, but I can't understand if it can be really used, or if it is dangerous for security problems. As far as you are one of the few giving this flow service, I wanted to ask your opinion about. If you have also some documentation, I would love to get more in touch with the low level details. -- Andrea Reginato --0016e6585ed21a36b704942f4901 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
On Tue, Nov 2, 2010 at 2:55 PM, Olivier POITREY = <rs@dailymotion.= com> wrote:
Hi David,

Thank you for adding us. The implementation was straightforward, and the cu= rrent draft of the spec is clear and easy to read. The only place where we = had to adapt a bit was the "insufficient scope" error reporting: = our API supports multiple method calls per request, and returning a global = error if only one had insufficient scope wasn't very helpful for the de= velopers. We solved this by simply handling insufficient scope errors at th= e API level.

Hi Olivier, I was reading the doc an= d I wanted to make my greetings.

In these days I&#= 39;m reading several dev doc related to OAuth2 (spec and provider services)= and I've one question I'm not able to find a solution at. In the U= ser Agent flow, I get pretty well the flow cicle, but I can't understan= d if it can be really used, or if it is dangerous for security problems.=A0=

As far as you are one of the few giving this flow servi= ce, I wanted to ask your opinion about. If you have also some documentation= , I would love to get more in touch with the low level details.

--
Andrea Reginato

--0016e6585ed21a36b704942f4901-- From darren@cliqset.com Wed Nov 3 18:26:25 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 01E9F28C0EB for ; Wed, 3 Nov 2010 18:26:25 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OVcx87pehgvG for ; Wed, 3 Nov 2010 18:26:23 -0700 (PDT) Received: from mail-bw0-f44.google.com (mail-bw0-f44.google.com [209.85.214.44]) by core3.amsl.com (Postfix) with ESMTP id 86B5628B797 for ; Wed, 3 Nov 2010 18:26:23 -0700 (PDT) Received: by bwz12 with SMTP id 12so1231726bwz.31 for ; Wed, 03 Nov 2010 18:26:31 -0700 (PDT) Received: by 10.204.99.68 with SMTP id t4mr50807bkn.40.1288833990051; Wed, 03 Nov 2010 18:26:30 -0700 (PDT) MIME-Version: 1.0 Received: by 10.204.100.195 with HTTP; Wed, 3 Nov 2010 18:26:09 -0700 (PDT) In-Reply-To: References: From: Darren Bounds Date: Wed, 3 Nov 2010 21:26:09 -0400 Message-ID: To: David Recordon Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Cc: OAuth WG Subject: Re: [OAUTH-WG] Dailymotion API using OAuth 2.0 draft 10 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Nov 2010 01:26:25 -0000 David, I didn't realize you were tracking this. If you don't mind, add Cliqset. We implemented draft 10 (User-Agent and Native App profiles) a while back. http://developer.cliqset.com/api#TOC-OAuth-2.0-Overview Darren On Mon, Nov 1, 2010 at 3:14 AM, David Recordon wrote: > Added you to=C2=A0http://wiki.oauth.net/w/page/OAuth-2. Any parts of the > implementation what were challenging? > > On Tue, Oct 26, 2010 at 5:27 PM, Olivier POITREY wro= te: >> >> Hi, >> >> I'm proud to announce that Dailymotion released the first beta of its ne= w >> API fully based on OAuth 2.0 draft 10. We are sticking 100% to the spec = (we >> hope) and are supporting all client profiles. It's currently in beta, so= me >> parts are not polished yet (i.e.: authorization page is not skinned) and >> only a few methods are available but the basics are there and fully >> functional. >> >> The documentation of our API can be found here: >> >> =C2=A0http://www.dailymotion.com/doc/api >> >> Here is the part specific to OAuth 2.0: >> >> =C2=A0http://www.dailymotion.com/doc/api/authentication.html >> >> We have client SDKs for PHP and Objective-C already available on GitHub >> (http://github.com/dailymotion). We will add Javascript, Python, >> Actionscript and Android SDKs soon. >> >> We are very interested by feedbacks about our implementation before it >> goes final. >> >> BTW, our API implements some interesting cache mechanism, but >> this is OT :) >> >> Best, >> >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth > > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > > --=20 darren bounds darren@cliqset.com From hannes.tschofenig@gmx.net Thu Nov 4 01:03:08 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0A95B3A68F5 for ; Thu, 4 Nov 2010 01:03:08 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -100.149 X-Spam-Level: X-Spam-Status: No, score=-100.149 tagged_above=-999 required=5 tests=[AWL=2.450, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ipIweKiiCa1y for ; Thu, 4 Nov 2010 01:03:07 -0700 (PDT) Received: from mail.gmx.net (mailout-de.gmx.net [213.165.64.22]) by core3.amsl.com (Postfix) with SMTP id CF26E3A67F3 for ; Thu, 4 Nov 2010 01:03:06 -0700 (PDT) Received: (qmail invoked by alias); 04 Nov 2010 08:03:14 -0000 Received: from a88-115-222-204.elisa-laajakaista.fi (EHLO [192.168.1.7]) [88.115.222.204] by mail.gmx.net (mp014) with SMTP; 04 Nov 2010 09:03:14 +0100 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX19wx98YCbFwo3eSz/yUZskZqyVbc8bOAqLz3T/tL1 7yUhg3AxTtdpw0 Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Hannes Tschofenig In-Reply-To: Date: Thu, 4 Nov 2010 10:03:13 +0200 Content-Transfer-Encoding: quoted-printable Message-Id: References: To: "Richer, Justin P." X-Mailer: Apple Mail (2.1081) X-Y-GMX-Trusted: 0 Cc: "oauth@ietf.org" Subject: Re: [OAUTH-WG] OAuth Extensions X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 Nov 2010 08:03:08 -0000 Hi Justin,=20 I was planning to use the IETF meeting week (which is next week) to = discuss the re-chartering of the working group with our ADs. I got some = feedback from the group on what extensions are interesting for = standardization.=20 Ciao Hannes On Nov 4, 2010, at 2:15 AM, Richer, Justin P. wrote: > At IIW today, Marius and I sat down and started to work through some = of the existing proposed extensions to the OAuth2 protocol core. It = occurs to us that it would be a good idea to try and collect them, = especially as they start to mature and become adopted. Should we start = collecting these on the list here, or on a wiki someplace, or what? = Also, i'd like to see the working group start to adopt some of these as = items, but I'll admit that I don't really know the process there. >=20 > - justin > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From hannes.tschofenig@gmx.net Sat Nov 6 20:22:30 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 52D263A69C2 for ; Sat, 6 Nov 2010 20:22:29 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KGoi3apKikn7 for ; Sat, 6 Nov 2010 20:22:26 -0700 (PDT) Received: from mail.gmx.net (mailout-de.gmx.net [213.165.64.22]) by core3.amsl.com (Postfix) with SMTP id 3E1A63A69CD for ; Sat, 6 Nov 2010 20:22:25 -0700 (PDT) Received: (qmail invoked by alias); 07 Nov 2010 02:22:41 -0000 Received: from dhcp-7730.meeting.ietf.org (EHLO dhcp-7730.meeting.ietf.org) [130.129.119.48] by mail.gmx.net (mp054) with SMTP; 07 Nov 2010 03:22:41 +0100 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX19n/CxaxKRnPOLWqdig6r/No3Jvg6FTHRPuMNzUOR hWWFzgaMPScol0 From: Hannes Tschofenig Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable Date: Sat, 6 Nov 2010 21:22:33 -0500 Message-Id: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net> To: ietf@ietf.org Mime-Version: 1.0 (Apple Message framework v1081) X-Mailer: Apple Mail (2.1081) X-Y-GMX-Trusted: 0 Cc: abfab@ietf.org, rai@ietf.org, secdir@ietf.org, websec@ietf.org, xmpp@ietf.org, kitten@ietf.org, "iab@iab.org Board" , iesg@ietf.org, oauth@ietf.org Subject: [OAUTH-WG] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Nov 2010 03:22:30 -0000 Hi all,=20 please consider attending the following two meetings!=20 ** OAuth Security Session ** =95 Date: Monday, 13:00-15:00 =95 Location: IAB breakout room (Jade 2) =95 Contact: Hannes Tschofenig hannes.tschofenig@gmx.net The security consideration section of OAuth 2.0 (draft -10) is still = empty. Hence, we would like to put some time aside to discuss what = security threats, requirements, and countermeasures need to be = described. We will use the Monday, November 8, 1300-1500 slot to have a = discussion session. As a starting point I suggest to look at the following documents: =95 = http://trac.tools.ietf.org/wg/oauth/trac/wiki/SecurityConsiderations =95 http://trac.tools.ietf.org/wg/oauth/trac/wiki/SignaturesWhy =95 = http://tools.ietf.org/id/draft-tschofenig-oauth-signature-thoughts-00.txt Note: If you are unfamiliar with OAuth then the OAuth tutorial session = might be more suitable for you! ** OAuth Tutorial ** =95 Date: Wednesday, 19:30 (after the plenary) =95 Location: IAB breakout room (Jade 2) =95 Contact: Hannes Tschofenig hannes.tschofenig@gmx.net OAuth allows a user to grant a third-party Web site or application = access to their resources, without necessarily revealing their = credentials, or even their identity. The OAuth working group, see = http://datatracker.ietf.org/wg/oauth/charter/, is currently trying to = finalize their main specification, namely OAuth v2: = http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/ Based on the positive response at the last IETF meeting (in Maastricht) = we decided to hold another OAuth tutorial, namely on *Wednesday, = starting at 19:30 (after the IETF Operations and Administration Plenary) = till about 21:00. (Note: I had to switch the day because of the social = event!) It is helpful to read through the documents available int he working = group but not required. Up-to-date information can be found here: = http://www.ietf.org/registration/MeetingWiki/wiki/79bofs Ciao Hannes From torsten@lodderstedt.net Sun Nov 7 15:04:07 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A981F28C11F; Sun, 7 Nov 2010 15:04:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.249 X-Spam-Level: X-Spam-Status: No, score=-2.249 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jwtw++ocQDAp; Sun, 7 Nov 2010 15:04:06 -0800 (PST) Received: from smtprelay01.ispgateway.de (smtprelay01.ispgateway.de [80.67.31.24]) by core3.amsl.com (Postfix) with ESMTP id 89E1A3A6919; Sun, 7 Nov 2010 15:04:06 -0800 (PST) Received: from [79.253.37.94] (helo=[192.168.71.43]) by smtprelay01.ispgateway.de with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from ) id 1PFEHg-0007pK-9T; Mon, 08 Nov 2010 00:04:24 +0100 Message-ID: <4CD73075.8050408@lodderstedt.net> Date: Mon, 08 Nov 2010 00:04:21 +0100 From: Torsten Lodderstedt User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Hannes Tschofenig References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net> In-Reply-To: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit X-Df-Sender: torsten@lodderstedt-online.de Cc: abfab@ietf.org, rai@ietf.org, ietf@ietf.org, secdir@ietf.org, websec@ietf.org, xmpp@ietf.org, kitten@ietf.org, "iab@iab.org Board" , iesg@ietf.org, oauth@ietf.org Subject: Re: [OAUTH-WG] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Nov 2010 23:04:07 -0000 Hi all, Mark McGloin and me have been working on OAuth 2.0 security considerations for a couple of weeks now. Since we both cannot attend the IETF-79 meetings, we would like to provide the WG with information regarding the current status of our work. I therefore uploaded a _preliminary_ version of our working document to the WG's wiki at http://trac.tools.ietf.org/wg/oauth/trac/attachment/wiki/SecurityConsiderations/oauth20_seccons_20101107.pdf. The focus of this version was on consolidating previous work as well as results of mailing list discussions and start working towards a rigorous threat model. Please give us feedback. regards, Torsten. Am 07.11.2010 03:22, schrieb Hannes Tschofenig: > Hi all, > > please consider attending the following two meetings! > > ** OAuth Security Session ** > > • Date: Monday, 13:00-15:00 > • Location: IAB breakout room (Jade 2) > • Contact: Hannes Tschofenig hannes.tschofenig@gmx.net > The security consideration section of OAuth 2.0 (draft -10) is still empty. Hence, we would like to put some time aside to discuss what security threats, requirements, and countermeasures need to be described. We will use the Monday, November 8, 1300-1500 slot to have a discussion session. > > As a starting point I suggest to look at the following documents: > > • http://trac.tools.ietf.org/wg/oauth/trac/wiki/SecurityConsiderations > • http://trac.tools.ietf.org/wg/oauth/trac/wiki/SignaturesWhy > • http://tools.ietf.org/id/draft-tschofenig-oauth-signature-thoughts-00.txt > > Note: If you are unfamiliar with OAuth then the OAuth tutorial session might be more suitable for you! > > > > ** OAuth Tutorial ** > > • Date: Wednesday, 19:30 (after the plenary) > • Location: IAB breakout room (Jade 2) > • Contact: Hannes Tschofenig hannes.tschofenig@gmx.net > OAuth allows a user to grant a third-party Web site or application access to their resources, without necessarily revealing their credentials, or even their identity. The OAuth working group, see http://datatracker.ietf.org/wg/oauth/charter/, is currently trying to finalize their main specification, namely OAuth v2: http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/ > > Based on the positive response at the last IETF meeting (in Maastricht) we decided to hold another OAuth tutorial, namely on *Wednesday, starting at 19:30 (after the IETF Operations and Administration Plenary) till about 21:00. (Note: I had to switch the day because of the social event!) > > It is helpful to read through the documents available int he working group but not required. > > Up-to-date information can be found here: http://www.ietf.org/registration/MeetingWiki/wiki/79bofs > > Ciao > Hannes > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From hannes.tschofenig@gmx.net Sun Nov 7 15:56:52 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 15D693A6938 for ; Sun, 7 Nov 2010 15:56:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.407 X-Spam-Level: X-Spam-Status: No, score=-102.407 tagged_above=-999 required=5 tests=[AWL=0.192, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9sOZCljQy231 for ; Sun, 7 Nov 2010 15:56:51 -0800 (PST) Received: from mail.gmx.net (mailout-de.gmx.net [213.165.64.23]) by core3.amsl.com (Postfix) with SMTP id 1E0873A68BC for ; Sun, 7 Nov 2010 15:56:50 -0800 (PST) Received: (qmail invoked by alias); 07 Nov 2010 23:57:08 -0000 Received: from dhcp-7730.meeting.ietf.org (EHLO dhcp-7730.meeting.ietf.org) [130.129.119.48] by mail.gmx.net (mp059) with SMTP; 08 Nov 2010 00:57:08 +0100 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX19hj1NCw9lhv8JGIXLwlXT0L1f43PO/LLooZW9TRy 67LY2+qc5SPN1L From: Hannes Tschofenig Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Date: Mon, 8 Nov 2010 00:57:04 +0100 Message-Id: To: oauth@ietf.org Mime-Version: 1.0 (Apple Message framework v1081) X-Mailer: Apple Mail (2.1081) X-Y-GMX-Trusted: 0 Subject: [OAUTH-WG] Meeting Room for Security Session: Jade 2 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 07 Nov 2010 23:56:52 -0000 We will meet there in 13:00 (till 15:00). From stpeter@stpeter.im Sun Nov 7 16:21:08 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4E5013A689D for ; Sun, 7 Nov 2010 16:21:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id btwmxuJ3dSrF for ; Sun, 7 Nov 2010 16:21:06 -0800 (PST) Received: from stpeter.im (stpeter.im [207.210.219.233]) by core3.amsl.com (Postfix) with ESMTP id 4D6CD3A67B3 for ; Sun, 7 Nov 2010 16:21:06 -0800 (PST) Received: from dhcp-732c.meeting.ietf.org (dhcp-732c.meeting.ietf.org [130.129.115.44]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id 2CFC640BB9; Sun, 7 Nov 2010 17:30:29 -0700 (MST) Message-ID: <4CD74282.2070104@stpeter.im> Date: Mon, 08 Nov 2010 08:21:22 +0800 From: Peter Saint-Andre User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Hannes Tschofenig References: In-Reply-To: X-Enigmail-Version: 1.1.1 OpenPGP: url=http://www.saint-andre.com/me/stpeter.asc Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms020903060204020709010204" Cc: oauth@ietf.org Subject: Re: [OAUTH-WG] Meeting Room for Security Session: Jade 2 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 00:21:08 -0000 This is a cryptographically signed message in MIME format. --------------ms020903060204020709010204 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable On 11/8/10 7:57 AM, Hannes Tschofenig wrote: > We will meet there in 13:00 (till 15:00).=20 Which day? :) --------------ms020903060204020709010204 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIITzjCC BjQwggQcoAMCAQICASMwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3 MTAyNDIxMDMzM1oXDTE3MTAyNDIxMDMzM1owgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1T dGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAzIFByaW1hcnkgSW50ZXJtZWRpYXRlIENs aWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALmjSW4SPiDKlAinvVeL ZOVfItiuP1aRHL530E7QUc9icCwL33+PH+Js1HAh8CgWFl34sOxx1FJyS/C4VLPRsqDfP72j tzCVUAL0DAxZ7wgzQvFz7x61jGxfhYhqYb1+PPOLkYBbkRIrPMg3dLEdKmXIYJYXDH+mB/V/ jLo73/Kb7h/rNoNg/oHHSv5Jolyvp5IY2btfcTBfW/telEFj5rDTX2juTvZ3Qhf3XQX5ca3Q 7A10zrUV/cWJOJ7F5RltbEIaboZmX5JBUb3FhUiAdBotehAX6DbDOuYoJtVxmGof6GuVGcPo 98K4TJf8FHo+UA9EOVDp/W7fCqKT4sXk/XkCAwEAAaOCAa0wggGpMA8GA1UdEwEB/wQFMAMB Af8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBR7iZySlyShhEcCy3T8LvSs3DLl8zAfBgNV HSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jBmBggrBgEFBQcBAQRaMFgwJwYIKwYBBQUH MAGGG2h0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9jYTAtBggrBgEFBQcwAoYhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3J0MFsGA1UdHwRUMFIwJ6AloCOGIWh0dHA6Ly93d3cu c3RhcnRzc2wuY29tL3Nmc2NhLmNybDAnoCWgI4YhaHR0cDovL2NybC5zdGFydHNzbC5jb20v c2ZzY2EuY3JsMIGABgNVHSAEeTB3MHUGCysGAQQBgbU3AQIBMGYwLgYIKwYBBQUHAgEWImh0 dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93 d3cuc3RhcnRzc2wuY29tL2ludGVybWVkaWF0ZS5wZGYwDQYJKoZIhvcNAQELBQADggIBAGpd SbdLFMhirxK37V4gE00+uW74UdAXtDgQI3AsRZWtaRtKHgAxFBSteqz4kDkeAjH/1b+K8tQR 6cxSI2nho7qOaPW/UpzOfSS/MeKK/9vfM2lfs+uItXH7LWtvS9wD1erfH1a+BXHCrCp4LA1l fADDhRIiGTSS3i0Zu5xV3INNRHrCCCl6patltQ8RZTqzDMri7ombgIxjN51Zo7xV77EZcThV 0GA8iIN+7T53uHhUJpjfLIztHs/69OclRvHux9hCflfOm7GY5Sc4nqjfES+5XPArGGWiQSEk ez37QfXqsxO3oCHK4b3DFZysG4uyOuC/WL80ab3muQ3tgwjBhq0D3JZN5kvu5gSuNZPa1WrV hEgXkd6C7s5stqB6/htVpshG08jRz9DEutGM9oKQ1ncTivbfPNx7pILoHWvvT7N5i/puVoNu bPUmLXh/2wA6wzAzuuoONiIL14Xpw6jLSnqpaLWElo2yTIFZ/CU/nCvvpW1Dj1457P3Ci9bD 0RPkWSR+CuucpgxrEmaw4UOLxflzuYYaq1RJwygOO5K0s2bAWOcXpgteyUOnQ3d/EjJAWRri 2v0ubiq+4H3KUOMlbznlPAY/1T8YyyJPM88+Ueahe/AW1zoUwZayNcTnuM7cq6yBV8Wr3GOI LFXhtT0UVuJLChPMJKVKVsa7qNorlLkMMIIGxzCCBa+gAwIBAgICAIswDQYJKoZIhvcNAQEF BQAwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJT ZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBD bGFzcyAzIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQTAeFw0xMDEwMTQwMTM2MzRa Fw0xMjEwMTQxMjAxMDdaMIHAMSAwHgYDVQQNExcyNzQ1ODEtOU5YMDRxeExEYjBvNDY5VDEL MAkGA1UEBhMCVVMxETAPBgNVBAgTCENvbG9yYWRvMQ8wDQYDVQQHEwZEZW52ZXIxLDAqBgNV BAsTI1N0YXJ0Q29tIFRydXN0ZWQgQ2VydGlmaWNhdGUgTWVtYmVyMRowGAYDVQQDExFQZXRl ciBTYWludC1BbmRyZTEhMB8GCSqGSIb3DQEJARYSc3RwZXRlckBzdHBldGVyLmltMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuERvnrkpQTx9wbJfgxbNKEYvt0IilecZRUM6 wrbCzIUPCocuYhaAJcQoqIyHaKybPQ7f+DIGIAolAa3dHnNdlsXP2smTft/ZNpj10PIG5bil NAqLUYwmLJaEaqY7BMW8423U3blW43/luLJk/Pq4OsWcw7AK3LeVh1U/HOgqhin26N3h72X1 nbLEpZFrgcp8egmWtXLCbLBDMqUK3j6wjLldni79muzYEVqU0A5GqSeb8Wc4kIx8VI5yL24J KzinG2iVRP5ZDEbOZETzBXJabUsV56XSxqPG9DK6ke+ybCiL/wKV1HFqdtFB1y25lfvHgOP2 gyEApBKEDNjgLmKyyQIDAQABo4IC+zCCAvcwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYD VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMB0GA1UdDgQWBBS2EW2iNB+g0EibKJLBdv8I eLovVDAfBgNVHSMEGDAWgBR7iZySlyShhEcCy3T8LvSs3DLl8zAdBgNVHREEFjAUgRJzdHBl dGVyQHN0cGV0ZXIuaW0wggFCBgNVHSAEggE5MIIBNTCCATEGCysGAQQBgbU3AQICMIIBIDAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEF BQcCARYoaHR0cDovL3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjCBtwYIKwYB BQUHAgIwgaowFBYNU3RhcnRDb20gTHRkLjADAgEBGoGRTGltaXRlZCBMaWFiaWxpdHksIHNl ZSBzZWN0aW9uICpMZWdhbCBMaW1pdGF0aW9ucyogb2YgdGhlIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5IFBvbGljeSBhdmFpbGFibGUgYXQgaHR0cDovL3d3dy5zdGFydHNz bC5jb20vcG9saWN5LnBkZjBjBgNVHR8EXDBaMCugKaAnhiVodHRwOi8vd3d3LnN0YXJ0c3Ns LmNvbS9jcnR1My1jcmwuY3JsMCugKaAnhiVodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9jcnR1 My1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcC5z dGFydHNzbC5jb20vc3ViL2NsYXNzMy9jbGllbnQvY2EwQgYIKwYBBQUHMAKGNmh0dHA6Ly93 d3cuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczMuY2xpZW50LmNhLmNydDAjBgNVHRIE HDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZIhvcNAQEFBQADggEBADVtbXJG tKAr55xc/OUM546gXUybI72Bank0w739Mv+9BBNtq9rMEvCnLmSKhBi76c1mdXh6zXs8RQDo 6nR/aPabE3llF2T4z80smi9jfnl3y9dpu9TcgDoqDLZ7a2lBlW656XAAQzHjvLp2MC7/mxlg PYH2axa+q40mAYM20GbNsAEGbWQT1IqIh0BcLLsgbaMJHbyG/57zd9JLyMX3Vry1L1fJRQr3 GeLxMV5RtxN+mBgxrwFz/cOc09COiFExlsHgekpB5O43gqsAU16MXypyoSt4MrSfKTMHIGx6 2RF/M6vqUlvhi28gk2ZUvQ/+OX5+gjcZyooEzAAn4RuOKNswggbHMIIFr6ADAgECAgIAizAN BgkqhkiG9w0BAQUFADCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4x KzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMT L1N0YXJ0Q29tIENsYXNzIDMgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBMB4XDTEw MTAxNDAxMzYzNFoXDTEyMTAxNDEyMDEwN1owgcAxIDAeBgNVBA0TFzI3NDU4MS05TlgwNHF4 TERiMG80NjlUMQswCQYDVQQGEwJVUzERMA8GA1UECBMIQ29sb3JhZG8xDzANBgNVBAcTBkRl bnZlcjEsMCoGA1UECxMjU3RhcnRDb20gVHJ1c3RlZCBDZXJ0aWZpY2F0ZSBNZW1iZXIxGjAY BgNVBAMTEVBldGVyIFNhaW50LUFuZHJlMSEwHwYJKoZIhvcNAQkBFhJzdHBldGVyQHN0cGV0 ZXIuaW0wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RG+euSlBPH3Bsl+DFs0o Ri+3QiKV5xlFQzrCtsLMhQ8Khy5iFoAlxCiojIdorJs9Dt/4MgYgCiUBrd0ec12Wxc/ayZN+ 39k2mPXQ8gbluKU0CotRjCYsloRqpjsExbzjbdTduVbjf+W4smT8+rg6xZzDsArct5WHVT8c 6CqGKfbo3eHvZfWdssSlkWuBynx6CZa1csJssEMypQrePrCMuV2eLv2a7NgRWpTQDkapJ5vx ZziQjHxUjnIvbgkrOKcbaJVE/lkMRs5kRPMFclptSxXnpdLGo8b0MrqR77JsKIv/ApXUcWp2 0UHXLbmV+8eA4/aDIQCkEoQM2OAuYrLJAgMBAAGjggL7MIIC9zAJBgNVHRMEAjAAMAsGA1Ud DwQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFLYRbaI0 H6DQSJsoksF2/wh4ui9UMB8GA1UdIwQYMBaAFHuJnJKXJKGERwLLdPwu9KzcMuXzMB0GA1Ud EQQWMBSBEnN0cGV0ZXJAc3RwZXRlci5pbTCCAUIGA1UdIASCATkwggE1MIIBMQYLKwYBBAGB tTcBAgIwggEgMC4GCCsGAQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3ku cGRmMDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUu cGRmMIG3BggrBgEFBQcCAjCBqjAUFg1TdGFydENvbSBMdGQuMAMCAQEagZFMaW1pdGVkIExp YWJpbGl0eSwgc2VlIHNlY3Rpb24gKkxlZ2FsIExpbWl0YXRpb25zKiBvZiB0aGUgU3RhcnRD b20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUG9saWN5IGF2YWlsYWJsZSBhdCBodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMGMGA1UdHwRcMFowK6ApoCeGJWh0dHA6Ly93 d3cuc3RhcnRzc2wuY29tL2NydHUzLWNybC5jcmwwK6ApoCeGJWh0dHA6Ly9jcmwuc3RhcnRz c2wuY29tL2NydHUzLWNybC5jcmwwgY4GCCsGAQUFBwEBBIGBMH8wOQYIKwYBBQUHMAGGLWh0 dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9zdWIvY2xhc3MzL2NsaWVudC9jYTBCBggrBgEFBQcw AoY2aHR0cDovL3d3dy5zdGFydHNzbC5jb20vY2VydHMvc3ViLmNsYXNzMy5jbGllbnQuY2Eu Y3J0MCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzANBgkqhkiG9w0BAQUF AAOCAQEANW1tcka0oCvnnFz85QznjqBdTJsjvYFqeTTDvf0y/70EE22r2swS8KcuZIqEGLvp zWZ1eHrNezxFAOjqdH9o9psTeWUXZPjPzSyaL2N+eXfL12m71NyAOioMtntraUGVbrnpcABD MeO8unYwLv+bGWA9gfZrFr6rjSYBgzbQZs2wAQZtZBPUioiHQFwsuyBtowkdvIb/nvN30kvI xfdWvLUvV8lFCvcZ4vExXlG3E36YGDGvAXP9w5zT0I6IUTGWweB6SkHk7jeCqwBTXoxfKnKh K3gytJ8pMwcgbHrZEX8zq+pSW+GLbyCTZlS9D/45fn6CNxnKigTMACfhG44o2zGCA80wggPJ AgEBMIGTMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UE CxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRD b20gQ2xhc3MgMyBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAgCLMAkGBSsOAwIa BQCgggIOMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEwMTEw ODAwMjEyMlowIwYJKoZIhvcNAQkEMRYEFJrRbo4b1se4cVK1R5aDG7GUuBYsMF8GCSqGSIb3 DQEJDzFSMFAwCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggq hkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBpAYJKwYBBAGCNxAEMYGWMIGT MIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2Vj dXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xh c3MgMyBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAgCLMIGmBgsqhkiG9w0BCRAC CzGBlqCBkzCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNV BAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0 Q29tIENsYXNzIDMgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgIAizANBgkqhkiG 9w0BAQEFAASCAQBI56h9CDmXQ4ChtmHMjPRqIBAeOAFYF0emcUSqBGEDwlVA2kvP9VMkQGoa RvA3sqF7EOIw8XPR+oGT+J6ID6EsIFNToCZn5BYX3aqaP9ASRygBCz4K8rjsBbUt5UkCKasV 2GbH82e7trkZCUS9wKFsh3XDBlCN6dtkCzCP9UZV8lB7rkBlbUy8gEhQgUfH7bMRG+zmazxV VglHkUK+tO5bM7w6UwPGbZcgRA81WHOCcevG1sc374yNivH3rN/IrBZdwlTu2PyuV5P7Ewyu QLY+O6hd6bPyX8Q1Da8cwwdgXyc3ndWbJPPWuOb9OieF1/k/cDjs+JfcjGT0eTAyDbAaAAAA AAAA --------------ms020903060204020709010204-- From hannes.tschofenig@gmx.net Sun Nov 7 17:22:49 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CE6DF3A67B1 for ; Sun, 7 Nov 2010 17:22:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.432 X-Spam-Level: X-Spam-Status: No, score=-102.432 tagged_above=-999 required=5 tests=[AWL=0.167, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5Jc2hBi-X-dz for ; Sun, 7 Nov 2010 17:22:49 -0800 (PST) Received: from mail.gmx.net (mailout-de.gmx.net [213.165.64.22]) by core3.amsl.com (Postfix) with SMTP id AB4FD3A6912 for ; Sun, 7 Nov 2010 17:22:48 -0800 (PST) Received: (qmail invoked by alias); 08 Nov 2010 01:23:07 -0000 Received: from dhcp-7730.meeting.ietf.org (EHLO dhcp-7730.meeting.ietf.org) [130.129.119.48] by mail.gmx.net (mp062) with SMTP; 08 Nov 2010 02:23:07 +0100 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX19H5c53Vr1HJfIJctPQ7LCIrMSYW3CoSjOYSkIEiI o4pWZXRBXdt5tW Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=us-ascii From: Hannes Tschofenig In-Reply-To: <4CD74282.2070104@stpeter.im> Date: Mon, 8 Nov 2010 02:23:02 +0100 Content-Transfer-Encoding: 7bit Message-Id: <87A0C674-8A11-4E9E-87D5-3D3514F04B07@gmx.net> References: <4CD74282.2070104@stpeter.im> To: Peter Saint-Andre X-Mailer: Apple Mail (2.1081) X-Y-GMX-Trusted: 0 Cc: oauth@ietf.org Subject: Re: [OAUTH-WG] Meeting Room for Security Session: Jade 2 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 01:22:49 -0000 The security session is today, and the tutorial is on Wednesday. Details: http://www.ietf.org/registration/MeetingWiki/wiki/79bofs On Nov 8, 2010, at 1:21 AM, Peter Saint-Andre wrote: > On 11/8/10 7:57 AM, Hannes Tschofenig wrote: >> We will meet there in 13:00 (till 15:00). > > Which day? :) > > > From Hannes.Tschofenig@gmx.net Sun Nov 7 21:04:15 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1C7593A697A for ; Sun, 7 Nov 2010 21:04:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Wm2QyyOx4Ykt for ; Sun, 7 Nov 2010 21:04:14 -0800 (PST) Received: from mail.gmx.net (mailout-de.gmx.net [213.165.64.22]) by core3.amsl.com (Postfix) with SMTP id 5DF2528C0F3 for ; Sun, 7 Nov 2010 21:04:08 -0800 (PST) Received: (qmail invoked by alias); 08 Nov 2010 05:04:25 -0000 Received: from dhcp-7730.meeting.ietf.org (EHLO dhcp-7730.meeting.ietf.org) [130.129.119.48] by mail.gmx.net (mp030) with SMTP; 08 Nov 2010 06:04:25 +0100 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX1/p+jUxTHHpnmmk+jjybFIU90L6zBZTgS5zVkUEFN Vf0hRRe/jScuDx From: Hannes Tschofenig Content-Type: multipart/mixed; boundary=Apple-Mail-4--499667378 Date: Mon, 8 Nov 2010 13:04:21 +0800 Message-Id: <55239381-F045-4C9E-9E06-A345B54A0B93@gmx.net> To: oauth@ietf.org Mime-Version: 1.0 (Apple Message framework v1081) X-Mailer: Apple Mail (2.1081) X-Y-GMX-Trusted: 0 Cc: Hannes Tschofenig Subject: [OAUTH-WG] My slides for the security session X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 05:04:15 -0000 --Apple-Mail-4--499667378 Content-Disposition: attachment; filename=OAuth-Security.pptx Content-Type: application/vnd.openxmlformats-officedocument.presentationml.presentation; x-mac-type=50505458; x-mac-creator=50505433; x-unix-mode=0644; name="OAuth-Security.pptx" Content-Transfer-Encoding: base64 UEsDBBQABgAIAAAAIQCBQrFzbAIAAJ4TAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIooAAC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADE mMlu2zAQhu8F+g4Cr4VFK22zwXYOXU5dAiR9AEYa22wlkiBpN377UhJlqIKsLR7kYkOSOfPxJ2f4 W4u75ywN9qANl2JJonBOAhCxTLjYLMmvx6+zaxIYy0TCUilgSQ5gyN3q7ZvF40GBCdxoYZZka626 pdTEW8iYCaUC4Z6spc6YdZd6QxWL/7AN0Iv5/JLGUlgQdmbzGGS1+Axrtktt8OXZ3S5JNKSGBJ/K H+a5loQplfKYWUdK9yJpZJn5DKEbWfzGbLky7xwGoavFTzdFzRMI7pm2P1jmwlGlLDWpu/mNHeTO mvpFFOYDR+WX6zWPIZHxLnNzC5UG474LlCwNa4kqppZZK7FpJOVZrlp+v28Wnj/CQe+A7lZqyAJ4 9BsU0TvIfyto17t40CG4ZU8pPNhDCubczLXQFfnYzXt9bqaWzdvJ5NfzCoVjqiqXKDRl7xjE5FX5 iMIxiKCt0V2g4IyQ5Tsz1p0/ZfctL3BaWBl7qlAfXlsnr9B7FI6pqkRzFJz+7ePO2XstlXFeQsN4 hsos5KNnygUCbTl02oVjRudDxidsuAPInU4CycDcXVbl1QvYb0ycoh20MSsCHCkqhBa/9sRFw6/1 mNTGNmiYRKW5M8b6Aax1/tsMtnw4RVjN+9RRv+fwt6jBF1dDQ4Zj4D6Cmi/xW6BsHDhGsr8pHcvU 0+AYsT5V6mqee2n+i50xLvpgTi0Rjjccv0Q4rnCqKjjecLwqOGZnqipIf2mHyWLdKw2gxefLT7gi TJ8MeY2h9NVj4D6CU0WL4z2HrUPB5Psq7jl/6ryrE0Q4UlQLQ4u3a6t/AAAA//8DAFBLAwQUAAYA CAAAACEAo+yCJg0BAADiAgAACwAIAl9yZWxzLy5yZWxzIKIEAiigAAIAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKySwU7DMAyG70i8Q+T7mm4g hNDSXRDSbgiVBzCJ2wbaJEo8tL09YYeVSqOaBMfY8Z/vz+/1Zj/04pNist4pWBYlCHLaG+taBa/1 0+IeRGJ0BnvvSMGBEmyq66v1C/XIeSh1NiSRVVxS0DGHBymT7mjAVPhALncaHwfkfIytDKg/sCW5 Kss7GX9qQDXRFFujIG7NDYj6EPLLf9GWAzEaZJTaR1qEmMki2+xF1BhbYgXG6+dcTscbRaYGeR7o 9nIg3zRW06PXu4Ecn/Esac/kDJl5JAxhjmj5n0RT5vF/QmAZIqVs5Jj7HNDqcqDf92HMjLvd8ObQ 9iPNKa1Tr3gP1H5nJiebWX0BAAD//wMAUEsDBBQABgAIAAAAIQBjXCO0wQAAADcBAAAgAAAAcHB0 L3NsaWRlcy9fcmVscy9zbGlkZTUueG1sLnJlbHOEj8FqwzAQRO+F/IPYeyQ7h1KKZV9CIJBTcT5g kda2iC0JrRLqv6+ONgR6nB3mzU7T/S6zeFFiF7yGWlYgyJtgnR813PvL8QsEZ/QW5+BJw0oMXXv4 aH5oxlxCPLnIolA8a5hyjt9KsZloQZYhki/OENKCucg0qojmgSOpU1V9qrRlQLtjiqvVkK62BtGv sTT/zw7D4Aydg3ku5PObCsWzs3TDNTxzwWIaKWuQcnvnrahleR9U26jd3PYPAAD//wMAUEsDBBQA BgAIAAAAIQBL9T3svwAAADcBAAAgAAAAcHB0L3NsaWRlcy9fcmVscy9zbGlkZTQueG1sLnJlbHOE j8EKwjAQRO+C/xD2blI9iEhTLyIInkQ/YEm2bbBNQjaK/XtzrCB4nB3mzU59eI+DeFFiF7yGtaxA kDfBOt9puN9Oqx0IzugtDsGThokYDs1yUV9pwFxC3LvIolA8a+hzjnul2PQ0IssQyRenDWnEXGTq VETzwI7Upqq2Ks0Z0HwxxdlqSGe7BnGbYmn+zw5t6wwdg3mO5POPCsWDs3TBKTxzwWLqKGuQcn7n udjI8j6oplZfc5sPAAAA//8DAFBLAwQUAAYACAAAACEAS/U97L8AAAA3AQAAIAAAAHBwdC9zbGlk ZXMvX3JlbHMvc2xpZGUyLnhtbC5yZWxzhI/BCsIwEETvgv8Q9m5SPYhIUy8iCJ5EP2BJtm2wTUI2 iv17c6wgeJwd5s1OfXiPg3hRYhe8hrWsQJA3wTrfabjfTqsdCM7oLQ7Bk4aJGA7NclFfacBcQty7 yKJQPGvoc457pdj0NCLLEMkXpw1pxFxk6lRE88CO1KaqtirNGdB8McXZakhnuwZxm2Jp/s8ObesM HYN5juTzjwrFg7N0wSk8c8Fi6ihrkHJ+57nYyPI+qKZWX3ObDwAAAP//AwBQSwMEFAAGAAgAAAAh AD39f+3ZAAAAvwEAACAAAABwcHQvc2xpZGVzL19yZWxzL3NsaWRlNi54bWwucmVsc6yQTUvEMBCG 74L/IczdpK0gIpvuRYQFT7L+gCGZpsHmg0xW7L83emphwYvHd4Z53oc5HL/CIj6psE9RQy87EBRN sj46De/nl7tHEFwxWlxSJA0rMRzH25vDGy1Y2xHPPrNolMga5lrzk1JsZgrIMmWKbTOlErC2WJzK aD7QkRq67kGVLQPGHVOcrIZysj2I85pb89/sNE3e0HMyl0CxXqlQvHhLr7imS21YLI6qBim3c96G fpDNH9R1teE/1Xxob9lJBbIe1e/8XubofjTU7u3jNwAAAP//AwBQSwMEFAAGAAgAAAAhAAQdRrrg AAAARQIAACAAAABwcHQvc2xpZGVzL19yZWxzL3NsaWRlMS54bWwucmVsc7yRz0rEMBCH74LvEOZu 0lYQkU33IgsLnmR9gCGZtsHmD5nsYt/eIAgtrHgRj/Mb5puPmd3+w8/iQpldDBpa2YCgYKJ1YdTw djrcPYLggsHiHANpWIhh39/e7F5pxlKHeHKJRaUE1jCVkp6UYjORR5YxUaidIWaPpZZ5VAnNO46k uqZ5UHnNgH7DFEerIR9tC+K0pLr5d3YcBmfoOZqzp1CurFA8O0svuMRzqVjMIxUNUq5zXhetrPqg rpt1f2nmfL3KxsmTdai+8lamMP6kcf9vGt23hto8v/8EAAD//wMAUEsDBBQABgAIAAAAIQBL9T3s vwAAADcBAAAgAAAAcHB0L3NsaWRlcy9fcmVscy9zbGlkZTMueG1sLnJlbHOEj8EKwjAQRO+C/xD2 blI9iEhTLyIInkQ/YEm2bbBNQjaK/XtzrCB4nB3mzU59eI+DeFFiF7yGtaxAkDfBOt9puN9Oqx0I zugtDsGThokYDs1yUV9pwFxC3LvIolA8a+hzjnul2PQ0IssQyRenDWnEXGTqVETzwI7Upqq2Ks0Z 0HwxxdlqSGe7BnGbYmn+zw5t6wwdg3mO5POPCsWDs3TBKTxzwWLqKGuQcn7nudjI8j6oplZfc5sP AAAA//8DAFBLAwQUAAYACAAAACEAS/U97L8AAAA3AQAAIAAAAHBwdC9zbGlkZXMvX3JlbHMvc2xp ZGU4LnhtbC5yZWxzhI/BCsIwEETvgv8Q9m5SPYhIUy8iCJ5EP2BJtm2wTUI2iv17c6wgeJwd5s1O fXiPg3hRYhe8hrWsQJA3wTrfabjfTqsdCM7oLQ7Bk4aJGA7NclFfacBcQty7yKJQPGvoc457pdj0 NCLLEMkXpw1pxFxk6lRE88CO1KaqtirNGdB8McXZakhnuwZxm2Jp/s8ObesMHYN5juTzjwrFg7N0 wSk8c8Fi6ihrkHJ+57nYyPI+qKZWX3ObDwAAAP//AwBQSwMEFAAGAAgAAAAhADk/U7aGAQAAvAoA AB8ACAFwcHQvX3JlbHMvcHJlc2VudGF0aW9uLnhtbC5yZWxzIKIEASigAAEAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAvJbNasMwDIDvg71D8H1x3P+Opr2MQQ+DsXYP4CZqapbYwfa69e0n0q5/ rNrF5BKQnMgfivwlk9l3VUZbsE4ZnTIRJywCnZlc6SJl78vnhxGLnJc6l6XRkLIdODab3t9N3qCU Hh9yG1W7CKtol7KN9/Uj5y7bQCVdbGrQuLI2tpIeQ1vwWmYfsgDeSZIBt+c12PSiZjTPU2bnuRAs Wu5q3Pr/4ma9Vhk8meyzAu3/2IO7UuWABaUtwKesCd0+K5IYWRm/gdFpC0OQGN22MDokRq8tjC6J 0Q+JUVulPdgFeI/T77D0YUquFvhVLOKV0jfnZhAWEdyrNfUF3CFFNmoYkmKr4OuK4pgiKdAl4Y6y R8ecHeUm5M2VPkHjoBByVcLC70rU4nFe/ClJtiMkSGOyF+lwgE8gZ8mD5PZ3kA1qTXRUb9rSHGm5 tiRHOi6o4ojPX496HUElRkD0KYigDiMgBhREUIUREEMKIqjCCIgRBSHwVzGczQmK8S8Fv/jnnP4A AAD//wMAUEsDBBQABgAIAAAAIQBL9T3svwAAADcBAAAhAAAAcHB0L3NsaWRlcy9fcmVscy9zbGlk ZTEzLnhtbC5yZWxzhI/BCsIwEETvgv8Q9m5SPYhIUy8iCJ5EP2BJtm2wTUI2iv17c6wgeJwd5s1O fXiPg3hRYhe8hrWsQJA3wTrfabjfTqsdCM7oLQ7Bk4aJGA7NclFfacBcQty7yKJQPGvoc457pdj0 NCLLEMkXpw1pxFxk6lRE88CO1KaqtirNGdB8McXZakhnuwZxm2Jp/s8ObesMHYN5juTzjwrFg7N0 wSk8c8Fi6ihrkHJ+57nYyPI+qKZWX3ObDwAAAP//AwBQSwMEFAAGAAgAAAAhAEv1Pey/AAAANwEA ACEAAABwcHQvc2xpZGVzL19yZWxzL3NsaWRlMTIueG1sLnJlbHOEj8EKwjAQRO+C/xD2blI9iEhT LyIInkQ/YEm2bbBNQjaK/XtzrCB4nB3mzU59eI+DeFFiF7yGtaxAkDfBOt9puN9Oqx0IzugtDsGT hokYDs1yUV9pwFxC3LvIolA8a+hzjnul2PQ0IssQyRenDWnEXGTqVETzwI7Upqq2Ks0Z0Hwxxdlq SGe7BnGbYmn+zw5t6wwdg3mO5POPCsWDs3TBKTxzwWLqKGuQcn7nudjI8j6oplZfc5sPAAAA//8D AFBLAwQUAAYACAAAACEAS/U97L8AAAA3AQAAIQAAAHBwdC9zbGlkZXMvX3JlbHMvc2xpZGUxMS54 bWwucmVsc4SPwQrCMBBE74L/EPZuUj2ISFMvIgieRD9gSbZtsE1CNor9e3OsIHicHebNTn14j4N4 UWIXvIa1rECQN8E632m4306rHQjO6C0OwZOGiRgOzXJRX2nAXELcu8iiUDxr6HOOe6XY9DQiyxDJ F6cNacRcZOpURPPAjtSmqrYqzRnQfDHF2WpIZ7sGcZtiaf7PDm3rDB2DeY7k848KxYOzdMEpPHPB Yuooa5Byfue52MjyPqimVl9zmw8AAAD//wMAUEsDBBQABgAIAAAAIQBL9T3svwAAADcBAAAhAAAA cHB0L3NsaWRlcy9fcmVscy9zbGlkZTEwLnhtbC5yZWxzhI/BCsIwEETvgv8Q9m5SPYhIUy8iCJ5E P2BJtm2wTUI2iv17c6wgeJwd5s1OfXiPg3hRYhe8hrWsQJA3wTrfabjfTqsdCM7oLQ7Bk4aJGA7N clFfacBcQty7yKJQPGvoc457pdj0NCLLEMkXpw1pxFxk6lRE88CO1KaqtirNGdB8McXZakhnuwZx m2Jp/s8ObesMHYN5juTzjwrFg7N0wSk8c8Fi6ihrkHJ+57nYyPI+qKZWX3ObDwAAAP//AwBQSwME FAAGAAgAAAAhAEv1Pey/AAAANwEAACAAAABwcHQvc2xpZGVzL19yZWxzL3NsaWRlOS54bWwucmVs c4SPwQrCMBBE74L/EPZuUj2ISFMvIgieRD9gSbZtsE1CNor9e3OsIHicHebNTn14j4N4UWIXvIa1 rECQN8E632m4306rHQjO6C0OwZOGiRgOzXJRX2nAXELcu8iiUDxr6HOOe6XY9DQiyxDJF6cNacRc ZOpURPPAjtSmqrYqzRnQfDHF2WpIZ7sGcZtiaf7PDm3rDB2DeY7k848KxYOzdMEpPHPBYuooa5By fue52MjyPqimVl9zmw8AAAD//wMAUEsDBBQABgAIAAAAIQBL9T3svwAAADcBAAAgAAAAcHB0L3Ns aWRlcy9fcmVscy9zbGlkZTcueG1sLnJlbHOEj8EKwjAQRO+C/xD2blI9iEhTLyIInkQ/YEm2bbBN QjaK/XtzrCB4nB3mzU59eI+DeFFiF7yGtaxAkDfBOt9puN9Oqx0IzugtDsGThokYDs1yUV9pwFxC 3LvIolA8a+hzjnul2PQ0IssQyRenDWnEXGTqVETzwI7Upqq2Ks0Z0HwxxdlqSGe7BnGbYmn+zw5t 6wwdg3mO5POPCsWDs3TBKTxzwWLqKGuQcn7nudjI8j6oplZfc5sPAAAA//8DAFBLAwQUAAYACAAA ACEAmoIVV+8CAADRDgAAFAAAAHBwdC9wcmVzZW50YXRpb24ueG1s7JffbtsgFMbvJ+0dLC43pY4d /4sVp9o6VarUSdHSPgDBJLEK2ALsJXv6HYiT0HiT+gC+M3ycD/hxfIwX9wfOvI5KVdWiQMHdFHlU kLqsxK5Ary+Pkwx5SmNRYlYLWqAjVeh++fnToskbSRUVGmsI9cBGqBwXaK91k/u+InvKsbqrGypA 29aSYw1NufNLiX+DPWd+OJ0mPseVQH28/Eh8vd1WhP6oScth+pOJpMyuQ+2rRp3dOPmIHcfyrW0m pOYNWGwqVumjNb3YdAVqpcj7LU14RWSt6q02MTnHJO84Qx4n+dNO1BJvGHDine1ZGUayo9+0ltWm 1VQZKf9y9m4+skIX9HtqCnd03W4U1Y+10OAdIA+3un6AzcDMalUR3cJDgaZoCUemWPkTK03lU/ms 9E2PV5UFCoMojbJZEsG5y9z0wNgA+cuF/59w1+qpPJnEiRMdmmgbfJYT13w2kOPUiY4GcgI5ella PJBj1zwZynMnOh3ICRC8mGdDOXTk+VCeOXIwHeqRq1us78HErv4PcC7XYEgucckFFt3p2NxDWv/x yKFA8yCKplNgSY4FSrI4sw19bCB7FZGUiujQzyBqSNw+7DLShJ097AGXdItbpl/oQa/1kdHlAufQ t1rJ/unXSnoMm8JCxeR1bej47hDWsaCBMfBGPpuM9TDbQVGCdwtsXvBm/adAUZxC1QBKmtkhFD+L 7/LNZr4pAaJvwpA9TAV1ZtUKoo3urEKBUwAbRt4blabuGU+jq5pV5WPFmG2YGkYfmPQ6DLPpw+k9 uBllZ/UMty0mwO4rFxOmzeZwTvGNQPFJIOpGIOqKAzhZMj0PYwSP4RXNGcLIx0Dp+cyufE5pOeZP xwyUnk905RPM0iAx2T8mkKHSA4odQFmY2fIwAjJUekDJFVAYZpBAYwZBXTZUekCpAyiNZvZDNWaQ odIDyq6ADB24f4w1qGOGSg9o7gBK4nQs0vbqY6jYH5DhFROut+7v0fIvAAAA//8DAFBLAwQUAAYA CAAAACEABgvzOX4EAACsDAAAFQAAAHBwdC9zbGlkZXMvc2xpZGUxLnhtbMxX2W4bNxR9L9B/GMxj AUezaLQMLAWpm6QBshiW8gEUh5KIcBmQlCz9fQ85Q8lyszhJgdQPFkVe3uXc5VDXzw9SJHtmLNdq lubPsjRhiuqGq80s/bh8dTVJE+uIaojQis3SI7Pp8/nvv123tRVNgtvK1mSWbp1r68HA0i2TxD7T LVM4W2sjicNXsxk0htxDqxSDIstGA0m4Svv75in39XrNKftL051kynVKDBPEwXO75a2N2iR9ijpJ zKdde0W1bKFixQV3x6D0pGY/S3dG1X1IV5JTo61eO3+nloTWeynSRNL6zUZpQ1YC8Mh92Lk1zDKz Zy+cM3y1c8z6o/qPqLt9ioetV6JcCPACtTnApwvR+E/bLg1jfqX2r027aG9NOH6/vzUJb5DSNFFE wrV00B/0YuGrghgWg0fXN1ETqQ9rI+fXpAb8yWGWoj6O/j8ukZodXEK7TXrepdsPn5Gl25efkR5E A/DgZLStW067kG45fRxQFQPCmdsZlgxPkfXSxN9/q+knmyh9syVqw17YllHn0eiipcAnqn6IwWlz JXj7igvhw/TrxNRMrhgANW+aogvfOsMc3XqRNUTvYMFrJ/XpAFGdFflk+WBiyCdMh1lRjrIO2Wpa lcX0Et5hNcqGFeL2IA/LfJpNyxDHWVNrrHvNtEz8Aj7CldRbIvu3tncqioRsd57APSDlkbZth/e/ 66eIcC+5EywJAKL83u87UQTbRqhRWBcIR2UeYK++3Sbu2KIUqTNBW5+M7jzUYLxiHyCVGI2Qijyf lFk+CmH1xViVo0kxBjDApRjnJSQukSuKSTbK0AIeuXw4zrKiukAORjtTbe0Of+rmGPKNz9AWpBbW LdxRsFDuwIjUIYEGzSVQV7OUqauPizRpuHGhAxIr3Y1gBMO0bxI3XzC6MxgvvjRcKJCghKnmlhhy 90VdXTHBKryM3gWHv56xMmZssVu5kLRQrz+bNLtbdUnDWEHPx076RvI8ZH22RvmoQuH6ZA1Hk7LK +zaKU2RSFeNhNu6TNa4K3xMdBt0Q+u+TxQyoB+XxMGneY6sFb2L7BwJgN8IkeyJmqTvkoQbFTr7T TbdXZfjrSg/bfvwF0dO2nwmeGb2WbkKcDeAM5eStuvnfRClmH9VJOHtixf1K55Pv9Pv/Bv4SKdJr pvjmUSDfbNRfgPrZp1BPXxgS/XRHj0ay88TXPQyGcUzg7Ad49Eytxuj7LSMN3jhxKPwcvfZD3Bra Uyq650eoNlndo0PBN2TndOjZR4+ZPPMzBwyHkTTJqrwaXdJHOZmW02FPvOVkjKEVJNCyUVNk1ScR L6mV9lMlsIlQyf0snVZgJF8/D04kdwz8wqX36jxZPMYvVRMuO8JFt4YvQnkFbL0G6/d0H2kNIzPU QBid3UsRy/h4pMK8I+2HfZgweLbDLAYUtlo81P3khehZBCTEJQ48+zgFQ4HTCS5DbKnia7PZYaZy 1bA1VwgkTfCMdcSAwhXDDw1UHXKyDO8AJ++0dmHGw0+vCRZ71X7Vm8MSvzXm/wAAAP//AwBQSwME FAAGAAgAAAAhAMVSF7FbBwAAkyMAABUAAABwcHQvc2xpZGVzL3NsaWRlOS54bWzsWm1v2zgS/n7A /QdCB9yHAt3o3bKvzqLNvtwC3TZIsvedkehYKEUJFO0m++vvGVKSX2olrtNDD4t8SWiJHJIzzzwz HOrNj/eVZGuh27JWcy/4wfeYUHldlOpu7v1x88vrzGOt4argslZi7j2I1vvx/O9/e9PMWlkwjFbt jM+9pTHN7OyszZei4u0PdSMU3i1qXXGDn/rurND8M6RW8iz0/fSs4qXyuvH6mPH1YlHm4qc6X1VC GSdEC8kNVt4uy6btpVX5MeIqrj+tmtd5XTUQcVvK0jxYoYOY9dxbaTXrtvS6KnNdt/XC0JhZxfPZ upIeq/LZb3eq1vxWQj3V2j651KIVei3eGqPL25URLb2aveplN8essCEhytgN7mjtHMrPr2VB/9vm RgtBLbX+VTfXzaW2rz+sLzUrC5jUY4pXWJp31r3outmfCt3QONsbftdL4rP7ha7O3/AZ1M/u5x7w 8UB/MYjPxL1huXuYb57my48H+ubLnw/0PusnwAqGSWlXbkdfbifst3NTGilYMOzKdeUY+r7OP7VM 1dgnbd9tL/+w7oXRnkl8s2TmoYFmDInq+rmXVh99/xY6tcoy9+/q4oE2fov/9iGfydZcmwcprEKw bD6DcPyB+iUnJxLq9R/XHitKbayOWFuZCyk43K1Tozn/SXAJ32CfS7NkN/UnodiVWLXiDfRjYJ5O qFDFJdf8alQ27ZXPsApsoF8tmk6d40qNeqVe1MoAcuxS8lwsa1kIzcLnqbgsAJDeCiPaJYXt4SxO JqAJC7Yg9X1qWw33kMvCcIrnHiPgJf7UTyK70G1AkeHI0L0mervRdPDY6u3K1IvSsAV2fZ1z8t9p mJBQqa6b/EoUq5zYZe5hercAiHe2JxnfxPRvm0bXPF+yfwQzdrFn8BOgVKtFWcCGJZfPFwZOZJe6 NsLqgf2TV82/GEygOctrVZSknVc70zj4WQyCH57C674vvIwGrL6n1qzHAOOrD4j2HZuQE42vqv0T 7pFMk0cYbseq4zMcBvsR8okjX83YW4n8gC15y0zNKv5JsHalBYODF7WggIBG2XYBmZmlQD9iWvQm fzElOtV4rPGOK/auvh1HNnbB5FoSs5FyvkJfQxw4kavjnqs/rrlk0Q45QyQF8k1I3w5htM49kg2D IAgzsD84NE7DLE7jQyzrSNYxLr2HPXtBjW7Nr6KuGDUQ66REIiasTvj6fWu6TXa9LGkqekYxyZFz S8HTvbgSC6QsNlzQA5t4iQupGXY693iew0wukoB7FXpTr0Up5TAwsjM/OrDrT0PFYgFiGwaHTw8e RtiZETaGwVWJiHJIgByWTGHGLpp273Z9RGyGY7n8zdrb2gfZn8tmvtbeaTSJp9mks3caxlnyYm86 sYyh7DvYO92xt7XPyfaOgyyNI2fvMCb/tu4D5HepeOfTNol68e8tRvjW/p3fI6N07HxBTcd9cOPu lAYbOS+/Rm5V3i0NQyquwE61ZunA8d3QL9x+S6SjVUfQDJkbkuOYklcktQtw87/tgZBa/+ljV3ew QwwHVlwsiPwoi10+vcFKEE/iMEQ5gDLuIA4mcWLROR4NcKR5IhSQmg0v5c+q6M9iusSpCccx9nnu ybsu3Ej1ZMw4gr0Pxwz/EGvvBpvxmOHC/6MB5wQOMfd9mDscMwY0DQ213sLABlYBzD6Kq+mpuCKr 9aiZRnEYO9QkYRhEWbYbUaI49icxSM2iJnGvXyDzeHLzXSEzVFgOUFFgcWnjUYe307hoC0GRn00n PgACVoniJIwmezEqiKfplIDseCfGT4uxFxB9PxCNl5KC4XzyTqyFZMEzTyhb/BKFSRCHe3WgIEzC YAoCsugIozBL7Izj6LildVnO/9+cUPoy1OFo88gJpR84Hm0eiXH94BOo47knlGA4onQmf94hJUpQ TfABIzqUZgG5/25IAQwmyGmcyY/JWl8svpegPNviyAJdWnGFFNXmayyYDOkEpbdfxIU+591OULfD QBBOfMjowkA0TS2iN+lnhiIvkQv5eTqZBP4TQUBjZeNevlWA2K8Os8+a4+JAoQDmMsOG6sS/lF0t 4+vLv1TBijIC7FD72a97UgXr5v31Tr0JWx8pnx4QCHWD8b668B9MDxjSKvb0Mye2mvi4dbLum8U4 M+y674shhzuhb2dIhMUvPXKT4J/ikTFOhJNJVzxIw2k0sYF145FpivfgfvLIKJ1GexcwgONucfD/ xyMf9cMLruv9q5MxTxwEneh/4XA7uyFSl+Gc7H/Ihvw07Wq6KP9Ms72abhrhdXeM/wuZzVb/jyTQ Z5ttOCNtmW1zNDrF29IkDtPEHYPiLEWGs0ebCS44I8DlL+Zt+7cs41HvGKPZsO4+iECz/0Yil/p3 3nxca8o38HWKERq3CnjU4M6dPBddN11wX1yimn9nb44V7jCo0XAMRrcb1X9UUazw1UqpCrEoVWlQ r8LXGoZrFNwUDhgadFwX4sZ9X1Bd1bWhKIiZrCT8N040tbrp0MQnNef/BQAA//8DAFBLAwQUAAYA CAAAACEA+JubX8ACAADzBgAAFgAAAHBwdC9zbGlkZXMvc2xpZGUxMC54bWzEVW1r2zAQ/j7Yfzi8 L+0gTZvBGKZJ6cs2BlsbmvQHKPIlFtUb0sWN//1Ost2uWwtlHeyLLUt3j57nke58fLIzGhoMUTk7 LY4ODgtAK12l7GZa3Cy/jD4VEEnYSmhncVq0GIuT2ds3x76MugLOtrEU06Im8uV4HGWNRsQD59Hy 2toFI4g/w2ZcBXHHqEaPJ4eHH8dGKFv0+eEl+W69VhIvnNwatNSBBNSCmHmslY8DmpEvgTMi3G79 SDrjGWKltKI2g97DNNNiG2zZSxoZJYOLbk0ppzRClo3RBRhZfttYF8RKsz2myTPzgBFDg6dEQa22 hDEtle8HbP8Shj6BWMoCH7k2Y/PlQlfpHf0yIKaRbb4Gv/DzkJcvm3kAVfGRFmCFYWrFuF/ow/Kn 5TAejH9L3wxIotytg5kdi5Lth9204PvRpicniRJ3BLKblA+zsr56IlbWn5+IHg8bMIP7TZOqTtGf ciaDnKUijXB0r6oLFZz63cnbCNaxziS/kycvmwEsaU7wvgZqPTtDCaqP6xazH0N8ZE+zWbQ7c1Wb hK/4nSdFqSMtqNWYDWHaomRwfrD9WqQiQju6WRRQqUDZI4iGzjUKLrfeRppdoNBcG3CnqIalu0UL 17iNCHuT/WP2iPiIemC01VwEcf0sftIrSmbCIgbGPOwsfd7YD4Ox584SXzuYayGxdrrCAJPX2awq viTDSfwfh0+9D07IGt5NSliwiayKlUYK3IcIHpnc2Zc9/KvT7A5Qso+MHUHZrg1ynwKxclsCqhE0 bhQp7o4IfaEzo71TzT1u/+Df8jlzK6hFBHIgtry3JSXTvnkzWKsQmZJLfwG1buGuRo4JmSTlq8hK Bp+YL3d4hmIFv2JV3GsSLrXPO/mam5svcNfpeDg0P6nDD+Gvmlxx/NshDOd5ynMx9XX/EJIwuGn+ BAAA//8DAFBLAwQUAAYACAAAACEARILSVhEHAAAsJQAAFgAAAHBwdC9zbGlkZXMvc2xpZGUxMS54 bWzsWltv2zYUfh+w/0BoL9vQ1BJ1N+IUadZ2Q7s2iNO9MzIdC6UupWjH2dD/vkNSkiVFdhw5W9Ei eUgUkTziOd+58ZOOX6wThlaUF3GWTgzruWkgmkbZLE6vJ8bHy9dHgYEKQdIZYVlKJ8YtLYwXJz/+ cJyPCzZDsDotxmRiLITIx6NRES1oQornWU5TGJtnPCEC/uXXoxknNyA1YSNsmt4oIXFqlOv5Puuz +TyO6G9ZtExoKrQQThkRsPNiEedFJS2J9hGXEP5pmR9FWZKDiKuYxeJWCa3FrCbGkqfjUqWjJI54 VmRzIdeMExKNVwkzUBKN/7hOM06uGJgnWak755wWlK/oqRA8vloKWsih8a+V7HyfHeZSSCqUgi2r nYDxoymbyb9FfskplVfp6g3Pp/k5V8PvV+ccxTOA1EApSWBrxqgcKKepf1OYBhejzvLrShIZr+c8 OTkmYzA/Wk8M8I9b+RsWkTFdCxTpm9HmbrT40DM3WrzqmT2qHgA7qB8qtdIa3VUHV+pcxoJRZNVa 6akElr7Lok8FSjPQU6qv1YveryphUmcpPl8gcZuDZYQUVc7Tg8oe1fwCbKqMJdYvs9mtVPwK/qqb ZMwKMRW3jCqDwLbJGITDLzA/IzKIaHr0cWqgWcyFshEqEnHGKIFwK80oTn6jhEFsoJtYLNBl9omm 6IIuC4p+tn85BhsJgKgUTNPZOeHkYqt8qS8Zw05AiWrHcKlNut2wdmXYsywV4HbonJGILjI2oxzh w8wcz8BJKiS2WFgareNrjutDqlAOZ3mmKa+VlSu3CzAO4b6BpPO52PUDPaPpVBI8CXZliQo7+TiI 2uR0KbJ5LLTRNKxy6FFQPc1znpFogX6yx+gtvUVg2nksMyKkrBasGjCFGkTVfQh3PehpNSD2DVrt YQHqVAH6YUUYslsRCe4rM/gmlzdzV09kYcuycAAhD4HjOI5vYqcvtHRk6TCT43VggafyQryhWYLk BSQ5xqACU0M+i6zeFWVAVbNUSKVSgkxEOiILmTX1wAWdQ61SOULeUBWXnjGOQNOJQaII8pFOHxCZ KcyWs+YxY/VCWz1558JyvlxK53MaiXoxvn9xvUI9GTJkvTiJIY30CWD1lud6vtZea71HQnZbeCt8 oOzrMvZQvD3bd8LAL/EOLNNxn/CWreo2L/sKeHstvBU+g/F2rMBzbI03xjK+VfhsOrYyplXlfIrv RkZ47PiO1um0bGbP5GW3PQeMdHs+FZzE1wshm4QUslPGkVfn+HLpnbBviNRpVfdQiGeQk13HlD8G mkNu/l2dBOTVX/JKqll29NgNwVd0LcCB64Wh6vY2vmI5voMxnANlm2U5lu+4yju3VwPoZe8pBfL5 gsTsVTqrmnAeQ7sMfTi6mRjsuiw3LL23ZuyRvftrhtmXtdvFZnvN0CbcWXAG5BCxrspcf82ovam+ SFcNH4DqUJ76AK2tbuUPdaum04S2gx3tNK5ph6ETtAuK7Tim70BOU07jBmr4yWN29zZf02PCHR6j wFPFqHS2YYmo4T+2GYS+Ce4BKcXGvhnanQJlOaEXWuXZzoIeNfSeXOgrJ53t5IFV0zIXULpUHkeW QnRwCwOnfTt0wCvBQ3Bo2yX+m7IU2qEFpUolGM/3LfMe/+CwM5Xxe88njYNJlypAN5wAk5QC/6kr Ri5Jg9fDSYPib3B6yVU0SCHKgQQFrq6HHLqgn1tkAZhgC0PQI1ieuQawQVZNBzUAbbNAd3JA1dw0 O5FGyMN508MloK7p4sBX/c0GUNsKXDOEhkiWjDBwguCeNuNQRIvPS8IfEVMctjHtwVJxe8/QPx1A ubTTHcpQwtmVudtPlrQQX6ZvB0vv2fGzljDtSyVRtf+ue+T+JyaYvv3yMrtq7Xh3tHTMOzRaam6m ES2HMTQOtOW+X57ggKGBDNhusDwPxoEjkMFiezCsonN7h3VosDxe+tvJhJ8RnrE9AawFDYWtplga sB1GtGArND2vJNa8wHadDrHm2TBcnqW+I9hOGbyb+79gq5mSBmyH8SWe62DP1e2o4wWmbXbOwK5r Y2hRv7do2z9ZHhxrNdHRAG1DcMje4aENhYNDjLGONdk7WE7n/RA2PeghyxbRwp4VBCoav4Uk2dPK oR21X/cVD6j83f6zp0I/Q62A3rP07yF4/9LfFbbDAg8u/R3ZQ2tIzbS8pCvKkLVhV4b4NJx0al7F NoGLCzo+bWEXagw4veJVsA2MnWoMtvv0ldzX9oOPfKMidR/8YqbqO/pJth0vZqqF20m2HdRetXgA ZXLoixmrpkoaqWxDkQyB3baAAwHXKekQwLhTf+TJyIIuU6L+7R92e5LN5btpK9vsbtv3j13l1/oT GbisvpqJGP+T5B9W6gQD3ysJyuF1I9zK4SsMHQ2NKVIGfG3zLwAAAP//AwBQSwMEFAAGAAgAAAAh AOCxa0+wAwAAfgkAABYAAABwcHQvc2xpZGVzL3NsaWRlMTMueG1srFbbbtw2EH0v0H8Y6LGovY6L Fq3g3cB106JAkyy8DvLMpUYWYd5KcuXVW36jv9cv6SEl2bFzgS992ZXI4XDmnDMzOnm5N5p6DlE5 u6xeHB5VxFa6RtnLZfXu4veDnyuKSdhGaGd5WQ0cq5erb7858XXUDeG0jbVYVl1Kvl4souzYiHjo PFvstS4YkfAaLhdNENfwavTi+Ojop4URylbT+fCQ865tleTfnNwZtml0EliLhMhjp3ycvRn5EHdG hKudP5DOeLjYKq3SUJzeuOmX1S7YekrpwCgZXHRtymdqI2TdG12RkfWfl9YFsdWAx/RlZR04cuj5 NKWgtrvEMW/V382+/UMi9NmJTSXBO6itAL7c6Cb/R38RmPOT7f8IfuPXoWy/6deBVANKK7LCILRq MW1MZuXVwgwPi3vHL2dPot63waxORA34ab+soI8h/+KQqHmfSI6L8nZVdm8/Yyu7V5+xXswXIIKb S3NWY0afpnM8p3OhkmZ6cZPVaCpw9C8nryJZhzxz+mN68k0/O8s5Z/e+ozR4IJOyq8lu3Cx4zPYR mBaw0v5X1ww58S3+y6KodUybNGgugCBsUcM5fgC/FrmI2B6821TUqJAKRhRNOtMsUG4TjGl12jQq 61ho2rDcBWiRziBr1XAYBX4CpBKImtyzbdYiiPMv3pKzFjXiQSpz3Hgcgf0yvD/M8OL2BPHRWgvJ ndMIhI6fB7ZqIJWZj8fgnPFEhZnTXXKtStQito0Uud5+Of7xCJLUduPlOTc7mVFcVugwWB4xGLnK Pv4Xqi46FSlqMEORcyxyFzmSs5Q6puSu2BLvZQfu+fCWTXTCYjBv0ZbTNcP2VKOrERosnYngNKlo 73H9BD39++GfRA1Hie7DDSlLl4FFXkpC6UO6c8OokyKWJ4n3NTo5NVNfJikswNAD+eD6jFLgv3cq cG7aEXABhoIRthMXur4SDSqPdK8n2Twuusx4HEyp8RYiXlbvMX7yYIuTMlCj2Sit3iutqRN95g/E kHcxeYy7Jr/PmUWSDoMS5wuRI5TxHpaPC7H0jLR6tRfGa66/AsQTNPBRT4lzT5F3egptRUSOkC7I 8BySykJuIZdGgbodulGr3fX9HO/o5TkMTemf5yFeoP8ojEk9DW0HyrGhCwL4OMTEJn5PWm2DCIh3 IbxHBZUmSW3ApLt24QoWuaK2AdHj2+YTkp7TPksXHYcuHuc5LHV4LfzbvhCFL6DE4awsecSdGxFM b02yD8zv/wAAAP//AwBQSwMEFAAGAAgAAAAhAOnQ2lV2AwAA0goAABUAAABwcHQvc2xpZGVzL3Ns aWRlOC54bWzEVt+P2zYMfh+w/4H1Uzs0l/SKFZ1xuaK9bkOB9Ro06d4VmY6F0y9Qspf896Nk+65J 0/VyWLc8OLZFfiY/fpR48WprNHRIQTk7L56dzQpAK12l7GZefFr9NnlZQIjCVkI7i/Nih6F4dfnj Dxe+DLoC9rahFPOiidGX02mQDRoRzpxHy2u1IyMiP9JmWpH4i1GNnp7PZi+mRihbDP50H39X10ri Wydbgzb2IIRaRI48NMqHEc3I+8AZQTetn0hnPEOslVZxl0FvYbp50ZIth5QmRklywdUx+ZRGyLIz ugAjy3cb60isNdNjuvxmQRiQOnwdI6l1GzGkpfKnEdvfJ0KfQGzMCe6xdsnky6Wu0n/wK0JMd7b7 nfzSLygvX3cLAlVxSQuwwnBoxXRYGMzyo2UzvpkeuG9GJFFuazKXF6Jk+mE7L1gfu3RlJ1HiNoLs X8q7t7L5cMRWNr8esZ6OH+AIbj+asuoz+jKd8zGdlYoa4dltVr2pYNc/nLwJYB3nmdLv05PX3QiW ck7wvoG488xMTFCDXb+Y+RjtA3OayYrbN67apcTX/J9ARMmVN6/b6GoVoXY2LqVIOvhlxr8M+bmx DnEZdxozeZyiKDMGcam0SA2HdvJpWUClKGY+IZh4pVFwaw6Ux8tVQygivFdRbbI2LpjEyDUc0NYn YrLf4JIDOimWx2sRsAJn4frdcgXLBbyczSYvnj85iOnEkFI+cACBtloIEh+/Gl+qsyiZVS7eWCm+ 7aX0dUE9HwV1xdXjdoOFFhIbpyskOE8l5GYbxXOivFTFzTEq8N9S1vnPrCzQdunlR6xamfa/ecF7 6ncTnLtBC4bPBN6As+LK/eL0tGfu+ZIK1Okh7wcpfEEuoowQGwTZV+UpOII2IAggrJH4jEJQNkQU 1aM9pRwGk9u1vebDaxBI37fflNNh6+3hPkDPq8wiIfc25/adGbwS5DSYNkQmSeq2wkymqljgfM6B q/NzzDExxYHPVHoKb9z67B/J3Kvs/0RhpYLULrSE5f1jfUDB/hSkBO8Hj8WTEt46PlDuyORzOfD+ 2yUN9jMON+F/E83eV77dXkg8XPEMcOQgWZ8IdQSCmeGznjdK1lDdq0ukQQp838LHWflyg877dD/I 8O0420hN74X/0OXi8VQZka7yK89zZOpmNr0zSRg8E/0NAAD//wMAUEsDBBQABgAIAAAAIQD0gzDb 8AMAAFsLAAAWAAAAcHB0L3NsaWRlcy9zbGlkZTEyLnhtbLRW204jRxB9j5R/KE2kKIlibIgSrSYY xBISRbss1ho+oN1T42nRN3XXDJ6/T3WPB2KHZRGEl7n0pbrq1KlTfXy6MRo6DFE5Oy8OD2YFoJWu UnY9L26u/5y8KyCSsJXQzuK86DEWpyfffnPsy6gr4N02lmJeNES+nE6jbNCIeOA8Wp6rXTCC+Des p1UQd2zV6OnRbPbb1Ahli+3+8Jz9rq6VxD+cbA1aGowE1ILY89goH0drRj7HnBHhtvUT6YxnEyul FfXZ6L2Zbl60wZbbkCZGyeCiqyntKY2QZWd0AUaWf6+tC2KlGR7T5ZFFwIihwzOioFYtYUxT5U+j bf8cD30yYikHuIPaCYMvl7pK7+ivA2L6st1fwS/9IuTpT90igKo4pQVYYdi1Yrqd2C7Lv5aX8cd0 b/t6tCTKTR3MybEoGX7YzAvmR5+evEmUuCGQw6B8GJXN1SNrZXPxyOrpeAB7cH9oimqI6L/hHI3h XCvSCIf3UQ1LBW/96ORtBOs4zhT+EJ781I3GUszJvG+Aes/IUDK1XTdMZjzG9ZExzWDR5r2r+hT4 it/JiCg58+asJVcrSgf9e0pHWlKvMUPFAYky7wicGC1SeaGd3CwLqFSgjB5EQ+caBRfiFmA6uUyl Ry70QA6U8RoT+0/TSZTPyzbRVgsRxOcvmh58Yyc4sjEM/hxw/jLav4xonztLfC4stJDYOF1hgKPX Ya8qZs6YnlfADjX7tpQild+7X2czZqi2Sy8/Y9XKJA7zggWHh98kP+eN0BrtGktggWNxUEj1xImW mkl3NDmcAezl6gUkqBwmQhP44DpVIQhIuqWRUPegODWBBTdLEESn2xQ1RGUlghG2BxE9SoogAoLG mhiyACs1YfHkXRrEmjUk8SrCCukO0cKZZrGF74Xxv8N7tzrYCYLJl/k8PBLpOr3N5YtIvnQ/w10j CGLjWu4qq+z3Y7zfB/OrxN+vqR3XX5CKD9gDF0OtUmNLMJ95ToqQzQ5ALI1fq8gnHWPFeS2mFxtm hOJejkwQqNBr16cUg+iE0qlbQR2cgQ8YVkyfeLAL7Q5O/4M7V9SwZIgtWEzn2NY1j2QfMnkTmsxF ZraNzPEwNPYdWB93KuvQi3h3YWMb+E4ClMg3UN5ZLqltnUUW3VsuBpZeroG3dYUvWSut+CLD7iT1 4FQpOVBM2TqISIHlrA34pm4sWqLkAQPA9Mm5oMA3NVYGZhF7NSDyhBy8oKYub5bXD70NuONBGxGu Py735CjNnIvgNPyAG9lwE0X47vDHHUSeUXpPNMPcE4cbFX+Olyypw6XwV12Oja+3rJrnecgzVska L31Ykmzw5ewfAAAA//8DAFBLAwQUAAYACAAAACEAFLgGmWgCAADpBAAAFQAAAHBwdC9zbGlkZXMv c2xpZGU2LnhtbIxU204bMRB9r9R/sPxYKWySpgQsEoRoqZBoiSD9AMc7m7VYXzR2luTvO/buhkJ5 4CWx53Jm5pzxXlzuTcNawKCdXfDJyZgzsMqV2m4X/M/6ZnTGWYjSlrJxFhb8AIFfLj9/uvAiNCWj bBuEXPA6Ri+KIqgajAwnzoMlX+XQyEhX3BYlymdCNU0xHY9PCyO15X0+fiTfVZVW8N2pnQEbOxCE RkbqPNTahwHNqI/AGYlPOz9SzniC2OhGx0MGPcK0C75DK/qRRkYrdMFVMeUII5VoTcOZUeJ2ax3K TUP0mDZbVggBsIWrGFFvdhFCcokvA7b/SIc+gdiYB3zF2pLIV49Nmf6DXyNAOtn2J/pHv8Ls/t2u kOmSJOXMSkOt8aJ39GH5aimMDsWb9O2AJMW+QrO8kILoZ/sFp/04pF9KkgL2kanOqF6sqr5/J1bV P96JLoYC1MGxqBdeq26klVb/DTSfTaiLbijyxx0CS5YSgqJNeobNKJOPx4l7FJlw75x6Csw6YqEj x13X0m7hKnhQ8bUJ0T3XIEtSb5LAqElFxA49JfJSm74eKEz3zOUxZtNof6ObJtGVzgwFmA2QMHhb TjsaA6oHqp0pDREhqjqFV5TW24mmo4PwX0DTAqSiA41vdJrOpvPxt9dinU9ms/GY+EqSnX6dn5+f 5Yh/pehAqRIRlica1iwx0G+eavCX9Pdtrk5vPgJeZ5OnV96T9RLiRdSGHImvaO9CzMTJzJ9a22FV yx0pqG0JlbY6Amf0BqJE0sUCfaVIdlfC+uBpn6N5cC72sviERM310OnUl6MjfaiWfwEAAP//AwBQ SwMEFAAGAAgAAAAhADGVLgKvAwAAaQoAABUAAABwcHQvc2xpZGVzL3NsaWRlMi54bWysVttuGzcQ fS+QfxjsU1pElqwAQbCwHLhuGwRIZMGSP4DizmqJ8AZydi39fYfcXQdKldSX6EGiyJnDmTM3XnzY Gw0dhqicXRTnZ7MC0EpXKbtbFHebfybvC4gkbCW0s7goDhiLD5evfrvwZdQVsLaNpVgUDZEvp9Mo GzQinjmPls9qF4wg/ht20yqIe0Y1ejqfzd5NjVC2GPTDY/RdXSuJfznZGrTUgwTUgtjy2CgfRzQj HwNnRPja+ol0xjPEVmlFhwz6ANMtijbYcnBpYpQMLrqakk5phCw7owswsvy0sy6IrWZ6TJd3VgEj hg6viILatoQxHZV/jNj+MRb6BGIpO3jE2iWTL9e6Sr/RbwJiWtnuY/Brvwr5eNmtAqiKQ1qAFYZN K6bDwSCW/1oW48X0O/XdiCTKfR3M5YUomX7YLwrOj0P6ZiVR4p5A9pvy265sbk7IyubvE9LT8QK2 4OHS5FXv0X/dmY/ubBRphPMHr3pRwaqfnfwawTr2M7nfuyeX3QiWfE7wvgE6eGaGEtQg1x9mPkb5 yJxmsmj/p6sOyfEt/+ZNUepIazpozISw2aJkcP5i+rVIRYR2crcuoFKBMkcQDV1rFFxuA410+dEJ DVwsQI2K8AWRuFIumBzi2AyIaKuVCOL2h8DJUVGyCWz9aCovey5/zOjbkdFrZ4nzDVZaSGycrjDA /GX8qoqzYwzBU6hNFHJRmauWXK0ItF17eYtVK1O5M+aMPzlkYzCSxi+JxV1EDgOCTdk9h8a1IQI5 qJAwGGUR7htBWSSibAP3DZDcghTzlWsVeDtZCa7OUt/F8f/SAwO3Q67aE2lyw3Q0T4Q7AQNPhPiJ RdzUa3odnwh4wqbfITLTPFGYSuLRcHYE2ed1Tu5n1dd1GwKntj68eWTcjm5/1pWZmYlCqidOcNgm 3XxyPgMubzSeDsf+PeuG4zC+lKKlIyxh6YCU4QJwICS1QusD3HOK804qB3KVOJz92os3Y61J13pu 6Vw1UXMxRRABQVhQloIbKj8ZtsO++ioVZRvTwyW9UAJh9TPLuImD7vTQjp5F+JX3wQl+4XA/YKPJ eSVhKyJWwDYsP603sF7B+9ls8u7tMUc8Kl/QvXMT78c8L8fJL3X4IvxNl/sJv7m4O13nLc+zYxh6 30R4JChuXrs0+Mh+jjxYeAKKPAjlhknunwpVy81H2QprZTnqBfAbJHG7KCzyK5FHhatw009Nc+sc DWMzI6W500On1XBdMp6fKv8CAAD//wMAUEsDBBQABgAIAAAAIQCAuj+ixwQAAJ8bAAAVAAAAcHB0 L3NsaWRlcy9zbGlkZTMueG1s7FnbbuM2EH0v0H8Y6GHTJrWd+0Ube+FNL1hgNwnipE99KE3RthCJ VEnaiQGj395DSnRir50Lmj5oUQGWaF6GPDOHQ3J4+uE+z2gitEmVbEc7ze2IhOQqSeWwHd1c/9o4 jshYJhOWKSna0VSY6EPn++9Oi9hkCaG1NDFrRyNri7jVMnwkcmaaqhASZQOlc2bxVw9biWZ3kJpn rd3t7cNWzlIZVe31S9qrwSDl4mfFx7mQthSiRcYsRm5GaWGCtJy/RFzO9O24aHCVFxDRT7PUTr3Q uZhJOxprGVeQGnnKtTJqYF2bOGc8nuRZRDmPPw2l0qyfQT35xOdcamGEnoiutTrtj60wrijeDLKL l4ywcEKk9QAXtNaB8nkvS9zXFNdaCJeSk9900SsutS8+n1xqShOYNCLJcgwtalUFVTX/V6IaEq2l 5sMgicX3A513TlkM9dN9OwI/pu6NRiwW95Z4mckfcvnoYkVdPvplRe1W6AAjmHfqUJWIvoazG+Bc pzYTtDNHVVZlaPpZ8VtDUgGng1/C4+eTIMxhduKLEdlpAc1YJ6qqVxZ6fYT6Bjr1yrL3H1UydcD7 +PpMFmfG9uw0E14hGDaLIRwvqD9jbhIJ2bjpRZSk2nodkcntWSYYplulRtvp9o3VjFv6PRV3pCSd QjEWdgnSnhEpNKYQLL1C9EV3bEevFLdCzPKIhEwumWZXa2E6tbMYCoEug+KQLC273r57wb5nSlqw ny4zxsVIZYnQtPvvrJ0m4GogxBpDO0UvUX7n4Ojk+ADEg/l2dvcOt4/33Dge6H94srt/fHQYkZsE B/sH+4f7J55OQZTHXZIuqCJwyMmB98hhJTVILQ0Au8eZ8yX7RwfbmG6Z7BX8SiRj7jxdO4L3RHap 3pKHTsbXNPSeAN2Mz+G4K2u4MQRKrbXcAou8bLgg6efKALZoR2dqrFOY41zclYrgZn2po3DZre3Q uuenRnOBoiVzPH3wKpvXAcgPm7T54zeBhP7c2iC6wSr2bcChjTriiBuPHkwe/JvhR/T3/IlriYt6 2B5hOzd3CC36Y572iZi+MMmGwm326gnxExYwt6jDaztELfwWMcakBnQlDNwpF6aeIL2tHr9iwsrt 9q1VZk35+RiST8dLOf/jcoSt1ubXbHn/ix3FknG24CPjxhadMa2y2vNwpxmoN/OAZsRMyCGqKw8v +hYRAOBobrwb2vczj2hGXYMtB7abQ/yvK7Quhzs3AAYMjooNUBGHJTv1GOuL61rdCulRVUCWPnW1 F2A8gaq+9noaVW1xLWyUnj/NroqNvOkaNHnlgB5HV950IM7fPPXUcH5uYR137nP9AweLKlv0UfUX 7FCLEMKsm+EQNHuX2fd+nVj18qsj0BG5hb+GGL3tyvWddpvk4pE4HqScWZE8KpvhKJRNsfLXD2JY 5ANLr8RfY2EsPfA21PDbgPoBDMDCt9rh+A3BAhoERZ8LDL+Fy3voZH2U2Qddy8sRJMN9Cc/0F1Zc TPyJBTdVOKKf+awCzHNRUlR9qILQdZqjwF0XWPnZICSPewOGxqh2LcMFSzJG+D2ViRikMrUiItzc WGz42pEUuFtDSFsl4rq8a8ivlLI+fFtJQo+VaJequkMS12udfwAAAP//AwBQSwMEFAAGAAgAAAAh AAyK3mIxBAAAuw4AABUAAABwcHQvc2xpZGVzL3NsaWRlNy54bWzsl1tv2zYUx98H7DsQetrNsZMs bSdEKdKsHgp0qRG7H4Ciji0uvAgkpVrffn9SUpqkCZAAw4at84MskYdHPIe/c9Hp671WrCPnpTVF dniwyBgZYStpdkX2cbOcvcqYD9xUXFlDRdaTz16fffvNaZN7VTGsNj7nRVaH0OTzuRc1ae4PbEMG c1vrNA94dLt55fgnaNVqfrRYvJhrLk02rndPWW+3WynoVytaTSYMShwpHrBzX8vGT9q0eIo6zd11 28yE1Q1UlFLJ0CelN2q6ImudyUeTZloKZ73dhrgm11zknVYZ0yJ/tzPW8VLBPbpLIytHnlxH5yE4 WbaBfJzKf5h0N0/ZYROVmJAMvOO1MzhfrFUV/32zcUTxznS/uWbdrFyavuxWjskKR5oxwzW2ls3H iVEsPRqI4WZ+b/lu0sTz/dbps1Oew/1sX2Tgo49XLOI57QMTw6D4PCrqDw/IivrtA9Lz6QXYwc1L o1WDRV+aczSZs5FBETu8sWoQ5Vj63oprz4yFndH8wTxx2U3Kos1RfVOz0DfwTIiqRrlhMvljkvfw aXJW2L+xVR8NL/EflfAcJ6/P22C3MrCtNWEteOTglwV+SeVtYeXDOvSKkvNgIs+TDoejUjwGHJnZ x3XGKulC8ifzOlwo4gjN0eXhbE2idYCVbWpHCC52CicGnOGorXymTqwbl6QNPWsv35XcU8WsYZfv 1hu2XrFXi8XsxfH39/ZEplpxx68eVR4PiedwCTw/uRm3AweP03A80XAB1yNW2EpxQbVVFTl2FP2P SJlO/plsyApkT/j8RVi8fHkCLJgy60ZcUdWKmLyKDAnxSbQARIa89b7ITg5/Pj6BJmkqmF1ks3Eg wdku4Y3E9hbeKLIf9R8zFaI3cNRtpPWy1SP7OJVSihU5aauR15RCHkOzTBnlYUCjfm+VrJZSqfTg duWFcqzjqsiWy1tW3hKL3A6xFM429poMTDQtdh5aR3ONUoS8n5LgPaieyTmCZKAsrfs7o+TcMB4C F9eAUvOe7ciQ44EYZ6XdtZ6FZLbFbLS2Z6GmcUyMXNst44bRXvqAGjpM/sQEb318fGNLDLGd4zh3 aXjTONs4mV4hBPn4hqT0XKGEHtzx4xB2KfZw+ToAq6QXynrwdccVjzH/MO0pnP4ppFKg+ERTRAS9 FOMtsDFhjBXgUkXqhvYjtnCBYt8EFGoeIRGqrYihwfAyyI4wMjRrSEgHd0vK10iIIxw6ifBv5eN2 ymk9xVOfUsqUfSr0K46BHt/qJtYhVvZTJrHlgNRN8uAgBaIVuyLVx5SDch76/zOJI3j3vwAJUgUB g1QpYBJK01CUUraouWdcoduselYSKjQkYtcniH2SoY7UPJgzvmzmUk83fLHgdvqIEcr9zpsPXarM +HwM5NA2YKgBarFoQ/SzSNSBj58/AQAA//8DAFBLAwQUAAYACAAAACEArgko18kCAAD9BgAAFQAA AHBwdC9zbGlkZXMvc2xpZGU1LnhtbLxVTU8bMRC9V+p/sHysFBb6QdEqCQIKFRKFiAT17HgnWQt/ yZ4syb/v2Lsb2oAoHNrLrteeeTPz5o13eLw2mjUQonJ2xA/29jkDK12l7HLE72YXgyPOIgpbCe0s jPgGIj8ev3839GXUFSNvG0sx4jWiL4siyhqMiHvOg6WzhQtGIH2GZVEF8UCoRhcf9/cPCyOU5Z1/ eI2/WyyUhG9OrgxYbEECaIGUeayVjz2aka+BMyLcr/xAOuMJYq60wk0G3cI0I74KtuxKGhglg4tu gcmnNEKWjdGcGVleLq0LYq6JHtPknUmACKGBE8Sg5iuEmI7KDz22f02GPoFYzAX+wdqYyJdTXaV3 9LMAkFa2+R781E9CPr5uJoGpilrKmRWGUuNFd9CZ5U9LZrQodtyXPZIo14tgxkNREv1sPeKkj016 kpMoYY1MtpvycVfWN8/Yyvr8GeuiD0AZbIOmqtqKninn8NPRYV/SLUiS5lID+7ytrnURBHHl5H1k 1lG9LQ3urCZrOAnBPdQgKmrKQfKj2PK66WMlSlJ0XzPceCJOYpgp1NCZtueZsd4lEuuZTlyfumqT qJnTO2+KUkec4kZDpowKEyWZMxBX9jTc58xSWjQak5WV2OUkSkqCHmSp6XTEwQ7uppxVKmCmmkWD ZxoETW3XDRyfr4XxxMalTSOLKkunZENiGanMDnP+RmTy61zentFPmO+G/0v0zBKOp2l8ArvQ7mEn fbDVRARxu2VmoQYXl78xkzpKHOe+9g2hdrWaellZX58q68s/VFZczVtl0aTSGPVi/F8Ke8LkrsZe YDIT2l49aXy620jq8EP4myb3mP4DCOEsb3mSd0Ij00cTX6IydJCmDe1VJI3S2AlyJrOZ7a+vakX/ B2UrWCirEDijexFFoEmxQBqhlrkKZnlU0dw6h92gZiSK2EGnVReOlvTzGv8CAAD//wMAUEsDBBQA BgAIAAAAIQBu1V/JVwMAAKIJAAAVAAAAcHB0L3NsaWRlcy9zbGlkZTQueG1svFZtbxM5EP6OxH8Y 7aeCyEtz0glWTRGU4w4JSkTCD3C8s12rfsOeXRJ+/Y29uy0p5a4FQT4kG3v8zMwzz4z35PnOaOgw ROXssjiezgtAK12l7MWy+Lh5PXlaQCRhK6GdxWWxx1g8P3344MSXUVfAp20sxbJoiHw5m0XZoBFx 6jxa3qtdMIL4b7iYVUF8ZlSjZ4v5/M+ZEcoWw/lwl/OurpXEV062Bi31IAG1II48NsrHEc3Iu8AZ ES5bP5HOeIbYKq1on0GvYLpl0QZbDilNjJLBRVdTOlMaIcvO6AKMLN9cWBfEVjM9pssrq4ARQ4cv iILatoQxbZWPR2x/lwh9ArGUEzxg7ZTJl2tdpd/oNwExPdnu7+DXfhXy9nm3CqAqLmkBVhgOrZgN G4NZ/mvZjB9mN45fjEii3NXBnJ6IkumH3bJgfezTNx8SJe4IZL8or1dl8/4WW9n8dYv1bHTAEVw5 TVn1GX2bzmJMZ6NIIxxfZdWbCj761snLCNZxnin9Pj153o1gKecE7xugvWdmKEENdv1m5mO0j8xp Jot2L121T4lv+TeBiJIrb1605GpFUDtLaymSDp7N+ZMhvzbWkda015jJ4xRFmTECl0qL1HBoJx/X BVQqUOYToqEzjYJbc6CcTtesiDaWwP3EWlRI9cSJlppJt5gcz0+YUeKCDtDbezrgc8ORHN29Ajv6 rKgBbknshJXIdASIKNvAnfXoRlxoq5UI4sN3HaSqiZI54lKMvPNjL4zvy+OPUR5nXAtuHlhpIbFx usIAi1QQbp1RCvcUi6pY6qOefkYn2q69/IBVK9PsYsxfJ5aNu0RbwgH7Pa+ZXP5KFej0kNgPCTL7 gNd51HPbEUSPUtUKq9/gdqzz7/O7Co4wVw5cDZQIhtZe5Tw9SJpn5P8p/WaPH5Tnnu2bev+fzWYF L0VUEngwNdwESuY7BNqIVe5Kxb0RRJ9Dblo2gzRDXFBfett8fYUn3MAIR8eH7fuzEZ47SEFOeFCg zn6/CjJNjRTKsMQRB/zUYiQ4Wjy6ltb0PzT9A6Rt3q6zdE160yEX9lzYxFemKzlGnm0YpnCb229H VJ5U/cXMj+NdLXV4J/z7LsfHb0lchLO85Pm9KA08Nr02SRh8x/8LAAD//wMAUEsDBBQABgAIAAAA IQDV0ZLxvgAAADcBAAAsAAAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlkZUxheW91dDIueG1s LnJlbHOEj8EKwjAQRO+C/xD2btJ6EJGmXkTw4EX0A5Zk2wbbJGSj6N+bYwXB4+wwb3aa/WsaxZMS u+A11LICQd4E63yv4XY9rrYgOKO3OAZPGt7EsG+Xi+ZCI+YS4sFFFoXiWcOQc9wpxWagCVmGSL44 XUgT5iJTryKaO/ak1lW1UWnOgPaLKU5WQzrZGsT1HUvzf3boOmfoEMxjIp9/VCgenaUzcqZUsJh6 yhqknN95LmpZ3gfVNuprbvsBAAD//wMAUEsDBBQABgAIAAAAIQDV0ZLxvgAAADcBAAAsAAAAcHB0 L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlkZUxheW91dDYueG1sLnJlbHOEj8EKwjAQRO+C/xD2btJ6 EJGmXkTw4EX0A5Zk2wbbJGSj6N+bYwXB4+wwb3aa/WsaxZMSu+A11LICQd4E63yv4XY9rrYgOKO3 OAZPGt7EsG+Xi+ZCI+YS4sFFFoXiWcOQc9wpxWagCVmGSL44XUgT5iJTryKaO/ak1lW1UWnOgPaL KU5WQzrZGsT1HUvzf3boOmfoEMxjIp9/VCgenaUzcqZUsJh6yhqknN95LmpZ3gfVNuprbvsBAAD/ /wMAUEsDBBQABgAIAAAAIQDV0ZLxvgAAADcBAAAsAAAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9z bGlkZUxheW91dDQueG1sLnJlbHOEj8EKwjAQRO+C/xD2btJ6EJGmXkTw4EX0A5Zk2wbbJGSj6N+b YwXB4+wwb3aa/WsaxZMSu+A11LICQd4E63yv4XY9rrYgOKO3OAZPGt7EsG+Xi+ZCI+YS4sFFFoXi WcOQc9wpxWagCVmGSL44XUgT5iJTryKaO/ak1lW1UWnOgPaLKU5WQzrZGsT1HUvzf3boOmfoEMxj Ip9/VCgenaUzcqZUsJh6yhqknN95LmpZ3gfVNuprbvsBAAD//wMAUEsDBBQABgAIAAAAIQDV0ZLx vgAAADcBAAAsAAAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlkZUxheW91dDMueG1sLnJlbHOE j8EKwjAQRO+C/xD2btJ6EJGmXkTw4EX0A5Zk2wbbJGSj6N+bYwXB4+wwb3aa/WsaxZMSu+A11LIC Qd4E63yv4XY9rrYgOKO3OAZPGt7EsG+Xi+ZCI+YS4sFFFoXiWcOQc9wpxWagCVmGSL44XUgT5iJT ryKaO/ak1lW1UWnOgPaLKU5WQzrZGsT1HUvzf3boOmfoEMxjIp9/VCgenaUzcqZUsJh6yhqknN95 LmpZ3gfVNuprbvsBAAD//wMAUEsDBBQABgAIAAAAIQDV0ZLxvgAAADcBAAAsAAAAcHB0L3NsaWRl TGF5b3V0cy9fcmVscy9zbGlkZUxheW91dDUueG1sLnJlbHOEj8EKwjAQRO+C/xD2btJ6EJGmXkTw 4EX0A5Zk2wbbJGSj6N+bYwXB4+wwb3aa/WsaxZMSu+A11LICQd4E63yv4XY9rrYgOKO3OAZPGt7E sG+Xi+ZCI+YS4sFFFoXiWcOQc9wpxWagCVmGSL44XUgT5iJTryKaO/ak1lW1UWnOgPaLKU5WQzrZ GsT1HUvzf3boOmfoEMxjIp9/VCgenaUzcqZUsJh6yhqknN95LmpZ3gfVNuprbvsBAAD//wMAUEsD BBQABgAIAAAAIQDV0ZLxvgAAADcBAAAsAAAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlkZUxh eW91dDgueG1sLnJlbHOEj8EKwjAQRO+C/xD2btJ6EJGmXkTw4EX0A5Zk2wbbJGSj6N+bYwXB4+ww b3aa/WsaxZMSu+A11LICQd4E63yv4XY9rrYgOKO3OAZPGt7EsG+Xi+ZCI+YS4sFFFoXiWcOQc9wp xWagCVmGSL44XUgT5iJTryKaO/ak1lW1UWnOgPaLKU5WQzrZGsT1HUvzf3boOmfoEMxjIp9/VCge naUzcqZUsJh6yhqknN95LmpZ3gfVNuprbvsBAAD//wMAUEsDBBQABgAIAAAAIQDV0ZLxvgAAADcB AAAsAAAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlkZUxheW91dDkueG1sLnJlbHOEj8EKwjAQ RO+C/xD2btJ6EJGmXkTw4EX0A5Zk2wbbJGSj6N+bYwXB4+wwb3aa/WsaxZMSu+A11LICQd4E63yv 4XY9rrYgOKO3OAZPGt7EsG+Xi+ZCI+YS4sFFFoXiWcOQc9wpxWagCVmGSL44XUgT5iJTryKaO/ak 1lW1UWnOgPaLKU5WQzrZGsT1HUvzf3boOmfoEMxjIp9/VCgenaUzcqZUsJh6yhqknN95LmpZ3gfV NuprbvsBAAD//wMAUEsDBBQABgAIAAAAIQDV0ZLxvgAAADcBAAAtAAAAcHB0L3NsaWRlTGF5b3V0 cy9fcmVscy9zbGlkZUxheW91dDEwLnhtbC5yZWxzhI/BCsIwEETvgv8Q9m7SehCRpl5E8OBF9AOW ZNsG2yRko+jfm2MFwePsMG92mv1rGsWTErvgNdSyAkHeBOt8r+F2Pa62IDijtzgGTxrexLBvl4vm QiPmEuLBRRaF4lnDkHPcKcVmoAlZhki+OF1IE+YiU68imjv2pNZVtVFpzoD2iylOVkM62RrE9R1L 83926Dpn6BDMYyKff1QoHp2lM3KmVLCYesoapJzfeS5qWd4H1Tbqa277AQAA//8DAFBLAwQUAAYA CAAAACEA1dGS8b4AAAA3AQAALQAAAHBwdC9zbGlkZUxheW91dHMvX3JlbHMvc2xpZGVMYXlvdXQx MS54bWwucmVsc4SPwQrCMBBE74L/EPZu0noQkaZeRPDgRfQDlmTbBtskZKPo35tjBcHj7DBvdpr9 axrFkxK74DXUsgJB3gTrfK/hdj2utiA4o7c4Bk8a3sSwb5eL5kIj5hLiwUUWheJZw5Bz3CnFZqAJ WYZIvjhdSBPmIlOvIpo79qTWVbVRac6A9ospTlZDOtkaxPUdS/N/dug6Z+gQzGMin39UKB6dpTNy plSwmHrKGqSc33kualneB9U26mtu+wEAAP//AwBQSwMEFAAGAAgAAAAhANXRkvG+AAAANwEAAC0A AABwcHQvc2xpZGVMYXlvdXRzL19yZWxzL3NsaWRlTGF5b3V0MTIueG1sLnJlbHOEj8EKwjAQRO+C /xD2btJ6EJGmXkTw4EX0A5Zk2wbbJGSj6N+bYwXB4+wwb3aa/WsaxZMSu+A11LICQd4E63yv4XY9 rrYgOKO3OAZPGt7EsG+Xi+ZCI+YS4sFFFoXiWcOQc9wpxWagCVmGSL44XUgT5iJTryKaO/ak1lW1 UWnOgPaLKU5WQzrZGsT1HUvzf3boOmfoEMxjIp9/VCgenaUzcqZUsJh6yhqknN95LmpZ3gfVNupr bvsBAAD//wMAUEsDBBQABgAIAAAAIQDV0ZLxvgAAADcBAAAsAAAAcHB0L3NsaWRlTGF5b3V0cy9f cmVscy9zbGlkZUxheW91dDcueG1sLnJlbHOEj8EKwjAQRO+C/xD2btJ6EJGmXkTw4EX0A5Zk2wbb JGSj6N+bYwXB4+wwb3aa/WsaxZMSu+A11LICQd4E63yv4XY9rrYgOKO3OAZPGt7EsG+Xi+ZCI+YS 4sFFFoXiWcOQc9wpxWagCVmGSL44XUgT5iJTryKaO/ak1lW1UWnOgPaLKU5WQzrZGsT1HUvzf3bo OmfoEMxjIp9/VCgenaUzcqZUsJh6yhqknN95LmpZ3gfVNuprbvsBAAD//wMAUEsDBBQABgAIAAAA IQDV0ZLxvgAAADcBAAAsAAAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlkZUxheW91dDEueG1s LnJlbHOEj8EKwjAQRO+C/xD2btJ6EJGmXkTw4EX0A5Zk2wbbJGSj6N+bYwXB4+wwb3aa/WsaxZMS u+A11LICQd4E63yv4XY9rrYgOKO3OAZPGt7EsG+Xi+ZCI+YS4sFFFoXiWcOQc9wpxWagCVmGSL44 XUgT5iJTryKaO/ak1lW1UWnOgPaLKU5WQzrZGsT1HUvzf3boOmfoEMxjIp9/VCgenaUzcqZUsJh6 yhqknN95LmpZ3gfVNuprbvsBAAD//wMAUEsDBBQABgAIAAAAIQD7XysJJwEAAGMIAAAsAAAAcHB0 L3NsaWRlTWFzdGVycy9fcmVscy9zbGlkZU1hc3RlcjEueG1sLnJlbHPEls1qxCAUhfeFvoPcfWPM zGR+GDObUhjoqkwfQOLND000qFOat68MFBJoLQMBN4JXPPfzHFCPp6++I59obKsVB5akQFCVWraq 5vB+eXnaAbFOKCk6rZDDiBZOxePD8Q074fwm27SDJV5FWQ6Nc8OBUls22Aub6AGVX6m06YXzU1PT QZQfokaapWlOzVQDipkmOUsO5iwZA3IZB9/6f3FdVW2Jz7q89qjcLz2o7VqJr2LUV+dlhanRcUiS ad1OJ4wl/gBA/2DLorJlQbbVkmzOB4ozx24VehvDHi2JcXd8IYeihhfMbtHo7vVsFfJsHTPNdYhs E5NsEyLLY5LlIbJtTLJtiMy/OvEu/V2IbB+TbB8iY/7tjmcaS3/Y6OxrUHwDAAD//wMAUEsDBBQA BgAIAAAAIQBK4byk3wcAAPEuAAAhAAAAcHB0L3NsaWRlTWFzdGVycy9zbGlkZU1hc3RlcjEueG1s 7FpbbuPIFf0PkD0QzF8CjsQ3JbQ88KM1acDTY4w9CyiRJYlx8ZFiSSNPEKD3kB3MLib5y1J6Jbm3 HhRlS91yLAPWQIAhk1XFy6p7zn1K775dFcxaUt7kVTmy3W/6tkXLtMrycjayf7obO4ltNYKUGWFV SUf2A23sb8/++Id39bBh2fekEZRbIKNshmRkz4Woh71ek85pQZpvqpqWMDeteEEE3PJZL+PkZ5Bd sJ7X70e9guSlrZ/n+zxfTad5Sq+qdFHQUighnDIiYP/NPK8bI61I9xFXEH6/qJ20KmoQMclZLh6k 0FbMcmQveDnUR3KKPOVVU00FPjMsSDpcFsy2inT4YVZWnEwYKKlYypEbThvKl/RcCJ5PFoI2ODX8 s5Fd77PDGoWUQh5wQ2tnAEF6yzL8P5mpzx/p1MqzFQDZ77v22Tui9k0vGbeWhI3sycy1e2fvevgI LNZX+HBT33FK8apcfsfr2/qG4036cXnDQSaItK2SFHA6FCAn9DJ5W8IyJXjj8ZmRRIarKS9wR4Cg BTsEoj3gJzxEhnQlrFQNpuvRdP7DlrXp/P2W1T3zAjha+1I8lTrR0+N45jh3uWDUumEkpfOKZUBn qSJ5QvUYaLG+rtL7xiorODOqQh0VlGME4/nxVfXcEg81aEmgWL1OTcLOynZ9I/VrNt1qJQhjsAup Gi8OIj/Z1E/ieYMI51FLrhv4fbjBvawF1bwR39GqsPBiZHOaCkkEsrxuhFpqlkj01UbqoVhdVNkD gjGB/4A5OAV4fl7xX2yLfSiBuwM3CODdQt7IndoW785MNmYEu6yAcvAEKVOQM7JTweVewFCK84Wo prnekXolvpw14lY8MCppAeCRIagVPmBDjKBPWjklOCJwSoW4ZJSA09IcEmeXLE/vLVFZNMuFpX2T xAFcGMhENQmpLCmTltkN4eTHVjQtnZ9utTrh1YCXUQpcKibt5pPf8gnJ3KWThyJfSifUkK1tW24R yYSUeyarXKAPMkzq15jdBq2C0AsHka/1YKzWcOYN0Qp58SwmgclZbCkpKY//Umah+iSxmg1mAcsk cdWHeaf0Gc9h8y1NqzKzGF1Stod8ybLnyL+b53x/8ZIPzxE/rhZczPfefqAYuT8k43y6VTwEk4Pa dWDs+oqIzTAhVfJSu84EuLJfwM8SNtX2LZGUZv1/2Hfkh/D3yL491/fbsOFHoeuFb9+8N6KGtFcT G2ScWDIX7ZmwGYQAZuNYRqfozFGdLvo4HGsqlmfjnDF5g3npOhkSK5UjibwUKj2Kw3VAlRkfLpYR oyMH7Fu9SU6AQ8GNqGsdvPBd0vqnLJO50z/G0dXgfRz0nat+1Hfc8+DKSYL3l050dZ5cxP3owr0a /BNCq0wdMmCayAs6zmcLTn9YqAC+DoEqTm2LgK7bi3tuf+0uYAO4mcOaRGhMYlxVmP53g52045ca xRTyBAnj3xeEwxu0YaiY9JzA57teYPKp7ZaRDMLftWWYlOvt2cZhORkZTt6CvVPr46KYPGKmdHkv ZSbUvCB6Gzkl8Z/ltaMw9L9Mzt+721bVwNujZuu2wWdc+mOv7yRhP3HenwexM/CDxPGuYjeJwzCK vcvWbTfIvBLYgR53H2/9+dNvf/r86d8H8NayPlH1O1yarkDK+PektqDmhwgpoH6HgDeys3u4msw8 HIMiWKzgKruHK5Km0GiAFfrCjMC8GmnX+GYEih41FZgRSJfUSGhGIFqokciMgK3OWV7eQ9aD/2xr WrG/qgFzhemJ7DBdk4dqIT5kULw+GpGB1XODOEj8KBhAKTrENgX/kOn6HWzVPL2xFrKj9VpdnO1c C7pq5eqEb+da0E+7VsfBnWtBc+1a7Zl2rgWdtmujJ5rZPBtou10bf2Ut4NCulY2GDY1vyo07awdf kQstw1auK1PRLwjeAO4ryEVd5FyTJ3f0plkiVrKH0CBjZP0vb9Esdbam00YMjha4nzsyuYWk0TRf uFBtC0quywsONAUSYIex1Lewizn0IqCNebMoU2iS6FZbnV5gSw3bRelNqlNKeX5IGWFMz04WH6GD ITPajuuD1grIvacc27D7Zq8gBEV3c1y5UZlITqGjNbL/UvzNYQIRgzSQPJqgRE2kzaOJtMGJXZnu plahlwjNiScqhtbq9cj2A2+AB8tL8I2gKscMmMT9tfUPqlTtjkcYjCtI+jHfVmo65zlhShmTxeWc cCuFj5H9+dOvarQDlYrarwFVuQuq0tkBVel8ESrJeA8LJQVHDHCg/2vh8JIQih5w0bqOevNw/OsJ HF7yWpZzQDgQA+2A/DUcpoXbwcNLZD1yNHg8NQ/v1TzZAfFAEDQeQQcP3R09Yjy22Ac6wFeJLAfE A0HQeIRrPLx+CE2TDX91XPbx3/88dVfHAAdioOGIOnCEbiC90zp8HBcc26I5Jghv3jwQBI1H3MFj AGXoMZvH0eKBIGg8kjUeKrc9Ynd1tHggCBqPQQePJIlkh+3kr/YpFA8YzhEEeOVGaVgPKzGnvC0U oaK6Uajp2kp9wd/9Fn69xBTuqowBEzt8gtyp8JRXPcoKzzQxTvrZXnLJH7Gc+AP2tKME8mP8jcjJ wJZse03iJl4ik66The2oEmRNcGIQmNiOtD0OVAvxxKAdeTQkbbLsPyloR2IbhfHJScvmdptpdpNL SDzX3wHhl6Pmp+pn/wMAAP//AwBQSwMEFAAGAAgAAAAhAGzctadFBQAAtRIAACEAAABwcHQvc2xp ZGVMYXlvdXRzL3NsaWRlTGF5b3V0OC54bWzMWFtu4zYU/S/QPRDqXwGNRb0txBkkdlwMkEmC2rMA WqJtNdSjFO2xWxSYbbXLmZX0khL9Gk0tJ/nojy1Lh4f3eS6tq/ebjKE15VVa5AMDv7MMRPO4SNJ8 MTA+TcdmaKBKkDwhrMjpwNjSynh//eMPV2VUseSebIuVQMCRVxEZGEshyqjXq+IlzUj1rihpDs/m Bc+IgJ980Us4+QzcGevZluX3MpLmRrOed1lfzOdpTEdFvMpoLmoSThkRYH+1TMtKs2VxF7qM8OdV acZFVgLFLGWp2CrSHc16YKx4HjUumVka86Iq5kKuiTISR+uMGSiLow+LvOBkxiBI2VrdeeK0onxN b4Tg6WwlaCUfRT9r7rKLhaUkyYVy8DhqYlvCXsXst+nGQAoGe0EOjWtITjxhCcpJBjeGRS6AAX1O xRINSSlDpTBVOeWUSnS+/oWXk/KJq6UP6yeO0kRSNRRGr3nQwNTPHGBw0TtZvtBMJNrMeXZ9RSJI GtoMDKitrfyERSSiG4Hi+ma8vxsvH1uw8fKuBd3TG4AFu02hLMvao2/dsbU701QwivDOqxpKYOl9 ET9XKC/AT+l+7V78sNZk0mdJXy5RHX4hqRpc/VDFQ+MrFVNt6C4SrhdA+atw2IFjeScxcSwrdLBj IBkZjH27QRx6XDOXkdjcFslWRnQG35A4ksfLAnppVseZVWIitgzSTCK2ZhgMQoQtoNkZFAGJEjr/ FW5VfwwMMAlsmmnHd3jIMVwf8ECESQRxgA9YyojUio2Zg0CAWGRiyCgB/sYpcT1kafyMRIFokgr0 kVSCcqQCB9ICpkl6oTZRnDRPnggn0qqamubmp4mKMYlgawiwdhou63R/P+kQxeM2eGIkpsuCJWCE LVmhWXSCLyyBNIEC1lXSPfuOF3gyo7Ib2tLvYYwBUaffCz0HQy3IUtR1pNyuC1FHQqdf9dZhrpqc n6TakeVXUx4A4NJuCvawLMJDrAYA1mnBuodYDQCs24KV5bazQQMA653DagBg/XNYDQBscA6rAYAN z2E1ALD9c9ga0NZEsBIBw65ZXttUUlVVT1VHTQVbq56tP/SeqnIvaeQJjYs8QYyuKevAr7rrEv7p MuXd6VVPXEI/LlYcRmBX811ZnBfxp/NWehh2bypprpa0qUz3oZ6pkLxcz+qRJucI6DgMhCVhcwNO AqByKpdqtEndURcTVfZSgeUtrU1tMw67jofrZt8P/qMh5/p9bPmvVjkE57l7ddBI8wTOPPJSmjZb PcBwUuk8EDZ8JFZyMkostKPUuIZKT+pOfEeieiKUDV8fu3JX1InvSCBPxLThw06A/a6E/f8QXM0X 2qHU+04GHvGdiHLDZ9shmPcSvhPh1nyBq2bX5fadiHvDJ8k6J+TI35MBoPl8L3hZPv4nQwJaW58p 1DFDno++f7rytBSNiKBHUqTU87VSlIhvhAjXZwb5p6NViaDJ9x60noqUDKhJOIf/SPJ/zp9jf9S/ C1zLHFm+ZeIbd2SG7t3Q9Ec34W1g+bd41P/LaI78Cbgq0oyO08WK08eVUBKzPwnXx9W2gzDGvaCH rf3oBAOk5LztePB1TsZFIU/ahwPCkzPttVmZC16n5fcV4bBDMyLwmZPwJZl524gEOiITliYUPayy 2Ulc/LeIC7wQAerW0JwZn5eEZle0vuMNnbFtmaFnhebdjRuYfccNTXsU4DDwPD+wh7uiraTnOVgn 661LrX798vdPX7/88wa1qmSkftMAl/LFhCpBxj+S8nGtZi68LII6GqpbJbwegnhI6B4iOfTrput/ AQAA//8DAFBLAwQUAAYACAAAACEA0U2F9+8CAABTBwAAIQAAAHBwdC9zbGlkZUxheW91dHMvc2xp ZGVMYXlvdXQ3LnhtbKxV7W7TMBT9j8Q7ROYfUpak34vaorZpEdLYKro9gOs4bTR/BNsJLQhprwWP syfh2mk6GEOqRP+0zs29x/ecc+0M3+048yqqdC7FCEUXIfKoIDLNxWaE7m4X/gB52mCRYiYFHaE9 1ejd+PWrYRFrll7hvSyNBxhCx3iEtsYUcRBosqUc6wtZUAHvMqk4NvCoNkGq8BfA5ixohWEv4DgX 6FCvTqmXWZYTmkhScipMDaIowwb619u80A0aJ6fAcazuy8InkhcAsc5ZbvYO9AhTjVCpRHyg5POc KKllZmxNzDGJK86Qx0n8YSOkwmsGIvHKRZaKaqoqOjFG5evSUG1fxW8b7OKUDgsLIowj+KdqZl/A XmuGxT3yXBrsBR6iMZhDViz1BOYQmLoMG9TFraLUrkT1XhWrYqlc7nW1VF6e2tpDDQoOLw5p7lFA GiyCZ+WbBgnHu0zx8RDH4JK3GyEYpr39hSIc053xSB0kT1GyvXkhl2znL2QHzQbQwXFTy6pm9Ded VkMnwYZ6S4YJ3UqWUuVFR4J1FQaUK0nutSckULZK1EzJddXgWvp2p2Lr1dKnBs7GVzARswyBfkAu cmSdQjbZLZp6DXI7Hc1uKtO91WQN/y6IY6bNyuwZdVoBIxxn4KA15duil1zO+53QT8Je6EeTTuIP OvOZ30smg2k/7E2j5PI7apoCqibndJFvSkVvSgPjgGMFBsMYwJmmwr9bQd/czBjFcOYP9phxFAX9 IAqHILOB1l0DzjiRLrHCn55BWH1wDJ0CyYYRLGs3/u1Ju/FkIaUBJ353pXUOVzKjals+l1jBDo0z jaO1jf/lDD2rIp1GkRXLU+pdl3z9TJf2OXSB6xqgX5TG6e4UOd/Q9trdWXvRCv1BNxz480mn71+2 OwO/lfSjQb/b7fVbs+PQastcQHenzurjw483jw8/zzCrbmTraxGW9tp0Nx9TH3FxU8EZxnDLa5ij mQsV8PE63AxPKRaj+RiOfwEAAP//AwBQSwMEFAAGAAgAAAAhABMp70kuAwAApggAACEAAABwcHQv c2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0Ni54bWysVllu2zAQ/S/QOxDsXwFFkvcIsYvEjosCWYw6 OQBN0bYQLipJqXaLArlWe5ycpENKcpa6QND6x5bImcd5781IOvmwERyVTJtMySGOjyKMmKQqzeRq iG9vpsEAI2OJTAlXkg3xlhn8YfT2zUmeGJ5ekK0qLAIMaRIyxGtr8yQMDV0zQcyRypmEvaXSgli4 1asw1eQrYAsetqKoFwqSSVzn69fkq+Uyo2yiaCGYtBWIZpxYqN+ss9w0aIK+Bk4QfVfkAVUiB4hF xjO79aA7mHKICy2TmlIgMqqVUUvrchJBaFIKjpGgyaeVVJosOIgkSr8y08wwXbJTa3W2KCwzbit5 32Dnr6kwdyDSeoLPVbPbHM6ymeXsWvItRj4UzgMf8QgMonOeIkkELNy4KOTD3I7JbzRj7kqWH3U+ z2faJ1yVM42y1AHUiTisN+owfyshDC7CF+mrBokkm6UWoxOSgF1oM8TQVVv3C0kkYRuLaLVIH1fp +npPLF2f74kOmwOggt2hjlXF6E86rYZOpUO8Y1WFEki9UPTOIKmAp6Nf0aNXZQPmODv4fI2eCF/H VZtejybegKZeLLs5U+nWEV/Av18kCTd2breceUGgbJIAOPyA/Jy40dsEEuYNZk/YMWcEZrNWz47G PKN3yCrE0syiS2Is08i3AUwqYJ6APBbcqTGZTGdEk887aCaD27kvnCRwNFTdlAiXlYZ/V7LdKDkh lqEZJ5StFU+hgpaDhKZrJPsnUVMLlL/BXBC+xNCJ0CaxJ+61dQ78l8hLGAjX3t+nvcnxeb8TBZOo FwXxaWcSDDrn46A3OR2c9aPeWTw5/oFrp1OgajPBptmq0Oy6sPi5V5Wg+6yK47AfxtGjI1CAyz2s J53Gk6lSrheeutI+hCtLqytbvhREwwmNM82YHKD9D6tIt1FkzrOUoatCLF7o0jmELvAGBOi90vhp OHDT9trdcXvaioJBNxoE56edfnDc7gyC1qQfD/rdbq/fGu+a1jjmEqp7ba8+3P9893D/6wC96h8j 1QsGLt1byD8YuL4k+XXpH3TwdQB9NPZLOXwP1I/bxxCH0XxfjH4DAAD//wMAUEsDBBQABgAIAAAA IQAkRE+kxAUAADAcAAAhAAAAcHB0L3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDUueG1s7FndbqNG FL6v1HdA9K4Sa8AYMIqzytpJVSmbRLX3AcYwjmlghg5jx25VaV+rfZx9kp4zMDZ27F3i5GKl5ibB +OPj/H4+HM7er/LMWFJRppwNTOedbRqUxTxJ2f3A/DS5skLTKCVhCck4owNzTUvz/fmPP5wVUZkl 12TNF9IADlZGZGDOpSyiTqeM5zQn5TteUAbfzbjIiYSP4r6TCPII3HnWcW3b7+QkZWZ9vWhzPZ/N 0piOeLzIKZMViaAZkWB/OU+LUrPlcRu6nIiHRWHFPC+AYppmqVwr0g3NcmAuBItql6w8jQUv+Uzi NVFO4miZZ6aRx9Gv94wLMs0gSPlSnbkTtKRiSS+kFOl0IWmJX0U/a+6ijYUFkjCpHNyNmlwXcC/5 yCerySO/nf5uGgoMd4RMmueQonicJQYjOZwYoosiLTlT35TFRFCKGLb8RRTj4k6oC26Wd8JIEySo LzQ79Rc1TH1kAIODzt7l95qJRKuZyM/PSAQJM1YDE+pqjX/hIhLRlTTi6mS8PRvPbw9g4/nlAXRH 3wAs2NwUSrKoPHrqjqvdmaQyo4az8aqCErj0mscPpcE4+InuV+7FN0tNhj4jfTE36tAjVY2rvlTx 0PgSYqqCJVcfeLJGx6fwX50kUVbKsVxnkAI4XmaOSgCJEjr7rQpt4zR424SDkyQCU+APJCsj2Kor i0F/Qq/mcphRAr1cx1qeD7M0fjAkN2iSSuMjKSUVhlRhKNGCM6CXkMuak7LkjggCVtTUlFmfxspN EsGtwUftEBxWET8e9+4m7pj0u4zEdM6zBCxwkRJKVAf4pBRgQE2oVygmnbEjmcBw7dWk1wtAhFRh Or1uz3G6aNK2PD3bs50QBBCL1O/2A1/Z3Kw9zDF6oSOiU2wQFs85KNq0omymr862AdpzrRojZQl0 OB7i3aeLG8ikMqQqBqP8c2C6Hlo61W42ikMdumBHTai9asVqP2VFKrQDzOxuWfuOpyxow+qET1mR qmb1tqxON3B8BLeiVcjdECBXTdtr0IZuqGw4lRa5alp/S+u6IZjwAmuRq6YNGrSB11V1eKq1yFXT hlta5GyfsgOxRa6att+g9XvBi1KGXEptmj2hJA1vAlW3kS519xdIHCqOUrhyR+Kgf58tY56WsSFn Epp1R8mUbJyuZNjec5LNah2rNAZ/WFWc8GCsQoZiW2XkuI65TuCFQe8rOtbt9xzoDkS0ETKlQ81M Pfmt2spTRdkAwKFWk6aUYQ9tsBoAWK0RDaySkg1WAwCrG7+JxbLcYDUAsLqbj2I1ALC6RY9iNQCw uu+OYjUAsLqZjmI1ALBVh+hZQMVXqeTGt++khVQfwR/dtuoX+DmTyZjGnCVGRpc0O9Ci+/yqM57D P5mnoj19/evfXnWu+ELIeWvzvaorn8Gfzg7Sw4TyqjNaT4vbZH9GUyafrmzVmFzNaKhyfyyIgOGz FjoVbzUxtxY63+vZLpgL89ixic0JQP7eJraB+TaxwdT8NrENzO7/cmLztagdmtjUgHS6rj3VMiWU J2vZsaltq2VvUxvGfHcKepvaju12vvrgsz9VvU1t9eqrei7cD893O7UFWuBGRNKd51EfB83T1a2a 2hIJy8TdJ1Onerw6+miq7rq/CYOT2+2l+qCe9WewmMY1819X/qh/GXi2NbJ923IuvJEVepdDyx9d hB8C2//gjPp/m/XGNQFXZZrTq/R+IejtQprIvl0RVKvKQ0tQx+kEHcfePmWAAXjt607SsCustu1X nOOWtbnvDF4jKzMJ0/PTnx/nG8vP52TmdSPS1xEZZ2lCjZtFPt2Li1pFvLRa4V0UUB8MzTf2Kc8J zaZo/W5v2L1ybSvs2aF1eeEFVr/rhZY7ChxYv/T8wB1uirZEzxlY17ZWv3z+56cvn/99hVpVC/rq RQ8c4tsgJQyZ+EiK26V6EoX3dFCpQ3WqgDdzEA+EbiHIod/0nf8HAAD//wMAUEsDBBQABgAIAAAA IQBnlfYTZAQAAF8SAAAhAAAAcHB0L3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDQueG1s7FjdcuI2 FL7vTN9B4951xosNxjaewE4CobMzuwlT2AcQtghuZMmVhAPtdGZfq32cfZIeyRYhLCnQ5TI3iZE/ fdL5zo+OdfV+XVBUESFzzvqO/85zEGEpz3L20Hc+z8Zu7CCpMMsw5Yz0nQ2RzvvBjz9clYmk2Ue8 4SuFgIPJBPedpVJl0mrJdEkKLN/xkjB4t+CiwAp+iodWJvATcBe01fa8sFXgnDnNfHHKfL5Y5CkZ 8XRVEKZqEkEoVrB/ucxLadmK9BS6AovHVemmvCiBYp7TXG0M6Zam6jsrwZLGJLfIU8ElXyg9Jylw mlQFdVCRJh8eGBd4TkGkojIjE0EkERW5Vkrk85UiUr9Kfrbc5Sk7LDUJU8bAl6qpTQlrqSd+P//N QQYHi4ETnQF4J53SDDFcwMDsiaMhZwpozCtZzgQhGsSqX0Q5LSfCzLirJgLlmWZoZjqt5kUDMz8Z wOChtTf9wTLhZL0QxeAKJ+AstO47EFMb/Rcm4YSsFUrrwfR5NF3eH8Cmy9sD6JZdAHawXRTCsawt +tactjVnlitKkL+1qoZimPqRp48SMQ52avNr89K7ypJpmzV9uUSN7JqqwdUvjR4WL0FTI5Za3/Bs ow2fw38ziBMq1VRtKDGCwLZxAuTwB+SnWCfe2mWQbZB5hRpSgiEzG/XUYEjz9BEpjkiWK/QJS0UE UsYwqTmvQB4F3mk4CcsmWOBft9SEuZ+nZuM4gaVh13aL8Fhr+LqSHatkE05oQnFKlpxmsIm2ZoXA s6qdqav8A9IB04UDIQjxYZ3wirhar70wC7oR1BQTa37oefrZCGwjLvA6MYw7SMdd0G13e2GnEaJm MgLUfraaHHSbXptW1Dd5g5OMLLS8ev/tuF4U1N8BwGP7ADbYxVoAYDsHsN4u1gIAG3yL9V/swQIA 2z2GtQDAhsewFgDY6BjWAgAbH8NaAGB7x7A1QGvd5JN2jEknmImAYZs235teOoRMdskX6QVL18uZ he2aJnLPSekpSTnLECUVoSfwmzw7h3+2zMXp9CYnzqEf85VQy5O3H9RZebpLxvniID2cJRctbsF/ FTejysWKm3GhOTB0uTEPuyfHoeIWBvFbdYNj4a26JW/VbbcheqtupoIca926trqNsCIv+jZTkP9/ aav74UxBt7rXwZn+6/Uqd05/vICPGf1l8uc4HPVuo8BzR17ouf51MHLj4HbohqPr+Cbywht/1PvL aZr0DExVeUHG+cNKkPuV/vyBk22vFz7UZft+K2r53vNpDBvQcy974oTWJ2POdRu/2013v6+brr2y UKJ2y+8rLGAF21sfaa7P8cxlFYmsIlOaZwTdrYr5ni7hJXSBqwugPijNkaP5HGm2QRt2usPOuO25 cdeL3dvrIHJ7nSB226PIj6NuN4zaw23QSm05g92dGqtfv/z909cv/1wgVs0HUH03AI/6BsF80FHx CZf3lenY4FoH4mhohkq4yAE9NPQZojnsxdDgXwAAAP//AwBQSwMEFAAGAAgAAAAhACIRiWDaBAAA RxEAACEAAABwcHQvc2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0My54bWzMWFtu4zYU/S/QPRDqXwGN JVmWZCHOILHjtkAmMerMAmiJtoVQlErSHrtFgdlWu5xZSe8lJT/SFPVMjCA/tszH4bnnHpJXvni/ KTlZM6mKSgwc/53nECayKi/EYuB8fBi7iUOUpiKnvBJs4GyZct5ffv/dRZ0qnt/SbbXSBDCESunA WWpdp52OypaspOpdVTMBffNKllTDT7no5JJ+AuySdwLPizolLYTTzJenzK/m8yJjoypblUxoCyIZ pxr4q2VRqxatzE6BK6l8XNVuVpU1QMwKXuitAd3BrAfOSoq0Cckti0xWqpprnJOWNEvXJXdImaW/ LEQl6YyDSOXatEwkU0yu2ZXWspitNFPYlf7YYtenMKwRRGgT4LFqelvDWoplPzOaO8QMhNUgi84l pCeb8pwIWkLDlGWoD8GBTJpeVT9IxnCcWP8k62k9kWbS3XoiSZEjSDPZ6TQdzTDzU8AweOg8mb5o kWi6mcvy8oKmkDCyGTjgqy1+wiSaso0mmW3M9q3Z8v6Zsdny5pnRnXYBYLBbFCxZ24j+HU7QhvNQ aM6Iv4vKDqUw9bbKHhURFcSJ4dvwsrt1C4YxI3y9JFZ6jVDNONtp9GjHK6NpS3SnRBwEXb9r5AhD L+p7T0SJ4zgIoZGgNH43Cry4ZxZpkWARC12nenNd5VuUdAbfkDkqsmUFG0njDJpypad6yyHP8Lzm PjAilC9gp3NwAU1zNv8VmtTvAweWhDVnJvEZBQUo582yzUxI9zEiiE1TkAQ+AIRTPDI2roBzAs6M Ug85o7BSE56+HPIieyS6IiwvNPlAlWaSGA3hhAGSCK/NIgaTiXxCJUV+FpoJ9+O0oQRLgwxt+EYR TM1/5x8Et3vhAc034TRjy4rDbiABQsJ2aRP9TVZA+R3YN2Dq1jnf5Iig70UxuONomxw7oud5fhI3 OthddoojZhbzOUfAIXhrdmghcjhq8BGTOlvdQSoNkwOfwLFtu1XFi3xccI5jzfHIhlySNeVgvw2e QZDOQmjbEgNt4wRI8m6wSfYBDvTZlazVrGERBxwYoHct07AXAwuQ+wS6fvKKdJFjQ7e7p9v3YZ+f Sjd6RbrIsaEb7un63dhHFqfJi5EhxkEWDxJ8XjcgyYZv74BvEiSY5LfHF0k2fKM93yBIQN63yBdJ NnzjA75x2D19u72mH5BkwzfZ80Wyp++31+SLJBu+/QO+US9+m/sNSdqT+KCMMJc+soczeXe5m7Be UATgnWxqAHVUBMB98NUXfdhe9COq2dFFb27Vl170uYbaBsqlJeXz9sK39xqWwkYvfJga6WyhZsqL tlRpKzVzrbaXsflhhJ1DzY7V9x/jaNS/iUPPHXmR5/pX4chNwpuhG42ukuvYi679Uf9PpylEcwhV FyUbF4uVZPcr7aDN9vmwldNzNZnvd+KO7+1VBwI497zFV6/NybiqsOg7LL/Cc5Rfcy1tWn5bUQkr tJn5n1rsazJzXkWiVpEpFFGM3K3K2RNdTM3/UrfCKzpAPyuNKXuhcDynaaNub9gdB56b9LzEvbkK Y7ffDRM3GMVQsvZ6URwMd6ZVGLkAdqd69cvnv3748vnvM3jV1Mv2/Rce8UXZvAFw+YHW92tzmMHf F+AjKGihqYY/LMAqOHQ/BDHaP0Au/wEAAP//AwBQSwMEFAAGAAgAAAAhANxlIwOdAwAAiAsAACEA AABwcHQvc2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0Mi54bWysVltu2zgU/S8weyA0fwVUyW9HiF0k dlwM0CZGnS6ApiiLEz5UktLYMyjQbbXL6Up6SUlOk/EA9sQ/skxdHt577uEhL99uBUcV1YYpOQk6 b+IAUUlUyuRmEny6X4TjABmLZYq5knQS7KgJ3k5/e3VZJIan7/FOlRYBhjQJngS5tUUSRYbkVGDz RhVUwrdMaYEt/NWbKNX4L8AWPOrG8TASmMmgma+Pma+yjBE6V6QUVNoaRFOOLeRvclaYFk2QY+AE 1g9lERIlCoBYM87szoPuYapJUGqZNCWFghGtjMqsm5MITJJK8AAJkvyxkUrjNQeSROVHlpoaqit6 Za1m69JS4z4lr1vs4pgMCwcirS/wKWt2V8Baav1ngHwQrAQdDKbQGrLiKZJYwMA9s5wiaCCaKWkB yQeY4l5T6kJl9U4Xq2Kp/bzbaqkRSx1OMz+Img9NmP8rIQxeomfTNy0STraZFtNLnEC/0HYSgKx2 7gmTcEK3FpF6kDyOkvzuQCzJbw5ER+0CkMF+UVBkUVf073K6bTk1HZ19VXUohqnvFXkwSCqo05Vf l0duqxbM1ezgixzVzFvHbBNXf/R8tPEGOPVk2e21Sneu8DX8+kGccGNXdsepJwTSxgmAwwPo59jt vW0oYcPB5hN2ximGzdmwZ6czzsgDsgrRlFn0ARtLNfLZwFYFzEugx0J3Gkwq0yXW+OMemsrw08on jhNYGrJuU4TXmsP/ZrLXMtnICS05JjRXPIUkug4V5NeydiKvLAVVtNSfgVLoAOIV31P3UoqdcD3D 5gnFQLTvYP1o1/R1nNLWFSUKtimnFeVH4HuuT8G/z5k+Hr7nWnkK/EKV2uZHp98/GZ9lB+HBT84q 8H4r8Dm29Im6PSX/X921a6QW9vTf4PyYZwFYrVO839nePJzFvMhFMjB+59//LIbzi5tRPw7n8TAO O1f9eTju38zC4fxqfD2Kh9ed+cWXoLGyFEq1TNAF25Sa3pXukIDeP3OMQ17U6USjqBM/6hUScHPP 25NB25OFUs7sfvUcL6SXdiWzum7L5xJrWKHtzBnN6LyMDFtGVpylFN2WYv2Ml8HLvLhWK9zxAPog Nd5/zizaYW8w6y26cTgexOPw5qo/Ci96/XHYnY8649FgMBx1Z3vRGle5hOyO1eqPr99+//H1+xm0 6s/J+gYFr+625Y89rj/g4q7yxwzcf0FHMz9UwI0X3NSFPoY4jPYGPf0JAAD//wMAUEsDBBQABgAI AAAAIQDU7EVljAQAAPMQAAAhAAAAcHB0L3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDEueG1szFhd buM2EH4v0DsQ6lsBrSVZfxHiLBI7LgpkE6POHoCWaFsIRakUpdotCuy12uPsSTpDiZazddugNQq/ 2DQ1/PjNfDPkyNfvdwUnLZN1XoqJ5b5zLMJEWma52Eysj89zO7ZIrajIKC8Fm1h7Vlvvb77+6rpK ap490H3ZKAIYok7oxNoqVSWjUZ1uWUHrd2XFBDxbl7KgCn7KzSiT9CfALvjIc5xwVNBcWP16+Zb1 5Xqdp2xWpk3BhOpAJONUAf96m1e1QSvSt8AVVL40lZ2WRQUQq5znaq9BDzDtxGqkSHqX7CJPZVmX a4VrkoKmSVtwixRp8v1GlJKuOASpaPXMQrKayZbdKiXzVaNYjY+Sbw129RaGFYIIpR18HTW1r2Av lSvOLKLNYC/Q0LoBcdIlz4igBUw8owVZ8jxj+lFdPUvG0Ei038lqWS2kXvHYLiTJM0ToV1qj/kFv pn8KMIPB6IvlG4NEk91aFjfXNAGtyG5iQUrt8RMW0YTtFEm7yXSYTbdPJ2zT7f0J65HZABgcNoVs rDqP/uyOZ9zpAuEevOpMKSx9KNOXmogS/ET3O/fSx9aAoc8IX21JF/VUSY3Wm3bPdUjMklqH1XA9 BCOMg9jpIuK5Y8f3gtdxiaLI89EAo+P6keN0Fsded9BVonZ3ZbbHqK7gW6tCE16rpdpzpqMNMaEJ MIcP0JZTLOqdLaCSoaoLNeWMQtX30qibKc/TF6JKwrJckQ+0VkwSpdOnRsxrYKFA+h6TiWxBJf3h AM2E/XGpQ0IT2BriYSjCsBPor2UaG5mWzarb00MoSGWjw79Sqm5WnVKQ2pB3Rty3K+aOIzfsJRvH cQjn1mvJQtBLa6oliwIPrTGFjPja+S6BTDxOSoY68Za7kDkEDqYHXTq5yKD89ZDyDagFqQdlDADN I+ioZc7YGkTAybqEMp/nnOsfeAyzKZekpRxOih0eDaBgLlQ3EwXOgao+4NBYEz/CATcMPgx7fogD Q2+g6gcRRoZcHl8k2fMdD3yvXF/X2eXxRZI9X3/ge0jDyyOMLHvCwRHh2It1WVweYWTZEw4Hwp4X Q+VeZAojy55wdEQ48scXWnPIsiccD4SR7YUWHbLsCV8dEQ6DSJ/9l5fDyFIf1ebCR/bnuO/hwvy/ rnzfXPkzqhhZcJqybckzaDrG57j6MwVdzs/QZFO+hotJX//dzYy9qw4fDpY6ktig6BZqaFpOXtJD X7WGDhvb5V/m4ezqPvIde+aEju3e+jM79u+ndji7je8iJ7xzZ1e/Wn3nmIGrKi/YPN80kj01ykLh hvas66FOdWeuO4pGrjM0YUAA1563DQuMJvOyxPbvWBX/HKqsoX/RsvzYUAk7GGX+oTPTreDftk+D MueNSGgiol+hyGNTrL6Ii+7h/3OjyjOAPhka3Qjrt4vzJW04DqbjuefYceDE9v2tH9lXYz+2vVnk xlEQhJE3PSRtjS+PAti9NVc/f/rtm8+ffj9DrurmuXthhSG+1up3Ai4/0Oqp1Wc2/NUAeQStK0xV 8OcCJAKaDiaIYf6suPkDAAD//wMAUEsDBBQABgAIAAAAIQACpCGGtwMAAL8LAAAiAAAAcHB0L3Ns aWRlTGF5b3V0cy9zbGlkZUxheW91dDEwLnhtbKxW247bNhB9L9B/INS3Aorku1dYO9i110WBZNeo nb7TFGUTy4tKUordokB+q/2cfEmHlOjNpg7gzfpFlqmZw5lzZoa8frsXHNVUG6bkJOq8SSNEJVE5 k9tJ9GG9iMcRMhbLHHMl6SQ6UBO9nf74w3WZGZ6/wwdVWQQY0mR4Eu2sLbMkMWRHBTZvVEklfCuU FtjCX71Nco0/ArbgSTdNh4nATEatvz7HXxUFI3SuSCWotA2IphxbiN/sWGkCmiDnwAmsH6syJkqU ALFhnNmDBz3C1JOo0jJrU4oFI1oZVVjnkwlMslrwCAmS/bqVSuMNB5JE7VeWmhqqa3pjrWabylLj PmU/B+zynAhLByKtT/A5a/ZQwl6gnV3vI+TtYDMQMZqCOmTFcySxgIU1s5wi0BD9DsaMYI7WdG+9 mSnXmlLnIOtfdLkql9p739dLjVju0FqUKGk/tGb+rwQzeEm+ct8GJJztCy2m1zgD4dB+EkF9HdwT nHAGQSDSLJKnVbJ7OGFLdncnrJOwAURw3BRKs2wy+n863ZBOQ0rnmFVjisH1nSKPBkkFebr0m/TI fR3AXM4OvtyhRgLr+G3tmo+ej2BvgFNPlt3fqvzgEt/Ar1/EGTd2ZQ+cekIgbJwBODyAfo5dE+5j CZ0HXSjsjFMMXdqyZ6czzsgjsgrRnFn0HhtLNfLRQM8C5jXQY0GdFpPKfIk1/u0ITWX8YeUDxxls DVGHEOG14fDbTPYCk8+KCi05JnSneA6hdB02lGLg7rvYdVxFSGkGXdCUewSFCVUTpHkJ5W7UAQrF LmgX3SkBQC/Ea34k+rWCuDL3ephngoAsXu/mEfb0Wb2kCFaUKGhtTmvKz8D3mrwEf71j+nz4XkPq +ZQtVKXt7uzw+y/GZ8VJeJg+F22HfmiHObb0WRd4Sl7bBbmFCfAnHBiYF6H+/Rzwo8YNpFfNnAIO Czft/1oM51d3o34az9NhGndu+vN43L+bxcP5zfh2lA5vO/Orv6N28OWQqmWCLti20vShckfKl6Or mS+nJlenk4ySTvpUrxCA872sJoOgyUIpNxq/nE2+kF6rSmF1I8sfFdawQ1Dme0bTN4bRZRkZBkZW nOUU3Vdi8xUvg0vMbLgaAvRJavz8uXDRDnuDWW/RTePxIB3Hdzf9UXzV64/j7nzUGY8Gg+GoOzsW rXGZS4ju3Fr9/Omfnz5/+vcCtepP1ea+Ba/uhuaPR67f4/Kh9jMTrs1QRzO/VMJFGarCmT6ZOIxw 8Z7+BwAA//8DAFBLAwQUAAYACAAAACEAdZw5h/cEAAAfEgAAIQAAAHBwdC9zbGlkZUxheW91dHMv c2xpZGVMYXlvdXQ5LnhtbKyY627bNhTHvw/YOxDatwGqLVk3C3GK1E6GAmliLOkD0BJtC6Euo2jX 3jCgr7U9Tp9k51CkbaXO6jj6ksgS+SPP7c8jXbzf5JysmaizshhZzru+RViRlGlWLEbW58cbO7JI LWmRUl4WbGRtWW29v/z5p4sqrnl6S7flShJgFHVMR9ZSyiru9epkyXJavysrVsCzeSlyKuGnWPRS Qb8AO+c9t98PejnNCkvPF6fML+fzLGGTMlnlrJANRDBOJey/XmZVbWh5cgoup+JpVdlJmVeAmGU8 k1sF3WHWI2slilibZOdZIsq6nEucE+c0idc5t0iexB8XRSnojIOT8rW6MxWsZmLNrqQU2WwlWY2P 4l8NuzplhxVCCqkMbHtNbitYq8qSx41F1DBYC2JoXUJwkgeekoLmcGOaJXIlGPmSySUZ0wpdpcbU 1aNgDEcX699E9VBNhZp6t54KkqWI0girpx/oYepnAcPgovds+sKQaLyZi/zygsYQNLIZWZBbW/wL k2jMNpIkzc1kfzdZ3h8Zmyyvj4zumQVgB7tFIS2rxqLvzXGNOY+Z5Iw4O6uaoRSm3pbJU02KEuxE 8xvzkru1gaHNiK+WpHG/RJQe1zxU/jDja+VTs9GdJ5xw6LoRlBZY7kVQCP1nXvG9KPDgJkHf+EEQ DiK1iCHBIg26iuXmQ5lu0aUz+A+Ro0WyLKGYZjiDxryWD3LLIc5wveYO7IhQvoBq55AFNE7Z/He4 Vf85sqAkYcmZsXw3HoLc5oCLaQyOgD8wlVMUi41dgEKAWuRyzBkFvrZJXo55ljwRWRKWZpJ8orVk gijPgbbA1hAv1SKKyYp0SgXFXTVoVtifH7T9sDQYb4xWfsCAvBz1gYm6qYMppwlbljyFTbhIhWox ET4rB6AELagXSGaTMedlQuC4Yeg3UTPl0UoEz3EwW7Qnmur6n0x4MfygereqHLMiBW3BS4zlbHUH EVSzDpJiAFmhV9Tpg2Ph0sVMalCeH+IocgrP3VugIZo32POGjqey/yQejoRNY4quOUI0z9vznEHo YI2dtkGsgh0QKRroHwAjKN/zgEjRwGAPBDmADZ61Q6RoYHgADD0VuTNMRooGRnsg0k4PSsuHSNHA 4QEw8MMzg4KU46LUrXZ4RjsesR4PhWOAGfJW4UDBBsEE5V1SPtcaoiQJqvo8DfEHcFY0h8X+jG2J SNSHs6VZ5ITTRKnBsSPkVRritGoUjyCdDmdqiNPSJIRo3pka4rTStQMNGXYsIS1eBwrS4nUgIC1e B/rR4nUgHy3ey+qB4gSHyK51UWn1hhYHVUN1OHWrxYGj6tVtjG+kaEIla0mR14UUpfI7IXKaU/BF JVICaBox03229EL9UL3iHN5G8I3ir5tgMrwOvb49gabXdq68iR1512M7mFxFH8J+8MGZDP+2dHOd gqkyy9lNtoAXmPuVtLDM9/Fo+sJjHafj9MKe0997HTaAc7s9HgITk5uyxJb28IBQfdxbD4i5FE1Y /lhRASuYNvMHfeZrItOtR0LjkQeepYzcrfLZM78EXWQrfHoA9FHX/OD4fI1rdkkbDPzx4Mbt25Hf j+zrKy+0hwMvst1J6ESh7wehO94lbY2WF7C7U3P129d/fvn29d8OclW9CzTv9HCJnwBUj8LFJ1rd r5WYwWcZyKOxulXBhxjwBw7dD0GG+bBz+R8AAAD//wMAUEsDBBQABgAIAAAAIQDpufkvmAMAACwL AAAiAAAAcHB0L3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDEyLnhtbNxW/27TMBD+H4l3sMJ/SKFr 2rRdtBZt3YqQYKvW8QCu4zRh/oXthhaExGvB4+xJODtJx1iHMiQkxD9tYt995/vuvouPXm44QyXV ppBiHHRfHASICiLTQqzGwburWTgKkLFYpJhJQcfBlprg5eTpkyOVGJa+wVu5tggwhEnwOMitVUmn Y0hOOTYvpKIC9jKpObbwqledVOOPgM1ZJzo4GHQ4LkRQ++s2/jLLCkJPJVlzKmwFoinDFs5v8kKZ Bo2TNnAc6+u1ConkCiCWBSvs1oPuYMpxsNYiqVMKeUG0NDKzzifhmCQlZwHiJHm9ElLjJQOSeOlX 5poaqkt6bK0ulmtLjdtKnjfYqs0JlQMR1id4lzW7VRBLLt9fCLYNJlARsmApEpjD8lQKC25+2agr TakzEOUrrRZqrr31eTnXqEih7EHtFXTqjdrMvwowg4fOL+6rBgknm0zzyRFOoDhoMw6gh7buF5xw QjcWkWqR3K6S/GKPLcnP9lh3mgBwgl1QaD9VZXQ/nahJpyYBzRkmNJcspRp1dzlWjhiA3khybZCQ kLUjo0qWnJcNtGPABVN5w4N794Q0JsaT2px0R0U/HkKfez6iYX/QG90lZRRFhwO376iJR3E3jmIf vgGCGBWySuzmRKZbR+kS/n1JcMKMXdgto55qIAQncA7ESrbjHw6KE+0WsZP0JhSgY9A0t1NGMWi+ rpOdTFlBrpGViKaFRW+xsUCXdfUzLoQ5gkJYSBvg/G8V7k5Mz53fbxlzQYkUKWK0pKwFflTR1z6n q7zQ7eF7j4WfybW2eevj9x+NX2R74UFWIp1jjS93haUifLeoewcqA43TNIzvIde+Dyum1yjmkhIY 9itGkT8rjJRGBXt0AoqZ5mBNj7WWH3OKUxhwv5UPqmZWaqEBP8H0wywLYALBeOj6NvSSelBbTFTy a6UI15egg26ty5RmwJXz/2nZPdcC8m1c97L7+9m+hrhHeVaEs9d/Snn/PuVe+n+J8szqivMPa6xB 2A3tTbmqEef5/3Wk/Ve0x/dpH7gS/iXa4Y50vuZ7mfez7J9u+AxuE+568Pl0OJweRoOz8Ox4FIcn vf4sPOwOT8N4enISn53Oon7U+xLU4jasSKmApJ2Mbj88O7H4T9QDErOTm6/fnt18/X77LYBDOOPH i8+PveriA4/uauSrzPRbrC5K/wmBOypIYeqXFNxKq/FCbk0cRnPLnfwAAAD//wMAUEsDBBQABgAI AAAAIQAbXz56AQQAAJ8MAAAiAAAAcHB0L3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDExLnhtbLRX XY/iNhR9r9T/YKVvlbL5gIQQDawYGKpKuzOosH03joFoHDt1nBRaVdq/1f05+0v22omZL6oyHfoS gnN9fO8518fJ1ft9wVBDZZULPnKCd76DKCciy/l25Hxazd3EQZXCPMNMcDpyDrRy3o+//+6qTCuW fcAHUSsEGLxK8cjZKVWmnleRHS1w9U6UlMOzjZAFVvBXbr1M4t8Bu2Be6PuxV+CcO918ec58sdnk hM4EqQvKVQsiKcMK8q92eVlZtIKcA1dgeV+XLhFFCRDrnOXqYECPMM3IqSVPu5LcIidSVGKj9Jy0 wCRtCuaggqQ/b7mQeM2ApKIxIwtJKyobOlFK5uta0Uo/Sn+02OU5GZYahCtT4FPW1KGEtUA7tcoV oxOerfYOMvGwKIjpjEElsmQZ4riAgV8hNCeYIROPQFS0ontlwqpyJSnVE3jzkyyX5UKa2bfNQqI8 02gdiuN1D7ow85dDGNx4z6ZvLRJO9xtZjK9wCgKi/ciBPjvoK0zCKSSBSDtIHkbJ7u5ELNndnIj2 7AKQwXFRaNGyrehlOaEt5xkpwbG8dg4GjA+C3FeICyhY89DWSW4bi6qL1+uUO9RqorQeDhIyB+Va ibpZbaihyc6uDNU2/yNBcRwO+35LUzjox73kKVehHw3Mc81YlERBFEZmEYsEi7TQZar21yI7aKbX 8AuC6qYZORTr4ltYVqmlOjBq9ADWcAolwQWCGdZesHc5GACYQaGmjGIwi048NZ6ynNwjJRDNcoU+ 4kpRiQwHYB2AeQXqKGiODpPybIEl/uUITbn7adnlDktD4jZhU4Om9p+F7L0UUrfTgmFCd4JlkEqo sWEnWMX+k6aauWeSwr6AprUNcb60/WgA5mc2wCllYz8YJvr5/6UsNBxiDTsq+FalNd9G6OqJ0qC3 aaT2Ytc0dL2mu5aUCHAqRhvKzsA3Yr8Gf7XL5fnwvXa7nE/ZXNRS7c5Ov/9q/HxzEh5c9aL7rG/3 2Qwr+mR7GUreur0yBdbyBxyImG2cbmMZgzFeqf3V3Dw2TbOprVNYazP+9dLMNnAI6lPsz3k8G96A cbozP/bdYNKfuUn/ZurGs0lyPfDj62A2/MvpfDyDUlVe0Hm+rSW9q/VR+dgTW+M6ZYlB4A28wH/o V0hAz72sJpHVZC6E9tzHpmca6a2qbJRsZfmtxhJWsMr8i+e9RpnLMhJbRpYszyi6rYv1M17MIflW XuDVF6BPUmP858JNG/eiaW8e+m4S+Yl7M+kP3GGvn7jhbBAkgyiKB+H02LSVrpxDduf26tfPf//w 9fOXC/SqOa7b90i41W+e5txl8iMu7xrjmfBZAH00NUMlfAhAq+jQhxCNYT8sxt8AAAD//wMAUEsD BAoAAAAAAAAAIQA5Gb2LomsAAKJrAAAUAAAAcHB0L21lZGlhL2ltYWdlMi5wbmeJUE5HDQoaCgAA AA1JSERSAAAB+wAAAfkIAgAAAAkhAI4AAAABc1JHQgCuzhzpAAAACXBIWXMAAA7EAAAOxAGVKw4b AABrR0lEQVR4Xu2d7R0vN422k21g6SB0EDpIqCB0sGwF0EGWCgIVLKkgUAFLBSQV8FABUEGeOzgZ JvMi3ZLltxn9P5zfOYnHsmX5Go0s2x9+++23H+QvNZAaSA2kBp6rgQ8//LB07sMk/nNHOXuWGkgN pAZ+pIH/SH2kBlIDqYHUwEs0kMR/yUBnN1MDqYHUwAdJ/DSC1EBqIDXwFg0k8d8y0tnP1EBqIDWQ xE8bSA2kBlIDb9FAEv8tI539TA2kBlIDSfy0gdRAaiA18BYNJPHfMtLZz9RAaiA1kMRPG0gNpAZS A2/RQBL/LSOd/UwNpAZSA0n8tIHUQGogNfAWDSTx3zLS2c/UQGogNZDETxtIDaQGUgNv0UAS/y0j nf1MDaQGUgNJ/LSB1EBqIDXwFg0k8d8y0tnP1EBqIDWQxE8bSA2kBlIDb9FAEv8tI539TA2kBlID Sfy0gdRAaiA18BYN5D23bxnpp/bzz3/+c+naP/7xj6+//nrfTfwT/9HX8Z/97Gc/+clPtmd/+q9f +Sf+13/+53/6qs2nUgNjNZDEH6v/lK5o4G9/+9v/++GHov/3f/93CfchetxeA+X1UP6Jv3z88cdD 2pNCUwOqBpL4qoqyQCcNwFsvfvqGePylk+xoMeB+eQ3gz/ImyC+DaB1nfR4NJPE9Wstn6jUAvhey w20vf6mvc/4aPv300/ICKH/56KOP5m9ztvBJGkjiP2k05+3LP//5TzjvgHtx4Q8B93nb3bhl5SNg +2U4qLG+s/oPkvhpBE00sEd8oXwTMY+rFL4/XgDlz/wCeNzwju9QEn/8GDymBVhlhRdfHPn04uuH tQR/ygsg3f96fWYN0EASP82gSgPffPNNoTx+7lTIqha842HEf8D98kv6v2PMm/Qyid9Erc+uNCk/ dnyL74/fL37xi9wZMHYslpOexF9uyMY0GHH5P/zhD8WXz6D8mDG4koqYD7iPXzr+8wzKzC1J4s88 OuPbBnceoMcv4/LjB0NsARx/cB+O/2effTZ5U7N5AzWQxB+o/HlF//GPfywe/erufEl/9Cm67O9d 7ocuF68/0b/c2HVocBK/g5LXEFHiNuU3eYu3Q2+2v+zPvfnkk0/C218Oe0C12+k921+mfTEk+sPN 4AEVJvEfMIhVXZgW9NspBUscWYPwV3kHbH/O8yaAAn/5r1/G+qumyiMeTuI/YhhdnUDo5ve///0M Hv128MB2EM0zNh+VbWjbNuOaszxdI3x8CHr+9a9/jYDPM9QbopO3VZLEf9uIfwBv9Le//S1APzB9 vmwsKqeMtQjCTDuoJTq0bVIbtUwC6MPlz0D/tHbSrmFJ/Ha6natm+Jvw6MH6IZQpfC+gz9jCZhkY lEL/kvba2WLwui3RnnT5O2t+oLgk/kDldxKNUyrBevw6yftBTNklVECfG4UY5Y/a2gaXH9GeV31s McPxyDJJ/EcO6/ed+vLLL//nf/6np1Nf+J5Z4fVW1Z/+cPlhLbmPt37sZq4hiT/z6DjbhlgBojf4 9YnUlyzAAvqMDzjHTHwMX2lle0SHfXAYTfj7GeppMY4z1JnEn2EUwtqAhUG4aX0COGWTJ34ZDQgb P62icjppnz0TgD5sKV/h2pgs9v+T+IsN2F1zu7EecRuwYJ4Mv5IBWdSyT388X3R+UN23335b/suH H36IP/d7uPBPfK+U/4v+zrkIUfZFt865Kku7+VJ/CCbytOQHDGQf1o8F/f5+8w3lndPbyzugvBi2 3wwucAf0o+/w95P7D8BF+vgLD2IH1vcH/Zaxvr/lfOZBKnuDwcTyGhiIxYL+djG95P7Mdki2LYlP KmquYq1ZX2L0Hfblb5cjbrecz6VoV2u2LcRli1nn/Qfl2Axwv1GCf3LfZRSzPJTEn2UkyHa0Zn2J 0bfbjfnO+2+3rQk9b6+FqZR9GC3Sc2EkSAabIahFTpws9r0GsH6VvyU0gCgHYqmNDBeuaMnmbKEK BNzBHbxLIKVR+xeqtnw/QdtQSwttn+uEyw+JLVSEMcXrpE8vUkqIBj4IqSUraa0BsB7B4kaTFp// 4e0HzgA1gKZRs1uoon+dZQEAg9uB/kBzCytCF1BtI18h3CyzwiT+7DYA77iFa9zCqQdT0NqkvO/N UTaylYOPmholxmjLPfU19fwUGo9qmzY7Kw/RQBI/RI1NKoHrHT4zMVdRZ+zkRDuxS9N91VQUdJ5U TznjrOTaN7Gtb7/FqEFErNJgAy2+Fxtp4J3VJvFnHHd4eeGzEXMbdUZFD0CiEprPoE0sNM+1NXX8 YWl4W8cOYgb3Z2TKD21K4k83OuHB1nJSSkisoIC+0TJga3SuXj88aIxj1Dt7b/clKSCQ+6gK4anp plY2CPvMUwnzaABfxLEh+6hVtQT9VG8LGAnQHx4/KdwPtMAM8szDlq0lSfwpBgUOeKzjHMV6hJJb xJemAui6jSkX2GKMYo04NlkAL6d2qxGxHX9DbUn88aMc/kFdny3XIry7Lljnb3nx+mMDPgjLRMV5 UE/4a2n8vF2zBbnnduR0xrnnZaKGNKLE6/Fzn/VYNuiXzUEhTepTCforZAqhL+iX3BLsHRWiGRim Ph2plxJ7PEbsRQv4isXXg9s465WTNXyngTVfVMu3Gt+5QHOUCdbHcEp2UJRPF9Uvsh4cXiYYBHO0 2eeffy7UQDZjqmJ4BUal9geu66azP5xcSfwBQwA/OpCtlXHSFvtxOrMviS8ovHjW9VYemDGMJmVk v35EfDUk8X16cz4FQw9coa1JfEZL4AMGJmZ0pvxeXBJfVX5Z460P9KOGkF2B6ew7CVL9WBK/WoV0 BYGuPWadOznveauyMvGZw4qfF9W5eweEnK4RlUZc+XlKz7ws+G8NJPF7WEOga48Z6057CPwwV53K ngVk4jMt6Uz8X/3qV2PPGS4uf+WmvJAcM9hz/ZdHjzn8FBlJ/OYjGeXal+VZX3PhlAVGkxiG9iyz FvHxzVEG8S9/+csXX3zBfIK0UyY+Ft0OBLoAVyZku0Zu0PXNa8dTSXyH0thHAl178NrnkTU6jq0d gxw1r0V8OPgHA/rrX//6v//7v+1uoVFVCke7ZnU3JMiDd08u57JkqSiXxK9QnvgopkFIQg5moy9k 35/1YNaQbOu1iA/XXjCcr7766r/+67+GqLEyx7c+yIMG+Ey91Rx+Yr1J/CajGpJr7w7jdI7XA/Rw Uf/+97+XSEV/Wi1EfITvSYODJoeE+2u4D8Orz+TJCA9pIb5iSXyf3m6fwjJUyEnxmDmOME5P1u9B v1cHvFQ1jBBbYCHiw3+3GhxiPv3D/TXcR4Co8us2E/atRsKXT+LzutJLhhxF4ktVDtwYqeJYxRZc frWSwAILER+vQ92MbkrgK6qE+7t9Rbm5X7+CBbcpc3jcpiI8mMSP0Wq9iRcC+jKU670qE3/hcqpa w1vBVGdN4VWID1KreiMLlHB/nxRPcN+3rluZpeaWS+rwncWS+AHjDmekfvOqb4UWK10hQSQTcP/0 pz8xWusG/YWIj9C8vHLLKHZfpoT7O6R4+jaC1HtC8IGsOsny6eM3tIEQ/9rh2ocfqc9DnyQ+ohAd SIRmr0L8TcPwzfE6rInwnA26j6qxvOQItlRGOzOsH8iv9PH9ygzZfuJz7esz4Xi+n0vyXiqg3yHy UL9jtr4Gtz7vFsBNdonVXXcDHA9i15U1dx4OSs3HKJ51JDKYdPiSwkl850BXWrA7ah+y28UxyfeP mFTWIV+zntf1NVSqFI+TX06XysfKSn0DTDX4brKFp2KSsi8MiY7PC5OtvqFwEt8zyvW7qxybTUI+ KdzzzU186BcsC5F7V0k9r+trqO+gxxB/eGbUfl1HRk3l3PGtIdfo9mHPJvHNAwqbq5zejrhkZdpD ZYP3j/N7iPaabZqvWc/r+hoqNQxkmw3xhwcQOquUXvm4dRWqcjk3t2i5TQUPJvFt2qs8N8qRcDZw hfYSBPIyqaBNULWSLA/28fFGFFSHt2wJ9yNefy7W9G1KDpkjkwfgJis/F8M0tM3bLP2DBpL4rC3A MancQe5YfapMcnDPKOFBgfjqim6jfM3z2WT7QWX2Kwk7DFqHpIqqyxkVlz9odT8cyMlBa/eqbqRV h/FYP14Rl3fvznWsHrNT/dHlkvjU8Nav01oPOq5/wThmLPOIgFe4ogK5iqJbJBHW34ElrJp2IP52 fvKlLd59G0HbJbufeaUxIxtSxrpjvMbO4UJZU4ao2f7oQkl8fXhrPBHMIsci7TxR+zMFhJA3Cqsx nxZJ+rJQJo9FeFF1IL68h7nFOzIE7kIlVmffffJgQl/n149LJPEVjVVusLKe+l25qNV6JqP+O+Jv 64fqqTvhbql8eoGaqy43uN3ywzZYl9H5Ypdq4zuMuE+E1dFxTzRHvpCVkk8qn8SXRrMyLccayZkh 116d3nc7Rfe+sLwOCY0fYtOqULWAAE2IE6iNt4UciWqd+CjnPs2wKqsqXyhgSuNxn1aSqfr8OymJ f6sr95emL5JTszmlZk5an70LeR+iH+oqbizL1HcMCpzj3QgHqe1sHSWXl51bv28uRx8fPYGhJJMP jm9c39bchD4J/ST+taJqsjCtkZyQeySs4HaXJ4kPUMp+N/TORNjJdqrrBxAHXx4fKPD38Tuku9zN lg5n/QuvnCGJ9tsycmA4y7pB1zf7EvoM9JP4F1ryGVxhkzWSM/Mi7SVt76zq7LODHWrqTmBmofqC YebDoQxeJOQrx1dMXoHo8L45N3v/BsLfA51903KuL1s/oa8aeRL/RyqqyRWzLlVBcE3gyIeY+qfu TOrsEgIWaswEtUVRtWbb6mWnOmTpyIvGga9Dctwvl+UDnX1ThMe3lpvQl6GfxP+3ftwxREwn6+6q mlcLOXtbFBN80o0Lwu7QS1sMzNcMPH84sFXCQMgNbr2EcGiYsC0g0Nk3bTv3JUYn9AXoJ/G/V04N 7q17visPk2qBcrJOIVwOeG33m6uflocCCMiE0A2VMF8VTPP6+Ndj9wEcBl1VXWCEh58yvoujE/p3 Rp7E/04zNbi3HubnC1CSRG5djFkgZXh6LhOVpF8PfVC4T4aMHIZCDk/r0dzXL58lh/EKX1TgN0/5 pmdC/3ImJvH9uLea1DzHHbtRou6u8uG+PBWYr6ny666diN0HerKyntXT09zDZH1QPuYBusJbMOQj 7NAwfgb5diby9dfY7VrPvp34PvfBF7j3JRrfzV7MQHjc3fBUmuEmKTkrAqGPnU1IwVSThbaGwYeN WkMmgSskF4XvUJObpMZzmn708F/JjiS6hP5h6r2a+G7cm/LMoHHfAtR5lpZF0fP8BNfgnALHrV8A NcRHs5mV1fAAOjiOZkM0VLR/AaA9+C94K0BiCwdWhqzsVgfuVFBfP+qYhsdzzk3iry/3QT9vTNy4 /17iu3HPLzoVLVce1YDpYXJXAbJwaG5TVN3aevblwQu0Z7vtVnUnUUNTj1IlYJ8Ck5yeNiqec1Yy f/qxA/r8mgH5MbpusZcS34176/07lWcnwPdUXbBL42sUj+bvYi2gP/vO6soqYh2BCeB98O2QMsNW W2ZfdM+3L89lhxfFV74uzZmWv5H4btzzAceieoczsmcH/K/KfaThzr5M/HKMgRokudyLi57C7W0d lXKgucUjk5yeJn9nmPJz8PLA0NcPH+7SIq8v90GfYeKzy7yR+A4QW9d/3C+VjS9RWTGBa6Fom7AQ anIGtyxPuLpIQ6wnRQsut6tzhtPT1ERbU37OtkJT/33GzzUH9K0h2efR/3XE74B7356RPV+icF/s NXAZUJgAVj6COFtw3/rs6uXlT6UOvYuN5xw2FoRs0CW/pxP61nfSu4jfB/fuqzvLVI/FfTGIqPDO nXkNOeWxAxkbiRByljokxqBTsfGcyy+/eme/HfTJmq0wXaL8i4jv2OxqPS2n/vgENXfCZ1WYk/UO tRAH6HDoWCP4Dqy25NoecBn1bhb6pcZzYGNoFbnpV3h71Tv75Em0Dk//tdB/C/EdNmFd3HeIOExL NY9lw33JJT8kmMsvg3ooJ/EbvR7wmofTXVbpW+8MYOI5myHBZmRHQT2vtP7WRjLybp19/GqBz8ea 9qlXEB+ut3Wu9sc9WqgmYmL+nDNhwAsyTb5yT2kS32pF1vL132GqRDWec0CV4OyrF0aiqkqTK90h oW/NhAb0X7gz6/nEd+x3teI+5Jh7df7IC7BMKmdljFh4IcVmBKnYygI+DTDxnEvn9NLZV3dQB6YM kNC3LtRZZ/q0njvfsIcTH1mS1nVUqxFYjexursoOPhNUZYJCNV7kuYUlid6Ul+lDVT5VrwFTPOdM kIOzz8RzYiNUjaCPE1N4XD6g5JOJ70iKH4V7zGdhsxXvmwPo8tlhNQuDW0DgVbul6lE7SQ3WeI7g 7Kvfo1HxnIPqGkGfP9UniT+1BvD2Nk22gbiXU3RMjrmc3Mm/PM6qQ+jmPdtiTZYzf2E1nsMfMoqS 6uFIgfEcH/St59S+J3XnsT6+NbZuXbuPCuYUgxY2YToYPc8xvPOj8A0tZOI5iNKQ9xKrXl7UjWZ3 Q8N4+tbve+v0V5UwbYFnEr9pqlaLi02EZBvHThZ5E/8bGJd93GtAjefsvQo1YUxlWUh+jjyCLaCP I30wtdXerV7ggcS3JueYXu9W34FEj7Dt3jF/5BgR2aQs9gwNqPGcs0te4+y3i+c4wjtWFHz66aer A11t/9OI70jOQba+qqZSoBHuYcqxxEeFQo+eATJfL/bfUiDd409wY+I5dy6Fw9lvHc/pAH1yly9J jAmLPY34TVdsrEvBPJUE4jN5mWdBSfw75W+LHG/YQ6DGc9RNHuoi7d7S+r9BmfCOdQPmH/7whwlJ HdWkRxHfulprep/HLtUeeCQQ3wEm4fj1lx95dlgvqclV5V/nA0vKfjrpkpPOvmPBKUQzDPRNC3vP 3ov7HOKbBhWmxhjK9l5tins0Rti+aDqmvEwhYXdM/ek6IbN0SCUb7gH6/d9jG2NKpY0VfVmbEJTn l4hU6He+iv3QU+ZmOhMfECqI8qlnq+chxG+6RNMa9zBfeUZZvSfh/WGtqgOSziIQfUYsCy+nQB/8 jPgW0C91TrhCcDYwfomV2W/VP55zMBsmod40kZ+6LesJxLcuqJp2WpmsxM1HOaHCdNaxnKgzfGaS KorF8V1tfaSAmPjqij1ygFTjvtje2SfjOeVx9fycSdwIJv5ums5MhbO58Gp7nkB80yiacjEdR+o7 pmJ5RN70iK9mBhny0Tr1R9e6eyc8eBdbiMKxXE8fKWUjNL5ahp9BVJx9Pp6jnp8zNp6ztytyavPJ HajweRn6yxPfFJ6DffC5mNaaK2monnis3i+hnqTmS/up7Nfd4+U+EDkAUo9jpgamjKwEpobt9IvA UJVvaBjXodS8RDzHCn1TSOB5GfprE98avmdWeMpnET7ofNPJ/ZSQYLN9qZXzCy9nLDgifyWYPuTd vSAfLIhEg9UoEwPTO6H8s3zJsyz+2XmgTw7TKvGcfXeYmC2OxeeP1OWhoUZUZiiwNvH5DzTYBJ+c Y32RkPNHLaa6+cViAEpMRXyelx+eYo7BGh5P2LrP4748wiN1r2HrU9byvrYtBP2F4jmHmcVk2pjm OArPAOuQNixMfFP2PfPmLwo1vf9ViJsKqGcdu4fccRybqeV8YSvufWDtg2+flCWgv1w852CBjHvH f8fz9HDP0G4Prkp80z46ckkHSjfF+HjM8SXls459ZkGu+vKNdJf04d4KfR+Ie0qZH/orxnMOZslE Y/jUjMckay5JfOvhOXyWVbtzFHhKqjvjTdw3ZXbyjbwsCcdQSAKpwT2P4xrc95TCQB99id2UQI7v uvGcQweZic9n+vFJH6YZ2rnwksQ3cZl/OZvCROTk8RUjA/qqrcC777YFdMPEZS5KPe4ZHNfjvqcU GfpRfbFa4OrxnH1/yY97cjnwGccpr0d8U9Iks4ZTuGmq1jqLHOXrPX18mPN5eI4Wnh+5g1QU7mUc xyJS7gsMJiTJ8g76sX0xDS5sRra9SfZbkZ1iQvCIGYDmTIW8+6h6Y6MKLEZ807IqfyIS1uKZ8e5c Bl4zk4RzNp3DJdQ9m31GVSzu76DfApF3fYnCfenLGfot+mK1AUTnLm9Sm2e/Fd8j5u5yPnVn9djO YsTHhgh+pJmjNspqLZ+cy0sPKQmHCy4Vz32URPnOrv2hp3tgtcD9GfrtEHnuSyzuz9Bv1xerQV46 ++r+CauUPuWZU3LJr/zVYzsrEZ9fWIcZMS/24h2TUbw+pnkppZwsJp9UjhjO3eas/i3fr0Mw26x8 LTysdoSEWYRQVbGWRlIOOVqNpDj0vHf214rnHDrL+ObkSt7SsZ1liG+K5/DvYXKMHVOl0SOYgcDB tv0Kf+fPSGnUpMtqt5hAU0z0ud6kj5TtjgS8yXqOlCqrOPsrxnP2XSNjvKT/x7w/RkXqZbnLEN+U n0OOB/kdp06JLHAX2GnqFz/Jx+/TlxpDHRsqrGn59iyTx0F6lvAp5wS62qo1iM/vjsPokt9c/FpN iLW9p5J97L5dVLpPhL2/FCZP/z22FN5TBg4kbZi1AZW//QssQHzTyiqTjDXD3tpwU56kwvNSbQvo 98miGSUlod/UmJkAABnsXfG8nQWIz2+Kg6GQY2Cqs6n9Panyu8ycWOj3yZQfKyWh325ekKfeMwH9 Fc9Snp34pvNzmE82OPjkV1s7m5uz5spArZyIGQV9uZ4nSYmC/jwZXPOYPUNqco8OmQLeP3pzJ3F2 4jNv2mJJZH4OuTIzj3X2aQm4gDRKd1Igk3dfj2OmBqaMrFKmBqZMvZR66G/j0u2wjT7mWi+FOWcN kXpVEPnFkMSnNMBofBsSJjwHqaY9XOp4P6ZADcIY3BdF1UthMuKfJKUG+jV6eIxhCx1hIsCMx0mG FijktS80r49vcsZJpZteIW8w+n0ffYDgcV8DfWvbrOV9besjxQd9X9teZfNMsiYZ22FeHu1hTkmY l/h8Aj75YUUO3quM/tBZKyasuJ8ZrNa+9+yLFfq+vrzQ8pkMS8ZNZBYGKB63LzQp8U0LtuTiCfOB 9kKjd0Pfh3srKGvgxT/LlzxbCP8sX/IshYd+jZQX2j/jnjMna5IUao90RcKkxOfpTL5dmRf1C839 sssMMmpwz0OfaYk8akwNTJkZpDDQr+/L22YBE9thHFAycySJf6EB0+EHCPerSsx4jnUay+Coxz0D /Sh4MX1hFoRroB/VlzkvUbFa12zlmdgOE2Rm6lFh1brAdD6+aYctqWL+i2E2WxzYnjtIReFehn4U Ip8nZcJLVAZaaZRoNbYDz1KVRR7W1prpi52kxodfyAVbvkJ1RN9W4IzdWNzf4TgW98+TMuclKkvP Dia2w5AEm/nHAl2VPpePb8rIZJZKMp5TOQ/38G2B+zOOW+D+eVL20G+nsUrjWetxNWBAhh+YOLPK 5XYF5iI+f9wNuWCb8Zz6WbcBBVaY15sw+txrrH6F4E7itJeoMCqasAwTk2EuZSLR1I7py0R1mEjZ ZijMDltmeCa0vAmblNebWAfl5ZeoWNU1SXkG1kymJkOnJL7h/APmRkPyE2wSU5u5GX081pRitYE+ GrO2avXyOGZRZjGTSci8Od5OfCbjdTMmJlLGZFOtbp0d2r+P3beLF59XC1oEQ54qhcnT72AqzxDB pNUzsWL1zfF24vMHnDFH6JjeH8+w1K0XgdfenpdqW0D/LiMoFvrPlpLQD5zF6hIug5dpr0WcYuWW 0WAZUTIjk4m1BZrIPFUVrrkPPd535C4zJxb6ctZ/bF/OtT2pL7HQx1XmH3/88TyG3bklahSB8VCZ ZML+nv4UxGfUV4Zcff1Cg29esI1CmJyIGSvlDusp5Yw5WSdR0N9Gv/KSnM6YDhSnBuIZJ3VON388 8Rnd8Q5+LtjWg5LJu4+SInvxKeX81SVrrB769ToPJO/AqtR8G8ZPndDNH098RnFl4Jlra/iM/oHG 1Fp0zaRlcF/aXy+FCdqkFKu2a6Bfo+3WVt25ftVDZ1xVtZLXRXUYrZWRZnRnyujvbECdxfmmLo97 K4asvmpNeV/bajTGvLp8rfI95YO+TwOdDbunONVDZ9YL1Uo6Q3+wj887+Izi+Np62s0oWdYJbMW9 D0bWVqUUn8as0PdJGWXbfeSqeSJMbj7jqvaE/kjixzr4fG19zGUGKfw09uHeimO+PWft8c/yJZ8t hYd+jcZmsPN2bVBTRZZz80cSn3fJGQef2RbRzjKmrZmZzDW456HPtERWI1MDU+Y9Uhjo12tsWuOv b9jz3PxhxOdPtWQ+i5jPq/rhX7QGeUrX456BfhRWmL7wUfW7AX2SlLxEpXLayls+yeRANfOnW2Bn GPH5pBomRYf5tqoc+KUfv0NYFO5l6EfhPqX4jDAvUfHpbXtK3pDFnJuvJvg/nPh8Uo36VQVNpYPP GPQZu7G4v8NxLO5TCjPW5zJ5iYpPb+Up+Z4TkmaTuPljfHx8KJEDoK6c4KsqHXxSmXv4tsD9Gcct cJ9SyOE+FMtLVHx6K0/Jbj4TsWBO/O3g6Q8gPhn5gpYZB5/5pKoZ6Yc9uyE4rzchR3avsfoVgjuh faTkJSrkoJ+LyW4+mSioHtfzTOLz596ox2TyLw/3SD/vwbzexDqmfa436SPlT3/6U8EK3jFWPby8 vMxrJldwhltwB/j4fBBGfSWmg2+dhH18yc5S/vKXvwBkjY79wunTqHzDcci5pOdR66yxAv1GfbHa 5CrlZV6Tq4lwUjs48oKI3sTHRQHkADPvQ4R9yNqyGDSwj92vHmH/1a9+9fnnnwdeBqBaCN4on332 GY4RDhd6Xl9pgeO9FCZPX1XICwsIPigZb1AXJlu/D3oTn991pS5tky/VF9rlZZfPS7UtoH+XEdQC Yc8Y2T4aO0tJ6DvsR3ZDmfVbZndRU+h3JT6ZxoSRYNJX+eiQY2gneQRubMjFFHeZObHQl7P+E/pC MOcQYOkzLrHQxwdQo8DaJJMRzZBzSchdpcwJAu2g35X4fFKmqpQ3OPiIHoRk1MiJmFFwkeuJkjLP 5K9vSR+NyVKioF/qwYJKvVomr0EOyzDrt4w7+xDik2F35sPnDQ7+IfLumwlM3n09jpkamDK+Pq74 FKMNpozcd6aGeujX17DQCMpuPumJ4mugHdPlmvv5+KQuMPbq4ga//LuQJd01lUF2/bMMGmQpTNCm Roo6lB999BG+isJ/LSIVvB74knzI6FyyBtk1z6pjOmcBIQKB9VumzUxaSqNXQj/iM987RVlqAhO/ /Mtof/4yPuhbn/LBxfqUtbw8OljkwFLHlmPeaJL8/e9//+qrr5AdhJdKvbVYNWAtX1pofcoHbt9T 9TocW4MchGDWbxnKNTLmTsQn1zSgCPXtR25vG2sT4dJ9+AaqTAu/VkxYy/tgdKlMsAZR40azQqgW b5ea7Mw+GvNJseLbWj58UgysUMgkJCMQzAGRLcy7E/HJ9x6GUE3K5KsaaBAtRPPQ50vWhAJ8WKmH PoC77YdqMSWYOsF906u0vte8tvmS59HnIc6XbDEXhtcpr74yq4zMaiVjitYyPYhP7k3AKKpa4PM7 h9tEiwYwKGfKyG1jkMGUqZdyqAEhdWyAspp4u/IIKPGj3Edj9VIYlDNleM0sWlLYjUUmJarebQvT 7UF8/iAd9Usnj1WQgV6Pe8YbrccKI+WM+yFhHHnWkac79NFYlBQZ6In7YpnCqV9kEFuNYK9KfOYb pyhRXbMl8zsX9RrIZt9hPQr3Mo6jsGKCPrz7CXFfJiQaJufz9NFYrJQ7rCfut0kqp2kyiSrM2cDh 0G/u45PrGNCj+sbj8ztJdK5b7Az3WNzf4TgWKyT0Z8a9Cv0+Gmsh5Qz3xP2BGEKaJhnYULearkd8 3ANAglWNajGvTVLWA4rtEd8C92cct8DKXgoiJJfj0jr5MmRSyY0PP6VyPxbtxmWP+MT92ThBpDvj IVcchRpCzPJcSVsfn+w2VKmu2ZKhsQegnO/CNtUxrtZETJ8UZpsVX/O+JPpymfWI1dFGph9eLRL2 z31Hp8Jxf3gZl440krKBvqkUn83M8JSwfkt6qOqZ8LGG2pb45Jo1Rk7dZ/vapEzZrFuf216k97ms 49xT7HiKNfemteGlG7JFiwdZn3HZHAv8hW/bS0oK67dkYEe99ynWaNsSn19olV90fH7nS+zs7OWt 7uNfLn4uEc/ZT8ieTNx/4aWPP2riA3GVgR01vLEM8fmFVjWYxVc1auD7y31YHP9MfGxxirX1PrWd 3Xz8l/CQS8bx+8+4O4lITrkzLTKwoy5hBppuQx+f7C30qC5Y81XNYwdNW/KwXB2cWnNW18GHDTT6 plVhj9i5L8jgDIT+eam2xeJt5uqQUxjJKXcWRQZ21DTFQIttRXzTQquchs8v/5IjtHqx5+XjX9IQ capAQ+9WFWLrZwPDom5U4OUO7rHQz3x8EyXuCEaySwgNhdttK+LzC63CG7L0ll/+NQ3SooXlRMyo NE0ZH1Fw2eo5h3RwoVK4rXer8HzkzrYEXenp9xmX3HNrhYMQpSDjE0JoKNZuWxGfX7NVQzr8ll3r OC1XngE6U0buOAN0pkyNlEVDOmVyXgZ2WmvssJjvfrUwefdMmeUmV02DhZXI2QI7TYhvWmiVQzr8 lt2aAev8LFxa98mLTE5ODfR5MPElhRj9HZgWDekU4l8GdqCEphrblFwjhUc5X7Lz5Bol7i7bkIxv dwvsNCE+v89WXbLgo0OjRtohF7uKGHDva7ZC3Fre5yH64KI+VS74Xfp390ZX+35pTtanrOWLUCvE reU3KZcL9Y55NNUjwimQZJSiT2AnnvjkYkUZLbmTT03DL2nmPPRr8G2VYl1gtMKFKT/Vkci+F89l YGeq1+oBl258F/2QQaRNiuMbdyq+nxsjBHbIlUjV/fWZ4uGpeOKTcSuoTP2QMUWHJjeIffO2o8EY HPtwv4cLL4WfuufvD+ZZBveoefiFJ/VT6y6wY4U+qbHKLwMf7q1fBpsUdGqh2co39S6wQ17bp/Kw 3ixRQzzxybVp6FF9p/HRIX5UJilJQr8G9zz0a7DCI4yUsujGq/NslN1YRhtMGdmemRpqcM9D//G4 hyqEwA6ZydIhsBNMfFNIR87SIW+Fn4Tgjmao0K/HPQN9BgpM7+R6eCkPCOkIGTv8txGvsRro1+Oe gf4bcA89CIEdcj1SdYLr3fxg4vMhHShIztJ5akiHDO9E4V6GfhRWZE/fJGXam0+sk00O7ARqTH0f 3+k/Cvcy9F+C+6KEO6aRNOsQ2AkmPh+HUTde8VWpFj9zgUtPPxb3d9A3gZjU4blOk5S1DstU3wHM +mSlxtzjEov7O+i/CvdQwl3cgo9YtD5jJ5j4pP0JqimziFcQL3Hakgfot8D9GfomEJtUt6/ZKqWc RvCYn5CxcxfesWqMH5p9zS1wf4b+23APDQiOLLnA2frw5Ejim3ZLvXDjlTA5Dxf7Mdk1/FS/hIsp qc4qa4OLVcpjQjql40xg5xDesWrMNDTucTFJ2UBf+vLUzJxLnQhhGVwBwqix9eHJkcQn007RbfV4 ZHKhg9HgKmUA/W2jKZnd7OvalvuIjWC+GpinHJd1PCykU3jHBHaKPh0aYwbiUGa7cqApiLdXy91l kI6Wr/LIXViG3HyLbja9FSuS+ORnC7okpDGVeUImM61iBEw79/5XHx+/jxSMJvkCO/iGz4jtWAM7 TX38g4bJcWGsd1+mjxRrq7qVF8IyJNZUPNZMjTDimyLveN0JjeZfht1GsbWgLXaPAwZKZKMFjs8R 9j5SSOhj832NKc/5LBPYqVn54C1zH7tvt1qwj923Wy3ge92/ZH2OpprVUmPqYcTng/hqoIqPDvUf zhYSD0u1ap6+rw13OSGx0HdnnqDXNXY887PWrVgtcHyGb1MpW8jondC/C8uQOZqY4O3sOaxqHtPq LgM+OuRj31RPXWbmhEP/bnrH5gXJUmRP/5EhnTJvHWfsxOL4DruNpBxWCF4I/bscTX6DarsczTDi 85hWT0+bishNGyMANxD68sSOgj4jRYD+I0M6hfi+w5OjcCwDN1zK5YLw26AvOLUkJ9vlaMYQ3xTE lz9Y+A+fpizuULmK2hDoM1NabYmqDV7KXfrK0gfiq9/gvluxGK3KQ8OgNlDKJe5LC5mWqGa2SgEh cE3GQtRsRtXk7grEEJ88HA4D9umnn8ptfUleJgnZSujzk5lsz+WUs0p52B2HzNxzX3fO6/Y8NDxk Q6QIuH8h9O9C+fx6p7xjibG6yzIxxCc3F2Dg1cQj8vaAVd72AiLJJVM39K3T2Ad9qxTsqj3rZKvE bceTP3gZ2Dm/+SpfqPvHedyXp6zjeIC4ivu3QV84JpJkV6NzNGOIz5+BI+dl8isbpNYmLOYAqwP6 vglsbZtPynlQnh3SKW8jfiuW8EYkM+ituPdB33eIgq9tE05kuUlCKB9xDqY7jUL5McQndxaoJ8M9 PohvRepmGSbo14CYb2GNlL3FP+COQ+YLg9yKdccCXts1SHVIIb37mu8Pho+zlRFC+WREpFEoP4D4 vGOu7ix4dhCfh+ml+ZLQ5yetDBc56FQvZZP+mAPxZe4zW7FkbDE6r8E97+n7vPu3Qb/ySiyoq0Uo P4D4/FrEm4P4lbgvs0WFPgMFxhuSWxslpbTkAXccMj5+ZWCHwXE97k1SHN79q6AvBOKZOYgyLUL5 AcQnP1LQAXlbAf+tQOprYLHDolwI7lXox4L4rs2xUh5zxyED/crAjozjKNyTUipxX6TEtnngfL8U LQTiyVA+0MrYlalMAPHJ1kMp78nEh9+6rdQF4l6AfiyI99N+H94Jl/KSkI68FcuKqvMotECnICUE 93fQR1+wtGPVyYTlhUx0MitfzWU3sb4UDiA+mU+ptp7UwoRDe2jSZ599Bs0WUIbj/hL64SDeerRv fwspDzsQX52BNRk7ezPbj0UL3J89/frY/d3M3be//D3wjTIWF3f2wEfCVYuyFqglPr/bVv1CIfcf jx1CRnqf600OUjDwZOoe04VLuBTbCpTyyAPx5RkYEtg54Dh8XITRb8Tiw6lKgVqyWnts+btkdB6b 4Qfs1BKf322rrkLE6npsbX2uN9lL6XO9SayUh91xyHhb9Rk7e8Puc73JJqXp9SbbV0tTKZ2xIOzD IkMjarYLY3X7MrXER4NIJcoXu/BvDlLc2GKb+W7hnRbtWV3K20I6ZeJFBXYOfnHgt9feVp8kpcUc lOsUFm/JXavqScO9iU8G39W9V/ybo/+wWSVuse8+15vAU17xEpUXhnTK5AwJWexj3y3WV4rN72P3 faS0W5OwzuKQ8sLiJUm88H1YtT4+maijLts+Zu/VYalWzaD3GdZh+vWRgqYGLkQfnEerq7Ju+frA zhmLLXB8XqrtI2WT+4yMnTtD5aMasaZeS3wyGvWSZdtyYMBht2o4ji8nXh8pgdB/8IH46hStCezc ecGxOL7LzOkj5UkZO8JJYqS3F7t4W0t8stEvWbbFwubl4QSBOBamXB8pIdB/8B2HKu5rAjty0CMK x3IiZh8paEP9xxBJp6bFBPSR2Ymxi7dVxOc/TF5ylTnSDO7ctxAcq5Otj5R66L82pFPeBz6WMTFu 1UJUujF5932koCU1H0NqT/sUEMIbQxZvOxFfdnwec2SmbKCVOCanWR8pldB/c0jHl7HD4L4gjLST S94xuO8ppQ+Um0oRjo8kz6eJXbytIj7ZYnXZlqyn6cD0qdyNY9M07iOlBvpvOBA/cCsWj/saHPO4 7ymlz8RsJ0XgNR8jYUKFZJkq4pOpmeohyWTCT7tR6VmzA8cm3Je+9JHig345heLlPz6wY8W9D8dW 3PeU0nN6tpB1Z+r82ZFyVNw0laqIT5JaTdQhE35aDMaQOk04duDeAX23FAf09xvHTMb6sMJMkNqH eyuOfbjvKWXIPI0SKmw+JUWomS/81KgiPrnWrDaX7PaTipHQrwEx7+lXSrFCP0M65FasGtzzOK7B fU8p605/Ib0yymnuRHxyDOR8Uj6YRYpbpZgK/XoQM9APkcJD/yV3HDIzUA7s1OOewXE97ntKWWVq H9opBDnInadqYJyxt1KmyscnB0BuDX9wKCluoWIC9KNALEM/UAoJ/VcdiK/Ow7vAThTuZRxH4b6n lIVm99ZUgfhk0oqa/KJa2lbAT3zSN1dP1CH7vOJIM22+hH4siO+gHy6Fgf577jhkJuHlGTuxuL/D cSzue0phptVUZQRekxRFdxhzYsr4KyLbqr6dyO+aqYYwtjEH6LcA8Rn6jaTsoX+4+hH/61V3HDLT 7zKwUw6RBpFjzWw/4i1wf4Z+Oymxmmldm5CgiSQcUnrULed+4pNnv6kRKHLtgtTLosX6XG/SR0qB /iXLMqRzfg2cAzs4VTQc9wccl2ZgmFrMl0MuViMpLVrerk7h9U8KjTpdx098MhqTqZnkiPa53qSP FHQZjuq54+88EF929kMOTyZtDMX6XG/SRwrf6+ElBRsgc9OFy1WYr8mAOD5JfPUYoOGDMUkD9p7R 5XFsIe3sJuXSdTWZ5ksK81ux6g3gcJxRoy+JPlLqtdGzhnkSNP0+PhmNkT9G+F1nPYenv6wNxH2u N2ktBW+ssw5feMch+dLqE9jZR9XbreL0kdJ/hlZKFDBILmRGXYY1mPjk8m+luid//DD91Dx9X3d6 SrkM3WZI5+4FcBnYgboCffDzImoL6PeR4rP/sU8JoQ4yWKKmwJDuRXPiZzK+bGqXEy8c+p2lnG8v eu0dh8w8vAzs4K6FqIydu5yZWOj3kTIW3G7pwnImmQKDcD9jS2oZP/HJzsstIN9vpKzliglTLhD6 w6VgXA6xXdUu31bgHNjZMlkrPX05RTIK+n2kLDfBtwYLV5zzcY6QSdGW+Ln9SrBRdbKFQH8SKXkg viNjRx07lYBMRvwqUtTOzlwgZBNWSEp+W+KrsSfyFpiZxxJtYw5BPHSBnGaV0J9EysvvOGRcs7uM HXIELycIg/vy4PxSVr/lXCYhybeQlHwn8fG2YVqpEp9M+GFkjSoD3FuTKU0TzA39eaRkSIeB/p3f YBrHbRbwuK+Bfk8poyZ4iFz5HitSxEjik7GnN2y4LYdB8tB3TGAH9KeSkiEdhvjCVizraFpB7IN+ ZynnQztIUE5SbJJNWE4fnyS+uuF2ksGoaYYJx9apuzVsaSl5ID5DfHkrFm85PhBboT+/lJpJ3eJZ wQbIUIeKU8bMkvgBg0vimJ+0l21aVEreccjMw1JGXhBi7KcGxDz0V5ESMLfjqkjif6eBOH0OrknF MTNd1T6sKGV/rgPPvneWVM/Yka2oHsQM9NeSos6pbgWEu2p7brt1+vjkNSby6T8PO2LhSdebBPYl Qzr824s5Y+cO+lEglqG/opRuTJcFCeuu5LYkNRGGsTQn8ckmvu2+wyddbxLSl7zjkJmE+zLYnKwS 6gz9WBDfQX9dKapKOxRI4n9LLv92GIxAEU+63qS+L3kgvpX4l6dMn+1zD/0WID5Df3UpgXPcV1US /5nEhzX0uXhkCSl5x6GV+DhAjQTKYYEE/yQfNBV7khRTx8MLIxJ+ZwxkkDzkaJ2M6oSP7HcV9rl4 ZHIpecehFfelPBPYKVbb5+KRJ0lpMtu5SoXcSj7a4bOo/VNtiS8sT6MR5KFxnD7nKrX3jPjNWdY+ TC4lQzq++UkGdvpcPPIkKdb5FVv+FcSXLZ5c/o3Ve4faNhC3vnikqHdaKXkgvo/4TGCnz8UjT5LS YeLLIpL43z6S+Ic8CjWD3meI80vJA/F9uGcCO30uHnmSFN8si30qif9A4l/mSodDfwkpecdhDfGF wE6fi0eeJCUW3O7ayhU3lz9+Z1KNUZVn28bxXxXVEfZDBkJ/FSkZ0qmZnHeBnT4XjzxJihvQ4Q8K xP8OxNyvxqiS+JyOuVLqIQoh0F9FSoZ06mfmOWNn06qQiKlaiGrOTN79KlLUzvYskMT/FiroqfF2 ssgJUAn9OaVcHgyQB+LXE/8ysANtq3n3pJ1cTgcG9+XB+aW0m+++muWTL8k66+1qZFTnGcQ3mb4b +tNKuQRQHohfPzMvAzvkVVAma9lYw+O+Bvp9pJAA7VkshPiI+FeaVhK/atC3c2Ngx2RFDug7JnA3 KWcG5R2HlXNye5zfinW2PavNWEHsg36lFHKKzVkshPjyDifG8EYS/wHZmYX4PO6LLZpwbJ26m7n3 kXKeXRnSYSYeU4bcinUHON5yfCC2Qr9eypwoJ1sVQnzGbOQySXxyvK6LgfhW3Jugz0/ay/aR0K+U chCdIZ36aVlqYLZiyebLjGwNiHnoh0ipmqujH07iPzAf32RUKo6Z6apK7CNl34w8ED+K+KinJrDD 4LgexD2lqNY+c4Ek/tuJL4d3QnCvfk8ESimy8o7DQNyjqsrAjozjKNz3lDIz0+W2JfGT+N9ZSMjF I+o06CMFzdheIbHge21t9YGdOxzH4r6nFNXa5yyQxE/if2+Z9RePMCbeR0qGdMJfTvWBnTOOW+C+ pxTG4Gcrk8RP4v/bJpe43kSdQnnHYTjuowI7BxyXdqqbudQRvyxw+M5rJMXXtoFPvYL4cvboA7Iz Aw1o8utNmJ7mgfgtiB8V2CkjmNebMJbcoszaxCcvbZFvNk/i7w1r7xkteolK3nHYgvghGTvF0vJ6 kxYoJ+tM4mdU59+msuF+2utNVLPOOw4b4T4qsJPXm6g23LSAQPwFTksO8fF///vfN1XxKpUfUiTV DHpfv1pLyZBOO+LXB3byehPfrAl8SrjZnMTpyJvNySbKUR2ykkClT1jVZUZ8OPQ7SMkD8dsRvzKw k9ebzDDxBRiSJPz000/rbcx5ygLZROG1hqaTlcwwWo3aIGyACoR+Byl5IH79VJRrcG/FyutNGk1e a7VrEx/WyXRYXqx4BvHd6dLqftcQ6PeRkncctia+L7DD5N2rFqLO9D5S1GZMXiCJ/xAfHweHYdHS am3kNKuEfh8p6HuGdFoT3xHYYUBc7Ja0k0sj7ybFMcuss7JpeYH4iIUwokdGdUJ8fOQgMv2cvAwS nK3JlKYJ5oZ+HykYnQzpdMC9NWOHB3EN9HtKmZwDavMEIyHz1OWQCWmEzjg+av/JT36idvLXv/61 3A61hvkLlMOBeeibQFy674B+HymleXkgPjnZKovxgR0riH3Q7yxlfhTILVye+PjEUMdA/QxRa5i/ gAnHDhA7oN9HyjY0eSB+Jcr5x5lFIx+IrdDvLAW5v/OjIIn/gUp8xoLnH2kS+m4Qm6DfR8o2KHnH Ic/r+pJqxk4NiHnoryJlHnTI0+QXv/gF01RsYKo3IX9UJ8THJ29qZtQxtowK/UoQk9DvI2Wv6gzp 1E9CvgY5sFMPYgb6a0kZi4VNunzIIMNSVCVvbyKtyE98crVBbgfZ1UmGTW6GAP0QEKvQ7yPloIQ8 EJ+caVHF7j6Lo0AsQ39FKTPQI4n/vf3/8pe/nGE8otrQ5+KRgVLOisoD8aNQTtZzGdiJBfEd9NeV EjXB3fUgbiOML5MFA9E4foc0EqGY38f/7W9/y/T/H//4R/0iNSNokjJ9Lh4ZIuWs4bzjsH4GWmu4 DOyUQ43CT6LffzW2wP351dJOylg+THJwJozET3xyx+wLD0x+xvUmhyDSJWgypGPldUj5c2AHu5PC cX/AcWn50lIGQj+J/73lk6+NgUPlE/2A6022jpe+XAYTMqQTQnBrJWrGjs9o757KS1Tq9Vl/cKaa 90hakd/H/+4Dgfi94Widsxr2zi+/OYtQ54+K9JRy6VeSRpbFYjVw+b2FF7PVfpjyeYkKoyW1zCSH 6lRFdUKIjyi/qqzlCmwgXvd6k03npS9C7DiWZVkbqYHLFzDoHDtZ8hKVKH0Ki67kgqh6fgFpOVU+ /s9+9jNVI/IiNfnaUKXMU+CQIqnm6fta3lkKVmjP7cw7Dsk51qLYZWAHIxII/bxExTc3L5+qz14J OVSn1sdnsunV8BPz2ghUfdOqLjPiw6E/UMqmvbzjsAXH+TqFr64Q6OclKoGgQPKlMLJkhnrIhtta 4jNtVW/qYl4bgdpvV5WwASoQ+sOlFAV+/vnnPJ6yZAsNCCsrldCf6hKVy+/LdrO4Rc2y10sCMGTD bS3xQ7bdIj7VQsud61T3u4ZAfxIp0G0eiN8C4qY6LwM7qoWo84LJiO8ppXNikqofRwF4xsLIwidm 6gzZflVLfPJq8q+//ro+jMUoZWCZ0kHZt6qEPjnNOkjJA/FNaG5U+O6MHdJOLicLg/vyYDcpq1+E Al3Nk4xfS3wym/4N95uTi2ZuHJsmWGspecdhI4hbq707Y8dkLRv6edzXQN8qZaAbFyVaCMHDG2ak YLHTaht35atydcjcSqQfCc0l+8zoZWAZ3hNx4NgxgZtKyZBO1PSrrEeIeFhtxgfiPlIGzusQ0fMk 49f6+N89T/zUvCKijkcVMeHYOqk2TTWSkgfiV2I68HH58GTecny4t3r6NVKWnv/1MW0VobxRVfn4 EMMsNKsJmuTaxdKjfmg8iWN+0l4qp4WUPBCfn10dSsp3CjH2Uw/iPlIWnf4hqZlymMRkZrXEZ25v eU+CpskoVRwzE0mVGC4l7zg0TbDWhdVUFtmK6nHPePpRUlRrn7DAVKmZAVGdkARNspIJh7OySctd opIhndYEt9bPXHd+B/1YEPeRUjnj+j8un45AnowvnzlvsplaHx9nwjFKlBM0ySxPRtByZQZeb+L4 hsiQjml29SnMXBZ9HutY3N95+i2krDXHhYAMmfmC/gYaUm1dZKaNcFgoOkNmea410nxrh1xv4sA9 erQ9FWiCWVWlBtTAzhnH7UC8t6t2UvjJNbzkVIk6AVGdTNcJMalVLlHJA/Er6dzicSawc4B+aQbo HGK9h0oObkEjKS1a3qJOYcTJUzPlLbtWi6r18SGPOQpNPUGTqaTFeMxT5/yXqOQdh9bZ1a08E9gp pp7Xm/Sc8nLSCnMuGVobmKgT4+Mz7VbTdZhKeg5Vf1l7z2jOS1QypNON4FZBZGAnrzfpPK9lT5d0 c6POUCtGFeDjk5k2shGTHzidB6ybuA2mM1+ikiEdK4i7lWcCO3m9SbfpvAkKOVEnMFEnhvjkuusb TtfxmdRhEVXNoB8iJQ/E74ZvnyA5sJPXm/hmTeVTAvTInBc1OmK1lgAfn8wxUqNRlcpd9PHLnJlw 6NdL+eKLL6y2leV7akAI7OT1JqPgILjnZEq6ugJqtbEA4kMkc0yCuuJMRrVGDV4LuUKKZCD0Q6Tk HYfWqdW5/F1gZ6rrTSqvamkxB9vVKR94Sd4LEniiTlgcHxUxZy2oB36+bfFWzYgPgX6IlAzpdMa3 T5xwK5aQIqlaiMpEJu++XorajNkKyD4u6eDGLtvCrj78LpZf/fvNb37DrN/Ksr788sv3QB8ToHQW f6LjdyMA6GPIYRz4PMQBHd98841prKKk4I5DZnxNbeMLkwtFfIXtSmLTPDmTW7QBbuPvfve7Q81Y b8f+x//+7/8WJJJ2clkDcF8CFPiznZQW6mpdJxQifNN8+OGHTAMw8QEBpiRbxudNHJ4i56T8viKX MtiOTVzO5O+4PX2fFMTrz5obeCA+okkTj+RF0wZmNF0Gdsh7Yk3WsnWb8e73OvJJWcsAttYK9xSS wAxfto3J1fk+PEQMi7p4S54rRIiat4jD6B3Qd0v55JNPDrobe8fh5Rto3tEdfRAFvxXrrEOrzVhx XyRapcw81kLbZFiTyejq2qfDX49ZuYVg5mNWXXdm1gMWtYBKczdB3z2pLr8fx95xSLqo81jF2J3J 5FasO3XxluPDfeUsmGeU1ZbIsCZBp7rII4nPLD2rHykDg8XqENYX4KfTpSwS+pVSpgrpIEJSr/b+ NcwW2DFpgLGfGty/BPrC3bbANBnMkI8cduA+MqpDppcKsS20hgxvmSx4ksLMRFKbqkI/RMq+GWMP xF/0EK6xx1HUBHYYHNfjnpGizoXJCwigw/8iG+9juvxUWFSH7IZ8bHJI4hCpzZ7FAkHc5xKVTTlj D8RfNH176cCOjOMo3D8b+nIwg3SO1ctife+DMOKT+7DkG2HI1P6esHbLQg57I7Puc4lKafzYOw6j 8tIuNRYLr4OdLB3YubPbFhrbnKGosXZP2MAH5SA+mYMevvcqcgdWqYtZjlD3YZGr2IHD06gqJJkA +oHe/SHYUjImyymb7aT4/IiQp/CyCRyaA/RbwGvf2rGBnSh67u2qncYgZdHw3Z19ypEM5oQC1By+ 9yqe+CSs5aPgHpOVjzTHDXwtohMdLlEZG9KpTDs5z8Y99MvQtAPN2MBOoL0dXl2NNFa/9hDoHNRX JSCOjH6jDSFu07mSyHpJWKuhfHIhu35gWtdQ3HBsWG0kqPUlKmMd1RYUgMa2A4JivyHOQzwwsBPb tT6XqDSaI/2rlePvY4P4kbk65WXCwFoN5ZNxrv5jaZVYfOQ5rzdh+jKQWcyB70wXDmX2Xy3txuUQ B2/krMnVRgV2+lyi4hjKaR+Rk+iZ0De61iiIH098BtZqKJ98DU475PuG7aPtsQ3eHPBGl6iMjUu0 +DDaR6Lbjcs2ymMVGBLY6XOJSuy8GF6bnIDO+MTtgvjxxCdhLYfyyQP3hw8t0wA1g56p5FzmsFTb QsrYkM6W6eTTz/mpw8JjC409LLDT5xKVqPGdpB7ZnSXj3ngrtPsujIzjo5XkuoS8IQ31MGc2TDLG ajPC4XKZmRMuZWBIJ/z0tMs8k3CNCS/mdhNYqLkmsNPnEpUWSzXqfGxaQI7GkGcKqKfR1JhTMPHR FCb3SD0hiFRN08ELrDwQLkIiZqCUsQfix56eJqQVBmoMUs6EXTSw0+0SlfOxfYGTbkhV8rkIpCPb 4jid7SURT/yQA3bIz58hg+oTGgIXNe8+RAo6OPaOw8DT09Qs8hCNFSnn0PnYMyp8GTuqxmAeqh2q cwRSkAKkFlurgLzVlg9WyysBNQ5+fBwfNSL5khkn9ZAg5luBETRPmUq4kNOsUkpR18A7Di9PTwMg HJF9Bl7obKXGNimXq81rbVomNVYJ/SLFMaDzzOXLlsghHXKNUz1ucjrik68y9cuF+VaY3ALOzXPD hcR9keiWUh4fG9K53OMDf9CaTMnDq0ZjqpSxu9hMGTtqXw72bLLJ7dkipdFOrrFAkH1zMi9TTV6f jvhoEPYgqKpXczSfeo6mA8eOqeWQsg0ZfNVKq6p5/BJS1mRKK7x80GekrBLYYfpyntRWy9ykPG/N VgUamZepblCtmVxNojqoNOS4BdRD6kh9u8xWwIRj66TaOmuSslfRwDsOMeiXGSamvvjgZYU+L2X+ wA7flxrob1JiV+Ynmd1y0IKMdTfNyyyviviV28AcTWY/1yTjbW0GiTA37t3hnbF3HAqLjaTGauDF Q98kZfLAjqkvl3bOWGm9FOsU61xe3mNEoqxpXmZD4pM5mmr3yBdj56GNEqcijJlIamNUKYcaxt5x KJ+epvYlBCvhUmYO7IRoDCYk22qUFNXaRxVQUUbmoagblSpDOq18fNRLrruqHXhqYEf1wUNwr0o5 z5Dt2Cx1aFoUUMO7Ao4DsRIuZc7ATqDGBOjHShnFdFmuHHznc83lD4WQGdckqoOWkeuu6jIF+eaY 0w6YVl3CJRD3AvQv0+NCrMpXCXl62qXGwrESK2VsYOdyf0O4xi6h30IKM616llHzKUmIqR8Kvml1 eKoV8cl1V3XzLf967DnGsbIOcAnH/SX0IeWcP74/0z/EvEyV8KenHTTWCCuBUsYGds6K3doTniW5 t95G4xI7++prU8+5nCek0zCqg6qZxQpmbZrUV/3IDaxhg8uGSFMmNdnyg5TzHvexpwKYtuTscVyU Fg6vw0JupZSBgZ3L9fBGGtt7+pUaI616eDE5DZ/3WTuEdNoSn1x3VQM7Dztj585AgbDt8DLe27Wa +17KmfgDM/Edp6ehLx2uN4mSMjCwc3meQdNDDt5ziYoaipkqpNOW+FGBHfI8Tiv7Ziu/P53Yur+U 78teylTEd+Ro7xnaTmNRUgYGdi7hjunZ4jsSpnh4tzWSwtt805LqbbRk7kmHLJ222Zmldiawg/FQ P2eYTbxNx7V15a2vNyntP0iZivjW09P2MWLrjlx+NGOljArs3BG/BfT3Gmu0IsUPX+uS6potGedg GGhaEhMKN1y5hVSyw+r7jTyEqPUAN6q/w/Ume9wXnwsu5zkVclRU5/L0NEHbhyVBNYPeN3DhUkYF di6J3wLH56XaIsU6vr7x6v+UCi7S5VVDQ1G4bx7VIQM7aofxEUB+HPUf9UqJlxMvHGHk9B6Vq2Na dL3MAAnXWAspowI7dyF70ipIC7/LzIEUeWMdWf9sxVQHn6eW+uZYifjkW049EpqsZzazkNuz5cac Y52BCOMn9qgjFvhQr5DwF6ixdlKGbHATEgF425At+SWJmHslqJgmIxPwZdWw9krEJwM76uHJfJLT WtAHAu54F4Iw65QectkhesqMmoqVEI01lTLkEAt5jcRqIeeRUjXGDO5aZVQHH4wmVx/VPUmBuO8R 1YEMJqGe0SB5Z9hapiO3thJhjsncf3WRvKqJxEqlxlpLGfIVpb5QHXay2S2psSfNSvRFdfD5DEM1 PX094pMZqWqeE/mV9DDbciPMN437ry4yIR0TVtwa6yOl82HU5NkVldZiWolZfYYycRgSeoynux7x yYAM83Xz1PXbcE/fN4FLM3oGdiBL9UBNIC5dcEC/jxS0rfM7lXmhFqVZbcahsdVZX9rPXFPFBDbI qtYjPlpMBmTUFYyX7L89TwwTwqxT9yCuZ46m6hu6sWLSWB8p29uo2zuVeaHuR5+3HLfGHgB9Nc2E XLyEKtSqYnHfKY4PMeStWOr6LR8de4BhHbpAIoyftHcq2p/EEG5w+wpVHlVihdRYHyl7bXd7pzqO 62Dsp1JjS89NNZUcFk5eaYul3abz67LytjuwNpHkdedMVOuRaZrkHFARxkxXRlaflBKZRyFYUTXW R8pZ59uJQO3mvOOoIia8E6IxxgjnLKMuN/Jeqbr828I2OhGff++pCiVP3p/TXOpbJSAsCvelka0z x+UVxUCsCBrrI+XympcOm93Op2jw5ndnS4Ea4xszT0nGJSUjz8yxwWsTn4xtMR9NZKLrPIYS25JL hMXiHg1uGtuR4znhWLnUWDcpd51tGtup3+Z6tqhwjcXOiw61MV45mV3CLP+uTXwyMZ9ZzXhnmube oA8IC8d9kYUD61usMd6dc4lOQWIjrBw01lnKXcLMNnCxc1tdDyfhuLerRhojWzJDMSYpk0dT/zXb YmP9ojoQRn7vMGmaZPLTDIbSqA0bwjZY8Hl4fJPCoS8ca4wDk7cXTBSz7l6TRWkzSAmHfmynDs2L rZy3wxlKMl45mZQ4ZM12APHJNY3Yd+kMttKoDfvAiyMrg2wVwtBRm4ZQj3DR1ULXm8iqw7iY+hIY 3mlhBu+53kQeVtUr55cYO++z3X9BdvXxIZjMtFGvjkRVZLyM5NqKxfb+V7srQUpMHw54ZeQBNQib rfb7ktr1ZVopWGWtzN7B4zVLtXf2f9gv1uI7compx6wvknBjln8r55rweG/ik69Bxs0nY0RL2JOj kRvusUbX7kqQfcPgnvsSePCUfIftPkbcri+TS8HrEB66Y+EEj+BBdeuyw8b2Gmu0VuRo1ZBH1BxC MoCBxqu7jtrhvnccv/SEDMGrbj5//PQQE2kq9DD91KzzwMYgyANvnXFIQSK0U72v/LAk2Kgvq0hB 99FUMoyGYijcgvUwmPNS7Wuhj+i8SmHSwWd8WVVWTYHePj7aSi5nM98+73TzLydeI1AKrwqgHJ8X aAxcePzA9/IXnIUJl5OMMFxmgIT3ZUUpeLOi2Xi5Fq2WSV7+jv+I/3WZ5h/1ar/LzHkn9NWkTN77 ZNJSaoCuPjuA+Lx2AhUdNROG1yNMuUBQYsKrvnm9KoSEv9i+3GXmLCelXudMDXIi5maB1quJGdET lol1PdXlXxXZlQUGEB8tJn3zWF1PaEzWJqkeVgjCtgk/xIvcdBLbl7u0woWk8NaCt7X7hc3k3UOZ CCg1iibx3exTMtDvHO7gj4njQyq/ypHR/M2st6ko50tUIoyUUjnZGKyUHKGahdwnSeEVXs5v8OU7 kRorQ8M3ad2SzFkIZJgaSlCXfyv9d+bxMT4+Wha40EF+MaxrdlvL4Vsx6XFuUE6F+9Lr+r4wm4Ym l2I13fItaIU+j3tre9Ytz3jlZCrKwF1X+zfBMOKnm990GjgQNiHu3dB3wKtGY8xLxd0Xn51Yoe/Q mK9haz2leuVrOfjDojrlnUMeiMbkM/F6X8vgalprQti0uHeA0g0vn8Z43Dv6UmMAPPTdGqtp3vzP MuuIazn4g4lP7saCZajRfD7Nf347C2whibBK3BcpyBpEkr6wYFiJFWtfrCA24bhzX9xnJzDQr+xL oLnOVpW6VYp3NNXlXyYEH1JmWFTH5ObDFNSsJl77sxlW0/aooKzEPQnKEKzwffHh/nl9QY9k6IeM S1MDHli5egkr6eAz3wohNGcqGUx83s1nllDIMNFAGxoiWgBlCO5VUAZihelLDe6f1xcB+oHjMsSw mwpVgcO7mPM4+IOjOlY3/+uvv5ZfYvz7o6mtTFj5JSgDcS+AMhwrcl/qcf+8vlxCP3xcJjT7miap QYUVHfwpiM9jmklvIpM+a0xh0WcPoAzH/SUoG2Hlri9RuH9eXw7QbzQui06Nc7PVkzIR4ic7O5WD PwXx+aQdqFhNlsKbOU9RvrPFPSjL1xKT3U9a9lbsLCUWxGccl76kFHWktph+O42pbViigMwZ/pwY 5gg2JvgeWGZwHL/0hHfzmTWQ92zIckwe4Hg79tKdAaLK3UvBwWpqeV+BlOLQ23YoW7txcbRqqkfU WAJPGNVDDUQ5WdUUxDe5+WrKFN7AZIhtKjvr05jtcx46t+7J5FuYUnhdlZJP0pi177OVj3Lw1TcH yejYYrMQn3fzmQ1ZuFRsNjOaoT0bVppeorKPEdeciiNrLKVYLWqvMSZP31r/M8qrKTr8SuGEDv4s cXxr0g5zxXBmah5m4GGpVs1t903gw5JgSlHVOERjaFVC/3Jo5BQd/myYOR38uYjPu/kYKjVTkx8b dU4+oMBlZk44ji8zQFKKYD8DNZbQP4+L6kryfqSa3Bkbq+FrmyWqU1rMfzExr1B+geUBTGewcs7M CcSxkPCXUi5HZ7jGNugj+PbsKcD0Tg0X8y6pGhriAR1eci7imxxzJtE1l3DVvPsQHKv53SnlLsg2 9qoWtKrRregMZKcqo6aEkDDBm2NaB3+uqE55m+HDirQD9Z1syvskhS5XrKBWzruvxLGK+6K0lLIZ z1QaW86kWzRYTZznt1wxxz6Ge+58hXP5+Gg3v7sBA6/G3UyvkBaWtEqdbhyT8KqEfkqxptKaNLaK lbZrp7wuyEMJ3wHq+Ws8nVuUnI746CT/OoUFqClQmZ5PzhMH9B1YSSllGvM7hPtojDSSRxZTHUd+ fZEJNbfgOF/njMRH68mQGexP/RzL2A4/S01wceDe4emnFGtAzK0x3k6eVFL1yvkFWyadhEdzo5KT Ep/XMoyPCZzxywNPsmZHX0joV2IlpViHpo/GrK16QHk1SACfkuymmjLeCOKmaiclPvqA4+tIRTOL 4xnbIZXJeJSVuCc9/ZRyGDIV+iEa4+3kASXVeA4fYVarMnG5XeF5iW86BZP5njJ9NzzAmmu6kBeP WLX3JI1Z+75oeTWewyOIyRtsB3FTzfMSH90wbaFS02kzb8c0M/PiEZO67r6Nwv3uPuNi7fuK5dV4 Dh9mmH/BdnsrTE180xIuE9tBhXxUbkUjjm1zXjxi1eeTNGbt+1rl1cU//jRGJsBgcsObFp6d+KZQ DKN6rK7klSn85MzrTXhdndcnrImYvKw+48K3Z62SaoIfn4CPjs+8w/b88pid+GgxnwwL7TOxHX41 Zi07btTavHjEqtgnaezQ988+++yLL77YrlXZgIL/gv+O/2vVVf/yTDCAj+eo3wpNHXZH5QsQ3/S+ ZYbTlAjU3yJnk/ikyzqyLz7r+uijj7BlDPt+VcSgDEqivE9Qh6cQrpF7wcdz1G8FVV39CyxAfCiF HwNYDBPbyWRNcmrlxSOkorZiozQGF9vaVKY8vldQswNM7e7UZJp9V0bNoTT5l0sk4B/Gbg3iW71y JraD0aoxnZc8W77fy5EAaj64TydDrgR5WF8++eQTn/Llp1At49ffvQ9whN9Uzj7jkj84nlOGaRni 87mxxYiZ128G9BlMfPzxx1uxcFAOvBLkSX1hxtFaBldjOlz7wyPWA+CsjeTLMynzfCyBeXnUa69F DcsQH503AZocEtOyMG9eDy4ZCMrhV4I8qS+xJlfuRAz5TQJ9Nfv+8fGcxXz80lz+mwsTQI3ZoUIM c2boW2ERAkp1a1JKOYxL0dhf//pX+bYD62iey/sC98LrAdDHaNY3zF0DE+blbzRcLj9nPzQr+fgF 0KZsenVdHnVmhr5jIlXiWMV9aVJK2YYGGuvAeohDhmWIa3+o5KuvvnKYWcgjzB2EfPyADB600GFI nYsRH33mY20wFyZ4Z60zxApbVIKAe88b7IDj8u1v/WwncV8J/SdJwfpnn1R3COKXavmSBVWtP00u 5xQDaFMSB7NAGILmRpWsR3wowhR8Z5I1USf/km8B65A6S14NPME+dNiIjNcMsjL2C7xCd0wgdkP/ SVJCbIOsBJ64DJrynbEP0RQ/g6E/niWbEVWMcfhMcV0mOtSI1FHVLkl8azY9GXczvUiijDKqnv3e IhgH6N85MY5JEHSA2AH9J0mJMg+mHoygjBUhxZ5M2+/p5gP3jD/Oz3rSd4xCc6N6liR+Cb4zRryV YQL6pre9SXrrwphvl05WzyCP2kc3iE3Qf5IUVaWxBWQHn4H1we04MwvfgrFtFmpjzrNEGbI95Gb+ RpgOrHZV4kMFprOUyQGzfj2Q5tK6mJBc0TnIc9fTShCT0H+SlNY2c6gfToOAFX4DrZrF3+fTk/ms N6VsMC5jIJfbVbUw8aEUPqEK9s2s4ZSvB1M6UOeZeRaHQKpsHwPTJEprtxby13nfafVJF4+gLxga vK3JJZCmlia459b4+/mctb19dlhkYpJzTB/0TIXtGB1b89rEtyZrkiNnOqK56TxkKpcnGKI9fbwq uamgW9RU73MlSB8pzPj2KSOEdOC2m9ogrwfwnwsmoVthMtrO7+yBpwjOxGJ3YG1rEx+Ks9KZie6h Wj7A57PLqKfUj+jWEyyqI6Z68uIRk7qYwoiw32HI4TEItTX94iTpzCfmkcu/AwluFb088a0BfVg/ s4LvqJaZV7Fl7hZsNyOwfo/HNq9pbX2uBOkjpamiyMoFcJA17IvBz7irEJ+kjgqZR5hcTKuPSDqI VuwOLP8E4kN9/DcaTIe0DFTLZ24xFhleRj38hMmYDG9VtwoffPFINx1ugmKJL2zcbUR80hk3rdKR QeCB+HaIfgjxrTk25NffzNBXs6ebfj73R9JZ4pOuNxmuz1jiC8bZgvgk7k2rtTwiHNgd+MhDiO/I seFf4KaMoG5TVwiVQhv8gm05LMERq+3W00tBoy4esR4pMVZLvHSBQY4vRSHzpz5f69wpMnWSjwSQ r5CB4HaLfg7xHcutzOGaqNbkGvBzrKZk4IJtyeUHyNZa4wWG0OCSRlJ54NrdQCA0AYcUv6IZSHGw r2aUez4rEMTBaGGDSLiZkaF2U4SWrNON3YEPPor4juVWcmingn7ggu0hlx8rvatDbbmPlZ5YF2QJ Ob6Os45hSHdQizUwcv6aUu9IR3AgtWtEP4341lVczAH1qoSi33mgH7hgeznPsQCQ3JwExN2aIZ+J b1oTEj5A8fII7BGJe9Npu+Q+zRrmjn32gcS3opmP2VlrDjTurSp1wZb/BheCrcsFeVqoeq06MZo1 i6LqsfjMuTrQGL4ahXM0eeNUlU/i3pScw2fxjaV2jfQHEh/qsF6Ky4/0cOjLC7YlIs9skmRCQ2Pv LVLnfBYohAVGN8jW6EQ98Vi1Kxn3MM6o8yTIU4tNuIfqyJ06NcAd/uwzie9I3eGTsQZCX12w3ewJ LwY5YKrebBcbb60hUT571gDCblgCPYTLKzfcCdumNrsSTuGGccrvjJpPkL0GyCw7a8Y2+dEwHNmV DXgs8R2pO5NDX/XKz6YA7+/ST1dDQ6a4bRK5pwbA+rtV1kqk8gYGfwKvB1gRfoj2wHtQvw9gnCGL QzzuTfdXP3u1dk+GJxPfAX1k7JKv0P6evrpge9nyyyBPVC5/T9KlrKKBppub+I9IcppsxUKSMslg jnVu8rPe2usJyz+c+NC4KQ8XM4p0Ijpn76heuWxb+yCPOqtDJmcCupEGmhIfbZaPYvUhLOSTkY+6 mLx7/sve1/fZnno+8VtDv8+OXHXBljEsfH2rV1dXxoIbYS6rZZK1KqM6RcS2nY2xKKYMTLc+BYDH vcnDIy9KYrq5SplXEB+DYeUy7+k73ihWfjFLalEGlwu21tHpXL61j1/yf5i4PGNyk+P+Dck5h2F6 C/GtoT1TeKcp9FWvvERsQj4CQr6+OxPwbeIE4uMbLkobsLp6iwrJvm/k3UNRfM3Mu22VMm8hvi/s bvL0Tffu8jNTvm8a/dq8cjU9TjZK/vA1vvH7kvi0D8nW8Emf8ynoxBrxEIgfuwBTjtjzgQy2VH/l GUIu5H54h8v1TtxDUS8ifgfom47vYBikLtge3KiaWarur2EaLJQpsSmsE6DNwIGVdJXSZ3scGijv cj7ucdhsdWZxLPGLxmCBwiE55zaA9fjUqB9cfie8A/cmT873zpv2qXcRH8Ng3Y5rDe/gEI/Ai9Hl yXZ3xJUjyAPutGbiOUqA/wI6vGrlANQ+Z6/LK66Xm60ugdKC+Bv3VX8fowmnoZ71kPjTn/6Uj7Cb lmqt03lacLsb9jriQ1PWvddWK3HUf0lbdcFW9spNQZ7W2AUIBBsNDEC3fm/56ge1MRzC+/sc8obG ylE5/NxuR/yt17ATdASC0OByjjR+sV9sfLokFuesuH/8QWmqtbyR+B2g71goPqCEWbBV6UMGeUJW 2OTGyAd11cd8VVUMLEDmO26jAKruj8pR5/BWoHVcroMOsRkKc4fpsmOK8e8SpgGLlnkp8ftA3+qA HGaU7KTzXrkvNBQ7veWYQEgoILbBsbWp7++CD3jNpqD5ATq8ScT2Lqo2PryeuHe/b95L/A7Qh4jK BJ47J50Pg6g7bPs4hgLIOiwhRCGppp7AJPe72b408fnkGQfu+cNx3SRd5cFXE98Hfeu3IUy5ci33 kC/B30mkno3Vh7bwcIX50CH6fCY14kiQe+dT47/jnRoea2oN/UWJj9lBXlRbJqzpEAUMvSntZxVw u9v5duL3gT7MFOkHNR4ingWhyk5I8m4KPMLn8le2TX5c/s7oySm8e0wh8qhcw00/9dAXdsP21GSU wZjSchw5EYn7w7shif+dQpCyaXUcUJ5PIIMIfIpaT3o4T6qSqEdONmsuP1mto5jw4om9Bk9um3ol wJ3fhEbyb1lVP+q4XDYDYTEMfTGAx0R1MCPIdVp0GbuxrN/KifuzqSTxv9eJLzhogn59WF+lyb7A DAu2pT2CW9rnXAcyW0b+UubXTtRhEu6bPLQBqsNHyd55F4i/1pZm05H0jr2NiftLe07i/1stPujz K05FUuwWrTu4VObyq8ziC8gubYd14xDcl7ELbC0D/cvtuMLI8oMytiRYbJo1jvSHxP2d+5LE/5Fm HNDH5CEvatgkOYJIpimq5gL2WbAtbZbfPR3cUtMmJnVBLDBWzkD/vFVideJbw6GOFOfEvWDGSfwL 5TiMjE8l3uThq9bEcb7wJAu2pcECcDucxc9QVaX8vkDsy1LNnT1/WCxNfH6DVVn6sq6uwd4S97I9 J/Gv9eOAvjVrs1GER10Y7LDDdns5yYcrdGhJzYamu5kTuIoLRann1aAZe4nrEt/0KexLb0vcq+5L Ev9WRTBQ3q0uJU2pZkVwSA7PnrDzLNiiVWMPV2Ac/HJJN0qWE2MY/oavNjNCt2jSisS3RnJ8a12J exX3KJDEl7TkyxAwrUoV8Y63y93bCJAVoB/rn6pvRDkhsvXhCnJ06/LOd/QIKfPqZSDhLVehj9ai YcK6SMiVh+qAOgrgc5lPwcRccKzTZjCHYX0pk8RXdOXY9AH7M2WelRY4NhPeTT/w6NIT7A+FsYcr yFf3CVtq1b3K4dtxmfBOubLmzsfvP7gq/U2bacv3LgL9arXnAviGQDYET703l0zi66PvCymadpds jQhczgUdDqumxUns9ht7uIIsXY3MyBEhfh+cSdvqt0W5UeDSZGcjPuzfRGG3x+NYP9Pn/HNLJPGp sXWnDfDXtm3twCP1RzJsoNmCPIEbiEiKydAMTHO8bI+8gq066fKas/rCIFV0KFazdWAq4psWaWH5 vsA9tJe4p/i1K5TEN2jMkcADo0Rc0iDjX0Xxggl09kuQJzz0rEJNDqOrj1cWkBeNmX0AQl5pO7y6 od+uSaaBsC7Swtrdpu5IibbOxOeVT+LbxtS3xOqL8MQ6+6Z5G1J47OEK8s4vpoPCG6spXn3Qb/TZ wShqK2N1bmq2IibubeT6oXQS36w3x4lOJZfAEeFB43ypC6aJ6iuMsIngKWPNQNBs4HEFd42vJ359 DT7F4il16fis20ZLC2QX4NNYz5hyR3LQJGvUyDzJn/tAEt8ztu5VJkcOD9oHcfXnbpJTly9WXHhk 45Sj5A9RIxmXHdaQ5e2sTDcHEh/Ns56rPIr4cGWs/HXcT7uNl/VMHs/0fvQzSXzn8NZkklm9odLE +ptVGMyRZS5d+LKbqSzJjj1cAQ2QV26ZOP5Y4luhP4T4SKY0JeQU98VxdkIxy9xj5aRVrtzWK67U 4Avruz9La5wjEuVkMdmDlhPhOxyuoBKfyRQaTnwT9DsTH+lk/MVV23SrCVFm0n0ItdLHr1WjL6yP yWxNWN4aOkOQp+ZAyj77fmUffxXiF+gzNtqT+AC3aRst2l+zSAslmI5gY9T12jJJ/IChd5+N44iB bs1FkCcwbZ907bdiNVpTc+GtjbksX098uYae2a7MAUF93qM+NwWfwtbrq/Zj6lv9qjHRBz+bxA8b XPcXq28Wod1400BozVzysVVOdScVimxChIbaLeG2Jj7zleBT7+VTd9DfbkMMlHVZFdwLR7IZXPua pINcpyVnE18sic/rSi/pjvBgjllzmbfW9A/uuy+MvdQgmIXIPogW6zXLpywwvK5/Z8RSeA/9822I sbL2tbm/RCvdEcdJtPoUfX2JJH6wCbgjPJhjWJtyuFGlA3CmfKdQOUgB9KgnwPjUGnsUhNAGZkPA bMTHSKHZ+DbqE8AphuEI2UPtNQk5RW4G7n0zSH0qia+qyFPAHeGBrVtPl923Dy+Mmo9oE/3hkiO8 A/c88NYRBsR8I4WRY9Y5JyQ+3/f6krBDa+ZliTS6T03Y2uz+3vXM1Zc9k8RvNeC+EzeL0VeGL3ty vzQYIRQ4nnA/5bxMVdexYf1K4tfHheqxO6QGR5Z9UTXyNSuzCdxb01XTygJFA0n8hpZQ6e/AW3cH edCr/twveAK14UE70jfDr72tJD76ItTQM7TSjftuk6tcoS0d9B0/1XACP7HqJH7zUa05P6QyyDOQ +2h5CfsgNE+GfcJ3ZjUlPhMX6kbqekFu1le6NRnJaQ6gHwtI4vdQuPtIhi3IUxnZhL/fbV33kj5M 2CfcaxaWl0le178z6lncugbE692fkiEnf/jyPnvM2yfKSOL3G9VKZx8Tw3GD7r57+PT2HfEfCx2E fbBCew77xGZnos31B9w/m/i+tdmik6ijvDMnpx+AMo7fWdcQV5O7WbBbk8FZ+jtq39bla6OEfeCM 4xf7Xkni3+kTq6P4ZHTk4RT7iTrkozI9of/kfYbE9PEHjGP9t7A76rrvLZrhPsUwnM7hDn4I8evj QuGKqqkQn4k48MB6JM5mM4HfiO595gOm67NEJvHHjGdlZH/LbXB7alu38Xk+Q6inBmR3z9ZHdepr aNEvR50grOOoyxasd+/gHTNRHyf1Q/TIYUD5SIgG/vjHP5b9VjW1oQZ8pDMHvgtS/vnPf8LlhwOI V0hNY6Z6FvsD7tar8Z77+c9/rrYWEaf9ZxACGttgQVFffvmlWsPYAsArzANbotzm8be//Q3WBdsI 6QhePKjK3ZiQNry8kiT+YAMAajGj3Ofsb60vE7t+B9Of//xnzMmoGT5WuUj+2T5fAOj9y2wJXtdo D2xF32vSn2JZXxYPYvdU1+jnvc8+7qtlyQ5FZT6ExPfL6u5UUf73zk9jzxGpr1mVLZMnMF5fmu/e xLvkZJ670RnHn2h8Ks8a3OBQGbTdawSTH62q3DpvpFYWN2ugRG/cafXtFnV8V2VNNCcf15Qk/lxD GrJbvQCjPn9/rxqEsBE1SvSbYdz4AYC+Zkl2G2JUEn4GHwzGnRc017R8UGuS+DMOZv2JVBtnKpOv z9pJ9DdmuF598egRdqvnaQnfhb/I8fKAncw4tV7fpiT+pCZQ9knps58uEfLVf/D60cJ5MvppTaxa sIA+xKMvwXr44OEXqOW+qkmB8kOzkvhTD1D4PScAdIhveIj1o06szoXjY1U2h7YbQ4Y3a6DLjMEK D+CUHvuuT5l6Bj6ucUn8BYY0KpNnH+qBtxgIkf3SHzzHdPwrmY8wS1TcZhuaRk59ZuMsQJBdE5P4 y4wXcvbDnWiguWbbvaA7RKUQf0j68+gH5fGdVDbBBRplidQ3curRu6iE4MAuZ1WCBpL4K5lHeHB/ 4xFYExUgPit0o3877vBgnaok3rjFl4+lfBkCDCgqD/cSNgVm5uVK7PihrbnndioCUI3BZkj4zpjP VGlLIdAB6AcmcMWr5TlbWWzrRUBp+9keXrw0KAnK44eXH/5scX7cN998g1cIzKPdgRlln1fNht7F h3Hh5ifxVx08cBOzDiH+Fh0oEQagv/7YBrV55QUAPJV3QOUpQ6q4zgVA9o3yjRBfetQB9JCSrO9s P+HikvjhKu1aIc5ig7/f1JsD+vFr6vXvVYYvmEL/7c92vYsdKtCwwB2fSgX0HY4Mw/sS7nxTj75o Cd2BpeXBOLE207+2JH5/ncdLxCGO5TSV+Kp/qLEEfPADy1rEIuSWl9fA/ofyjb5vVB2W1YhC9kL5 PnDfGobT99D3AvoOn0Tp16smsVCBJP5Cg6U09Te/+U1JvGndpcJ9/NnBh1X7Avxt92fB4d3KHw7L VOvZChSCl3/i3bZlmg5fdkbcpoC+26suWc+bzSolk/irjBTVTuAP0O/DfTQIRCjoH+L4UxpZvBAG tCAev6bfcAc9YUARw8GdlIvrL5t/1EAS/4E20Zn7RYMl/6RnxP+BI/evLpWgTflhPaNzN6MuWujc 7BRHaiCJTypqvWLFPWwd37/US6F/+fUP+q83VB98gIWKwvchlC+fa2A9fjNE6lYcwVXanMRfZaT8 7cS6LuI8/b3F0uIS+SlJ6N0SfvzK6vgkVh0K30tiUkfJPxKF0am8LWtUy1OuQwNJfIfSlnxkkusM C/rf+QKYautZ/RW4S06D1zc6if8uE0D0oNxg3iGlh9FsSYwp2ev4PekjAKk127aysV78YSDK3rpc lWXs83llkvjPG1OqRwj1lIRuqnTHQvA98QVQXgAl573pVtWQngHueIMiRIM/C9wHRmnuegQ1lkh9 rqyEDPqilSTxFx24mGYXl7+c5BVTY7Na9jueIKT8E3/p81lQtoBBXDkHopAd/+yWGu/WK16ccOqR aplLsm4dPunBJP6TRtPfF3ipCPX02cPpb6X45H7nFAoe/kkKPRzsMz/Q7/pVQN/nZCRSt1lsBg0k 8WcYhYnagIN6um3fn6jbT2kKPn3KYRgdjsB7is7e1Y8k/rvGm+9top/X1fCSU517MVwb2QBBA0n8 NA9FA91OZ8yRMGkgj7gwqSsLFw0k8dMSWA1g9bKc8TJhhg/bh8XLlXOY5znGbnF1vrH5Sfw3jnp9 n4vjP+pIgPr2L1TDRnmAPqPzCw3cnE1N4s85Lsu0ajv2q5wJs0y7527odjRFUn7ugVqvdUn89cZs 5hZvZ8WU7UgzN3WqtpWNZuUAojx+bqqheVhjkvgPG9CJuoO4fzkmrJztPv8mr566246XKEcM5fao nsp/s6wk/ptHv2vfEf8pL4ByDsGrQkDboRHl6Ij5z43oahkprKMGkvgdlZ2ifqyB7R1QDqXB/3zA a6DAfX8uUJ9zINK4UgOMBpL4jJayTFcNlOtqC/23Yw+mehlsp/qUy2+3M38yONPVUFKYXQNJfLvO 8olxGiifBUX+/h1wOA8H/3c77Ext7IbvrWRZR93+WbCOHzz3ZLqqzywwswaS+DOPTrYtNZAaSA1E auA/IivLulIDqYHUQGpgYg0k8ScenGxaaiA1kBoI1UASP1SdWVlqIDWQGphYA0n8iQcnm5YaSA2k BkI1kMQPVWdWlhpIDaQGJtZAEn/iwcmmpQZSA6mBUA0k8UPVmZWlBlIDqYGJNZDEn3hwsmmpgdRA aiBUA0n8UHVmZamB1EBqYGINJPEnHpxsWmogNZAaCNVAEj9UnVlZaiA1kBqYWANJ/IkHJ5uWGkgN pAZCNZDED1VnVpYaSA2kBibWQBJ/4sHJpqUGUgOpgVANJPFD1ZmVpQZSA6mBiTXw/wFdrQYFnNh/ FAAAAABJRU5ErkJgglBLAwQUAAYACAAAACEAxBOwZgEHAACTHQAAFAAAAHBwdC90aGVtZS90aGVt ZTEueG1s7FnNbxtFFL8j8T+M9t7GTpw0iepUsWM30KaNEreox/Hu2DvN7M5qZpzEN9QekZAQBXFB 4sYBAZVaiUv5awJFUKT+C7yZ2V3vxOPGCeFD0Bxa7+zvvXnv9z7mY6/fOE4YOiRCUp42g/rVWoBI GvKIpsNmcK/XvbIaIKlwGmHGU9IMxkQGNzbefec6XlcxSQgC+VSu42YQK5WtLyzIEIaxvMozksK7 ARcJVvAohguRwEegN2ELi7XaykKCaRqgFCeg9u5gQEOCelplsFEo7zB4TJXUAyET+1o1cSQMNjqo a4QcyzYT6BCzZgDzRPyoR45VgBiWCl40g5r5CxY2ri/g9VyIqRmyFbmu+cvlcoHoYNHMKYb9ctJ6 t7F2bavUbwBMTeM6nU67Uy/1GQAOQ/DU2lLV2eiu1luFzgrI/pzW3a4t1xouvqJ/acrmtVartbyW 22KVGpD92ZjCr9ZWGpuLDt6ALH55Ct9obbbbKw7egCx+ZQrfvba20nDxBhQzmh5MoXVAu91cewkZ cLbtha8CfLWWwycoyIYyu/QUA56qWbmW4IdcdAGggQwrmiI1zsgAh5DFbcxoX1A9AV4nuPLGDoVy akjPhWQoaKaawfsZhoqY6Hv94tvXL56h1y+enjx6fvLoh5PHj08efW91OYLbOB1WBV99/cnvX36I fnv21asnn/nxsor/+buPfvrxUz8QKmhi0cvPn/7y/OnLLz7+9ZsnHvimwP0qvEcTItEdcoT2eAK+ GWJcy0lfnE+iF2NaldhMhxKnWM/i0d9RsYO+M8YMe3At4jJ4X0AH8QFvjh46Bu/HYqTykDue3YoT B7jDOWtx4WXhlp6rQnNvlA79k4tRFbeH8aFv7jZOnfh2Rhm0TupT2Y6JY+Yuw6nCQ5IShfQ7fkCI h68HlDq87tBQcMkHCj2gqIWpl5Ie7TvZNBHapgnEZewzEOLtcLNzH7U483m9RQ5dJFQFZh7je4Q5 NN7EI4UTn8oeTliV8NtYxT4j98cirOI6UkGkh4Rx1ImIlD6ZuwL8rQT9FnQPf9h32DhxkULRA5/O 25jzKnKLH7RjnGQ+7D5N4yr2PXkAKYrRLlc++A53K0Q/QxxwOjPc9ylxwn12N7hHh45JkwTRb0ZC xxK6tdOEE5q+7chzd+RNQb0lsX2qD8/Cne6+bS4i+u9vvlt4lO4SyPfpFeht733be4P/fO+dVc/z dtxJk4X+q/c5doNstsvJzN3ygDK2r8aM3JZmwyxhwYi6MKjlzEmRlKenLIafeYN3cEOBjQwSXH1A Vbwf4ww22/VAKxnKXPVQooxLOOSZYa9ujYcNu7JHxGV9eLD9QGK1wyM7vKSHizNCqcYsO0NzEC0m WtIK5p1s6VquFNy+yGR1bdTcs9WNaabVObOVLkMMp12DwZJN2Ikg2L8AyytwVtdTwyEFMxJp3u0i XITFROGvCVHutXUkxhGxIXKGK2zWTeyKFDKXBZBSntCdj82SNSDtbCNMWszOnzlJLhRMSNZld6qa WFqtLZaio2awtry4HKAQZ81gAMdT+JlkEDSp926YDeGOJ1TCZu2ZtWiKdOLxmj+r6nDjMKNgnDLO hFRbWMY2huZVHiqW6pms/YvLDZ1sl+OATdQLWLG0Cinyj1kBoXZDSwYDEqpqsCsjmjv7mHdCPlJE 7MfREeqzkdjDEH7gVPsTUQm3DKag9QNciWm2zSu3t+adpnoRZXB2HLMsxnm31FcqRcVZuKm30gbz VDEPfPPabpw7vyu64i/LlWoa/89c0csBnPiXIh2BEG5kBUa6XpsBFyrm0IWymIZdAeu+6R2QLXCt Cq+BfLgXNv8Lcqj/tzVndZiyhoOb2qNDJCgsJyoWhOxCWzLZd4ayer70WJUsV2QyqmKuzKzZfXJI WE/3wBXdgwMUQ6qbbpK3AYM7nX/uc15B/aHeo1Trzekh5dJpa+Dv3rjYYganTu0ldP4W/JcmelY/ K2/EizWy6oh+MdklNYqqcBa/tbV8qguaMM8CXFlrbcea8nhxuTAOojjtMQyW+5kM7m2Q/gfWPypC Zj8y6AW1x/egtyL4ZmD5Q5DVV3RXgwzSDdL+6sO+xw7aZNKqLLX5zkezVizWl7xRLec9Rba2bJ54 n5PschPlTufU4mWSnTPscG3HZlINkT1dojA0KM4hJjDm61T1AxLvP4RAb8FV/YjZT0oygydTB9mu MNnV59E4/8mkXXBt1ukzjEaydI8MEI2Oi/NHyYQtIftZo9giG7QW04lWCi75Dg2uYI7Xona1LIUX zxYuJczM0LJLYXNV5lMAH7Xyxq2PdoC3TdZ6rYurYIqlf4ayOYz3U+Y9+cxLmT0ovjFQF6BMHb+Z spwpIG868eCzpMBwNNk3/RcWHZvpJmU3/gAAAP//AwBQSwMECgAAAAAAAAAhABNpx8zWhwEA1ocB ABQAAABwcHQvbWVkaWEvaW1hZ2UxLnBuZ4lQTkcNChoKAAAADUlIRFIAAAFnAAABVAgGAAAA+Fb9 jgAAAu5pQ0NQSUNDIFByb2ZpbGUAAHgBhVTPaxNBFP42bqnQIghaaw6yeJAiSVmraEXUNv0RYmsM 2x+2RZBkM0nWbjbr7ia1pYjk4tEq3kXtoQf/gB568GQvSoVaRSjeqyhioRct8c1uTLal6sDOfvPe N+99b3bfAA1y0jT1gATkDcdSohFpbHxCavyIAI6iCUE0JVXb7E4kBkGDc/l759h6D4FbVsN7+3ey d62a0raaB4T9QOBHmtkqsO8XcQpZEgKIPN+hKcd0CN/j2PLsjzlOeXjBtQ8rPcRZInxANS3Of024 U80l00CDSDiU9XFSPpzXi5TXHQdpbmbGyBC9T5Cmu8zuq2KhnE72DpC9nfR+TrPePsIhwgsZrT9G uI2e9YzVP+Jh4aTmxIY9HBg19PhgFbcaqfg1whRfEE0nolRx2S4N8Ziu/VbySoJwkDjKZGGAc1pI T9dMbvi6hwV9JtcTr+J3VlHheY8TZ97U3e9F2gKvMA4dDBoMmg1IUBBFBGGYsFBAhjwaMTSycj8j qwYbk3sydSRqu3RiRLFBezbcPbdRpN08/igicZRDtQiS/EH+Kq/JT+V5+ctcsNhW95Stm5q68uA7 xeWZuRoe19PI43NNXnyV1HaTV0eWrHl6vJrsGj/sV5cx5oI1j8RzsPvxLV+VzJcpjBTF41Xz6kuE dVoxN9+fbH87PeIuzy611nOtiYs3VpuXZ/1qSPvuqryT5lX5T1718fxnzcRj4ikxJnaK5yGJl8Uu 8ZLYS6sL4mBtxwidlYYp0m2R+iTVYGCavPUvXT9beL1Gfwz1UZQZzNJUifd/wipkNJ25Dm/6j9vH /Bfk94rnnygCL2zgyJm6bVNx7xChZaVuc64CF7/RffC2bmujfjj8BFg8qxatUjWfILwBHHaHeh7o KZjTlpbNOVKHLJ+TuunKYlLMUNtDUlLXJddlSxazmVVi6XbYmdMdbhyhOUL3xKdKZZP6r/ERsP2w Uvn5rFLZfk4a1oGX+m/AvP1FwHiLiQAAAAlwSFlzAAALEwAACxMBAJqcGAAAIABJREFUeAHsnQdg nVd5/t87tSVLsuUh7z2TOM6E7EEIGRRIoUD7B8oebSijtMwChUJpgbIKtGxoC5QyA2QnznASO7Gd eE9ZlmRr73Gv7vj/nvPp2DfCaTOcWHa+z/707TPvec57nvO+74nk2SzcwhIISyAsgbAEJlQJRCdU asLEhCUQlkBYAmEJuBIIwTn8IYQlEJZAWAITsARCcJ6AlRImKSyBsATCEgjBOfwNhCUQlkBYAhOw BEJwnoCVEiYpLIGwBMISCME5/A2EJRCWQFgCE7AEQnCegJUSJiksgbAEwhIIwTn8DTxvSyBU8X/e Vv1JkfH4SZHKMJHP2xIQgEYikeOS//FgrHCfKHz/7vGK+7hkIAzkeVUCEX6EoYXg86rKT43MFv5s /3cAzf0fGQ4Hj/9HAYWPT1AJhOB8ggo+jHbilcCTB/yJl/YwRadeCYS0xqlXp8/7HB0LZIN7x6JH jg4c/3cJ/HlfrGEBPMclEErOz3GBh9E9sxIoBF6FVHh9FFwLqYzo494JYj9KZUQ5LQzjiVLnwy58 1997om/C+2EJPJMSCMH5mZRe+O2zXgKFYFgY2bHuR+woKOt58I6/F33cxKKANWIxy+aD58cCWt3z 8fjn468L0+TfKbwXnocl8HRLIATnp1ty4XfPagl4EDxWJHrm91wma9ncqI2Ojlo6nbZUKmUjIyOc j7h72WzmcUFEIlGLx+OWTCbdsbikwhKJhLvWMRaLWRRxWrsH5ycC3WPdP9a9xyUgvAhL4EmWQMg5 P8mCCl87PiUg3aAjzC8XOWgFybDArQNcgZu71otuy7n7mdGUA9+hgX4bGOgLQHh40EbSww6MBwYG bDSVtmw2CyhrH7XcaMZGc9kj0q+CE6grjiggHItHrChSarGiiJWUFVlRSbmVlVZZ1aRaq6wqt8rK CistLrd4LGkWJY1KOKCdiMYsA+jHo3HCU5hmMUePZC2X86p/gLs+GGNQ8vnsmOTuaRZyeaQgXEbD P2EJPK4EQsn5ccURXhz/EhC4Qjjkck4q9eF7kDTAzJ2L/GXLAa4Cz7xlHQAP9PZZe8dh6+rqsKHh PsA4DUhnrL9v2Hr6+iyS7nfgLGlZcWjPZDIurqJksSVicScFxwFjhavnDsDTADgAO5LqB3RzR6Tl eFGxlRSXWXl5uVXX1lhFZZ1Nm15nVVVVNqVuupWX1bhw4oB1NpeyWAL5Jq+0j+1jfQoCugPfI/nk jcJz5XX8te6FW1gCvgRCcPYlER6flRIolBh9BAKlAJiQMuF9uXCgyY8R4Bx1QNzc0midPd022Nfr wHZ4OGXtbYetu7vThgf7HG1RXlZsdZNqbMrUOps8ebIVFxc74IwlE+5cFEUkmnD3Ik7CHZOis+Yk a4H40OiQDQ4OWorwU1AhfX091t7ebt09fYB2xIrLSqy4qMxqa6ZZTXWdTZky1cU3tW4acdaByUkH 7AL9CFkRHaJNgK88xiJHB6fqHNwz7vtzdyP8E5bAMUogBOdjFEp46/iXgIDqDzekWCbk8tmcDUJV NDc32+GWg4GEPDJog0P91t0WgOUotEZJcdzq6+ttyaLFVldXZ2XFJRYRZ1wk/jjhwFSgF40flZKB ScvnMsQBzcFRIB0hTgGzJGjtGSTx0RRS9CDUSEZcdcr6h1LW2zdobe0H7ODBZt7nm9E8knSNTZ0+ 26pr6qxm8hSrnzbdZsyYYZXVNY7DVi6DNARAHMmTrrGsC5vH8NkVhQDdg/kflk145/leAiE4P99/ Ac9x/r3UDIHhpNeOzlZrbDhgne2tlhUwpkasExqjvf2wk2jraqpt+sxZtmz5CuiFemiEUrN4kcUT xeAuk3tJP4EHfRGHG2bLFvQDeaiLXD5jacB+ND0ESAPU0urQfcAxBa2RSwvA6SSgTLK5tA2lhrg/ CuWRsczwqA2n261/oMOaD3XY9u2tdqh1wKZMm2pz5tfbjKmVVl1da5On1Nu8uUsA6lmkrQgQRoxm i9AbSIIPtoBv1r0AlKUpEkjaYy+Eh7AEjpTA0THXkVvhSVgCx68EvNToQhQAwiVLk+JwS7Pt27fP ejvbACqzvt4ea2k6aAPQCmVQCfPnzbf58xfarEXzraK8GuBFSo4UWSJZajkIXeGvJvRinqOG187D X0d5lkBCzRGxtDcy2bQDSEdrCJi5liStZ9rzloGXZoKPCbtUPgXgw3nAJwv0kzyNMWMZT07iecYm VRvHQ7Z5y2OW2rTJ6qbW2uz6GbZgwRybNXuG7d23A3CeTdqX2KyZ8x0/ncvBhaszAKyVT4GyOih1 DOqgQsn5+P3WTrWQQsn5VKvRCZCfQgpDQ3xRB5IWRwFlAfC+PbvhdDsdv9zfiUQKlZEeHrLp06fb oqXLbO6CxVY7ZZqVllVYDmCU5BmPSbtBnDTgibSZAOR0mg8o64CuEJPAnke9TqCcySAJj8IdA8qp NJodwwNocEg6HoXKGHVhZbJR3pMqHpwzaniSoFMjPOOdoaEh+O0R6+kdsMce22mPbttuO3bvQYoe hcs2S9BhFCXKrKQUumVmja1YscDmz51pk2un2eyZc5GkF9k8KJhkMpCk6TrIizjwo5zzsbjnY92b ANUaJuE5LoEQnJ/jAj/VoysEZuVVE4KSEg8fQlIGlNvbDwGSg9bV0WotLU0WQdVt6bIltnTpUrQh plo5amzJsiqLJspRcSu1IqRhN/SXxsdY4QW8LfeZdPP3iMSBfTaDyl0KIGYX4DvdZ9TthuGvM9Aa AuGRoWHuj+k/50qQwPPw1kjP8MrpFJOGgP5IasAaDzTYbqT7TZsB5kf3oJaH6hz/BMzuJcBWIwFt ktjLSkpt3px6W758oS1YONPqJlfZzLmrbdmyZTZnznxHd0hgjtHReAnaS87jAXn8tYsk/PO8KoEQ nJ9X1f30MhtQE17a83AohAKjuBRYCYQFogIVAbR0lRFY0bZos507t1nL4f3W399rLQeb7FBLi1WU ldvSRQttxarVVlVbbcWl5ZYsrUTfmIm1mLQuXOgKmJCiAQg76jagRvIZYHEUcM6P2DAScWqo17Jp HQe4HmZSMWWDMkiRZgd6z9FIwkqYPIwlki7souKElZYWW1FRCbrN6DNXVqLnDJ89phanScKhoREb aNpjO3dttdvvutPuWfeIbdlzEDiWeC5JXhSF9J25JPsC6FGSXVozyZYiQa9gn7UUaXrOPJsze4Et XbKCicxp6HbzfZR8MXHJYUyjQ+UZUB4C73ALSyAE5/A38L+WgAPaACkd6Orlx0t1gKUDND0JpGRI hzHJExpg52br6uyzhn2N1tCw32qrK+yM01fZyuWr3PDfisySReVWXlVnxSVlYmHHwgeoJGUW4JSo CqnaDQG4IyM9TPJhjDICEAPIAv7hQQxU0LCQEUppWSWAW2XlxUWWLC6F/50EGJcRl7hrAnWqboB7 NuIMVXKAbcLpOJfyHoYnTC7K+lD8c2Z02AZ7Wm339k32+1//1n71yztsT8thyyToNNJI3MQXj6LN kRc0Q3cAuOrCYpXVtmrxLFu5aqktW7LYZsFPL4LmWLBwBZonk0gDk5gxTQ66zxx948vWj0B07e8F b4V/ny8lEILz86Wmj0M+jwXUgR5zDIDWhBx4A0B3djQByo9Zw/691oga2pbHNjuAueTCC2zlypVO JznBhFtREcBZCbesCb8I0jJAKKFSNAjKcC7FOQ4jQz3cGzFZBw6j7jYy3I9ech+qbp021Nttvegp p7EIrKiocoBfCSiWVlRbEkk4iRGKAzrIaTeRSIC6lrpdYKotS0G0PDDxiwosuZ9EG0Sm3KIcchE6 HDqMGCAO6ttIf4M99NDtdsdtD9hvf/uAbdt/2PKjvdAwEdIQsSQZSLtRRJwcQILQCcyYUQcfvYhO abnNmz3PFsxfbMuXrbYpk+spLSiVBEMCRGiImbE00THRLyh9hSBdWP7HoTrDICZ4CYTgPMEraCIk T2DpuVFxphI8RXUER3SHOckDfmkm0hr2bbPtOzagG3zA9u06YHuQmM895ww7/7zVVlM7icmzCoAo CbdcbeUVFWjFTcdgZMwMWswIGz9KKBHxxVAUqLoNi6roR1LmfGiwF7662zo6BhygFycAv9mzbTL6 xpK8NeEWxbxaBiQZmW7ncG7EzGEUU2vpQmuTlCzJWP41isVr00kInJVPkSZAMeEE4izY6vIpCXeU 3ieG1kUOXruv7YBteugO+5///rF9/5fr0NMWhKOex2Sf+hUUSYifyMZGFclkFC2OOXbueWfZymVL bfacmXDRS5lAXOnijuHvI0r6lAb5/mD84IDZS85BGXtqyWUj/HOKl0AIzqd4BT/T7HnJWOEIkLUF oIxUqBsM5SEErA/w3LzxIWtqZhJt5x7b/MhGgC9u113/Ips7d54Vo7GQhGIoqyi3kvIaMKsEKmMa QCSeFRaXPYsvDGlLZEex1OtvR7tjAO4Y672hQTeh2NzUYK2HWvB9UUeYy23R4lVWU1NpcYxR6CIs pe/HlJwFZlGJ4UjDkoJlPRg4O0JBDoAVgvIKTEzQ8QjAXX4kQY+puwWSKiBNmFFAV1JwFmCXRJvg XDrSXYd32E3//Uv71g9+aQ9t2U38lAfhCpcVfMBL60zll0danmRrzj7dTjt9mc1fMNtWLT3dlixb Bc9e4tQEpSMt6qYoGQeoM65TUV4Kt/HXhc/C81OnBEJwPnXq8lnKiWAmmKgSdSF+VNKddCcEElkm 5vY37LLduzYhLR+0RzY8ant27LPVZyy3y6+8CGkZ6RjHQXIglMDXRTk8cKIEIIJyGGHCLgbIiQ7R BJ+MRQYHurmPYQhqcL09/dbUeJgw16Nu1whfu8RWLD/Nzjz7HKvCOGVU6nLZBGQAQIvEXAbPXAQl oYlCOTYqIR5xyy6dpF3g6NIOOHu8iygvYxcOzMltFsDWpvvKKcrOrgOJY+0Hy+EmQEfRIlG8JVgK DA8cti0P3mk//MGP7b9+s9bau3tgKURTYChjIy4s9WvB6CPnJPUlyxbbmrPOtFUr5tuSxcvJFyOL 6qkuPnUmgbqdDFjGzM99gsfS5QIN/5zSJRCC8yldvc88c4H0eHSI7a6BECkWD8H/btuyBeOLLU5i fvD+R/BN0W9XXHaxnX3W6U6/V9Z8xQzpJblWlFcBcuJXGbTHZak3QjDxQIVtCF1j6IIRLPn6+/tt 1649du+999mh5h4788wz7IUXvADOdrUzk84CqMOox+UikpSL0fQoQSovCygK8cdsEurBe0cvKM0k 2DMMALTeCEBZ3Lae+3zqiT/PI3lHMEzJY/yC5baT7iFNONIp6Vo+j5DWRUlo5NDasNlu/83P7Hv/ eZOt39oQxMFfabNoC+INzkWzyBT9wovPQPVupS1dvMxOP221TYOeUSeojkydg3aBuqeVfEeio09n EGL491QrgRCcT7UaPc75EQAc3QAl9ONEx/ZgRPLoo48y6bce/eVWW3f/BuiGMrvu2svhU2cAYGgt IAHGccOZQH0tDg8sT25SEwtARZNdklKx1ksNu6F8d3cvanf77aabbra9+xvs4osvslf/yettIRoO lai6DWFIkgeQpbscixdjuYdDosrJDhwlWLqkjqVXqc6QiPiYxCzpX+8c3XgDqVpTj4Vb4TtZ0RkC aCgPpT8IUyzHqKM2NGkXpTBkDKPIMyP91tO2zx595B77+S9vsl/+9l5r7xocC55CO5LIMcmcJzV1 VXbeOWfbGjqgxQsW2urVq2323IWwLZQXFIeMbzw4FwKzT7O/56/D46lTAqH59qlTl087J8Kzo6AU AIfATBSAuFaZQgsgxOcKmFtbMWHevAnVOCbFNu21Rzc+gA7vLLvqisvxM4GNs8yoAc98FHAZZbIP a7u0DRtCMkfClX9kNB+kAZHK91o/Fnjbdu6yn/3id7Zt6247d8059tlPfsrOZhIxigqcAKg/1RuA OhJnLF4KaBVZNVoZAX0sR0aaLAscHo3hs+nHLY44CsBpgg75GDl5DKFdnt1NV256ps2DnTqQBMYp 9AaI3wA4B30Jw4EkzKQg1IfeRYPO3ZcSXQ5VvJrZS+0MJj3nzl1lZy//vX39v35hjz6226UtQzm4 lwkIWZi+IWadbf125x33Q+ewUAC61TDvji6ZPXORWQo1P4oqGsPEfKw+pJctYxnH1aNVnadQfZqV /nA7dUogBOdTpy6fVk7GD401pPaNXcc8viWiIFIaykFaDIcO7rctWx6yvXv32oMPbbS9uxrtvPNO QxvjTCtJVqHzizpZkXhkKItcEuKi24rzGH7w9RBGKcK6SH6YE+A63QtX3Wi/vulOu/vO9Tavfo59 5u//wa68/mpLwFFnhgHd7IiTXg0jkhzaF+hc4Fu5xkqRyEUTaM4viz6y1NEEWkFHI2kzyIf/gaNr QZx5G0DtrreXDgGd6J6eLpwrYT2I0YomExWe8iyJX/6cy8rw61xZ6nw5T6qcZBXSBhHFgMl3hCMo aumoLArzVoJf5/iotEFyTFJOY0KvxC5/ZbXV1c+zn/zmV3bTHfdZH1J0Qvw1HQlTfUSmNJkzE3/w wQdJW5/zZz0Kh0JWsSqcSyfG6iyAuHTHY6gFjoykXfpU2XnUAkmu67R07etN5+F28peA/+2e/DkJ c/CMS6CQwvDnavyZUWAZ7nj/3j1IyQ9a4/49dt+6dUwAttiLr7gEzYPlgImcCCFNIlXiqgKOOYm5 9CCYCiBmBizGZFqGZ7g9csDd0dplt96xzn7zq9vRWR60N73pjfaOd7zb5i1YAVcMn42f5XhJ2nJD UoULJPdEKfy1U30LeGVlmEeOYkhhdp0sAjSddCzt4Zzjrvcf2Gd79uzBydIeOpT90CUHrK2tE2Du cVRKMeprA/1DqL1JShZFEcQlyVSjhcqqUps6dSqAO8lmzkG7YhUGNKetsnnz5tmU2ik4R0KqRmc7 w3d5iedI77EI/jbK4xi+1FrVVVVWP2+W1UL5fO9Hv7DBYan00XlkU6QwAFSVtfxVP7xhs5tgdWFB nWTzA5iDr6BDo+wyqAYSh5w9SSdak5ZOZVC9UUE4IUC74jgl/oTgfEpU49PPRGFjLjwHNpwUmsU8 OpeN2QH8Yjy8+X5rbGy0dfc8Ygf2H7KrX3ypLVky20l+0oyQdO0kSpk1AzbRGCQGtEYGkMsiAedQ EUtnhm39xi32i/+5BYu7g3be2WfYhz/4IbvyuutxYhSXMGpFiNdF8MkjWSiROHrRusek2xgOOQk3 j4qH0huT6KznzjfGMFRLg+3Ztdvuuusue/jhh23X3gYk5W6rYNKwoqzUajBUWbNwkS2av8Cm1uGg v7wErQ4mE7EizMq3hnoWgLobqfrQoUPW3d9sbXQkexuabdOGLfbzn97kuI3a6dW25pzT7OILroSG OddmzpiFf2nCIAMynInTmWWQ6CMVtbZ0xZl241uSNpWlr77y7z+21t4hyolEI4ELWgMtEQfVtnHj Y04SzjGyEIcSyxfbnHnioAlTFomkTZy7uqFAp1u5P7qNHwkdfRKenWwlEILzyVZjxz29AoVAVU5g JwAU8PktEs3Yvt1bbftjm+xAw3Zbu24DmhSH7CVXXIbT+5loKQxZEUYkg8MZtDFqbHgEK7f4KHSD DD+igOoQIIvUR5jdHZ12y+/vs1/edL979oG/fbf95dvfaZNnzQUPAWbMoGOJrA0C5Ikofi/4Nyq6 F7ALOGXRFcLOUaz4JCML2rLOSf+9995rN/3mN7Zp46M4VGpFuIzavLkL7JoLzraLLrrEFuNYqbQc tT4m2fIEEkVFDdmTdMKFk+k8Ur02pTkpYl0qfuoAUugbo+IXhVzuZ0GAg41NTIRuQ8rdZPvu3223 //I2pOtJdvFll9p1173UWUBOgnYRNSI1QZQGLQ1FUzlnmf3Z6/6cMiq2f/7aj+xg2zCxQ6UgeUuf OdiCuti8eSv34JXh5ktiFfD3SZtJGWniVAsLaPNSs+rr8Z1qQHOMvxeEH/49mUog1NY4mWrrWUmr QCiQPiUti9cVQAUuPtMA8Q7bsRUg2rnT1t7/oD2yZSumyEvtrDOWWSkmy9U1tU6fWEGIu83IGRHA UgFXW4QKXRyVORlVtLX32H/99Gbb9MheW750uX3mH//BrrruasAJPWXUHmKStuFi5aeDOT/uAzL8 i0kM1TlAqSG9VjGJAHoDA722YcMG+91vb7Gbb74ZHnyb1UyqsEsvvdh5gTvnnHNsxTLoFugJLfYq d6CS3OWVjhPSBTgj5ToBVWbSSOCB0QdpBpsDWoeyQaVN+YGsoEPAmAXjkCL4ZYR8Z0q+E5W5O++7 x+7ZsM5a8E29dPlyu+7F19qldAhz58xxaR+BcsHFHh3MoHUc2Gp33/I7++rXv2/b9mL6TVkrXtEo 4syDDpI80yOddtppdvVVl6JKuNpWrznTJmFVGWOSNSEtDkYSqqPgGPDr4wF5/LVLTPjnpCmBEJxP mqp69hIaAJHCl+QsLpNJKibMDh5sZCj/iO1r2GN3rb3PHnt0N4DUaxdfeIadtQYfGTWTrX7WTMCu iMmsfiiBXsAjYZXldc6yr6fvINKh+Ni03Xn3A/azX95rVyBxf+Vf/tEWY0wymksYWsRIlwJGgpHA Ci4hrEuYtwzCbJTJManfyRxE0msW2uGWW39v3/jGN+yu2+9AyyFjZ2HMcf1119gaAGzVacsArxjp 6WWyrx8rw4CflXGKlqbyAMwpUjNUSSxw1qTuwMXtwJLEjHHPOcKSRWDgkzo4d3rISMYqt2qcJBWX lrIIbattQYNl7dq1djf62RWT6+ySK66wP/6TV9my2Qud748hpNwo5TtwaLs9eO9d9pnPfdMexcTd AzNsNxkfA2jKJUL6zjv/HLvi8ovQ8V5h5557viXxHx2PlSJBA87QHnHKW51p0KEGIK2a1BaCc1AO J+vfEJxP1po7jukuBGdJzlopZD+Tfg899JA17ttod97/sN334BZDxdhe+4pr7EWXnAMoT7cp02cg 7SbdclKSZstKEm44P4ykKKOMDEs+dUAxfPO7PwGwHrS3vPmN9rGPftwqWNYpDfjFRX9kk+hRIKFK u0KTcoTjegeEzQRSNC6UEWMBLLQibv7d7+xb3/qW/f63v3XS7GWXXm6vec3L7ZxzzrPKikluFW4Z sDgpGSpCm9IsekBc7SiSs8BY+XWTa7K+I0pdSwpV3DC57h8XPBCzq03xExBUjVZIIYHcp9vhe2ec wrdJwLIK7Q5ZvjTsb7Tf33qH/faWWyxWXmYvveGldv3V19isKVMoE/JJR9HTgRrifT+3j3/+h7Z5 054gTHUW0DTOnJ1oyDZRJe3CC9cgQTPxumKVnXXmhYwsSqF/tEIL6n64V/XgPB6gQ3Cm/E7iLQTn k7jynmrSAxAK4MZ/KwiLy/GyQIqxegoAa23eZxvuX+sMQe689yFb/9BmlpHqtDf+v5fb29/4Zisp qrGySai6xQeRsPUt0jJGIlJXG8Uvhtx24ieISbV2+4dPf9nuuuce+wR6y3/57vfgvS2wCBRwiLGQ OpgQUNK60if/xtqiPJckG4mk4JE325e//GX7yX/+2EmxL73+ervg/PPt8ssvtxh898jICICMIQt6 xMJYSeEyK1ccuhdIvcApzyQ9SxKWTrTiA4mJOOom2bRcVU6dg+InPQI7QbU2Sct6X1yyngXUCHw0 z3XttJOJTw6VpFEiCkauTG/62U/sFzffYWVT6uy1f/oqu/yiyyg/XKPSCQ4N99i2O35tH//id+2B R7ZRDBofKN+idzRigPJhhlEjh6tfciWUzUWMDtZAC+EsCY5e9IZAWmnS5o9Kt76XXw+VYbidnCUQ +zu2kzPpYaqfTAk4AOJFAVWhJOXvC2ckBeZ4Lkqjq73FNq5fZwcam+2BBx+xdQ9stNGRbnvdq19m b3vrW3FWVGtRNB8ieIOTg6J4El/MZRicyHERgDjQP+B0efvwr/zpv/+crb1vnX3+C1+0d954o/B/ TGINAE+4Ie9xYKIDIYGnowzELQOS/bgE/fa3v2NvfvNbbP369faiK660T/79J+zP3/A6mzVnFoA6 ZL1Sg4PqyNHByDBEKmYubwCc/Cxnj0y2uUKQjA7wB/E70BZA8z8BhysQdJ7sBGycUzCMDBQmYrxK 6Qjo6RMBv+6r7KR+FzxX/CmW4wo6BLNV57zArkPqbdqxw/716z+wbbv32bxFM/BrXUk5VdoUJi1X za5G3W+fNR7uIN9i2l3UHAXQcoCURf3vsOsAy5nUrKyqcv455NxfafQSM589rp4Lgbmw7vVeuE38 EgjBeeLX0TNK4XhQHh+YdB4ySIVZWnJfd5s9sv5et/CqDEzuXvuAW2HklTdcY+961zswxqizGPwq xn82ggP6eLyc1UOKndQpoB0cQGJG06GfRVo/9vFP2fqHN9u//tu/25+9/g2B8UQy6VTlQEckT4GZ kCUAVGlXiHuVubI83d111x1247v/wr76pW/YmWecbh/72EfsL/7iXawkMtmtzJ3Gt0aa9QCdnwtU 1qS2JgsXAZmA0UngdDYyGQ9AVCmUVK0JS04kmUqyJP8Cdl07S0iHduocJH3qRb3BX7Q5ZICisEWR CPiCdwiTfzJDV9h6X2WuDkL3siMDdGBVdvkVV9kanO7/6mc/te9898dQO1Ns8eK5zqpwev0sWz67 1rZu32GHmDhVEbiQiDhHGgS+0oNuY4XyOpbykoQ8fcZ04lHKNDHIAIAeTnHqXW3j6z0EZ1csJ9Wf EJxPquo6PolVIz7SWBnmR5DONAR/9OF16AjvsI2bt9sdd9+Pe85Wu/aqy+y9f/Mem1I/E4UD/GSI pxX3yvA9gtvPCFZu4nQH+zE4gZft7eq0D33k47Zrd4N97/vfs+te+nJnfadFTkfQmkhCawhStFK2 QCUvlTuAOQkwa+vtabMvf+lz6D5/0Lo7e+197/sr+/CHP4SGUZDHAAAgAElEQVQGxhLMvHvRWe5y aU+n0bpgC6wCFaLwFYAlXGCVI4CL9C3rQRCOO7xDFLzCLl5dYM57dBcSQIXJAnbXYQCIDhRJYEAN ALag5ShlpdC1KIAkZ4JVqO6bINyjoOjKmG/EkohKGRgZsrnz52Li/iIb7OyxH3z/h7a/tcWWL1li paje1c+ca/OmVTmev6sfVUI6OeVFmwfdfspYHWDd1ClYL5ay5uIUxe7eCaiaoGNQ3RaCtF44Ut/u 7fDPyVACITifDLX0DNL4OCAeC0f3tEnSE/cqKXQTln87tmy2x7busFvvvN8OHDhol+IJ7tOf+YxN l0YG4px0a7XidBwd5GLMk2V+LOlwRAYnAEJPd7d98EMfttbDnfad7//IznvhBQCzJtEQtQE/Ebxj eHPEeETO6x2/jAT96KMP2Xvf/Zf285//wq688ir7x3/8nF104flu1e4uQD+VwiSceAKtiwCISZW7 DiRaaS4rT0itgHMgTeo6AFHfIeiayRaAlTDEcLjnXAmwBbc8k8G0PNaJspDanQdpjQwUrjZfjkFx Bh2e0ifVQd1z6oGovuXxbKcOY2Qk55bMuvSyC23BvLn2o2/9h916y034pV5uNdMX2AIc8M+sLrYH 1m+yviE6CqVFiS2Iq62tnUUFklZbW3OE5lAGfFo8CAucfd3rnr/vAgv/nBQlEILzSVFNTz+R4xul b8S+8abR+927Z6ft3LbZdu1Alxkjk63bdmH5t8g+/0+fsQUrloDiCXR7y+A5i6E/ACUBOhNwoCb8 KpZsAOEwPis++LcfZfHWVvv2D75jy1esBKTQCQaYpQOd08Tf2OZG3qCXjDvk7U2S+O9++9/2vr+6 ERehHfaOt91o73zHOzEYMVyQar3AIb4MaAJJt6P4wVC+pL88it9nzQJK71jhSiMjQ3q0bJUkXaWv B4m7vb3dWtsOsYJKG8fD1tHVbj3QL0M48h+FsxbeFhdpYg1WWpI26VPHI0laiwBwA8OVwMlQ0KmN SanwJ5JwHdVB/AHVQFrItDq+KKJzhpFBTM6esKDUOoMDGOosWbzU/ujyy+y+++62b37vJzZnVr3N mjvXVixdbGVolKx98GHHz6sDUV59felceZk6tY61DkusDg0QLSKg99R5+nd11OYlaJ37ezoPt4lf AlJUCrfnQQl4QPHSlLKsex0dLRiZbLbdu/eiMbDFNmGdVllRYp/+5EftrHPW2BDvuOWf8O8QQQUj H8XQBDATcDnHFhrq885HP/p3mB4/yqTX13HxuQzglapX0oGDmxwbkzYVr1eZS0KRpADez//TZ+1f vvhPdubqs3B89AF8V5wBv3oIkGWiT8CH2p3SLTD2+UgPB1J0Eos54dDQ0JBT3+vq6nLvSAtERjFt 6B+PcByGDhB1o7QMQ4mI2ogn5esN15xQKqVw6QvmzbPp06cDeNOsTIsCoPI2SiekcYaMV2LkU3yv aA3HV3CfZDlQVL4E6lk6HA+CiivFXgQwZ2X8Iu925AWNa+vvbrfklEr7yte+Yf/0+c/bB//6/Xbw bW+01//56+wVf/YGa25qtH/53q8INZCKfb3p2Nc3YLffdierqky1aXDQCxcuxPy8zI0gBMaS7FVO hYDu0se3Pm26DreJXQIhOE/s+jluqfONUkc1cFEDAq8tmx7GHwVuP7dtt4c3buV+zj78/vfZNS95 kY0APKWJclTsBLQxB47ylSEJEAVlG4mmsO/L2Ec+/An79a9utQ9++P24+TwH8MKKDdeWcS21RHgC CzkUcjNd5Ejxix6Qd7gPf+jt9u1v/qe99PpX2cc/+jF8Qpcg2TY5rYnRtEhbATOYRoeg7yQ550i7 whRQtnW0Y67dwkopBx3IOmkaKkXqcYNa+JW0TkK7ob5+OtgYcw6ZQGRLSwJnj6FhIrpEoN5BWB3d nUjQe60Sa7xJGNnMZ7Ju0qRJxGtMdA64cpOkGhHQsnkA5Ew5c2nUfc7cX2mGSD1P5V1EmiTdpzEe 0YxlCp3sClyifhhefdrkavvc1/7VOjARf+873mSvf/tfsoDBIfvpresVnANV5d9v0u54+OGNdCa1 TBLW8dyRIO49OfLXuyqfwm/8b8CHER4ndgmE4Dyx6+c4pE7aCTRcJEkN/SXNSVMih/S4bcsDLMi6 27bs3Gv3YmgyjIOg173qBnvrje+wkQjD8HwRNhCAII0dIZZvMIOW9zkExxhgWw0P/cl//qb98Ge/ tjPQRLgY3eOyqgqLJTHdRjUtL6kaEM5IikM6lQaFBtsyz25u3GPvf9977Gc/uwlNjI+iA/wagCVv rV2tLo0CWW15nANl4VKypFmTj/KrEcHwop1FXvfu3m4HmhusBN8V0qwA7phIQ6uClbzLMP6YPXOa lQB+bpVv6BWZOms1bgG71OYErKNQIOKpJRk7z3oYzkiyHxoesMOHD9hd+3cAoEW2cME8m1k/lwTh R2SQzgnjGWcIgltUYJ7wCAOwTyagcQB8EkteKXsoG4rBbRAuYk2IT2UhzZQYPklYyJbJ1be/9R1I 7DX2d//8JWfY8ldv+XN753vea1t3vdd2HGhxWilknLgoU4BX5XjPffeyDuEUJ+2vXHkWUwCiNiS5 DwWOnNQhEqHy6TvlICXB3xCsC0tj4p2HnPPEq5PjnCKBGoCAxCZgdpIUQNbYuNc2btpgO3bJg9ta a2xoYt2/0+2b//5vuLuswOINlTlI3zgSmdMdlizo1Bpw+jmExIcDn+9++wf2qc9+3qX3T1/7KnvR 1Vfj/3gSK1MxAUgfoHX8wCLiV+RIy9ABkeio3XHbrfaG178BzYRH7Atf+qK9EhPnYbjfAaiHLKCc ETALV6BORtkdjSCJGZDvYbWURx/dbBvQxc7RY5QCnOpvSliTcBqUxJQp9VbLXlEhazx8SI9k2EfR Jhkm/BSgm2JFbzoZpPK085tMCkmfVOW0Ykvg6S1uFVXVNqN+Nt7rFjquffv23bZr3z7XMWkVcfnZ yBCW0idaJKBJcJOK1O54ZzoaJ/ULRcc2D5BHQBGAzlFGkRQSPt+tOvMcWzh7un31i/9ih1o77aqr rrT6qRV2+9r1loJb1wKzcQBak5k50pzGX0iWzmT69FmsP1hDngMPfsEEpupdoKzy1/nRvTA9/jw8 TrwSCCXniVcnxzVFGo5rwi3gIOX5DYDrbcdR0CZramqye9ett13b99sUjCI+9/l/tplzFwB2geQn SVBr/kUwCpEkK/DqR9WtHDPtO+64w/7+Hz4va2Wc0Cds/vz5WA3WAG5QGpJFJaXroSRUDlqNJJcd tn9G++Ozn/0sQJ3EP8a37MqrMdA42OLSl2HyjtfYg/jyAuax7/oB7u3bdjr6QgYqM2bUuXJKIqVX z0L/Gh8TfbxzqK0XvxodcNnyh8z3dA8BGAbSo6RISc1a01B7WWnSJlVUOudNcaT8JFRMMVL2CACe 7mMiEvqmqqLOXnrdCqwh++yRTevtFhxBrVh5pi2Yv9TpeA8N9wLgJZbFj4cohYjjmLUKd8DxIvS7 zaUDQNYohiIhbE0+IqkjbadkvNLRgaHN1XiiS9iN73+/ZUnn+9/9BnvDq7baV34A/zymAghbDkBL rc/cyjGbN2+22bNno1pXSz1pVBBQLhopqP499RKUQwDWLkHhnwldAqHkPKGr55klTlKy09ulGTuV uZQojhHbsnUDa/Vtd2bZa+97AJuPrH32039vN/zJqxk0I+U69QpAEoBVg86O8Zd9Pd1IjHlrOdho b3nLOwDKDuesaPnCBXbDq/7YZjMRWIrELd8cCkZ/dBAUxdBA+J///qm9C4f6aXxvfOMbX7cXv/hF 1tRywHHIMgTJIwLLV7EkZ0mi8g2dRWLctmMLq66sw/pw2EnIklzLKytQJ4O2KK1Fe6HH9jP070R/ eJiVQtLSrgBU5dRei69qnT8J7+ogxAdoAjNDuCMjw7gBHbbW9g6c7+OTIy0rR/l0pjPjA/l4lmGK zMM72zrQWImhTbHEpk6fatvg6Hfs3IHUWgdPXgl/3uOkb3icIN8ArFSs6WbYAzAOwDmQYANPgKQP 6X+UMoYLcSqFg/0pVuReZnPnzsKA57uYyBfb6254MaOMjXDxvaQLtEVSj5MHateNakTJzJqF1SHq dRX4GKHmqHelQ/VPHbAfC5j9PV4MtwlYAiE4T8BKOR5J8hNBwfJMAGyGRgoINDbtQqd5nW15bCsO hO5CnazP/ujaa/GB8WmMTNAjEDCzuVG51MQASdETIyPQAYPdSMFpe997/sbuZ0FXrVgi4PlTaInr XvYy54ktKqmQ+wpG4CE8jKHlsf6Be+3Gv7gR4M3bRz7yUXv5DX9khw43OPNo6RdnUMtTXMToLPoE pv0D/bb+wYfQXIBXLsNZPsP2qdO0Kkk17yWZxBuy/QdxiN/bR4LlYyLQp07gylSOiMRDJ+hhJBEn RNGQD5lpi4aQdCnQEnzqmCPBfZied3f3OB5Y6nWjSLPFcO8JePconVIPXu66evqgdCZBAa02omEB gocA+zz+ljEnh0JxandQDzLMkftT8eSiFwSl2iiasS0o5yiK1vkcC9fiI0N5ivNCPxosi1eebvVM RP7LF75hk2bMtOsuPdvuvmcdmiYqc/mBRk2RIHKMGDq7OgDmSTZ58mSbOXOmo1aSaKIIfD0wFwKx zv21P/pUhceJUwIhOE+cujhuKfHAHASoYT10BhKhHO08suE+zLN32x2334P63AGbxhJMX/vaV2wm tITASCCnoTAYxiaQBWwRRPuxzKusSNqXvvgl+/o3vgs4yAcyoDS93t7+jrex2scqABFw5FuZOUsF LsZzsc6bNm6wP33ta3Ce1I/131ftmmuugVrpQrJkdRSkVUmyo/ijyNMjyLKPKO0A0vnGTZvgRmS4 UQKnOhkqo56OIgmA9tPJHAac4agBKulDx9CekLSoobwwV1oSJUkc1SPBJqEpZKEoLla+KsQrS5PB rQrO+9K+0AhD8epPmolPebcTlZIhflkLEqDjnnMsF9ULQHeh1VEPP7xg4Xy3/FV7e6dNrsXvCKAv LljlKIpDbk61AdMOnr1JuMpWu1b2liSMrC5hH8kYIoYwskzYrlm50tKMFv71Rz+1M1Yvsbkz6/CH vdN1XgTn0hUnH+oQpK8+a9ZsmzZtmlMLVCcQlMVRyVlAPB6sQ3B21TMh/4Sc84SsluOTKIG0NDUc 8DARt3vno0wEHrAt+GV+FBNt8Mbe+da32Vn4CZbDH6mfSZbkAEiAi0yayVNdOtWPJkEl/pNvtS98 4cvCX7CHFwCAs09faStOP8MSTMhFFAagqOeSUiMA086tj9lr/+Q1jpL49ne+Y6tXr0bTog0pc9h1 AgI+UQwuTvhX0RlSEdu7Z7+TBEtZaHXq1OmstlLu1v07jIVce1s3anryyAboITnKnWgccBbvLOBV x4JsDH4BuryjcigEJpWu4hEP7zdNlsoPtOgGnUv1TWqFTRis9A6W2+SqSitnDcOqCvyJlMZtODNk W1kxfEpttZ137rm2c8duW3f/PSxEsAKao5ZJyG60SCpJQwCIPh4d0YbmL+WnZziQSqH5IZ6enspy dCQRGdKk0tZLL/P2G99qDagWfu+Hv7TP/t37seJssNvue4Qv0VyhA8gAygLhvXsaHNUinec6zLrd wgIpGdEE4OxB+fEdt1ITbhO1BELJeaLWzPFKF2CZBWg6O5vxG/yQa8B33H4f17129tmr7Rtf+ZpF MeTISNITYAjI4CIEXALYNJN68Wgao4k2e/df/BXaHfuFvDwP6I53v+2tdtq55wEQGpKTaEnNhIMw aAebG+z/oSLXeKDZfviDHztn+C2H9yHxAcKgfy6rVVCYuCN9klqleXDP3XdaS1OzzUDzQhoIM+pn 0IkUWyvr+DU0NqPGhmUiBjGSsuMsHpuIlCL5xpwlYhxaQ5RFkvUEJQ0nMTEvYtFXN8nnJgCLOAe8 WaElwcSfDFjiTGAK2ANJ2jsRCtxxio5QPlIswdU/CHBynZUpdjxnpSxgmwT5+3oH3IhgxowZGOvE 4fM3UX55VPnK3TqEZSUVrmNwnQOZFN2jcw+SWTrNpFYn1wK40sZgZXK6FJYXTNgwi8DG6QguXnOa 3Xf3g6y0MmAvuHC13b/2brQ3SJj0pfkvcNYyXqq7WVgaam1EqfQ5C0UoHQ/Qirdw109M1+E2MUsg lJwnZr08hVTBOcA/auQNdrhNUqFr/AzzRRNowmjf9u3WtL/JNm1rtF2NLTaVZaQ++dFPWAwtDdls yLub2mngmU3wKgChvTNRl2BS6lOf+Ue7bS3qa7xTxq9mCN3jRbjtXHTaGiuCvkgRTwynRnHC4WDt LY325je+3jY/ust+9J/fttNWz4NjbgSBSRPgnMbdaA4dZknsGv4PYHxx9523OIlvZn29TZ82i8m+ MhsYTbhFZTvQZFCenPEJnUdAUQSaCVpMVeAqkNLu3uHag5KXGv0xKCXySgekML2KoZeYdT/QTqFj owOJJwKVvm4m/VKj6DHnmHSDKy6FbqlGoh6ELjrY2IixSqUtXXIaE5g7mFyMOuOVpsOHbAaSrPS+ FX8WKR8Cg05BeuBi5bFCZEUAkR4CyizrwsiAJcp7eOWwwe4+m1EzFQOf99gb3v4u4r3IzjrvdLtj LZ2AHIOgiaO0irbZvXs3+x683S22SdBAoyymG2PldIWrMlHZKL/Kn+4pPe53MlYgIVD7X8bEOIbg PDHq4RmkIkBkAbMDU1DaNzrpJ0sq7cawQ2sBNjQdgnPegIXfqL3shtfaCy+60E38SZc5+FZOfqJ4 j5Mky/JSHMtLonbL735iD62/x05ftcw2PrYLPWFRIGYveOH5TNAxORcvs1KkuAxqXEXFmEdjSfee v/5ru/OWtfbVb3zVzj//XGtvPQTwkh52J+VJOkRTAaEXDrfHbrvtNqRN1OKqp9uMmTNJT5SVr4dt f+N+Z5otEJE07CfyPBAHEq/nkI8CtO6rHPSejtoFPoUAJJDSLlD2R38uwBO1oWutrJLkPV3rvB0n TJq8NKu0Ci3eWl4LQHch3beyiGyZLQUcdwKUqeFB8lTLKt4ZfGfMJw5oE1Q4tOCAnCOp5hSvVoFx BaqRB5uoHgei3CZn1sSoZfGS5fa217/WvvWDH9qasy6wKZP2WTvA7fOj/KXQxtkET7969Rk2Z85c VqZhQQTSrDJQPoIOJygXha/dfx/EHP6dSCUQgvNEqo1nnJagdbsGjwRLu6dxpm0PTo3aOjtsPSuK dKE2VgV3evVLrrUkkqmG7lJrxqDbTf6Nok3h3Hpys4hhenvLLtu44VZ46TPsf1gD0KE4km4Nkvfp 8Mc1k2sZxssx/qhV1uArYzhnn/rUh+zH//Uz+9jffQT94Be7OKXzLICQ3+UI4recFyVZxaQdK7y1 a++FwpiCtFdjNawYogVR2zCnPnyowwGKikXALJDxUrGuC4E5oDGCd3Rf108EzgIlbQ4Ax8BZafO7 yk9Apj3NRKX0oaVON8IkndKge51odcQoB+RRJPwk+tLVqNpBv7S1uHQtXDDXdYgjlEcF5uMHWvY7 S74SOY8i73ASaFqISgosIV3HgfysTk8Hsea6UN1oKNKPX+iXv+w6fGQ/Yju247B/3iJMzR92edDb SpPyu2/fPszxDyA9L7GymaXcT7s0C6R9efh8e2D2R4UTbhOnBEJwnjh18TRT8vihqRqgjEgEMGr6 hw81Y+TRwCKt+23Ljp1AgtmLLr3MLrjoEqlVSIgGB0AAvhMhKgMN+cNIwKs2N2NFuO4OrNam2S9+ 9yCrdRxwkpYs1ZYtXWTnnHeeJcswnYaiKMJxUDGTcV/8GkYm//RVu/Htb0YX+m2oubUAEFIxk9YD EjlSoSRIgWdX5yEm/zZYOfxs7eQpVl071ekdH2xBPQ6NiCyTmQkkeQGiB2YPwjp6EA7Ms8UxPx6w BeRe0la5aNdWCM4696DsjwIy7QLnLGskpki/wlH4XhIV6HX0YHwChy0T7WqZrdMZTqub5ZbnGuzv s9mzpuPXei8Ueb0NZfrdoqwzp84Ee+mgkOKlECcQjqIbLSrDbxAO4pmCdJLmZIYJSKwya6om2Y3v /Et7243vxVS8EuMZeG3U/zy4Kn3DQyO2A1pFK3fPRLtFi+v6Tky/CeVR7ys/flMZ+DD8vfB44ksg BOcTXwfHNQVeKgIJoR/6bd+e3YDsIVuHC8oBDC0WzJ5hH/jAB5zEK6s0+byQqCaJVgDonGbmUvYY k4cNe7dgEdhlKSbDNqDCJd1aSGOn+nbZZZfYrNmo3xFPFtPrqdMq7c7bbrbPfPqzTEhNtze96U0Y hAwgSTP5B7c8KmIbGkPaECkk0CyTXQcwIY8jlc6auQDpswo/0B1Y+LUD0EMOLJJoTwhPBTralT4d PRiPPxa+J0DygO6BWQCkfTw4e9AScHlgPgLOkvDRwRYYaxetIW49lmK9RTzjHUKFbub0aVgnDllF qUrP0DmuheIIHEvNmTOdpal2W930OdaA2mAFWi2V5VWkAenZsRlB5yrOWXz/EZCUdM+oRo6bilUr lHP/0KgtXrbcXv+6P7HPf+nfbcq02dYzsN3FqTwofRyc5sihQ9L/7kb9kcV0ue/Lw4OzysSXw5E4 XUjhn4lSAiE4T5SaeAbpUCNTY4OpdENmB0BIc+2stNHctM+2o2Z1uLVD8pjdcMMNtuaCFyJRBd8E YA4ASv8XsOjv7rDtWx5Gqm2EfkjhOrOMtQQfswMNbU62E54sXjjXzj3/HAeUKYC5qLjIdqEy9+EP /w0GEYP2lS/jXW5yPfHvhWeWCbGG1Bp6Q524tEaQLnudr+bpM+Zh/FJmh9s6rbH5sAMSSXXy8xxo VhzlkwUwAmS/l5SUONAR7eCB2YO43lU42gvBubCYBWhKj3aBlq4LwVnnArZkpsiBsqgNhSuAVpgy NEljJt6O5suM6dUOSBOorKQw/a4nX234x2jHUGba5JmsAdgGdZOD3miwJQtXMoJBYsZPtugk1+GR BvH8Xn5WmlTWCXTUDWdGWqWcKrWuwV571Q2vtA3rHrL7Nu5hRZQKNFj6XT5V7+qQWlvb6ZCbnd9n gbPy5vlmXyYKX/nVtYtrrNMKgbrwF3Jiz0NwPrHl/4xj9w1LwBxsgmCkZryq7d+P1HywwTZv28Nw N4tRw3J73Rteb2mkV2fKDH0h1NSknOakWg7uw+n+RgB1CFUzZDmAdWBwyG76/TpUt9AeYCHX1OCI XXDe+TZ/0WIbSg0BMUxs5avsi1/4HObgW+xjn/iQveIVr7RmOgbnuhJqIkN44r5loSjJbpiJsoOA R3XNdCsurXQgdgANEjfEV3qQjgUa0mjQeSEoe58YOnqQ9hK0f1cAdSypWYBauB0LnD1Ae0BTPHKt 6tMgN6QKW3HpXJt0jbsYlSQmV5FujFXg0uXsfwoO8aOJAfIKD82/zo4BNCja0IPusOlw63hOYuRC 4VMfFE0AkoTnahLw1CYDnTwjCInZzqSd8pO/k3ezYO7+v/oAk72BFovLG5UYYSJV6d21a5edfjrU Rj2TmaRV4KzORvlQHrXrG//78UcXafhnQpRACM4TohqefiKgJh2yukVMaZi6lG+K7h4k0YP7GeJu sz37D8KNltqrX/nHtmz5SkshlcqNp7Q0BFcOmDFO2b37MUAC9asYntwGWRuQ1U/27Ntq+5paMajg p4LBxDQsAi+58GIAqJTGnuIYs5/91/ft3779U7vu6ivsz1//eutg1ewo+svis0ehBAQqEvsyTARK A6Th4AEHcJWV1daCRN/Y2KxUMIqX/nFAR8jsWpZ9RaxOIvCVlOzBuBCgBTy6L9Dx4OykWgB0vNQ8 XioUIGkTUAmMde3PdS2pWYYoClvSchoTdi09lSJPkqIVXjTRh5MlFrwdEo0Bl4tDp+Iiwo2O0KH1 M8lZh5rgCBop/UzgMTJAj7m7r96qcbZUzohBayjKoMfxzK42AnBW2G4Hl6UFE0mSPsZGpekYaosp q5+10N70mlfYuz/x+eA9fghZqA+NOBKJImtoaHCrvgioFY7yIHBWvrSrjFQ+47cQpMeXyIm7DsH5 xJX98YmZhjeGMQ5U5Yg+Ape8b/cunLXjpxlrwJLIoC1duMSu/ePXOOMG+WKWPwhG0U4yO9C4zw4f hLscHUJPmRU1skiE0V72rN1y8wbABtazjBU4ugft8gtW2aKVywATGWKU2oP33MxirB+x2fXT7H1/ 89f420DdDOkaJgPUG0HbANAA4EaxeJP+cyPSuSapamun22EcFjUckIQt6z6AmRe8VOpB1wOyVirR uYBZQO2f69oDc6HEXAjMAiIB1PhNQOR3gbI/F3gJyBRecD7WYQBwWj0lAWjrWRAHacZ/ciwyAv/b a4niGoujG51krcXR9ABqiVHKZqaN8KwdjZn+3hErjVawKjfLa6ENE40UuQ5BFjxa8SWG5z/VnyYN 5UAqOwbcESYFpRUzwoRqnE5OHcdFV19jf7bxIfvmT2/GgIXRBgYyyocsJQ8hrR9oabJlPYeR1BcE 9AwdmToZWUJmMENXHvS+ykebL6MQoMf/Uk7MdQjOJ6bcj1usGvaqKcvzWhoAFFL39nayQOsB24Pv jPbDXVaFscRLrr6W1UDqka5Q0pBURnsUqHccarc9O7dYcQIHPZhbR0z+JFIAYC1e13bb3gONtnLl fPRnd8FvRtBtPhutilqAt8haGrdCZ3yViadh+9sPfhzT5ZV4qmt0IKMGnkJKlj6vJgOjWPUdbDro dJZrJk9z/jGam9odMHhJ10u+HpAFvIWArHMBs7+vawGz348CZiAVCmw8MHvgKSx4pVHPC4HZgRsS pYBX5x6ode13xaPvgl3nQaipVMA3lwKCgeYLOsWEMQptMWfufMzAB5Cee+yx7evtiktfAmBjglIW gGOW9zR6yKuC2JQ2GaDnMfZR2jNYT4qRjgPieawJwYeWes4AACAASURBVGdUEcvthte8zrbsb7P1 j26FIuG+eH146hSqi00HGtxqM44jB7w976yOR1aTikN5VPjHKh+XkPDPCSuBEJxPWNE/84jVuEQF SD1Nxh2yFBSd0NR8wBlEPLZ1D9dR/GJMt8uuvBLPblARvCVKI0GDVMPsRM+4LInUiLTILRo2Tntw 7xmJlNidax9C8htlGajDPM/YEnjmpcvnYPZcwjD9sP34Rz+y+9dttosxZnnZK17ByiGHGYKL/cZf BBKaJriyaXwiE88gw+vOji6bVDsZbY0IaWyHf0XKg3MV2Hnp14OxP0pi9tKyv6ejgNzv+r4QmD1w CnB0Ph54dK2y85u/1j29r2MhOOueB2YdC8E5iCMISeeiceSy1HWA1Ec8xkonlElRosKWzFuB34tO LDT3WwvWkgvrl/J+wAkL3+VIyhmnKM2UWWBLqElDABypOegDRJmwq7LoYRcuW2WvuP5qV9978Yud oJNWOrJIxoelscGK6JKypfInUFadC6Rlbu/pDeXX7/o23CZGCYTgPDHq4SmnQo1Jm3SH3TnYrIal yTapqDXAOR5q7mKJqQg+NM62VSyaqs23PQHO4ZZmJCsaNL+CFAAi7Yg0fKbAp72zHUfuu3jebz3Q HNIqWH3GOVZXOwPXoR12992/tv/44S+sqrLSPvnJTzrwSKMiJz5Di79qYkxuRgUG8oHRiDpZOebN Av2DB9twDAR/ixQoflTALMD1u5eOBcrjwdm/46VsD5aFgOkBWeXhd5f5gj+FIOSBSY/9uQdpvadz D2Q6V5z+vq8Hx6vz/dCAND4YzWBO7cCU95W/Uaz3SllhJk9ZzINn3rVzq82rn8MXQdgCS/HZWbhj waM6XZWdJgQcOCsvkqSFy+y6J090pM4uv4QFC5qa7DsY/vRhVSk/1gxfWAm93a2NqMVvi5JlDpQF 0E6XXeBPh6y8KE/hNvFKIATniVcnTylFHkxosqjRpfFf0YIEewga4lHoCfyy0bgvvvhilp5i8omQ 8wBHnMaoRnqoqYGhMAu1MhQuLimGq6TBj2jwnGF9vp04LMLkGglMUDAFP8pLly/DMnAqxij323/8 4L+ttXPQPvuZf8C0eAFxtiBda3VsjDfQQtDwXAAiiW1/4y4k8ghLSlUgMXfibhOvcvQIUSYevfQr IPa7B+RCnlnPxgNzobSscw+Y/ugLUtd+U3kVXuu+rj3I6tqXqX9XIOlBbDw4I6eOgbVKNwBUWT8K YilpwqZDkiFIkk4rgloeo4npyTo71Nhqe+H6VyxZ6UDTxymcPOpWlNDpwLRFsEbU8jJRtF+0TFUU nXFNEbLIo5WyNNhVl1/KxO8++/Wt9zpOvxiA7ujscyp8Wki3qrLWgb2kaHHOypPi9Ecfv4ts7M/4 cip8Fp4/+yUQdpnPfhk/qzE43Vg4TTUyORRqbj7A3oKWRYMD4NW49LzyxVc5j2quIfKeAKCXyan0 UB9AKklKjtnFEWP8IY9zKFfct+5B/D9Db0CZAAW2YMEC51Cnp7fZfv3zmzDp3m1LljHJ+NLr0Vfu 4R0tcspEFXSGDCbktY4TgPiwdTDxVzdlDhokI9bR1Q7SoFZHGoqLyh04e1CWxCxALtzLysrguvHd wX0vUXupWYDs+WaBZyGACljG76qIY9071n3/ngdjhV0Yn9KgzsKn3XUedHClpeVjkjZlAHZK44T5 TgeEWpwgyuK0RfgiWbhgPpOju5lAVX3EHUCrflQubg1Cyk5xa0ZBHviCjkI8dwCsokOkbSNfKKMC fBzyX3LhC1lDsRpqiVEJ6ZUE396OUQ++qSUlK3xPbfijB2V/VFmE28QogRCcJ0Y9PK1UqEE5wHXg jFvLgS4k52ZWOdkBYGpib8TWrD4TYJxGE5d0KJUqZuhpqE1oTYziczgOoMYw1RaQyktclIkj8cH3 3YffBhq/htV6Z82ZK/CvXGYPbrjTbrtjI1Jb1N71rnc5z2sygnANHws4rU4tX8TckA9QAKiZBVdn wHtG8ePcayNYDBYVi8aQRkNAZQjYjgXMhYDspWYdPTgLmJ8IlI9VoB5wC5/5e+OPAka/+zgKAdpL /KIjfNpc54HfkuLSkjHQBTgpYwm9I3J4lJOv5iKk4KTVscjBKAu7Cjw1qhFAKw0OJKkLgamrX1Ek fAuJzLWkXa4ZnaS51ohHkrB8fOTR8li0eIGdt3o5oI0uOTSVQF7OmKSPrfcUpnYBs3YP2CEwF/4i Js55CM4Tpy6eVkoEuMCr+1YTge3tbegryzLPrAp/D9ddd50DWCfI8pb4yl5MsuXXIgmtkMtj9RaX JMvkVbQKHtNYgWQHPhswtcbXsKS/uroaW4NBQ1PTJvvNTXeip3wY3xwvsCsvu9wGWCLKNW6AWFoZ WuJO0ryATTyoHN7Lt3An6w/24a0ukSwnvjI6CUAWX8te8hSw+d2DsgO7MbqjEJQlwWoXWCqe8cCq wvD3XME8hT/Ki998GDoqHg/SPm4dffr9UR2G0q1w5H0uiaQrvei+4X4SJa0VgBeAle/p+rr5rH3Y 8Li8qJNTfC4dTO7F6SzVSLlDx6f6YEpX1U0Zp1C9c2nkhXhxmVXV1NqZKxYD/KIwSDPxyNWqwFn6 zpoIFCB7gxRXb6SzMM8+7+HxxJdACM4nvg6ecgoKG5Uoh3wejQB0ajsOtdm+XbutCfPdDFZkS2fN stPPP18DYzVtOE/+sKZd56Fehr6DlisWsJVxs9JJvql8F40/b488gs6zDFqcBkjOTj9tJT4hiu3u Wx9kJY79Trp+9atfiTlyJapxXUjJaCmwtp2ojVHSkgPU5Z+5o7MVT3VTkRpzmI+3Iokz6QggJ1jf T7ynQHi81CwKQ/f0TIAsoPNS6nhJuRA8dX6s7YnuH+td3fNh+uf+WkcvSetcaXESPHkRSGv1bXmc k49nB9DQGylWksnEytwoYRDtloHeNiKQvgwGLIw9ZEHYenAPHuf6yXMg6arzRMfF+MhJy8i6fFNC EaM3TZ2MOulXxiYJKybeqHrdMQqpGKOWOfOX2LKFs5GmAWJGMV1dvdaDy9FMigVo+SWonjLyqU0n 4CXpYPQVgLR+Wz7PvgzC44kpgRCcT0y5H7dYpSUgbrEfXxWSmrft2In7zgHANYNb0Gsc56kGBzuB 5kbgha67qwlAQReXRqpVQOJjE0RFrByyd+9+qIv1Yw0UoRvp9LTTVtmufdvtttsfsN7+IVtz9gq7 7NKrUNPqdFKXhsyKQ0NlaWzoXL4kBLIJ4uns7HRA4BZbBVAEZuJmk2PgKwAulJa9xCxwFtBp99Kq B0h/FJD4zYNK4T3/7Kkex4dRGLaXoD3NUdh56Nyn20nbGKPkmcirrZkG997LuQhoHBmxV5XXuDJq RWsmwXcCS4XprINIsOJU/QZ7AN4xOAtx+xGp0wG2ekffCdQVd3V1tS1fusxmTJvCM7Rw8P3R3x9I zkqPJG+p66mO9J2A2e+6N35/quUWvn/8SiAE5+NXls9JSGo8ftO5pCFJz9KWaEc63X+wxalhaa27 q6+7Xi3c6TWLAtanHSz31NXTBFBjiYZhiFap1uSSwpLRyIPrH6bRBtKT3pfHtUlVxfYYq3U3N3cz RE7ZKzEDn8TK0P1Yvcl4Qg1eVn8OLACN9PCQW++vurrWAXZXVw/PAp8Z6gCK4EcFwJI2veSso3YB mz8Wgt54cC4ES3/uy+V4HRVu4aZr3yn4owdo34n49CvtDmiFxfSM5ZUVdDLIxGhZyMRaC9qWsaJ4 aWmx7dm7y7lNdXQDwKlNTvmDjUqQtK3VUsYA2T0HtDUBrA5R8fi9vLzSrcC9aN5cJHlRKhn8owzi 0Q51SL5RXauu9J1GRoXAPBZheJggJRCC8wSpiCeTjPHA7BqWLPCYHGrFAKQB3eaDrHaiRrdi6UKb MXsODViTfVJbk2Wg8R7AnID7RIqCXBhroDRUAKS/b8jW3nO/A3uFLTBaMG82zt232O233o9hyYit wHnStde8DM662WkLuDSA4pqkkoZGEZK4l5pLMO+WRZyA4Ah4AVoCX117ICsEZt0TsHlp2YOywMcD 4ngwHg+iT6Ysn+w7TxS2T4PS5IFRafX5Uj507tyAwueL06+eUuPKSd+4jTLTatmth1qc61WNYCTN Bquga/JPvPHYJKEr48dTEQpDvwntqodhnFR56Xn+3Dk2Gb1yhSeDIPkCyeDsxIOy7mv33/ujD9Ol L/xzQksgBOcTWvxPL3LfkHTUJsfuvfju3Y+ptVYykTGDJgIrWN9O70j+izHu7e9liaW2RrQkMCtG lzmB5CozXgG3tse27MApP/rKfONBp37GZFu/fitqcINiPwn3pW75ozRqd5LEBAoyIQcmnFSoiacu VjGZVDMZq8BRQJwVQ6A2vBSs+AKpuchRGYV0RqHELGDTPh6QPSgqvdqeCDyDp8fn77Hi1D2fNh09 MPt06yiAxkcd1A4LEkBjFCXK0XwppcyYzIwW28BQGil3Nk6ThuhUWxxnrbAEzpKutbmipeA9mEqj RrtGIsjL+PLAN4cmCd1EIwe+q2LllcmTa2z+7OmuDFUnMk5SGK4zJVAfnr83/jflf1suEeGfE1IC ITifkGJ/+pEWNiKdq7H1dLY5aXXP3gOAQeDQ5qyzz4W6DEyRg6act64OpOocFmQxlg7FHFjDZKm9 SZoSObL23nVIgahl8U8NfsqUKQDIgB3Ad4P0cSfVVNi1116LRkc/E4qYgQucnfQVqGfJfKWlpYVV UcoA4xIAvd8t7SSgknTpJWIvMXuQ9lKmfy6g83shAHqQLDw+/ZJ86l8WxluYLi856+jT7cFZptbS 2lBdxVj1GxfQrixEB2VwVFQG9y6+uInVX/StwFLfylxedautsM6DVFOvTMLqviRibUrP5MmTXYes Trl28iT8ecy0qVMmO73nNO+JNtHmpGf9dlTTHAt3Pdd1uJ34EgjB+cTXwZNKQWGDKWxM8k/RA+hq 5Yumw2gD0LDmzKq3mbPnOqCO4gRH1Kkc3Tc17wgAmW8EJEz1u/sKrxk6pPFAi1VU1hxJT13dZNu3 /5ANjWLxx93rr3s5/oGn4k4Us3BAPOeMTQB5jrJaE1DIGq16Uq3TVJBDJAGNQMeDlZeOPTD7awG0 l671vgc8D4IeGI8k7gSe+LT4o9Lo0+sB2nc0MlGXvjHdmDNjH0a3OSf+WPdjKtWoVVRUMbna68IQ IEcxChI4a1McwcRfAJgCVFFI/AmOY++o7GUxqF0+oisxq59UXW7z5s6yYkYrWrcwPYy5Nxoffhkz L0X735PiK/yd6TrcTlwJhOB84sr+Scd8rAbj70lToquzw1rR1BjAX4Uq9Kwz19j0+plBU2VIHEW/ dmgAh/DdgXSmiGUVKCMV8ZEyFhFPPIwULUpCfh1Adjcs37sXaZsmL73kyy+/EopCuCC/DkPOuY48 p0kikwaBvnXACiAPpzI2yHp2crGpewH4itI46kND9zwoexAXuAns/BaAk7+aGMdCMFOKCkFaaVd+ fQeTTJRCYajjQRUOT3HdXX2MRrDu4zqHbuMohjsC0o7ObmdMovyrPAXuOpeanGyBHEYjhQfcPhDN qEWb6sK/L6lb3HYSTr+EhRHKcHRVB71RTFh6TwCutIoH1zyFB+fC4/i8uUjCPyekBI62ghMSfRjp kykBNSgPxv6o79QYBwd6rLO3h2WkDuKPWTDKMlJLFuJLAZ/BWjgUMJV+cU/LQUuyfJJF+xhm53Al XOSc8YzARSKrWSurdLS2o+eMVKZ2XzOpxrrQyx1iHULQGQvBlbb6tEU2iiaGnmuySo1ajt/lajTD qihDLDZaXMRCp1EoDfxnyJNa4DQ/4JylnRE40D8Kyl5aFjhrFyBpF7gp3wI7D37++GTK7Nl6pzAN 49OntBbmQedJdm3xRAkIiyk370gqVt3l0ZZh5UbWX5xhQ32tLAKLBz/Mu+Pw01G46TyaHXIDClHF 6ATpXDvfi47WBK72OCMj7VrRXPWhzjJJ2UlVUY7+p1SiEYPkrMnc4VFULGOo0Wnylo5Cdfh/gfH/ 9fzZKucwXI2pwm1Cl0Bh4/DnXtLRdVd3O/6Uu5w1njJSXJxkKLvA5SlorDRkwPRgU4NrvN5iLwM4 CIg1QZeGQN66dQsGJYFkpY+lB93F2niIWS6sCy64wObMmeP8MSteAZMmoXSubWBoGCojwxC9Aqok jZrdgANYD7oehHX00rLO9dxLmQIuvxeCoItggv7x6fRA7dPvOxmNKHxno/ISneM6Hjh8ec5IQxnV 1EiLI9BJ1jOBbyol73L0rAWbr39/VP0K5LXLOMXXRZxRUUkJFoOstiKpXIYxSp+orcLfjvSdde3D 898XRBmensASeHztn8CEhFEfuwTUqNRo/FFv+cakRtnf3+143rZOLPVo7lOYFFq4eJELDKxzm1bA 7utvx6cFpsBYmkUYJ2tSyDVOZLc0lmztGIoIbzXkBXWRyAHbzABxRWjgFXbeeee5YbEcJWnzwCDe Oc+9vt4Bvo9ZcVk5Univo0skvQlgnAQJEB8LmD046z2BmMBNedXut8Jzf28iHX16/xCYNQJA+wI6 wjkzgj4qxwIyCUWkSUB1fFqFXAAqE/w0tvPF+B1RmfIJFa1ycCfUgwdRRkPUkcrfyVaMWvg4KDfJ WnqdTdoexagyVk1iBCXNHMpWk7+aSJTVode0KQTrQnD2v7kgtPDviSiBUHI+EaX+DOMMwJkmh0FB N3yzLPDUuAUS8+bNswWLlrgGq4YHtGN40gHFwVJKCflqKKEJAwQMrZ1DfHSdR6A7+nGU5MhN0iaQ GcRoITNmCLFq1So7HzPwHlT2FMcoRgxpjChAFye1jbDkkiTnErQ0cgBKHxZp4qg9MBeC8/hzvVMI zB6cn2ERPeufqxwKN137XXnw0rIm58ThaySiiThN0MrcPcekrCw7pTETLxInDA+sFWNokRrRqEzk g8OH6eOLjJlqK24P0h5U/buaT5D0rE6gAidMFXSY6hgdoI8Bu84F0MFvKQB7f+7D88fCfIbnz10J hOD83JX1047JN5LCxiPdYufQBlW3ffDNQ0jHtDSbhT+NWpaRoq07gJAmRUfrQSehiaNENnWAmqGR u/Dw0XD4EIvBNh2m8QZJzEtvFuCVFAZDameuPt1REU4jAGld4KNN9IU8pgnktZcyjNZEoOgRLxGP l5Y9paHn2v3wX2F6YPYg448usgn45whgFgCz7nlwDkYC6nywfMR1KE8cIKvTc5wzkrTeV5l4XWRl k1vuuZ45EKUugE8eBCMo8crOXSgjIEnmikfvSirmvzv3nYP0oIvwi6L3BMYaLWlTuEqDjgFQByJ3 4W/NvRj+OWElEILzCSv6pxaxB2Z95SWe/n7oA3wnHDrU6qSuGEPZBViGSUOC+R7J0rwMiA90uuat BptnAi8Pxxysig25SQPf23CACTxoCSd9O4wnlgCpZSRy9dVX48io34GAGrQoEYGBpEHFIZCWpFZc VOqoD70TPA+kYi8te0B+ImlZ32g/mTefBx0dQKLYHHQ8cMmYrQsIA20YgBR6gVk9R2GkWM5rZGSY ssW8G3pI78mYSICsui8MV+UTgCjPCWI8wLp30XGPoV8dZ0UWlbvuSXdd9a6+dTwwKzwP0kHYJ3Mt nBppD8F5gtejhrhHN0k/NFRuCKDlRL0P/VgtTSRnOQkmn+bNn+uAGCEZaSuP9WA/nHSrAwppbcgr naQwqVKNoPcqoJRPYWGi3id4dy6ZGai0M884zc5YtRJVPPhngENAowlGtxQTurNZ0tfX1+d8Q8jo ZWBw2Bm/KFxZInpAlgSt3V/rucBLewBeR3+KApKTaRsPZkq/8qSjz6fyo8nBDBoYOUmwLNgqL35R fJyoLhPoPI+kxNtLWg44YyctO9758eWh524XtqvCOLpdkUiPWTXMJxGkZelMxwFnelFXr+nREafx oe8URnB8vPSsYMLtxJfA0RZx4tMSpuAYJaDGql2bb0iSXKXb2g8HPDAwBL0xRCOPO7Pd5cuX0ug0 K09j5F8rlmeyDNTknAsH/816LkDQO5Kk5AynpESThcHPQe3dERoAwyUXX0hAuiGDFWgMPvLp0fdp dKt78Z8hLQQ9GwDEBbgaqutYCMrjwVnA5YFZYXpAU+y69vHoeiJvPq2FeTmSHzhlgbKkVZWHaIU0 y3gJpCPcd/6aeVgC9ZBCrbGEchM3rYlYSbfaVO/aC8/9Pc0fFG6Bc6Rg3sCVL9KzLBSDToLOIRM4 qFLY41XpfJiF4YXnJ64EQnA+cWX/pGKWRZdvmMEHQZVlkYBSQz3W1d/l1NtyNPb6qZNtxsxlTnLK agVt2nNXy14H3DpXWKN8rjX+Mvh1MFbaTo0MIPmmWUNQawyKj5QCj/acVZVW2iVXvsiGcAOaQ+oW uDipOaAtnfmxlqiKM1xPFldiqi3ND9aoQ4IWUBWVlDpQKJSWvSSpsPSOjh7cgvwFwPz4PPsnE+84 vgPxoOw7GlETAmat9RfHx4b0i0UFaW3GbIYHODuKYU4/hLc/1NSdz+24tDvQwnAjHUtTbxJx1dX6 zoxL3tFuMZ5TuVLMc4BO+EqD4oijR53I418auiuOfjPQTEfMnAHxCZyzeLUbT2+Mp0hU4uPzOPFq 4dRMUdDST828nRq5oqEJqDwf6DOlyTntra1Y9uHYRggg3wrFTABpYkiNU0Pdrq4OJ8X6BqawRpHM 5EpS3LQmFeUPo7evW6QGwWcISmJ3zubOm2FTWU5Js4s53s8h9cnMJRKV1AXdghlyKj1sZeWlrgEP yzxYwMBQWoAsgDoWMOu+By+979Pm86bjse4VPp+I5+Pz4vOpo8pdzzURK6lZ1+qYtERYnhVOVGYj rNko389ZLAc1stEzab/k6FSDkUwgQetbPVcdycrQA6zKxKdBIymFLz32hAxbYlKh5FehmWL2Qqk5 CE91f+xNz8PtuS+BEJyf+zJ/WjH6BuRBWvSBJpDk9U2rW8gEu65uigM9vQP8uWFyW3sLElsADgpD Q2bRIjI8KS6pgI/ux/dyH/fUsNlJXbD6s+Fkf6XTy5U0rO1II5XpL8PjDOp0IyNDjm/WrNYQ3tUE MgIFgbLilaRcuDtA4rkHLg8mhUcX2Un0R2kv3HTtOx+BpM+raB2BakApyCReXaj0liPOeCiFlaUo EEnMoowyiNKSlh2oAqweoMUpB+WlI3wycfhrGbAcjTuQ2qO8E4+WERNxMTrSu85xEvheKCkfqd+x zIy/LsxjeP7sl0AIzs9+GT+zGABUNaZgU6MNTH8FzuKdpWMcSGBxm79gtrMu07v6oqcLk+B0oGXh JC1NBPJNsLPQKssqadHVUYxQNGOk0bMojTySmiYU16zBs50a8hj3KWDPMmwWcAhQ0qjNSbtAi7Xq niT5QtpC4DMemP1zD1g+b/6oFJyM2/j067oQJFWgATirgwy4ZHVgqim9q3N1glrpRGUUlcaG6CUo i8KwGbdQ9l6CFtWhji6QkjUhq3d93C5+jYJcV624VHE458fXivgpbyHoAdp3/EfDD+JRfYRArVJ4 brcQnJ/b8n5KsblGMobLanC+0Qigh9FvFsgOOJNrJuAYvs5fMMc1uKAxaumqTho6cMsf/73A1U/s xfD30NZ22BmXELhLm58UrKychKXhUobBUosLaJUjwOyWWooBxkwski5JbgIcOfFxBhDEpw5D8QYS 9FHpuRCUPZDoeKpuypsHaZWJpxN0T4Y61IYDSkdroBaZYVJAnaA0OiKsA+gAVWAKsKr+Hc0MIMuX hnbdC8qR+hNdofuFceL9jqjc7kpZox7CPirBe6D/w+OpWicnS75CcJ6gNaVGp+0oIAeNU9eScCSl ilaQOp1oClEIU2prHDjLQEENcaAfcGYZKhmfCAy0RJI4R73vhr9E0dreyoQgDncYSgfKGoEBytKl i23evDlMHhZQGoQj029BhZOckfSKkmXu3uiY3wYBg0BZu6c4CqkMnRcCtPJ4qmwBSAbgOP5cefad VdCBaZkwgWxAbZTD22slmYgHYoRcaXIE5ttBCen8aLjwF2OTxVpIwWtp6E1ZISo+ve/iSlD/qOrp Ovg9UYPUt/8t+d+YP54q9XGy5yME5wleg4UNyA875SPBTwiK5xUQuxVFSqEXNGEHQGqduLaWgw6c nSRNYw2Gr7RpLNSKmQwc6Ou3ttZOVwIyjBCtoWWtOLUXvPA8m1JX6yRiSVkMxnmP0J3UJSMUqeKl MRHG2xqu71LO450mA7V7OkMaCh6oH6/THIDHUSCb4NXwlJJ3FECVvwBQVSaSlJ1nvoQm6Kgr0USj dJ5M6lUAzsNo32TwTOe0M6AiNNkXUEgBqAb1J1AN6iJYVzA41+9EmwA/6iYQBdJcY57v6gQJWkCt hWWdqp7C56kP0/+2QoB+SlX9rL4cgvOzWrzPPPDChq7Q1IhEZ3iT6SEkaG1FOMzJyrAEb2bSoEgN j7jVuCVRe45TDU9O1+UyUvynjEf2NTQDvAAzK3EjXzmpSw5z5E9Dkpm+PdJwAWgBsltBhYklWbVJ DUwAIo9n4j5FYxRKiZ7WKJSejwXMyufJunlgVPrH52P8tS8HAaW+i8EJK+vy+9zbO+hU6gSeUqXL ocXhaBDKVx1ssAlS5aNDFoRUkRtJMdphQrgwHUfOx6RodbgxTPU1pyDQd9+B66pbX8dH6pkwj3w/ Fmt4eO5LwNf4cx9zGOOTLAFVEQ0PMFTjEWExjG5yNoemBBZlWpNODbmEybeBwYz1tDVYV/su62k/ wBp+0qooY0grSz74S8A2F4fXJIxkooznbThA0uSTWj/PkfKyTBiJv5a7Sa3uLF1oSc1udt9xzZLQ aNB4UEvBObv2DtUxwsSgJDRJykl8ResYdXynNAaC3Xc0PuPjgWv8tX9voh+PlW6fVx2Dzgi+WbQQ ErSjIBh5QDBZFv1jjXakEy7OfgiHU1rQQN+5y7IrOgAAIABJREFU2j7SaQUm8wLpHCOVvBbnBXid vjNgqjqJIFFHAHRHUYkywcm/QFnxOalZ8UdlmSjd6YD60m9KmwdjHX1+dO5391L45zktAVkbhNsE LwHXQJjocQ0TkJXULN5YM/XFZdLgiFopanEtTXtpl/KdkQXA+xCnMdWNVQGszPzL1Bop2GlccNRK z/14j1NYrm0XlMHs2bNt4cKF7pmkLNEWGkofbcjyqIaPBmhPByJj0pdAyNMaRyXEgM7w14VAXRDl KXXqwe1YR+VfmhKiO1wnR13IFL4McJbOuSZr86XBvEIU7Qu3eC6vBiCp34DKXICqXTrOACigGwOo 44Qd8Mr+OZoZjJxUJ9qUnuB5MCGoOszni8fCPgrEiivcTnwJhOB84uvgSaVADcY3djVgTewlcKpT XVJpB2N91tzeaf/z69ttcs0Uu/KKCwBrJNksq4ky3BUH6Rolkloe3VnRIkkWG+3B2ZFU8dQUfdgC 0QULFlh9fT2aHK00XOnXChxo4K6DCIBiNCODE2mCBM58BBIJzIQDEA54Zw/IOgbSo5ciBRJHdxfB KfpH+fQdUl6dF6py8kql0Yis/qR7rE5TZSS/F+osda57EZ4Hcq2vn6MAqvKW1o7EbBe+qokRjPxx a94gKF9RVVBNcawEGcVkHIfNaKpAWta59gD8g07Bn5+iVXLSZCsE5wleVUHjARdppYHkmwVQhwBY TQTBVUp8paEPQjHcfu8jNMUIqnGddv1LLrISLXVEY5URQgRrPklbug5MeA0/0F1QIfhxZlNjVlyK Q8CscxEqjvMECGjxRxqw3peOc5S4BQwpgQ3hehAWpaFhtL/24KSj4nk+bAE4Hu2A/LU0adKUraTf qGbsKFcRDJJu5Y9EE7zqPGPw9wJazQNEeE/lW7g5VbvgKWGJNnLYLDVmNoWo5a3oOJkYZql1tyus YPSFRM5TV7eEq7D9rq/Hx6V74fbcl4BqK9wmWAn4xqGjb9RHQI1GnaHxatME3OzFUy1RjMOhnh4k MqRgnBjt2dtkfUM0+lLoC4a1tF1Hgwh4fYOUWbAWZBXoK2wfpwDijDPOYHjNwq9sAhFZDAqsgyGx GrLCI35UvcRji2LRJsfyAmCBstPSALx1XgjSiutUBOkj9eNK4g//uHyP4WsgFavgg3LV21pbMY42 h8y7KdgjZST8FgOSZwSkOlA9+boK4lQHIJJaZU/X7AxR+ICwDV5bfbfqH5nYHQXi6ghUl4EDrKPA XBh24fkf5ia881yUQAjOz0UpP4M4fEP0jUUNSquQqHHJgfv8uYvsogvOxfxXkSCB4d2sDyc6HR2s 5qxG66TlYDJREpSYCal0gQDOg5y+0qbwBZqTJk1yZts5ANc5ZnfgLCn9KDDoXek1CwwEJE7SA4SD hl8Ixl7fNpAgFc+xQOxY9/Tuybb9X/lQx6jOUBozAlptQYeHaiMVGNyDiGDU4cNygEzZu61g9CK1 R+0RUVeox0W0ki+bwpOKnZv0MzpYXMRaRBo2MtumHnmmid6s5iaYBPa/Kx3DbWKVQFCjEytNYWoe VwJBw/SNSI3VOWSHOpBu8/T4NJv7knk2bXKt3XzbPTaYQlKG+y0tiVsxTnTkYD1P4xS/Kc9ouRwL h+JFTg16xC015SNjqEsDnTt7jltJxQNuxpl28zrPHE/K6zqXcUqgNod1ILRGdExCLpSSC8+fSFr2 IORTcSodlTefP+U/x7XqT7QSmozOQ10+ocnBwLRbNNEQcwDikyUuO4l3DJd9WKoFlb8DbY4JOOwE YTtddDpf/15QjvwWxkYqksxzebwLUp/B98wXUGc+HFe/quOC/VSqi5MxLyE4T/Bae3zjES0RDG8T TARpsdBcZcyqK6bZq192rcXyw3bH2i3QGcVQHQBotB9OupIcqkECDjR0ga4DCsBafpy1qUGKt1TY S5YscaA7IKtBvhsT8Nw7ei8IS9x04FND3zvNEb4XEHhA1tGfe2D2wFF41Pen4qY8apMkq3OVgXZJ u37uIAoIB5IzXgJRTYwxopG++P9n7z2fLD2uO82surd8dVV7b9ENQ1gCJECQBEWMREpkjCiKcruU tFJMzIy0sV92P+y/sftpI9bERkihCc1s7MSMhitDzYiShhRFihYgPBpo770pX3Wrap/nnJtVt1sN R0lAs/tm96333nzTZ55fnjx58iQC55AOa6bV9lZsoTGkAM6QFdtnpu4RcDYT++CG8Y+LYV3NyEUv eYksk6bcMr8tDcKrLE9BNx299iXCdoJx9q/pdt3t0AJdcL4deuEWZaiEImF70SdkBiGhCge4LkrA cFl9Q9hMHhjBUPtIWb9hvPzKl3+jbNjyrXLq8IkyvITe7CKWyOCQmz1cH8USF/Vl4nP56tBWiHMW uxyKK5RBtrUD+L7vnj0BHtrMUBe29KKyp70GCD1v5gbkFzBRij5tL1oALWXOqPfJmSlGUdSh7FlQ EYxMu4JxBWnzvBNdZ5/5PQG6Sg7VZmYPoH84rqtqYnRqGT3kZWw6Lw+qd95bmE/DiFSf1uvQ2hBR PfE3z+lL2063rL66T4GdMaA50ZBhq1POJqByK8G8gT57QYdaA95NDrjMtyYYQ0A4Gj46xRyB7yXk YbcEaevQWaeI2P3zvrVAF5zft6b+8TOqROKzctLwYhDYMqCI+GIImSPc1v57Hii7d95fXnruO9h5 fhPVqVkwXK6JW07csEfOKBfVwM7CtesXOL6dhC5x67yD0M1A81BnNmTOTgqqfYXsEk5OMG4fKxZ4 O4m3cso+6/cKyAlUgs3qUv/Hb5GfrJgC7DJyXtvKPvOEprrOQxyhV5Mm1OK0FtfHqT/tO9PeuWJx NYJsnw28ZeXNgKt7DilySpOscs+KrNRHF7/51m4cnsqfcaFyx9O+IMXwWySDOAzDr9qH8aL757Zp gTqt3zYF6hbkxhYIgk4aixcCaRU1qG7lEhi6hcI0OdlbRkbG4H53cZwbeTMBG7zXML7GcFrYcZiB 6x0Y6Y/ls2ZHq5Nw77v/QNHYkcfAU4aZnFMSt0QvN9gIO8OeGFQTZGWyAHRvBuUKzPVZAdo8O7/X MtyJTzcBa13VOlY/fWFuljsZJ8oCR++dNEN2r+bLkvY2nEUFZaAYNbg6cQrMjgU/nva0fwRtneMB bz75G5+IX/NN8CUQSesXPWlaNfid2PB3QJ264Hwbd2ISlUSXRGlRBcPqAvQ0bNM7hMhiBO8mG3Wt MKKPwAMxgzeUAOBwXxK0hnbkutQG8PDJ5PQE76FYnOk+9thjARQeA84861MqFuQle0yDtriHkKf5 Z3lSnurvzo9AEGVsc8v+roARmd5hf96qbrblSlu4Z4C2xiz3Pk5yxdcccn/bSKSUg/YT/U44NSpW +pv3fvdT27Gafo3wctC46Df6JoCaODeXKa++ynB3WPPfcdXpgvNt3qU3E5ecVBJjFjz0WgHlljtN 2MFQ/KCqXG9PWouDn4VfgyPjYtde5JBcJRo6yhOTlzCOlEvtAAeS00xoXHMFmKzm4xKcZTkqW6rg Au+cZOOW6LYRd8vSCcj1exVrVCCpT0t9c52yJnfG3856WqPatn6v7zw677Fq27iH49MaKFEzo3+A gyiDTHByzXDYTrDOxYsc744+D1YXGbLXTnEy0y73iivVIyP9YI0z7GKEVWqp+CLf+9d0Otu/cyyt hup+ux1aoKPbbofidMvQ2QISTueHHx2ckxttqVvsgYMeNu4aTTnk1IEeHARMkXP2oj4nBwaJh2hj EZmlcL20uNr15jE2NlruvfdeOPAUhyiuZDsv5J9ZBgnbwyqq8uURY62cVU7uVmAsMFVA6gSEzjre Dd9rH0Zd0Qtv9ms6lJUNFvzyPkbtazAJ0uLuJVQO2VOAMtXKjm2/aE/D+D363lWRMi0copDqVvLr 8Av9ZwIY3PgrYWqk7vO2a4HVHr3tinZ3F0ji0dUNHpkj5bxLGDXSSagCooJEaC3EFoJ1f3MYcQYE HGAta8VyGTOf8FuINOTG0E9GvDmHxTrV65Qbm5cqdDt37kQWzYGFSviEDiLGJofmK5PAUcFDbdqN LDUzXIZL7PVjuW4G5fquPqMCd80f+gBAtu6seey5PD0pQGPsyH7yJF/0t8esmTRtf/cKVsRRbiAG qtJ/yJntd9OTexbME5gdC5WcnazboN1uZ8M7KetqqIrr7SDdx23WArWfbrNidYtTW6CCdIBkm3OW vFZAkGWx3/tCHYMr7xfyho0mqlkeQBFUFWUYZwH7y4MDyqGXy9lzx7HjgFzTpTWE+9STT5ZNmzYF SMjFZb5yawILYVSpk+DR9ggmTysexDPcSln4Xb/79H391PrcLU/rXV1tC38rglAU5c3nngpssLJx s7aJFlw/unS9DSdf1RCB0mVWPWwKImQKv9gEhGIFZ9vdjVqBPOA2uGTzVCbNg2cc4fbZdpV7jp/E 7yxjDdN93j4toFCq626jFkhQhK6gML/L/6Q4AWICHENEgVzZE3lqajQRaWiveZnNP20mAMmSJ2JM OKtZDhmg3yy/3IM+LQcGy6mzZ0h8gotdL6MmQOL4r1s3Xp5++ukyNIAWBzd6C8bLHl4w73mNws8A D3J3pox1MzYTB+H6BIs8gLIKwgKRrgJSBef6O17eVX8AR4X19gG865Ibs3ihBJm2SLB9rS6yMv1L HPxxsuQXYn43AOkidNXT3oaAnONCZbswtt+bHHef8v8GyxkmzDiA4nv6yv5ZchWFvyKqJfpRUfQy Y2cB1bt+vzvGTLjrbrsW6ILzbdclb12gmwlJ4FNnWfDuRf4rMcKWgQWyTrzzaqKeUShwFmKc57DK UHnxxUMcYtkL11wJcxHbHJ8KsYZAG4QPwMZGVKhsZXkSWCB2wMNlej83bgsalslyCL5ydPVTwdh3 d7uLfqu7djc1xiJipgYHQ5z25ueYWOm7Fse7PcfTZNJ1AvWeQcUZoXlDX4ecn/CKtOx7+yraWSY6 ThX62365kTs2jCdBdbVX0q/+ilfdP7dJC3TB+TbpiFsVo4JxfRpGwtQJfgGAck3Ifnvig/gBrkku LSyU8U7D+/1D/XGKbw558rmzV7HJcbFMznDQhKW1YPrIow+hHz0UanaKMeSQdcnwKSvVL7wifw+n 9MFlG1dXy1IBOUPm31sRfwAJr+uzM/yd931VvGPdrLPtJAvLtwBm/RcX51gVqffMygShfi/yZzdz l9HAictZDa1eO/FiMg4VySRfx0ftoPgO1CujVjfa8VIt2sXtJ/ZjKMZHELPuutu0BbrgfJt2zK2K JeEF19QmcAldrE5QdKkr8RpTomwhcuAQCnYXFti0m5nhyDVL6KmZ6fLciy+WtRu2lS2bt3EDR19o aZi2doNJEqAwTTed8vaUlQmB9D3pVuXUlRm8GWQrWFfwtkSGqR9/3y0uwVJuNSe8Wm/9oz9pa1cg btoqsuptpDhiOexj1NCo3WFcyrnQI/SCrRIM+4X93Ohrn/RgpBlpE0S99toXTtjZ/jXNfN7cdze+ 7f76IFvAUdN1t3EL3AxoFRhrkUOeCEFXvWOJ0N1/76JrcvlqyC8BhgAJxB7nz10sx09dKNc5HXgF e8737Nld9uzZBZFL2KsyZPMR+I2ngXhvU/HKpCXuChQcJHo5a99bxgoCtbz+rt993uxu5XdzmDvh 9w31ROTgJm1tF/tKS3GhiUFlW1w35klP9cqBVgBZ2RMojKij7jvY9vbTysfbbVZ+J+DHGAgwzpUN zPZKnlWsYdveUDY9uu62aoEuON9W3bFamABTfvqsH99WzrkSVg8A3Bm2+uu3ZnQd7zxunRoZ586d K7Mzi2V4ZD1cWi9W7frKx55+qoyNDqFCp350crdyvKyK4xPg3i6DgCtop/YAEAB3bT4ViOvTdGqZ a3lWa3Z3fattqizYNqn9V9uqiUqiqo9pIVDg5pYZby/RRfsmMIcoIkQarnB4Fxo0cuN8amfxvba3 YK4mh3lWR0+1++XGybKWscat4bvPD7YFumKND7b93zH3CnKVyHxKRBK3n7gSKm5Z1nYzaldwVoLx mjVrgxBnpq7LW4VY49zpM8Tx1o0mgDxS9u/+cPnE0x9T6QMRyHz4Cw5Vl9p8wjC7is2wyXLQLUxb hqpd+2qqWq5OAu/8bgXr73es7B0YwPapYiGrl+CcE1r0JfY0xNfrE1dDtLGMBoa65tzcS784GaZa Y7ShMiuB2P9wy4uOBeL3hopjAq7h/Nlqc9PmGX6kpXVBuejq1/lM37u7r2ob3C7PLjjfLj3xFuWQ sIIa/QsxVjCswbWVMTA4FPLFBoS9BPG6cbR92+5y/tSZcvXa2cL1ggBuX3niw4+XT3/6fDk3ebU8 8fjj5aOPfrgMAtRyw4OcWKtpr+zyK9fABaeGCGNhbr5cu3YFgz3e2G1ZVieJAA/KeqtnLWvn0/hZ t07fO/V7crRVg6JyzaJyWArkmPbU5EyZm0XsgeEjj2vHPzYIVdeobRVtrrwZEZRmZN0LjnsGmVwD 9KNN7bP8mJ/W51zrkNNK/9ZWru3f2Wc3v6u/u8/3vwW64Pz+t/k75igRVicAVmILf2S/ypn96DyD 0IBVUt9ZAF704Akg3exfU4bXzpeJY6+UNWMbyqZdu8v6dZvLF75QMCd6puzdd2/ZtGVT2OFQTc7T h6BlpBmcGSStsXeXxi3lns2Z0ovs89z5M6hGN8scstJhylCB41aE3umXCbeTp34C1J3sVvuQeiqe KGzIKlZwxRF2ShBhoI64jHYGxgS5Muwy4uX+Mj0zhe2SMfq0WeanMO/ai0wagPV2m1CT45BKtDkj gITghEVm9afpIrUw/Em/CO5cBRz60IqhetTAUQPETeNwAni62of+qn3m9zqJdPrp33XvTwvUnnp/ cuvm8g9qgUokPv1UsYbfJTCXwcHmcgTYo73DQ6NlD3cMjq/bgi2HNcFRH9h/X9m1cw+k2wO3zNIZ +XInEZpOzgcpn5Qj8/0yAOBS2kthBwZHg1PTwlktSy1PZ1r13c2V1v9uczH5xXF5SE7uF2fbOvku tnrKzCSaGkB4H7rN8wuYE0XMpCrdUnDPuWoyTqQjMDOh0tmZhnKMW7gE3dyY9XXwz27shsgj47xV H0X4DibhFsl3vf6JWwBq7rqflBYI4GwTjN91DZe37QpUPwleRqmBadCt2/aj17yeQyOjECcEDRe3 Zs04m4HjwRVXoKxx62+TTNU8iTs5s3k0NS5euhK5CSwJLn+fyDvTMHAFgJv9I6E7/I/tWuutxkuw tu06h9ihxYoEkF1Gdry81M9KZpBbUegnViae7ow2RozhpKc4QyeXvByaHXLkyJsQX5iHeeVKi/d8 r+CvSl3tX/lqJ98quqplaxep+7iNWqDLOd9GnXFzUSpBJdElCHZ+N7wbgLFk9XsAduWU5MMkZq5D 4okYkw0/7G4gojCcOs2slU0iiDi4Y/07uFq/x8EHAMCnG4Ez02xWgR1x6KUd1nA13ls9IyP+1Pf1 9530zPa/uUY0fBz6EJjZxEO+70eToQGUAa5YCgRgpydRnWsb23cvwaPegnlvBdoAVfuE9qZXdYJs Xa2Yf6+mRhVfGJMgctr6rwAyLzq6uJ2G46TrbrcWsA+77ieqBVJLowJicFSUv3Kx3vXnrrxOQJUo vWlDeWVLHVtua47lrUFkpOHIalqdwJkbSBI2nBncljJQAcODLQkcudFU45pOTat+99l1tW9sR7BX VUT6KOyg0D5Li8iW0c5YXAKYOQ04yK3pCwvqOAvA7c3A6KgEWS9N8LAK5wiZINnpxQX4CsB8YhwA +OEnl4yfDgy/yQV839GT5U0V/on72aWe27TLKlHlM7vJ7xJfp4ulMTIMgVfVKp2nAzMcoMqGURy3 1sA78mXT8F5BwUHAruCaT+PX9OG8E+Nh/ASBqovbW+a4fFRj8OZR45vvWznD3E2u9p11rnV3olIE MTeHVgY65bXtnOhc+dhnQ1z6OsCluWpuCNhzCxkOSVT0XZ38TNe0/JhO5cZD3EH/5jjJwymaHRWZ V8oUopXsj1o206vuVn71Xff5/rZAF5zf3/Z+z7ndzPGsEBkpxbIVBJVMhVUJS07XOFWmKAjHhj56 yhKyRtqVIS8Irm1CjkEAUNe0VwiUtNMucL4TBBSPhM1nuLm34oxX4rfL9J4r/RMcobbhahXaYqZo X0UaC3HgxDYUmL1VJqZDTgb2942G6Gh+YZr+maVPAW7VI/nWgpv2goQGOu19ALgXHeTmoNx3m2Nu 96dlcBx4o4pzcOeE6yRbx1RnWe2z2m/1uVqH7rcPogW6MucPotXfZZ43E0+NJiiucFHtzSJ/q0YX tzRDnBKg8ZcAZe0HQ3kRxw0jOSyJW13Zzhs0TD/zFOrTBdgbF4T3u1zzNHY6FkjXsJWoO5/GfDsC f7t37WzvuEfllAc1QsWsGv3FZDePplxrIWX7fdjwbC1OAMWzTIDeNjOC7f2WhuloT60NAtDtrnEV 1MdqKEzIRl+n2CP7LydoG1GO3Nu+Y+NQ+TXCEtPymcB9xzX1HVOhLud8G3elIBab8j3IJAFS9ZGr YZxYzuoP2emvFfcGS1Y5ZjklAdjNP+PHPYMB2KThyQXsQS/DmfXBlZU+rKHBoQXQEpMcQejUiwXa C2Y7wgUnRj4LWLmbnuZwhKIT4leg9Vk/GYO08LuVSwC51ZufbL9b1XcxREesVrCbvYy8uI+LeBVT xIfOwfgqfcKFu5zCbGCDe6CPo/Qz6b/YYENwaYh4RPCuQOTSy8tTiJtmAXE48DilyQEkoZd32unw coUAZJp+CQPeS4Yhfk8PdqPJR40P+9Kntp51daLvLH+deO/UvvpJGGldcL7NeymXoBDrKjMbJQ4g FJSTNHmfckWJKT9ythAhO/epdgVhhlEd7q0TEPgs8TttPzMMQhaZjREikdCdFZlZNov0OB8eF1+E gwuCFzRwnUR9q98R6Bbhqv+d8rwlkNFo+veg1ljl9F4NtjAHd4xM+frkGThgNSwKwAyAyt1yUMQ2 HRywrdkAhMOufRB929bAEIRbi1MByDEeFFkRP8LEuFBX2v4hfcBaxTthP94zNhR71L7Tzzx86qp/ fYZn98/72gJdcH5fm/vHy6wCdCUcU0lilFv1l0SlNkCbzdWLSMHttokzrppq+3nyz09d6sp5BxEC 0FVPNgA60ks/37uZ5VPzlYH7AH91q+W5kVuOdGugu/DphmwF1hYga3vYjwNcwKvdk+sTl5jw0MtA RCHXqwGkWW6aUUfdsA1EHfaFm7OKIwRv4/sJMMVYv3LpeEd/LMGNO4kG94xGhwAsl+7Y8HJfN4G1 QGgv1fFU++5WHLQxu+6DaYEuOH8w7f6ecq1EZGfJG0Fv4Xqh2EqoNcE4gFK5H0QYrlwVT6TzmZ8g RNiqAE+BWoJXSBKEb7oJsgJAAjVHIuZTi6ByWG5IVcI2/Uir/byVv2HuJmdbCpLRLgCibR7ty8oD POa05cVy+txlQJOJT0t0gOwCB09maeeJyamQRbuh60lM25xorHQEXvuEtqdvtQzoqifzoh9JSwAX rD3in6COn6yzPwjL/uFKuOzv9oDq6Jzalx1e3a/vcwt0NwTf5wb/sbNbETtAoaBzgh8yaAiux12i EA4nJ1sJMggM0YXPxGsJvU2kck9+h7tyuZ3AIZI7BejvAhhiRxWrR4Dgu1zdPJ8hwggQcmHVZVqr AF3967O+r7/v9Kegp/NIvZNb1W/WYmA/eudqyxw+drzMIsKYWWgx8S2UDZs2oz4Ht4vNDTFWo0VN 3itGgq1OYLdzwymyWoLj5rYUe4qwcsne/RiAG5sVXCWGWERuWjXL5WCh2UT0xCDIfvNBIpOt5fb7 3dZn1vl2clJi1/0EtYDcUnK/lZCcX7MbBQHfBVER0EMoijME4PzwTnkEgKvII0UhdQi0ubEAcsFc rm+VQP0twJi2GiCaGFWeqatE7LN+8s3qu/r7bntmu6ESVydUumhmBu54rlW+9b3nnP7K0PBAtPXs tNzwKGKIBhoxE3zHKBK6i4JpK8A5+yX6RvW5+OBHP+nXKdpy5ZMgDAcd9lOYuKN/8gCMHHnakK5x 64S/mkemmZPM3dZvt0N9K2XeDmXpluGWLZAiB1/J/QSvGpt1wLBMlBt+EKKc01LInQ2Z3Qo9hxxT w+x+IHUI3hTkulKHVnsPsQQOUJbAkzMLAGBJvkqgbGKB8f1sWslpC9S6TmAOj+6faLPaDG7B6Wwn Zb7RTzTd+QtXyonTF0o/V4epqa4dudlpjB/R/qq+LS7MlNaMm4F0FZxvAHB7snTTz/RytZOccs0j MhPy6V9PES7DOYv8y9iFdiXUBJQHsHA3MtxfhgZz4zH7enWcmcZqv+f3TLf79/1sgS44v5+t/WPm FXipCIFPHgrJhCSgUKNbEXmkfwKmXQsR846jC0RVNpmfZfwE4VTRIgzvDZsEmdxxcOFw2Oz9pYyS 5bVHt/vUKIj4ctYxVWSmb/O3AvjbBPmJftUJZDdXJMQNLDHiggJlzXCx69ZtKC+89Go5f+lqGR9Z i76xCDxXBuwGdNWZBsN29jImYL2mKk1bpSjJSdEPUEpgepaFU1wAC1jralkEZldLcfkCOtMtPm4E 9oLyaor4fWR4EKNYw2FzZUUeHhz4Khcdibb/rKRNmK77p2+BLjj/07fxPzCHPDhQExFIU1yBDWc4 6KXmJJgLRxwHCzS6r2EjxQtwwRIoRCgHLcDHjj4EbRoByL4Q9NscXYAov739JCaCOP6A+hx2nHtb c2VhHs4P+8MCtBxZilGyZBLuW4Gw7/4pXKb77iYIKkkRbvwYH6EB7STU1Xc3lrSz5Ia/+RNtdVPc SFdu1TbhnXNYX0PVRcCUG8/nae+vf+ObLGb4jdnWNUMD5eridJmn3deODdMdU1zK2yrTnB5s4NeP 6t0SOsotTYiSRuw5UG5ta/R6zRX+Daxow67aAAAgAElEQVTZqbccG5BhhZ/Jd8EzhsizWfKoS60t aXyZbTl9OD9Zrp47Xq6cP1mW5qbQv5YbV2PE8ZIfdeudXOzXWm9b54Z+toE6GslwXfeP0wJdcP7H acf3JxUI0ws65XIkkCAalrxhhUz5MmDtxyWtsumQCYfYQ6AWgNqyZwEZkFb3I0QlAHcn8fk9lt9B mMRCvqzzdODsrHcNGi85tVqOCND+U/18/kNcErplvbV7b+lb3xs/Uc6YqPCnPrGa6ADgyPWm37Vu 0V5wwr3LWvqD5VXGlHKkAGRmLyZKOOB5ON3WLLeeX4yPx/L+wx/9f+W1g0fK6NhG7GznTTSaDB0d Xgs3u45+a8QJwanpK/RjbsQuLWLsiBu6nRDVNbcuVd2uf2gwuGnHhZ/g0im3/cVcSrocZKGs+st1 x/F7xw9pzM1dLMeOvlIOvvp8uXTuZIhTejz9iXnYuMyXdIJTd4Zpuzo2on8cO/4jXNf947ZAV1vj H7c935fUUi6cKlFNQCGXunKyuQEoMAe7Fg8BOV0jjnHnd0FG05OSVnDSElkHEFVTk76XU1sGJCR2 CdzNKTebEuySk3pvQJlleKe/mab5rAJDgGAH6Fv6lZ8344P1uemldVwtq/WPGvI301kBGeq4BOe4 stxXTq8jvQpOPhdmsY+BnQwvyPWjUSP1wWc44m57wSSjGsfqBnn/9evXy8svv1a++e3v03ToOSNq 0MrcPJoaMMrk1eZuBXom0AXixcom+kgoRYJN5wrOnvq0C+zCBTRAspweLEFnWllHc7EMDQ2VU6eP lT4MKq0ZW6vqSLl06QITAvY5SKfBFWU9ywPcmmM9rpSjRy6X82cPlfUbt5WtW7k5Z/1map31ts1q 25lXbcO3wuTajjVcNl7373tpgS44v5fW+oDCvt0Av/FdLkHFU4Fz2WUpskwoNZa/YdAdf3CID2gQ 2JSqdkKUBFUJsAcC1H5DiyVxWLAjivY0VL+qHFhOErzAWY5alvrMN/+wvymiiYJmQk48HU7+T1fL 7veavzarfdsJIPWd4SosB8fLL0UcOkHXk3k+tXERBopYMQi2flw9+BSUFzl2PTs3HeGjDSuIk45l 6gVBXWRotvXi+cvl1MkLoa/cQkykTNjDJ01EHsm1sykIsLtSkRmfn53h90QZGR33Sm7qRTq0v5t7 pQeOnf5R9NAAzPv65bZnkR8PsXE7G2WanJ4qv/f7/7EMjY6WJ576GBPGVMioP+mlvsRzouttIiZj IrCvexRpIfI4deJwOX/+fFm7blPZsm17WbdhPTe5UwZa07aUia7tGHZbal15Z52rq2Hq7+7zvbVA F5zfW3t9QKFddldRhvJil68ALgBa1eH4Gk7iiAtCQ82q6i+3ZYYVgDMkRIZa1U1g56sAFZCgIRrg zKcJEdflsL91b0V8nQQaAd/mj2HfKp2IRhkkd2m+0n3dFA3oXcWCKGfNynQF1yxLW00w0lFM0wrA zUmmzfnOCGiAIcA7Ozsd4CtIrtiuJo7wbVlN048rlj4asKqk2Sy2TbYPPwjbw+TYQrbsZKfMV9Bv IaLQ9cMBj8HRDgywV0BZR9c0S7PPCdBJ1XIulQsXzsWm3dDgYJTFiTIOomDjpAfxh21gONvEfEPt Dk66QdovvPRyef7VI2UakP/6d58nr9Hy5f/mSxkObp0owbkvKxLDDgdoT7wG15vBScPyX7x0oly8 cr6MjKwpGzZsKFs2b2Mzcz1hBqP8ilUUfeReBl5Ohta53UYRqPvnx26BLjj/2E33/kREooCTVcml fQUGfwmRK79lZ9q/40twzgIsqm9wSapxeUAhDh5AjKm5kSBr+AqQgkQ44wA+cnQS/wCHHa5cvR4G eobZwErOUsBadZbl3brOsJ3fje/vWp6V9PBzyR6ObAzjv3QJwkBfgFyArgbrKf8C9iucVOYQMyhq EHxTDCHXy319cLBRT2SyxtfFZqrpmyeA49N2aQq8gCN4GB9bT3DyiHYCkmBMGOTYUb5Io1H6ATHz VJ3RTTw3ERuk28sBIa0DapBIk6BDaE80mgmyvXLGgOXM9GRcyLtj+54yCEC3AFVrrXi7AQetJod9 6yoBJpx8WOk0+8rl6xfK337778rsIhfLckBpauJyWb9hGBHHEleWUU7qMc8t6u45tChbszEUHDzV gQ9g3DQoS3D0TGQzk+XksYly7vQZRB0by+atgvQG5ONrKAtjoD2M6tBxkqj1r/1YnxS9695lC3TB +V021O0SDMgRgkozCF/OV/0rqUOCgOD53WAXaBmVLDmwZdfHuJBDQ0rATGBLxkngEZyUV0dShlXm 2Sa44NLdAIQTv3btWoCQhNZCVuqx4rdzEmh1ncTq9wSzVRCufk5EYAPlTsCthI4HZcgNrRAzACg+ FwAYTy3K7bpsr+IG5bCCdIt31Qm65ivHmO0lwgGs/OoBwNQxTke7RN1sz2wIwXlFO0Vk9D1ljA1Y 2ktgWoSb7SXxnNTgXhEV2KgzgNvlq1fK1atXqZ39MwSgsrHXR9qCNJMlxUWHHJHEPD2EdkyfV4oR tpd+vHDufBnoHymbNm1lBeOlr2zuuWnnrShMBgP9w4SE29WyHaCuqOOll18tB984UhYRh0RnemKQ r71wyH2NgTLLQZiwC82IWGScxISEqdKoN2qXlC7iOSY8dOTE6Abn+XOnYrKQ49+8eXPZtm1b6WfS 8O5DN6ud4mpfdvaxfp3Od1339i3QBee3b5/b7q2DeuUTwAGfJrDKDeMkpAAHyESC05iOANMrwQE+ sdFHuDSEJIG0UdjIuCCiNh35XSBw+TrL0nhqCpklHFUL9kpOULUt3dsRmmnUj2Ej/RueThAADZyr N65Y9jT+Mxvgq9zVvFLcoF/KgFMkAdoAiGm5DZavgi/1dVIxr17BlzaT4SWAfwyGy3L5zPbMScz6 Gq9e9WXQnNiMZ1sJP0Y3Dw+WzBBejO0PY0Yhp0dua5nloLkXLOxlfP+575SrE/NlZM02VNv0p4Tc tN3PppziBI9YN/uGSQuAQwxSZ0pzcSP3GEe9Dx85XrYDhrt2bC/Dg5gWpR/U1KEQFMeTf4ieZlCv 618uExMTlJQ2UIRCmnwLex4Xzp4p3/n2t8pjjzwc7WucASYCAT3KbNvJ3aMZolugrIZxsnTzsgex h7h67erFcv3apXLq1ImyZcu2snnTlrJm7ToAHzXLGJeyAZSJxov2NFLXvacW6ILze2quf9rAErmu gl0AGZzVUti3ALxcskLsDdSuetU9loNrAkroIxtHkPPZiyaARBnySU+RGM7EPUEo4WBgJzhqACVs LED8Mo3BkcFtunmlCZ4FT6lBlE24QkHx6sT1Mjg6wp2x/QUVWiIkwVXik3skccog0AlkCWYJ4uQB mPtdYJXLm+EwxBxXMs0BwDOzE4CDG20JytW85jJ36emsmwAjsmrvQ85VwOhZXgOooXvNUj1NoiLG ERRlE7FbHbZHrHpwu5VTlzO2nSkfdVjWvjUTg3rCcrQ2VYP0tfa2yI3YMslLyJ+zbdmQs96gfY86 3z2j0W6euFxsaW/Z9u8FpFhtmBb9MNg3wonAifKjl18pT3xMAKZsAKZiCjUv+tGW6GFV4KShPNn2 VN491L+eDbsFDqfQ9ucvlj//y++Wixfmyic+8Ux5/NH7y/bN68rw2AZwXAA3yWYZGhkt44McFoIb npmdoixy6ajhAd59gwPltUMnyg9+9HLZun1HWT8Ot8sFwMnpA96wyTEGmCBj6mEs+S4nfvOwLxhj /A1OmvrNTk6U41jXO3niUNm4cXPZuWtfWbt+U8ilNX3qOArZNPWygr3K0xkovUz4tjOtH+3K2667 qQW64HxTg3yQP2UuAkP903bSMbwNm/XJATmwWcDiKYcCMTO8XeI2QzRhvBz8hgO7cAKkRCC0Zboa Sopd/iAMkQeggWgiHIUI4hHEUcnq59EDZzZ7ZRYj+9OlOZhHuuUiRzhdNjJc2DDiIMWaITauBuDC APL5CZbNVwNkFgF1wViurH4CDNqccmgIAIwCkln6FOB0flfuyTdANieemLiW88AFJ2Io93XeQ+iL hAuWeDrAIyYf3rtkD49MMtLKcHogeuBvWeIItQc5sAgXq3lP5unYzPMkXbQyZfOKL8VG0Yq0k4Dv 2wQtW1hwg/sXlG1x4jKHUvbe8plnn4X7PVae/+73ytrRNeUSE6D1GxoZ5zYUgLN/EFkwsQBj4W90 qK/MLZ0vY0zE2tBYM7SG49zz5eDBg+XY6ePlpdcfKb/zL3+nrNvUKGNrxjGWRDU5lt1oMXHOXC7T U3Dpw2NlcvoSgmhOA5JPi+cLz79YPvn042Xd2BCgz1gBtBVluC9hmWPSot+17yFAD1GmxRbcM3Lx xWUuobWWvbS/4xLOf6nXcckeRKtZznAc/fLly2V83VjZvGV32Yac3LbxwloB2oazb+XE6xijCaId ol9JvetWW6ALzqtt8b59kyh1DsjK7dbMK0DX33JhLThmuRA5GJnSFkCl/q5ywcAOAmc6jv8EZ0Ed jDCTSCqAGcJIYkjI1ghSLNWDo01xiUAU4AigSJAzcLPDcHdupk1NzbCpZFwAHMAVpkYAZA9HXL8y Va5clAPN/AVgndx9EDzl6IHorbM6Bk24dRkxNykbsawHRNvEG/GsKO/ZvsJb+bZhzdOVhCguh85y nQYI05iIBQTGNPREngCam57e+GIbyM27zK9O6ahuCX85esUYYftYjjxAHi6a3BLbgS3b0Xc0oG3Y Q37m3FrmUA7/QjZte3PcOgNQvwChGXqpWQ7cs7/82i/+Uvnqf/nL8vrhU2X9unFU3lrlm3/zndL3 8dkyvna4DHJYZJhNtgGuslokXe1gzAKyfYN2Oup1cNeKM/oHR+FS15d9B3aXzcRrMlFrn3seGfwi SxpFGrDcaH+sKxOo0y1wonNhdqmcZUPv409/uPyL3/pyGWL3sMXmaIvZt8HGpJuAVCLaiaTsCrhm 6tmA9/U+Q1YRtqP1bzFp2R/W2Q3mZQLal060C7OtyOfcuXMcbnm9HLjvwbIRWXlYTqT9c+KlPjE4 yYR4uk6aSJ/u3y44fwBj4EYuwQF7cyHSw3CLXEkk99GC6AQ8oU0zkS3EFU24kSU4reDQIKcAaqMy 8I3rP3xj4AuaZtQDKxf5g1M+BfUlgKmhP/lIJLkBJJBCRKThpHD58lVkjBwnRp9WyHTZ3WIZPwc3 lwaXBDv4eNIUAkPHmO8akndGWSHmyBOAg/VSzryMaCDKij/kHnEN7M8EQkHBNzjqRkx+ykX7mzyX BgNMla1bP69mqoS+DIj0YCdZ0Y2HaGw7v8v2OYnBNJaWqmueqARsA5QVmbgy8VonQMs6mbnlzfSZ KAjrxl+0H5NmiCOizZ08SZfC2WaCl5MAPQa2LpaxtWPlgQcfLJcmFOOwodmaKW++8TKrkkPl7Jlz 3IoyU66dOwu3bhmaZc4+Jv0yPV8u0v5yyPfuHyobtmwsH3384TI/faGcm2MscAfhLFop585d4Fh2 KaeOvRkc9rWJq4iJuPdxNjdHP/TAPeUzn/0puOgBrN5xTVkZdfqhnLQLg8exEo7vTj14gNCISgYU g9nyw4xB9L+XGQdMPMu0/SITQkxMtJmTI4sgmwn7HWweshF67uyFsnv33vLQIx9GG0URUI4x47vB q551pzMf27XrchHXbYcPsAXqQHRA+0mXAOo77RyIuouAqNcbyeXJPaojK2/n8jCX1cCIogwSEXDz CQQJYAJMh/OdhCcxeZosSEFajDIIcH7YAMKjyQYgvHA5c/YcgNKKU2c9AJjc7CIc1eJiElfWw/yT wJXLWvYAaZfPxgDgDNeU4zVX6hVAa2FwclV+YxqKIjtJaBNCz1qfkPdGfZwILAf5IzNm+orJKw7a WF0RkzsWG7ZHJhApu+noKycrwZhqhtjBMD3+kG3U+aSIUS/L1RZnWMKoE2XXNXtShhymWC2XifNc gvNlr5LSNQI4leNPezgE9PRk4BygtmvnjvLf/y5cLGH+l//1fysb1o1yivBsmQCIe9F+GMIOxxRy Y9XjlhC1jI6sLwPDrFaQFZ8/d7r89deul7UcEFkA6AeGRkJstIjMfnr2GgdXEFtgdU7gHBpqsqFq eyub53Tg0DBVUxtkgPcpS3eY2d8xNqwjH3tNkQ+BmACcTO0Pu4Pzjm7SAvzLPZM0FUCLWqJt66En +6ivfw1hR5CMLbFpeKq8iPbIr/7qr1EmTKICyA7LAHgHXdvlGKq/us8u5/w+jYEc9JlZ5yDsGJsA QXugCo4Qgp9e5Hnz3BOXBO/ufn958cihsnXLDpaL6xjkwhOcjlETL5I7BKAD4cwyAJrXAgrhAuiI J5AoIgjOR47Gl21nGQUcVej4C4GdIZ506qZZTgItwGaRTUWdMkXFDAme5gE4C/BwzQKxccNovLmo 70v6lsOncF4nFlXTwg/PUM2CiCMc8aOtZM0ADcHE6gI3/BEU0y82C0NDw7qwIRV5JGco56xTHdFV gc1N9uQ/FP5F+SmgpQwVNKaucHbU15ScRiyX6FQP54R8GS7StvfQiCl5Q3b2NfWjWPNobshFX5u+ BtDOAEyKZUoc5V5a3Ip2xSx9uRX94fXlgQceKGMji+XEkTc4CDIOB424gUlnGnHSpatzHCr5djl+ /hLij75y/wMHyq//+q+XfXt3I+oYYVNULp8SAP5zk1fKf/jKn5Tpv3se2T/yf0BU+TxSFMpGf1Ae 9G2YG+F69cTZnjEuqEed3GNvYJmb1idoMcZicM2IN+oegpuZgxhuGmHjYe16rNthJ6Qf8B8fX4f4 awcir7UhrrFv/92/+3flhRdeKE985MkAZcHdsWx72q7RtlGSLEfn77b3XffogvM/UpcnQb5zYnXQ VUKoeGzM4Bh5SvQtlnwSwdw0FxctTnIYYa5MTk6G3PcbX/922bZjV/niL30eDQ5V2lbFCQ044UVV ofjnpa/sFgaxmW9wtQKJsAZyVA7ZvPERsvDju8Qi4gB4saEDN3bkyBFCgJgCPCKQZayhaZ3Ok4MC uKCs/NFapJPLkoMH3AAsNyD5Ea+WotL81gGEMttRtvC3nJTRuQXEyNs7LLHcqCIFNw8zrm2oCCE0 TgTbIHIiA84hbw4EjwpFODwTBKysyfPhGAjpEh4XXDo59WjZjwmEL+SlHF1OkvCBYDSpYe0tlviL BcCNehMvRCq+4TvlMQc5ZnWuh7BvMYKOcgsut58+atHQM4iGSs8I9jjmAe4JNu/m8sAK7dXg3eDo MJt2bPIh+pmnfbUwt4D2yvwU2hgDo2X7zt1w0+sAOSZGVxi0kbL2Jv1y/tyVcvnC1RCnxCSErY2H Hryv7Nq+rUxcu054NC3YT3ACdpz5cRzFJNleFTgJyyD0oW2iXvPIaLMMjwzC/Y6V0dGxMjY+UtaO bEYmrhohJxgJO4XeuSusCxculIPHXorn5MSVUP87evxoefjhRxF5IDtH68c8VRl0AgwGwXalD3XR 5u3v4XEX/umC8z+w0x1Eb+dufl8JQE7E7wsQiIcp8hCFJ9jSYI739Tl4e1jSTs9fgczlyhrl8JtH yve+/1LZd3m2/MIvfQl6ZMMLJEvdUmWdCTSxKBW8KJwiEYsZv9wkC26F3xCoXLGgmxt5fBWoBGbB ECAkUrl85WJ588038QP3AIKWAAlYCALq4C6yIRhpQ9Qa5pHzMp5Os5iBy9Q1idBXAi05KGIAHCNo FScEDEqkAo7CCoGYEIouwDv1tQuW4FIeDHBBy0K3RG36bpTG5p/pk2cz0nWiEqQjp8jbsrlBGBNU r7rKTDCUFW1jvsNBo9Pby2eJSTKc9SJvf8M7iynOXYgfRsyd8MlxCugkRBQnDQ+LDCCCUuYMB81E 2e+Eg7zDI9Eesc6j1+gsq5tIfXvQTmktIA7AzrOW/xZ7kJsD0KrLzSODvoZu8SjaEA9/6IEyPjxO G2HvmT4bQNvDiWAZ+fOR118vL/zoFbRrsn1HRgfLsz/zTPmZn/kEG7tXUH/Dn8ZseKAF4Lfsisks k1zv+Pp1APFY9PXoMCcBR8ZC5c+h5fzkBb/z80vl6pXr5a+/+Q2MOb1Zjp44X05z1PzCpbNlilON 9oW6zzt3bUNWPkS5r5YN42sRwcwgZlnDXgUyb8q75J6ErRX9RtvQDxWg48Vd/KcLzu/U+aJIm5OA L4Ewc7keIATxJ5BB5BCc3EgFXwfZvBeizhGejbOZ6Yk4xKH8UCCenIKrQS7p0TAJxU0m75XTKZMN gON7D3JmtRnkzgTZKxzLXexdKK+/+TrLXrLvH4UDWiijgKYaEAtu1AX8qaoFN9nHrj8bOcoFXUoK GG6OLQuW8wArOsI9yAWDONyRh2trolYmmIW4hLA/evloOXb2qnhTBiniJGVWbrgApQ7Bew5w5506 ynLZQcCu22kp22hODxyHmPGBuCU+NBqoIWVAfa0J/BLOlAQ//XvREBAFlnvQA2bysE172KATBN20 7CReZd+9akhQL+zmRfplEbGEKbHET3iiPOQh5+3hCqek0FIB1JaWyRfg96Rdr2WjvczbeQllYSYg Nr3UtSa+IonSi+YCIoElJwM0HqyXG6KKpAhC+jaT4ojsNydO9ChiI7UHAF1sjHCkupfNvwk26sbh gJtlmpXIEiuIYUAc48rYZpYbV0uF8Evr0C+fLH/73R+U02dPl4cefqD85m/+Zvm5n/ssN5moAkg8 nsr/l1hh/fDF58q/+Td/UKbnrpWnn4JT3rmvPPnUh4ubgU72A4ghNm7YUjZsXBvqj4Nwvk6QArD2 P9y49LDRFJuQU1PT5bWTJ8vp06fjc/bs2XL24gXKc60cOXGsXLpypSjjHqT/9+7eXnZs31J2b91d 9u3ZWR596OGya9cuVALX0yBpy2Rykk1Q2xz9eW+AcUzHCoWmrn0aEyz90Onqu06/u+F7F5zfqZfb wCyopOK9u/Hayp0uF9lZn2UJ18J+gQN6AW5CjriFjFhCkLsIC2MSL/mkTFmIkiuFmwVQBt0cERQg dkUEumBcJW6ASJzrgwAlvmYfgAnRDiJjfPWV18ufffXr5Qs/9/EIl8DAZiEAPchOuCINTVFeuHAZ oOnBaM32kPFpxF2O2CW6y+1gXKiPJ+mW1U4QhyDWFAsALID0V7/61eCcFLVYPzdyLK8cf4v26QU4 BwbXE5+6qwsr8Et4Cg3EG8EVegsiC8KjDXj29QG0iALUNkntCJ5w03EEmvf+YwoANGz7bCdlusp3 Q8RgYwHAsrG2bYAmeaXdY6cWoJkKert16j0LoKQJCPXCjersyzhoA2jwK0QVyqobrAo8MGEHNOEu QyOFvGyvMGJkuQB1QVVAsW4t+lvZu/3p00203tDTVgzRRP7Mcv/iZcbNBQ6m9JWfeuaTZdvGreWP /tO/L3t2bSj37NteDr72GnJnLnpFze0aR75PnXupHDp8ktXLNKD86+Wf//zny969e8s0t3NfYcIf YSzMTXq6b5YJ/xrHtRfKl7/85XLgwL1lz549ZcNmDrIwySnAsV7CnqIHj5Kfw1bK2VffwGbKRbRx zpcTp06XI8dOluN89JucQU5OmuvWYpyJiWMnB1f27NxVdm4eL/t2f7Rs37693Lt3BycEt5TNGzaH KdIBJjP7Zm6aFSFAryiulw3hlFmnjekmTIPt6gqkSb/adhWUKy1QzLvedcH5HYaAQCbQOICUrYba GkT2/e9+u/zt33wjVIkEvp07dwY4LHjEFUJYwKDO4BADD5qPU2oMQp0A5kaXACcBL3IAIQYmAAUU Q/mwbAzmhk9+9y6Nhr2IBnJk0xRTJHRluP/H//l/l5H+ufKZz3yGJa+giRyYQT/Dia0LF8/EUnKO AyFNrIi1uGlj+/adJAlgyZkCcr1wyoscWvCIrScPFzgO3A93xxvKuVSG14yWP/uTr5Tvf+8H1AP5 MmDqch4cj7IG2BJ2WjkqKnY0ERMOYMskE21GOzTJS3COyY1YAqDfKxEmf068aBv/Gl5hhqsQ/ON4 tP44ANR4prGSpkAbqxuqxiv9xXp1hD2F5uSYxC9nnSsEy+Y7JyANCYVWCXGAkMgmtGKYJFyFxEoJ UHYyVZ7fbAyvcOquPtBqjInYPtVsp2W0DObbx2qmgTZHi3xefOnF8lf/9a/LK68fKQ89tLf82q9+ sTzy0APla3/5R2UcWe7TTz4bNjRUkfSoumIADSRt3Lqt3PfAE3weK7t37WXDrReZ7mRYqnPSHsII 1SgmQRVJNPuZKKwXpb5+bZqJ+SJaEs+VK6R1/uJFrMxdK2fOnOdzKi6QvXjhTLk8MQ3Qz5Q1wyOM 4U1lH2KIjz+xt2zb/PGydu3GMrZxLG4LXzsGIO/aHSCtvnVs5pHTFPJj6+uqbGJiqlxng1Rwtp8c 48qsFWM5kTtBqi/fx4SMfIdS0l7Iyis4+6zjIjriLv/TBed3GAACp7O+uqAOHjnSGZak03AUD33o XgjqYjl7/kS5dv18ueee+1gqotKEbm0fhNISMIOrSoIRmAU3B6ADWP1Uua+4QoghnMBjHoKQS265 QOWhnK7jlNXUzHSAbB8nwSTACxdPl0NwOZ8fGo3f6zZwswYE8e1v/kV5441XULsaKOvYtPGE2Tls Kgje23fsCLAX/OIyUXffOX0oAWmC0rIrE22Qx+Tl6+Xgm2/yHjCWw4QoQ/0J8JXIzp05W0Z27EEd D+FCazJMX8atINRNWS5m5hHB2nbegyd4Co5ZT9s0CJHJRLl3inbkpiB29XwDhBNss12yDKHGxopD Dlj/BmkrhojyQ+z9oGVwraxcpiY50djP6iBk41hdc4K0bJTBPOHjKBuyWg9x6BNAYtaKVVQjpM5L HFdntdKP+Me6a47V1YfjQjeHASEntHlASu0FVyOOEcF6Cn3m46cPlh889wLc7/EQbfzGf/dL5VPP PE1JG+XNg28gbngUw/Zbw37yAC2kUy8AACAASURBVEevH9u9C1Bcj8hijDE0WobG+rGlvIET8xg3 AshigmbimdOONDrmF85PljcOHytHjh4qJ06cKMePH+Pi2BMA87lyBbHDEpOP5VszNlZ27d4CN725 PPP0PeVDBx5E5ICNZjl7J+IRzZeuSdCnnvZTTJJw3cH1Mv7muFhgGu0T6WCBiwMCTFHx84SqzaFc PNQfieu9hmEa1ROOTHQapFI0Nc+4Yb0YDIH63L2s6mxL2zboqwvQMa780wXnlaa49RcBwMHDmAnA EWBa7NLLGY24mz6wo+zYva0cOXy0fP+57yN3Y9m3a3vEaWq7QvEFQOXpKZCHNIQpCJ0fKaPOXX8w Co4vOXTzFNsErJYyyBiwPWzATMIBXWcgt7sNrGmgBaAxGhX8Zav74KS0qSBhNSBoOZbxcY4Is+w9 ePBVOJ1ZrIlthTDRNx1kgqAeysEpYSzDvdfIk2tTcFsD7MJ7NBs8C8IRsLSJ4dOj3L//+39Q/sWX /1smpb0AOjJPWOq4045yh60KZOpKBpaVaUfzBh8a8UOoC/euCEU7FsIlsVP84aRkBPEd4NRJ/AnS th+OMjjxCaQNZA2mw7doX+He1UXfwFranjAAeRSAp/0oxyYX58aWh0ZiE5EATW1usukqGAlY0e/I xM1XMZVtpRhEDnx+jr/KipFBT4exffuRiQ6QjjZFdHCdQyCXMdW5b/+e8rmf/0LZu28/KnJy08sB jE8+8ixCfEG+gSx5jJUWdaV8isgUB1xC33niLAdVrr9Ujh49XF5//Q3G2QmYgXPl6rWLke8YsmIv abWBBjlZuH58rNx/387yqU8+Bkc9XHZt21b27T2APeZNjDcmKurLtM8CDYaBY9kLNMgiDAIjM8o/ OYVMncYP4LWNkdNbL8U8Ub9YQRCPuuuYpkP7xHG9hFjHfrASaVeEp/sYrAKNq5hojtWfBvq1g91k 76SBXN93fszTNre9/X63uy44v8sRIKaGSAMiddmp86mak5oDB+5/oGzetqU899zzaDYcLk8+8ZGy bj2K+LwWYHUwFpIAwxeuT+BFjCB4BNfIYPQIbohf5TwcpMg1DTM750GCofLSS6+U85e1HcHyFbu/ 4C/pCZgzccKvqc0DCG1ZQEd1StFH6govADzLqD4NwsEdLH/8J38WcuuHPvQw8k1AQRsZLIvNU455 zRp27QF9Zd4Cn/fcwRBCZEkwTirnWR6/+PzB8t3934h6jqJd4IzSWvJWkORqow6qm8G9OYH0IrdU Xgv1Aayk53fSXULDwZSD2xaQJU7+2QLLcPsSqllH7gI570MjAs8+NA5UaaPFIHYnKpfGyZULw4qI eEnaxF50BYMLkRFh0IRYRvPDjciIQ2tanoBfVhPz07auYeBU4RoVM2ixzZtPwCg4UkQcGMpX62CU NjM/uecRDnm4GTaGuGH9pp20adYb/Anu12xcfV29ernMXBtgBXQM4H2hXET0cPTIyXL02Cl+v87v 84jNCMxhmqHh/rJ//wHkuMvl3vseKB97+rGyZcfG8vD9++ME3jCHUFyhxO3oTHoy/4quWqxo5PTn 5i2zDAGcbDQJqwY1S2giT5+GVbxYHdpWRgZkY6MVe9C4BS4isB+adoQrKCuDU21zEc5Y7R1FY+4H BBDT5trncE3j9VuuQgRsOWgHuTZL+sLCIXJn2kxwt1+jbyNlsnccmN9d6rrg/A4dH8DJIJET1Tnw 5EaDq2WQKrfU9KPHVcfH15dnPv5MefmVF8prr3HzBIB1L6DN2IPmtfIGVYBKYUSGuHJj4hPUyyBW hQuAhnNzWe7Se7mldTPUrwCgAeSZY6hQ/dXffLds2crSd2xdLFvVa5UL0WB6C5HEPBuUMoqQAwTg ZtUgtIA6FxzMHETn9+9+72WWwafg4v6yfOlLnytf/OIXAe5xJoC0kiYgOxkouvBQgWKUGerX5Gnd pyavl+d/8DyaANvKI48+jq4tqlbIV20Tw8YkpMyWsHK3FBEShUwhQPCCeiZhS3ZuCIqbBOFjqICF 5JwhTA0yJTgD1oh6tDttoCUAVaeqnpoo8myKX2KjlbbuDc43gRtf0jF0anPYh/an5VhEJu/kOscE p/ri4oLiJMHe4+mWaJa22cBhirWohO0IEUEvmgbjtL/ihzHsVziZOfkw+5hJuDk40EuXLpUffv+1 chn1t3MXzpaTJ0+WE4ihzrLxdubCiTIxebk8/sRT5LHAHsZ3wpD9ls07adfd5Z89+9Eow/Agct+x EcRRaTvZsbEO+a/jxnKiCBQc9OyEHOlCmWhhKlSxFG0n4Mk8LISaHpYMaTv7xA7yxpMF6teHiVHm 3uCew142I0fxVoh+ljEqJciSWdjeoGb2sXYy3Fcwn0XHP+974YBlRBYd0zAOIf5CRNULh+6q0T5U 5BOMDcA8wDjJ1YhMSoqEOgH6bgdmB9HqaIoh1f1zcws4YKrze6gb8fTggGYhgwjEaAbfPOIEOYIP o2g/h+H3V9gE+tbf/l350IP3lk1b1+WAFVwEFoC4H47KER32HmBh5BUZ+YAMcj1xnHexEQdAadz+ 6aefKq8fOlhefPFI2cQlnHK2M9dny/VL18s6duW1D+HlnQPISDW12YTDdpNKsJVbFOjcQBJMWiBm /8hQefoTHy8feuhDEA8EFwSdFuRU91PzYx6bDRLWDmTVI6MDLK+PlutXr5X99xwov/3bv42+7QHC wLlTFu/CUwdZu79NRCwSZRPgU7rLDAaYAKDBzQMUPBMkAWA5arENbk0MlaNzhSHgsmNKOrQZZVDv 1wksuCuegoL2KTSBKmjwIj8AaovJYTHEO8iIWUoLSoox7E43tOSCBWBtb/Si3ibHvZbbPTZv3hOi nH5O4XlKb3x8C4cs+mLi0qA8sGOpkM0vMDleYJJ7EzWzM+USYiDFDRfOX4py/ec///Ny6SK3Zzux yyXS14of7r/vAPJfVOD6tpWPfOznmcyfAnzHALoWt2QPR5h+9isGmAAC0CqgMpkomvIQzlV0icMu CWkDr3EUXFGBAGocOpr6Jcc6qxiiT9GEG3WWnYmfvQ4WZDhu4mbDtoc+WmaSNC6lZXzKfNB31DUu dWAs0dzR/jHR2dbMqLb5IO1MMrFPYXwVJkO1kDZ2PMnS2F9+BOHsczn6ZE4WOfBzMyhbsq7rgvPb joGcvRn00HzdyAIiIIwFgFlOQdBkmQYgweMySAUcFft5B3E//NTTXDd/COtch9k8G0Y2e4DLMjkZ hchhniO1DQhQrpGRDXYinyUfl4bu+Kv+BcKRhxw3YaGOPkD3o489XY4duRQ3XXhg4PDx18tX/vj/ KR9+5CHMNO4sPfsOlM27d5TrC6hVwZEtLUyjV6t8lWuZ4HTm4JSagOHGjRvRdUV8sX4QDu4SnIw3 WbAhiMxUM5/XL1/gMtJj5STgs558CktQd/93bt9W9h/YWR5/7NFyzwN7A9T6ka1LhgKAk4CTzbwH RRSzQOKKORocKnFjSK0TJx0ZOOvD7BFg3gtquokUt1Fjp0Ggd7pqFUxdAhaqzAHFAa7qJAM96IWj P4wxeMF3iTIrS437/GjfsN8AuPQJ0jzHuKC0HxHE2NrxOCo9tnZDbGAOwvl6BVc/+c2idSJQTMP1 Xrk+AcfLhuhr34Xr5YAFur4XVYPDJKYcsVbXvARVEYfjRF1vbVls3bqZ1cgXy3337yrrPv4Itpef Lfv27g1u14lTkQe1BOgAL8BUU5ud4OTG7zz7AmjFky5jjQ01AdHZOn4H0AGMThL0l5OYwOmqRH14 5RlhN4RY6sWr9bPEJqbhbTP3AoT0GNtyvJ7QJM00GUs4vgdTQBvr0vohGeCYf4MOkKzTp3hQfvW9 CYV/6t0I0D0UyAmVUtOn2WdOqrm/gUooq6zFRTSI6NdFRE3mbxtU5+8oU6Rdfe++Z5dzfoc+j4HO YKkzvoM/x5HiCUAUwJMra7KUyw0XBqE79h5UAKw3InNct94Nw2PlxVee4wDApnLPgf1BpN7sLADJ tSwDcHKAS3C3oBgyPQqGfHHRL3A/LtcX3dyiLHJgyhcvXblcvvDFT5Sf/dznUIdChjl5DdWpV8oC J8PWje0pMwuT7Ohz6hCd0xZiiavXr5RrmKDct2dj2cuu/b337i8NVKkO//CHsYkY8mA43lj6QjgX 0fC4OgGndh15JbLsayzDP/f5nynT3OihKpXXHIXhfsqlOGBxAV6d258lWuWLLsHdKHSFMc/kINEu M3HNAr4h94VwPfILewb2WE/rLnAB3gCUoN6zfCnaXmBy41KbxFpqU5Yey20MAQ2P9rNiGUarYSPi Bo4ZowI4zs3RY+Mb4VhJz1UEk496xtZtis3MSTQ5zpy/BsC+FOKGo4cOl0OHDoWRHg9bXELH2I05 DwStX7+WK6I20Y+kjYhhPQc4Hnnsk/h5j956AJlDHRs28H4cUcdYxPut3/itGFnW1bHTmkvgN00n KXXcdcpqBa7geAM8maFpA/tZQHZ6inCAcLoEygSz9qZlMA8CdjtNnqapU/yj5k+mL7iSJqBn+raf Yme55QyfKzdz9b/MQjAP9GWUh/RCi8MYZIWEPfqaUFEPPCKcYfGJ/E09EouyyLwkENsmfgzb+WlH 6j5ogS44v8UwqIPR152DB2Y5fjvA5XxaEG+DzTZGJ8t7tSRQXUJGvIAwUAPwLdWGaOX7H9zPhuGG cvjQyfLDHz4fHOjuPbsADGWuch0mzOhGhsqwZdBDeMib+yQywEj9VcY1wI9KHWDrLSLhljaxIfQw QIgGAMdjBZOv/fkfldffeKEMcWy2HwAdwQL+jGDZh1U5NTTmp+AAAXN2/MdR2frQgw+UXRvvIRs4 TewJ9yokhyo9djw18Ifl9aNnEONQjL514G7KGrV/vMwhgxZlnJvJ2y6USStOUPYt+PSwwrDQiCNJ TpBhEiIOGBntNYtIohkcvuDgZiJgTTlbTGq9aGkMsck1jP6tJ9CUucvdDqBlMsrtH6PruRYJOfka NBLcuBLkLl86FaZNZ6da5Y3vvVguXThdrjH5HDt2AvHD8TAEryaLKmbXUQXT7vE0G126QTQ1VGn7 8OOPlWc+9TE28jaG/vAGOO29e/fGfXmKJrxNxBtMBDaX5t6orY6vHLtHsafJz5ORV65MRJ3sW1UT Da8+ueqIcs6On5zw5aCZbBgBNBYfGitgVogUVLNt8AwXHDBtRaXjt2nkC8MxVnD5N8eTYo/IT39F aDzreGYGjWT0NQ6tzu+M7cTQIp84CUtZicxEKZMAJ+5AtGxMtJmZ7+3jLJNhTU2XdJSTgcD8dqC8 Ui7i1ckkErlL/3TB+R06PpeSGcjB07kElUYcqB5W8OLNUW6bWNAcJDvSS8qNIbblFrv4HByQY1u3 dkv5yEe2sEQ+jv3ek+XC5SPlwP4nQw4cm3oQt0AjKGpTIY62Qnturpiv3EqlnShLyFCXOMk1iQF2 gAMs7AXEVIWTe9Xc5yhL+SFU4mK5CwD0D/WWN45+B42S06heDZWf+fx42XbgPgCQdwCPIBccKuA/ MzXBhhPPy9cAsZ5QyetBXHGN48QjGHnvQQ2sNcUJMJqH6QPOGbCW6yNvpgLaAdDmZOM1RCuakoSc oXlFLEQgH+WqLQBvCCM43p4xhHWzJjq5fZRrgOX/MECsPFZ/wUA1PY3mnDx6rLz0/I+Csz/LsfJT cPhvHHqznDx9Ng5cTLJhKTgIoidPng1CV/986zZujt68oTxGfZX9yvmuHd0WIh7VDYeHB8OIvfHU SFGLYM460Z5uZCleaiFCuY5K4wJcvACiSUwBx7CCtNoScZRfEQOuArF1Nx37UaBWMyU0HGgnMU08 Swt6CWrGTVGa3GWCm5O3YH2zs6yWxTHRCWrm7dawLsdNArkcsWM3IJn0nARWU7U3HWg+AWMDkvYq 7lJnQZk4MgILAHY7paiPZbnRETbS4kFaN9JPl2u+sa1u/NUF5xvb4+/9ygGVg8iBJSHqF/5wy8Ns qn3nOz8s//YP/6j87r/+V2H7oI/lunJLiXWg/yriD3bXIZJQEWbwbt3ODRacKvTQwHPf+euydce+ snPPvjIICCmLXHQTTE43uB6QTEYEB54BfjnIve+tBXfdP6gWBbqzTA5eGTQLB+eG4xJiBrkfrbqp /B9Hm9VigDs2bIt6yJmOslU/APH1IvubvoYMEBGFN3J4M3QLXd7Dx0+Ui2x2CYyP7XmwnDtxrDx4 z57y2H37yxRy13naws09J6UF1LUGiKds0qV0aKUAVsNDa+F2sWC2YS2mJdEKGVyDqAMdcQ5ZNAaG KYfqaAlmYSYV1SvYtmi/aUDw6oWZ8tpLPyr/+at/Wv7qa39Z3njzMJMFMnrFJYB/A8tu4+NrsNKm MfqNiHSw67BjK8DeW3bsvx9LaA8zMXq8nOuaMBZkg4bGASAZ7RITX25SqaGiDrcgF1weGjOpeVDh K9UiaVbSo6/YXPOAkipvmvj0hmo5YVUgBWy3OGPcOFHTVhVE/W64Cot1TNnPApwy5ABGxoFAqKth VgCY/mXK4kW8DAA2TA0bXzzkFOPH8mcdFAnFBio+i44R+i9sjfA7sDX6T9Fcjjnj2Xb8pY65cUjx ol4C+Ep5CG/+tY6Zn3nlxFHL3/kkSte9RQt0wfktGkbvOtD9noORoViXkTFgJch+NsoucPHm5fIf /+hPOFF3qHz8Y0+XPbt3c2rwUsga5aT7uNrega82h8Ao4e3bf6Bs2Tgehwuee+7bZQcqVGpFaGFM ubVhPBGnHeQeuGcBWWe5YklNoSaveYgEK2drckOvh42zJWzwNvtRs+L7fM8spwbh5hB7aKbxyGtv lLNs9K1fO1R++Ys/W5786McBEW8T6UWLYDyAe2gNHC2ijz/7ztfLN7/xPbQXBph07i/r1i1jV2Ft eerJA8ixTyF64P7A5kbAC8U9ONORsZ1l/WZlvetC9DDEHXYDcFmehPTQgktiDT4JgHOU+RwbatfO ny2nTp+IDTcKHoTs+9MnzxRlv03slHg33jX8rjHhudn54JOPI9tdUx586L4yy5Hke+GCt9Pe5ueh GcEg20fgSjGLE6XtNjN5NYA5uFLl220ONwAk+hnUsd3bgBJ67AKQDY9f5fzkfv2kPLe90Ua8OAXJ PoFto6ZLAHs7PVczjiPrGaIM0ouNX9N2wpCLDXT0l+infwKz5WkXlTzjhS+jTvK+Aeg1H/wNL8eq fWu53hjL+uGc5NvZOGUkwOMfq0QDtMNnm1h3J3gnNKYSgZzv1iNsiatvTwYR1oTNM2jDScL84Kz1 tm2IFOUwC3533du3QBecb9E+bzVw6m55Uo3cs7JEbL6hnrZv376QR36fzbU3Dh4uj3344fLsT32q jG/0dguOuja0ZgbBqoOP7LTBBiB7ZRzP3Vg+8tTacvkid64dPlJeRSNg9777ylqW3AsQgsbQlVsq x57mMIdLXwleghsDbJWTAn3oHl8u6/q3JqcG551yUYywI6/2GPE1Dq+8wabXf/mLryHv3lP+5b/6 1+VnP/sZ7pBrlqscfgD/4PoAQtK/cPJqOXP8cLnwxg/L7/zmF8seOOWNWzfC8aJvu30XWg9jqJ3x Gz3uQQCxLnlnONV2jU3K6xyuOIXKn1cUHTnxOtoqJ8qpE8qD0XZA80HgHGOVILihIMaE0ESPeKzs 2buvrEHGq//41jVl2z2YnNzDKmPjOo4d7woVQK2nmadHlz3C3IuM3vQUZQjAcq4eGNEEptoBS6wq sr8S0AQVgUTtwtQlT/GFG7se2jFvNy4VOzBfAVzoPPM7RQ6CfUQEfhI05XwVWdknrlQC2AApJ1Q1 TqpYw4lW1TKSj4kQqKN8cp05AJ0sdIo68kslTfORZ83yG07O1zEa41Qu2AiWSyBsO+adyMuJIDMx TtbdeKbmU87bFEiNMdkug2mHaIp8YSRsB1tCkLYe/I+4WY42+DMbrfqbHi1EuJRDV2C2vlk/n/V7 u8jdx00tUEfATd7dnze3QCUGZ3+dRBe77hDhOEdm3QTTdwh7FlPYW/jr//qtcuiN4+WZZ58pjz58 LwMR2S0G1fv7tN2L8RdllQ7geVXvepB1bg/OVW7x4KGXSv/xNeW+ex8qA2tYKnMs1mX8seOny/PP Px/3w61FRvvlX/m18ou/8M/jlF+DTb+R4WZ56bkfqRoM9z0Otzldrp46A7c4Xw4fOYXWxbXyy7/8 y+Xnf/FLWCvbwF12vGNzTP1ZOc7G6Fpk1sh8hzeV/Q9uK5/+7K8BlpugaGsMtQMcV7CodhmAPXz6 MGYvp8rpE+j5njpbDqONoszXU2/XMCmpilmuMpQho/GwYbRsRqvhiWc+jz2JR1Dj8/DGSJx8U+/a k37Kl5VDp4xVIEMlD8DV3odlRIRdJi9gL2LhEgdvPLQD3ydQYX9EcPSUG0p4bGyySan+cu8Q4C1g yYcCLgBCA11fAUsbGQkQ5sEmHcgiZ2qZPaLtuzyxiOiBcmhOlO5NoOM9a5eII2i7ERraNICtgOwY cTUR9QewA5ApgbEEOP0zKUAMdYkAyUTAKJutrdghymT9zJq6JoDbGY7BBDnDGi4dKCrAwr1WsEeI RR6EDfA2cDumE4k/EIE5URg+03FcWlLLoJYL049dT508BORBFse+lwUge2LD2nrRV0RwA7E683Wy su06vHndpp8bPWu07rOjBWCUuq3U0R7xtTaJTwnJ48FyZ2ECFNb3ymUMDh18Ga6CQx0jXBv1o++X P/y3f8ym1mb82AiEMB2tS9Oof0FcBw4cKD/7s8+UnTvWIy5wcwkNAYityR1rGlJXHQ0BLX4czoAT XwDYfvTD75VDbx4p96FJsXnr/vKtv/hq+R5qcmfZjHrqwXvKL//ql8pH/tlPx6kyyC+iv/rii+XN VwF2k2LX7cpVQAxj8NuxJrZ2w2bunhsvW7btCgCZQ/3CvLTJoVqcNO0pwzkBHZu9F85jsQxO9yxG 1I8ePVTOo/lw7MTROGLcUnUOUbgn55YbiFDgsjZxCGYXNkY2btxQdmGqcvvOvXGKbgjgNX3lr/Vj vhK7u/fRxsiXa1urQx4aASF7R5OBDUhxRYCzksqKAygg/iaerir8nUC7KtsUBHVK7q1crnoAuPDF n76NMIgggluVDALUMoSQo/NEpXJpVyfCmkfnk2LsMxohsMYGF4QyrmVJR7koc/jLieNvvuwYUu7c UJR3JZcsv0XIxNvxfZVxnF6qE04N52cJjtW+q87UnIhqOg1kzrZP7D1Em8jrUxZAVVfLJODWZOTw oz2ZjMN+iPp2EdYJkLKz5CNniubhIcY6fZDgXtN0MmNc256MbQ8PTU7PYBfmCjr107ECckL2o0U9 P+47OE7qWImVCHnGSmalPaMYd82fLuf8Lrs6ubkEBqPE4IW78fRdP6KBPp7aXWBBm2ACN9yH2hqL V8QVr5b/639/pXz605/mUMInwmDS/BzG1lHjGmisgZAAEDg5MAugEHRGyyc/9Qwc4ET52z//0/IL v/rr5aFH7y8f+dTj6Cffg23mnaUPnd4ROLW5c3C/6M56jRXmnssnPvXTZQNqYKp9DTLY59noq2WV C53kYIVijCk0Ls5ysu34kYOhZnbkyDGMuZ+LAxaT01MpOoEoGmh6KDrZRJpb995THnzio2UnltPu uw9D7nv3ANDrg6BUE1MWqraGLg8YcAgCWXMASWi1oNnCvyUO7rSxgYakvdqAJMj4XVo0PShf3KIN bW++B+3DpeGTMtaUy0f6Ea8NfoSvctnAy0CdBDPbQpdtQn+adxuVQt5bAVbvyJj6RGETsPwey3nT sd/a4S2oqpU6J4LqvPg08wQUYxKhfkwqHtIQEB0hxOAvGcbXTKPG9xng2+FtOtVF27XLr59fqWl9 zdPDIJTZslJmi2ue/qvtbuDaLrUtIwGSyVOH9gkR223MoKfbbAfTrIBsAZ0a+BsTlZGtV7qabs2z 5td+fcvHuwlzy4h3iGcXnN9lRzpQKjeWA9XBLffg6TKX2AI3i2q5NMZsLunQhGC8eoqqxQGNr/7Z 18orLx8sn3r2U+XRxx5mo4ubUqbm4GTRRYWw5Ui8HWWYzUO1Jp54/KfKeuTIH/v0s2XrpjXl5Nnz pW9kQ1m/Zhi9XFT0OFzRNwAnDkirHzzLhtk0+rUvHXmtnEX8cAERw+XjR8OWr8bVPdEmN62e7xwA vAaO5RrHzLdu34m94PvLk5/4KJuGowHuO7nNQvWy9YgfPIAxQJlUFxSY3LCbR866SH3nuZJocY4l PJOLmCGnoyEjj0e7euiX86Vt6ieIGeLVZTvyhffhTx38nkTpUhnAZyNTDkxRRDrjZnqtAMFMq6af cdtBecC3wS8mEFVxSfSNWcay22V/R/ksC8504jg7JzSzfE4+GceNsHao9pjIXyug3AYsy6Tmirhm meVNo3z0tf/UbrdetcyGF4nrb2OlTnFNA56XMAGwAmO0Y+Zt2HD6VUTEQ65V0FyJFy9JR2+iRp4R 8YZo4WM5eoJrNg8/TkBABvXzWrQGK73UXzd4Jqh4w3hWJcLlFwOs5FXrl+l3FDZCdf/UFuiCc22J t3jmUlUAWOVWatAY8J7uA41lrtTh1RKXRCdwI40kmrJHDibAWXsh5omTh7iJ+GR56cWPls989tNl 26a1LPmuEAMIgZvqh3A9zOIdes3e9WXvgQ8h991cXvnRD7gp4/4yvm1/ucAm2+tvfpe0LmK/A2tm gLYcsTdcnEUefAoNiEEAfxjLcqPrBtCUWC4b0aJYv31TeezpR8u2nTviGLM3WfT096Bmpk0JDnWM av9DA/V56jE22BDneKhj8pp2IuSWJCZBQthbxOIlIg44cqSTHDaxneAGQ5HZVQScMpPMKhEaT/DJ tvQC0Zjw/A0xK+2UxtPAkTMcTmL3CdUr0jCU6XmEW+BSK8LfFWSyfEbLtHspp6KD+j7zN8F0/q4f gcXyB5jla/6qlG36OQmELdVRDAAAIABJREFUd7Cy/I5ZOCLx3rJnveRSs87ki766xbYcVX0t7GIQ VvA3di1bpN3xx3dVduto0tn84l2Uue0XL9p/5P5dW1RnuYwTLp7tdEwDz5r3Shj8ahtGbQLss14Z 1vbJMPpqU6WKp+yfbOtMt6bjM8obfZ+Fqe8isfYf/aq/4ev3zjB30/cuOL9Db9cB4mBxOZlLUwYR 41/j4jq5xb62TDXIDXlbyMp4hyUJPhxhjnAF05JDgEqjvPSjF8rJY0fLs88+zXXxjwTIqKKsoSMH eJNNtNbiBGKFJiYk3yyHjx3nQAcnz7AZvQl1O3TVMNv5zfI33/5W+dwv/Hy5nzvblNN5A4gmIr25 ee2WjWWNx6kjby3GYZ2OY8wCsDah85h2ytXnOeV3fvICnJ4cvFbZ0NOlkot8lLdbv+AXFb+wWkBi DufESUhAEGFGAMC8QEg7WXet4akyqNU5ucEAgjZIrrZpmzPzpcDWBpEEhSR0hKqkDdCGpbgECTnG EAUxmTkrCsS6CgD1+6rIJAFXTM28iUFewn/Im3kRZbYcuOhjwV+AWMW5fBl5dXpabvNvR/Yb8QR4 nVNElEsfw7VBXr1iah9x29WO8LUOq6mF98ofVy7mJQQHR+AbE2inm3mtTgRejJsBfBiHfPlkGfWq ua/muPLOKDSUR+47Xd089Jk0wSaq+UdatkWGN+1kUjLcSroreXbm35nDW/vfGOrO/tUF5x+jf3PQ QSAQoZel5tJPAJAz5MF4l6uU+DQ+IyC6sah2xxA2gL1Es4+riWZnr5f/9JU/xYjRwfKZn/7puKnC m6xFBIGzl+PWZXk4DPKcPXW0/N03v15+93/8nznIsQ7xR6Ps+u3/oXzhd/8nTFPAKwFi5q06mE6d 6EU2/VpuPAFDWj1bngVy2dCcncdAkctpuCyhLQjU5SqTj6WWuDy40oowADnvFgHskMkSR/1pidz6 L6DD7ImxIFS5NDh//RU9a6taPWEJOGAqiNJ2yzKab+RtgSljJV48A+osXdjj4JflVDAQjnoi0KGU witpCQyW3HjkXdP0u9ypLvNM0AgP/ljXEBEEsJAHQZN7riGM53fSCQ5UUYSgSjqEVWMjOOsIY7hM 33xrHfWKidpyZGKxkWlow6ntYX1XXNSFX20vNzxXnenbZnVCIu5K+Ha49u9VEUtH8lFOwpl2W9wR 7dfOIA7mtNvQtqjONvF3bVfL63eLLdecTjqwfI4Ly2JbZVa+zzZZ7Rv9anqZ1upYqP7Gqd8Nf7e5 Lji/ix4XeHSxZIxBKfEBtiCQgOvCOcDDwRQj32GZvqlaBTmDI8BcAK2bdWpkDGjQHhU49YB/7/f+ oPzCFz9b7v/QXrjrcdTxGObcV4egg4Mew6UfLY9PfvyZsn7rPRynPlf6kDlOcWN1//z1MiMxAKAh DqCo6qbGOTaAUgDzyLH34skB67x9ItQAKW8fGiPBQbcB01tDfBfwKDAQV45cuayGblzeLyD2UIIh Mfbjv6xcFtyEzw4gypvImYDgbE3LgyASWdhpoK38p9NP4Dbl6nLpL1EaxvakDMFxkj6iHkMHOFJe +0Ns0wmAFQAyZgKCZ/RMKy7uaKcZ79sRBRhxyhN5ApVgaTtGPvY1qBRlceMyypkAlKBmHMtay9+e HALhcyIxTlhps0VJ2wlGG8jWPYpOXrUOCUSmJxJaKxwv0z8nL8NGPPP1dbRNzd/gWc6Mk00Xgu9I ypiEdTJvg7ihDZsiI17jMm7mEm1Pa1illF8bwnY3f205CyH0LxP5kuIsG9PBzlv7tr24jPDG6XQr ZbS+uLd63xnnbvreBed37G0JMAdOAklyaDGgJTC4QzfK/MRAZZAGlwzH6hhtACLqhs7BsfZwQerg 4BBgCOAh6w3OFJ3c/lHUkzAh+u//36+gGbGtfOlXvogmBHf9cchihgszBfgP/9Sny+Zdu+KuQo8L hz3mHq6mb6naJYcqCEMk5Cn36uakhvjhnQNSOHCIf4KCNiJMQ25oLuTbECtEJj714imgh5U4nsuo QgVwIapZIID11vYHRy8gUd4JZKYt9yx4k4YcZXDrgLIgsEzcmLTY4edltEe0aZt7910QJmHbZBpt rrqhMBncpbWgHYUhT6nFbGBi5KnzW/2QWPrx9J9vIp5AFo58AhD0jTft3wKxZeEpyOgsO1o4ePBD P9uQOP4mPYpoID6m4zNdnVx6MWwVABdl4R1JxA01fqHN1KK82eUElPnbxinbNn3LZmNnDKsQpaIs CWxZr5q3fbCMtg7DgVY0rGM3S2oKMYZJLNqiXfQVgDRtyuzR/EBmw7czjgmH+oZZUFdROG04t1jt 6ZqYYHV8aSSrKI6y7nxu5bIfsiz1fZQr+qf63J1Pe7zr3qEFBC05uh7uPHNgLgbBQiSAixs2GpGP 4Y9VNeGwD3ZBUYNgpe7yIockmhh0bxTsIkMmGsuR4OQ41YsGs2F8G2Vk3TCXcx4rf/qVP+a6e4zd M0AjfbjX9Rt3YNGNMmD4JzbcAL45wHeRAy3LnDpZQmUrLmylWIpNvJFCG86N4FyRDBNmGZFJPOFw 3JSKG5wop2DkhGLZKiHJJYXdZDY5Y+mseCRAai7qo9F30/BdEJhA6zJfA0ehreF3D4Xgi9wTjW/S I6/gfoVW/EhP1UGdNQ3YEEAJr90KRReLtF+0fXCIiFbIsxc2mJZIrkyAJF2VCpwI5dKdTAJY1PSg kqEJE+DZ5q4pO4UnBcI7s1D2Wu8EEYUX5B9ybssiUmH83smHkns83rY0upxhMMr+6HBL9K9Hs5e1 Z0wZQzxhHXB5yIX2Mv0YU4Sh3LHKIEy8p+ixscjKyXYRlA3vZGW7Wp6y5E3gsZsRbWSb2FaVK1Zj poHYTZ33OOmXrUZ6pMHVV/aV+ds3Hu8PPXLGXE3DKdU7BluM96XIJ3ooUolyMK5jMo/yEM8Jmg8F JQ/aGLsnpuXkFKKtGCuUkvcJyjfCTwXq2hckcle7Luf8Lrq/DpoaNMHCQYxPLHtzQEMGeAAaLvWk IcETIKgcq0e4vVpoQW4KMuvpy8G7FJtmCfIbUFt77eCr5QgbgG7yLXF1kqAQh2EACQ9yONgtkxyR J+S8Hy8I2zT5F5nz1zyCGw6OOUoW8XokRJwEk1yWcfTg2f5q+jcSScZJ8szg1j+Aqx0pOOy6xJdg +W4YOU1LVo8mZ3uafjuzTG71r3FxN6RN9qYjbMb/4MqyTFFW0q/t70rFxnFTM8HWcKt5GT7LENms /AkgMRW4vGiKyNNJw7hMVvHOScyyCTA84wd/+HFDe63kkWU0WHU1b1XyXOqYTogDArzN35D8iS/t ySsysz3N1ADGdaJAgMVE0Bs2wXkH6Fr2aCQ2bN2uXVYv2RjEi3LbNeQrt2tcB4m617a3ReJbhDMd +82sXK0Y11OAYYy/Xb8oitnhYtzzdAxmW7YnPRNot6vh0uUYrr+6z7/fAqJE173LFqhElQQioTDA GHd1gDq4VS3yfQxOfotVclsSTQ5RPZKDM2JcLirXGBwiS3i475FRbx25UO4DZMIGrkQDmQQnjfgi ORFAPyhOzrJWIAEjZaDkgwsAFs1wEhckFuWL3/yRS7OEFTgNE8AG4eKbxGlgXK1/hGkDaPtNPszH 5MKZp4BFG+lPPgm27fzwtf4rTmASKALUJVzjA8YRxu8Z1jLoZT2ycTvSIFS0vWkDPt58bkhdlj3b Ljzaf8KfvE0z6mXcdl5y3LEa4WW0XYBn5rfS5vaxZVrJoyac7RxHwDvK3n4bjwBIi0j8LId5J8hH uVeLEvn7U5eydrhhvqOfE34FDtj2CjFPFhG8dz9EzaEM4iohNFAsM172h9Nm1D0QPetpkcLxItut emQ72kVZX2iALyHuM62aT6RZ+zvHke0nHZhe/Zjqzemv5tT91gXnH3MMJCFnZEFAU58uXUOWCyfi gO0VbGLEOjBd5im/hFg49striGIIIgleMOLC4KBNwRVYbBi2eILUYBVkRLp1QGe+koaTA0EIE+9y bR1EI9BmePOH2AUPiCMIsw0+lSh8SpzVQWMWjD+CmsTpJuAqkfo9gbz6GU6qzDxX00rAU/6dboVy oz4WVOFEcrgScpt4Sc44Aeim2o5miTKlCtztZDseya3hIXooZpErjRYh5kodTdAyt10Abn63DOmy LoYLGS+eWT7KQIFytZEhhR5eZl34Hu0aExdx7WTBiKDV33Tijj07TxeToyIu46ZX/qWc7Ykqnngq e88gtleFUMUaAjV58Z4E+Z+ig9iAjQ7FjzFqGax91gVQZmwi9Qj/2iJRznYYHsTL8RUHcohv3Mrl q6cuTx7priJzhmkDNIHJwHbMPo7ykWzmk7nWPM2u87u/72bXBef30PuCUgxO4tSnhJpXDjnQEmBa EITW3RhpjG2fEguEADCrYqdzEHI9JtjE0huZIItM0sRgEZtts1j4UZ7bxw0r3tgd8kbAF+lE5tsm uCxPEl0kShrigW4Jwk5YyDjmp0ZDOki5HTCf+nciQyZiftK8LgC/PQGkT/uv4BZVzcDJ1eGh45GH N2yXVVcJNaHCfEmDdLTHEPAjIUcME7YA+V4Jfx5g0U+XQC13bppUccVF/3T89sWt/GyX8I8A2T7W IZ36J65QaEkmjGil9mxhnJik4E5vcLa7abY9axEibNs3JqV2w2aXkJblp1p5Jx/xg5O1z0yLF9Hn N+TED9uHscKmdBrVt10Eaj6KOWivmBtNmw+ZRC/H18hMrjnb0hRuVNvLkudfy0dYwuhqO1pPPR1X yT1nPTKU6Roj008//2Ybr/5e/Rbprf686791wfnHGAJBfDHCiRyEnNyFYge5HAdro+2PgjGEIYfs MGeDxvwc6BCbhxKCceJPC4M/y5i/FDO9jkmA0ORl6J4yxuUBKzEkmJhGEkYCmOmbN8lLhBIz72Py 8Hfkj5fB2i6JIYkl60R44qyEiXLi0XaZL2FWwMt31EEEaBN5DVPjxJP8E6T9lZNNEqkghBeZhj6y 7RfltOCEA6CUMoejLAnMASPpZQN01KcCQXKVTk4ZN8pkWFzW2UgVJKIA4R93KEYom65OonpY/ho3 AwTA2lhR5gTkCOlkjAvun3fmbT1CvMPvatDH/s88TJsJ1jARMSsUIo/waE9AjpWVMpttToax7qIq YTUvUiAUeaaGC2PPf5aDtGvf+NvW8fh7Ngtt7SRAZ6Q4yYKky3ER00P1aqeX5Yyyk14NV/uAEhLe upEz73W2Q0+I/YIKIo7xuu7WLdAF51u3yy19HUj1UwMIZKq1aa5SmakgGpDAIHRceiPysobm2zvt 6uoKoEtoYATHJ9C5VPYWDSJ4Ek/TogODeYlrL7pWctwO8tDIMHKbMEO3txOAKFSUzykgxrxpUxqB wMLo9LIe7X8pVNFbgMwghgnwqs/wTqBrh+BRuVXyAjgNn3n4vTq/S/CZWxSB8sSxZRvOstSgHU/B X1mvm1nhTJ/IQoS0LLCZpgmYp6AasuE2oOZkZdyoQISt1Te9jJs52zzBrToRRfgsc9TJstIv5pEf Yydou9Kx8K6Saj7ZDpaPfNsZOiLUEa9CiEiHKKkOCFgrfgnQbedrFjgn1Syn/lnmlTpYVn6EKlv0 I7JlOGjzcgwKsNqrDv3zSDtKS+1IizrZdE50DdKQ7w9RTdTduuhI3+oRMG5KiXdMIKSvX9SvTkLR D+1YJB+TMGWPMNQ6J6Z8H39jrGTaHb7dr7dogS4436JRbvZKIklfv9ePxCkH48We3lwSm3sgnHJg hmngmwTbw/HtUF1CLSpMYGLcyA0c7+NbQtVL3f0mF7Fex2B8zxB6xFiCm8asaKgwwVFnQnJnfBOc STuIE+IidpShlrFyaZY2/UTABKkgGMtTCSwCSVD5HsYGsgQqyEO/6p/pQJSGD5fAnO/1rWDpywST CIa/YcJaW0SugO7b9ncBhXwjLcMKvIQVnIyneCadlG84fxEhI+Hl5EUcfFbLW+MkJ2ic2j6RSGdY UwJoKA3fajyfbTg1fxKIzd8AItIEuRJcTTcnTvOOUkUYopOefv4z7yYfuVn9nISjrKqdheaOtbEd rLt7F7WU2Q+mFs6ZhPJEujEpEBCxSoCulwnz3csBoq7ud7Q3A+WQKTViMeNSDlZzofEmF8s1XLa1 Jcg6W9/QdOdJ/62skgxhGIuZT78Hg0F9dHr7zrYJ06Lko3hF5kNnueuJzfBYae/8Vf9G29Qfd/Gz C8636HwHWOcAWfkOceSSmaHOTorAqDqTBzb6AFk3A+PqHgZnkwEOQ82IBHnRSVXVrRe93jSp6YBl JJsGdjaQDJIGh1EU8kIsC/NADnLnHvRIexperzRIXnDhsENChnEEUMUi6va64ecJuDzlhZ8EIiED Wr2ETeITfgAGiC3qw7sgKQi3IeBL9KQeMMV3fytMKeTfDhibRxL8MhNSrb9yYk9KChIu5WtbBZFS J9PWL0USApiEbdrEaadNapGXeVMJyv7/s/cmTZIsy5Ve5FRz3eldAA2i0Q0CJEUArHrJ39/C5oIi pAhWZBPcYVj0e7hTjTny+84xDY/MqroDyBUqrCrS3W1QU1MzPaY2uLk8Kl+V2f28ESRx6sIn4QEJ QcjhOUFagM59etaHb0wKnOcCBPTvuK+FKjmH+wIZ6U78RJdWIbmzU6Z7q1uXUIzll6rKvdLXUc+k ztQU72LKfS3dhpNan/Bzw4gpwGsy/C2TWOhincW1nlIOeFBOGRWYl0BGuZKGOGl3yFcnP7aEdBLJ x/IZxuKg9Zs48Ai42t40IHydP+sLBPoVnpSXBure9e41L5hL37qcdmL9NteEQJvOEBqOa3QZMKZ+ KS/+qX/yxcTgRzs/dZcS11j0Mo7s4TXlJIH385Ne20pzjFz0/EzdEZx/RcUfNh6VRZehIG0IjAhQ 0h4zhxfQFFjEGV97thHz4dUTLCTnnpP+lM37xPdY0Jmzs9H7irVb8cRzt9R5ZsXNpY1XdbPh2ugB ZeIIwOgEz5yBwevU5u8QPOdcCFDygPIJcmJvnIrAP1OVosDQuxWDSy1r4+iyEBSQEEvwEzSgU/CW AQvKb8VPoqQr3QKOfPR5FM6yKBv54ax9HHxy1WpUZLrMAZt3WQmN1EU8gHSnBEwEpcnHdO5zFhC1 VH2Rpnki1JkOMhLhzstrxZb+AknkNTwaq50x8ZDhiMr52b5BSP55ScSIxjVFbvm7hL6vuxXhoCzK beSSdBCY5xRLz+XC06I/fh+7CsDGzYTF6nBTwKQVDHmSB/L2ms9x1WORKw/SsC3bhg7l8WGellPi q2DcS85213St58P60f9jNMf/Y2Ef5vtv3+cIzr+hjlV4DznKYkysSxMLloKiYQAXFnQtSEGChqnV F+tD7Qak2UbnG4a3N89oxlpGgicgzBt6fhKouzxu2bHhnLSKYqOXpnSkQX6kFDScTrnlFe8zvzSy zpSe8zNs4Dn8iLe0SkMFIr2gGO0RAVWkBQhBFvIfVBBwzVIejGdyFLCKAwcCi2WTFm5AZa6jYHNN pMM/4cHymL48OPdr/NIgbPmXRvmVTeUvm76ZWQuuPJS88qll62hES1h4OMFiY6PiKo95CMzmTx3s gWQoQC8Fhi/lEJ6Ihuz35dE//EE3dWRaee5j8yuv8fRPZKo09V88C6B6UKCRXV6ZNv4D13Aih2/K br78j38rKGV1QTBtlDyuKZuROipZ/Ek3/uVDKY7rKGjR1NP24TV5Sgu5r+hpKvrbRlKoxEycffmU Ee3E/G3vHoWr28Lv3yfwQfj4fW7XIzj/Qo2PZbk1JhujjXw19KWYiUdrBS6BBi2iDrFrfTjkB7yx cvsaLPPIgoXnP2f4XVCixUZNOm8MLS1D/ciqfJinisZQFG3wzcAbviqimX56yxkb6io/89Ry8YS7 4TsAHV6NZKEH8JciRrv0Nr8qWTsPAAlv1UuFz3Cev2rj0JbaQyd/8ty91SsPIpnGsPlpwYaWYeaU rO20uJUX+DTE+DpZCz8pi3SIE9A0tHS1Hh0t2IkltSBdJAFr6lcqpjl0xLOMAlcStgzhTMEGiMxl piA8yN/pAB0ZEh4+kxfxA+ANnXLPtRk4xVAVTHES1Q6l5bXeZUVyt/sy4sfz/hVtR1gRmm2DLBXO ciOzuXZZMJM5xNjqz/CUGd/U6dSRKLxA/7AsQ9/g6kLry9fzlbkudBDiqrbIZfhIhH2ceTpeH0rg CM4PJfIrn6ehec25FA5106jV6mmcNFWUKnO0gPEdH3m94zyENN+TN8QSsJ0LND5XrOECja9p9yAl 5yQnL2KF9tA/5zyOZ89f5lQ5V+alZRSnNEzjecwqkPdVFtPrwX9vcRttn1TwApxPukAz5bJUjVvl 0z4dBUzEj/4RXaC30jZ+I8ayIwROO02y4twDAflGrsNj5Fv2JavQKA3yrcgju/CPNawMkp8RTUOB ndsPLZ7T2Wk145cI/I1T3tYHiGjc5NkiT4xcDcsvox+9UsqSEtDgTQDOrhNvk49Xg/Qo0dK/n0F4 NAZ5dO9xgTeYj787KFJkOgOntwrmBBw4R1bpkG1/ygBHacJW82/b00hId5UFxI3AlPtj/G2xeld6 y3cVJbIZGa38jTFxH15X6uPlQAJHcD4QxsdvVYxaBhM+DcsGqJJP49ffFwJcFXcxJHtHr7FrWEl3 SuNOQHbRzzcFXSRRsQRldmSEDmrSoV/n+2KlqmRoYhXNlm8epvPHMUsccmTbP49Vq220+CFNgJl4 e+tnFSD8AlYO2aECccso2EIIv3HCWctWALWjCciEH+PJrxRqPXZ+tqkjC27bYZTmyM0YyYrQ0JcF ZCygcrPK1jIKcJsrSDVNgVNw1lLWzxFDQDVJ9INbyy8wUkagUob4bwSnOabuKsstn95tdVs+pfSB C8DrS2aUIeUW4HnKPaMj79uGyn8e5QUnJwmX2Tj9Wx4D3IaXIqSO9KcthpEtfcL5I3jnftHJvG/q xoBV14aFFteDAqXuDVv133o3wnB4yLsRx5VXy9oOjavTXXGmsXOATn6lkbjG35i9d29S8z8MD7nP 7M8RnH9jhafBpAEHAWi7gmenGQIC0lPRbFw0TFe9b/lCtYfCuOvCBaRTLOisiPNkrIIAq+As9GVB h10cfvE7ioFy2rg7jDVPFcYGTxbMoQaQUED58nVawd9FwaCfr38TW8XIsF6+66EvUYg3ihqfgz/6 A8Zu7YpemSFZm08sLaKqanZb8QtD+pgsmcAjV3+kiJfAQiokZqlTLvVTYNYNjJkmHYOrprjSJ37G 0fHBU+sRmeWxnYSl7UKdnuSUrN3XsMqNh7TsGEaeOXkv+VfOkVXKWdadtpBf3fA5wOHr+dZngcy6 aZp2YsaXd8Gr5aiPkZaclCXgXu4nDrVuJ+hUTMIF1boUPwIzL+gSYH9WuuXO2tG1u9zqI012EbKb ygmB1k0CNCbuO/MmcJXNMDMqvd7rh0t65Oo80kdcRkgwqgxGbofRUh/JS1k95OIw5ud3fwTnX1nn WyOq0jRZFXJI2ACNZ5vPKrcKpDWXf6oLgHv6yp1fRFCpuQLEtutrgNQT524upQ/8xULqvfPSKnRB QOvMajMxPwDnlLTOTzvVIGQF4AkC61Fgrd/yGbCSJ5UOPu08BIZN6bjFJR8Bkjidv/alc+J1/iVx hCX3F2droLRSbmnh9oDfNKO3xlHhPRSvW7943lueyqEKPmAn+AXIpR/oXsqbgngvoNZabUg7t+SR OX7LYsfW7qSWfWNG9oxyfGPN+LIWP6lyk3Mx4k96ZLvvFwjXlQXrGg5LDDIL/DPCSKzSiozNx4KT Z1kwwj1X+az8ke1AZubtk4fy9cdfO23rPDKbtpGg/BnIt/tMvLSB1lMiPGCiZaAIi7eue/D8cczd MqI9VXbtYKUjCafn4tJu7aDk27LXkJiyNtL2d/znuoV8fndHcP6FOi/gAnDu5cW10biTFqsVlPFU jFNet7bxeXbuKVuPhL8btPcRVsUNh527An7KfljOIJcC4YIOjZd9y+5ldmGQt084l5w82O1xzfa5 sysX+GptOJ8sPJ67RQy6d7zEIh/5NBX7mAO9aIS8+jBDVPc+801u0qiUlCFxSB8NFJiN62Hp5M8O kqQnH1OZRsW+cu9vtE/Fgg5R/XKKu1O0Os9P+Z6g5/ayX1br6Y5Oxy2CYoZ8u5PF09HYVoKHCosl q8JSTt+avIDJynT4MV85s1RKUt6k5avvVey+mCK/nrimPAApZJ0zoElea80TmS2H4QIddKB3ssAc SKcs+kGbrArfXO0swkLBxS10VCzpZAIeAzLY4uZDvYZOZGUi6isEoa0sjAtt93obP52kfIYbPRQS LUG5ks6Q9n/wS10HlEloGTLeSN52wPJDbuTrudLdQy4FXflO3pRFqQYoAUvl0GI0P+NEViYT7HlO FuvZztc5c2kK9ilMyVOHRkL+XrOHmXbi/vF0qMqQo0upn0idQvlSStJbB2l/RDkA6vGT6tFVAkdw /oWW4Na5NNgM31QwG7iKpZVG82T7m424zoaH4vCQD3iSxhdTZgO+IG0jzNe6UcwbDjV6xBY49yer bHG8NWgjvuG1QemPNWmYyitICDXhSR6AoDRs6K02HzIdbppoWejRZgjiTDUZSkv+0HRCYEL0NTzO stD5WCbKmC+tkHFfJ5c3/CiDXxzX0lTZBOVb35CEmbxoIUnv3WoYvim3e2ex+i70I0xLf5wAZpkd HXjeSPkxtACXMkZW5CfoJd/Kv7ItyERAUy2LeMAHv6ERACOs00pcgzRNJFjHWl+jDkkkfTov4q7O uqTL/+Qf+dlO4C3bKZHZVK/xjaeH9GwvqUs8Gsf2wV1GFMpBfuCGi7XRuM11s9qlVb/527JNWSYQ WeNV34m5XZtXn6cspSM/i1+KavNPew2fAH0+jmDbdJQmMNsIaNfqzGS9ZbO/O8xv73m82UvgCM57 UXz6psPhhkehAKzOciXgAAAgAElEQVSzM7bF+fIHjVGA8JcwlEmF1LLoSFLLSOXVclhAryIGTE1b 0Mqque9xY4VrVwuuhvgihQpVsBU4BVEbPSAXIFuqZh5RZILvOUGzcapoRuMZuurNwySZ18XTLsB8 BOV8NJYC9dAe8zc5fFH+83O/Fi4QEQ/+/RbA2RkWpUXWOSXAAU5aTuZ7xtfF/fq3M6TOD+eTTekQ Gr1JFB6/WFZKYYg138x0U/7QIEHlbkp5U7blvuUWNOJrhLjIoZ7jtYB5/xjZB/yCQgKo/CADQTf3 vQJHgFXla37NUzq0g/ZUiU/qhG3hxqHNECf8pnPUz5jLpd14b/nNPzWynvVqZ998Wy+xxgna6Nju 6szngPp476/lo2VJXOLHIKgX/NuZprZLh3vbeEZGSMzRl3XjfL6tNyxThtJCXtAZGVUOW73umTje 7CVwBOe9KD59Y+OKZvh3KaCK5xnOSy/3/kVk2iUt0YatlXnLCyaqRa0kGrxjZfDXoeupUxsqvPPR UUKVDHDjs1I6rcxRmjZoYhHfNB2SCvhVuW3BjIQohfGl23j4kUbl7Zy193JFOKAWBRKIokAqlvzy QAyd5ZHO5aVA63GmHOBE0Lv3P3Ev4NphAbbsu3ba4/wRLxugrM+e8gajljll89uFN7wOKFinU1NC GTkop1rB8hFQS67mKxhUJikPz3F74Coo7WUw4UQK/0RvigJB6K1K894dK93RIdXGiQGd9NBY2SmY yaPTRsiDrLO2QAfUU90auXIr7yRKmJLc+Hc6xCkh2lB7Xni8D1RbXpNvF/zKo/VFA0rJpLzy4tqn eN37Iz1fi9+3hRWq//Cr1+Fz7607A2g3CMb5e/4nn9CEbyTR6Q3bHP8y+kmitsEkN9HR/SYJHMH5 F8VVEXVeb0UOMKhMKDZ/oxBacgCYwIW249vG6K4LF2TGMFIR/GU+j3bfIbXWjUpiq6fxMz99DTir wgLqpjzmiZKQl25oqTibUq37qAl87EEsSQ5oqWQo295qHeUx/QYUeXPRqRn+WxYB+Pnz5wEWKf7+ H/4ZwL7a/cmf/ClPHUG8ePEcObCP4YKvi1PWW7576Jtq8nvx6JQzq/ken2VlauA98nr16lXA/elT 5t3hKfvG92WE7EIcw3QtK/IyCP6FrQlLBP9YboEvkbhXRtyHRCzOAR07TmXskNzIupGF9/fBX5/g qTe4O2UTV5kNH3lLz3oPfxtINW5peq9MJk3D+rdl3MIaRz63tBN/wno95L3ysYTprJOf4VuZJp+h pZwUmnw5LdVzSFrGLBJCK/lQNunkaNxYzLRhpwAxPHrWnfJwIoY1kTWq3OdxcGM+R/dxCRzB+eNy +cB3s0o7TDOCyiyQFMu0SNvQagUVJPP5IM7MqAm2GrZWEuDUt+cEdJQY0DvxUyh+jjlfSnF7niDu osqay0NxzGHUz8WtdAZ7IBugkDtj8ssctvcChArTvKNgAqT7rfUjro/tLPQxTPuuimr877//fvfs 2bOdIPrmjS/R7HZfffXV7g9/+APz0VrMnbp4+vT57j2vn2tlX7/vW4p5vZ2XZqTz+t3ryCqf9FLJ mQ55xyl8vor+hKNSPTY1fZyWpR2UvMiOdwug+6Q38l9+I/+JJ0hYOhftdA0H8LyPD+Imj3GGS2vi KwVBVtduuPm1w6z/pBGI6gRkh/VeoUdH3bnrPh9ikR1W5/NtF0099JzMkVH50eIdjn02zrjet615 7z+BeOJZsymwNRk6k1KK1gdx6W1CZ5gwyYP7WtxSkw5pLK5NyTICyA4GUxdQjSRYBPaNWNtw9KRM JH74lNdVjnneODveKYEjOP9SO2AoZ6PuYpGNEQC0ZWItAM1pigFQ5lFz4I4AGN3hGuVCcbIbAyWD lv9qpakUgCs7PFx03HE6mhbxLVazFohfbzbd+hZrh40HvBozEJrhrQCmxWKGKM8olo8oYBhJGAqR Mbt5SgyeQMEqSZU+0zV0OOqxOyFq4WIVQdPDmPy956Oz10zpuPXv8cWz3bffshflPV8RZ6rjnK+7 vH93u3v8+CnnUr/eXTzxG4cnu8u3gDSW95MnT3Y3Tn8AChwNknyevXwRMP/hhx8A7re7r7/+3e4R 54VksREZWzakFTqj0L7tZ/k9DrOAASjA81i1xuvQXzBxislqMUPKu/4RHekUPLjFVaob4JsiUNNg /1r3C/xGrgOEh4BmPHlOlpHjBqghYx0ljiAmD3KjmOc6+TqVAC3bFbwIqJL1j12XBbYuVzL88SM8 ZeXq187jZ5KPOOvbPCdfo8y91xwzOkKNLOSjzoGGpbplp4689TuYPGtUaBSsIg89U6X+7LBgen76 H92HEpgW8GHI0ScSyKJQAGApdhqVuxK6KJhGSUwboEAXS1aVptHb+AS4nKOhJeFWO9D2lu1P/jr8 MxsBEjDm5DpfrKizZXdIGKVUA9V0nBZzG7z5VDlJTWx+sY6MJ00ATcVxK1s6jabPudN2GA5Hxz/K v5Xj+gar97ov1ziH7O/F02dYzoDrmt5wke+GI061cjufDnRg/Z/Rsfz002t+P0QO+SYitN6+BdS5 6mKxKiO2qV1eX+2evXi2+93vvkm5nOZwRKL8ppyjyAEn0o+8pTUWoX6Nr+90Ot5/3IU+K5dNVyRJ PgKg9XxgVQ8Fww0TmLIQaGfNb8+f4QL4cuGH50O+x88ojp50oZs77sl/6E37ytU2UjYTc8o615Wc S+t5e+6d8fqb9nM/hnlaL6mbFbSlaVpShkb5816G7BAoMx1B/D261LNeHrBhWPm/H6D/0X0ogaPl /KFM7vmcaCFzML6fkPKEM/fbxia64nXsG14owUI4PXnLqXAMwM+Yk3WRjy9p7zxQH3C8dXcCn6cC lbAcH7P8RsN0mgOvRzTgK9JyUDObh2no7A09ueFY0cvTzM2ecbToFeB77V5mjhv1fF/34ToTIA99 y7D7fW8BYMOj2ABeFtzczgQ422GocH6x5ZyFO59zJgN0btl1kjNKBXAs+Sv5hL8vvnqJP3uWWcT7 /qd/wuKlTGwblJdTzgMuqLTDsVNwGkNFPnnMVMjF+e7Fyyfw95TpinedqnjyePfjH17tnr6g3Cop eTnyuMPSvtCSJp/HWN5vXv20e3f6evflly+FAWQjeAp2c3XhFDhAzjCKpY6da752gk4NCXbE9/xm 3R2dYV8oseMUBAp8eYmDDulu7VG3k8qZJPJFNGNCDcO0luUePuSFzmcP3DnTBK/waI7cp1wAFonO YcdzlwVwWUvXa1z4VV6wnGvqLZapFOAlnSX8XVOH1Gd28Lho7IgKhAt/0MyuiJWnKXXbFIQieUe5 lZ/+ykrZ06ZNa3uxLqBr+5CuZ4XvQZT4h9N50pBna85U/lNWviyUs13spZexgLoEiM8cHRJvOiFu 0nlbxkNnnoe/yUu/z9UdwfkjNW8D/JSrlUZzW5bmKaCcBqQVGlCuImQuz+1zVx5gpHVVpcnODBWT 35Vb8XLuhkNtHddYLk6ZMCyE3hlncngedH7OQqHY8uAUiuB5d0MnYDr+OdB1SiQWiwCiMmKBOv3g TgktWJ8zDUM+WsN5USR03Xnx/e7Fixe7J8++3L1+9RYlfIPiPU46rdk3b97u/v2f/UVfqvClEpj2 XBCnIN6/O0u8r779ljw6inDhUH01zwsWAb/68pvdjz+8Sh6mCchHwS39Xeaxnfb46pvfRabOxcci W6Clnm7Kah0Z7qgAeXLbMCEDGSAn6zE7MTTXHP6bIhG5Cszc52Aq/Ui11bsxdciUMOmOj1EzXSJA 7oFj6lw65WMfJujpmTy8wZG3FNuWFt+h2/TyMr9TOvxOgznSEdA6stIvbcTnRW/4L8/yZBlNV/66 W4PovnG68m9c4pBn+EGWWXQMK/JeuezLQ0ydQJ5dGYJxnvnjYuUqQuqKesv89H6kR5QHMtuepXrf /VzY/Zj/Np+spaP7GQnYQDbroRE1wPTv8A/bzSmCNEQaNl9+8FCjE6yVk7tn2mliB38njokBdB4z L4gVA5Tx4K9Ajz5n90IsNKx1jUJf2nBxSXeat6/IS7tR8GC6BHsUxZAWJjlXFxFzpjCK6LnPLsiN 8ppXQRtLGD7fX77hm4UXu2++/hPKtAMkX2EhAwpRYuePH7O49zaLgaUxCgvIwNL7y3e7H3/8cfen f+qOjd3uJ4DceL4ZZydyzULhkyenu5cvX2anh4rtBwLWtu4ouS/o/OG773d/9Ed/HLDPiyoQz1fE 0yGREXKIrMhD0PBvzytGPjKSOvCeEAHBf0azDvCMxWk05R1XuTf+8kpHUFBOOmiYxPqbsicv6wR/ O8TmzXN4KJ1DS1pO9mH7sX4YIXKBs6n821FOy2ccp4Hk33jlhJvwEgPABeTwQoOaDoD6lVfTCJ2K wBL3ztR1xpFqdhPRSDOwSNqJYZlst9MhDB/NP6MQ6i30Ya15Vs56ZsdK2HK0Zzmk17qYazyPfz4q gSM4f1Qsm2cVsg3P+3mOsjHc7NdGRplRCoaINtYo3S1TAVi9Nkx10kG47g5LMm8L+mYgyldLTwWo Eqhj2VmhFewDKuT1XJTH9S8K54sdAnYsI4AwAUvZSatK2nEIkCqg89kzn+jURqxovl348ovnu6fs S377lsU+pidu1xtfbrNz+oG/sXbPz2t5O+c8C6QeS/rq3fvd3//93++++fZ3ILuvljsfLzDc7i7Z RvfFF18B8H7A1k91Ef+nN/DuXmm/4vKWKZyz3T/90z+lY3A3yBtoZHeHHYxTSprfy/qb0hdW6CDD o6AleFb5lVHG1JRXADvAzAT5p2BpOqJGxuMXL3gXVVY9kHdOzCNoyp10srVqY8BGWkPPq4P6xF28 JV5GBM3b8PglVuPmlj+h45REFo0h4AhgtaG0Fb+wg/xrxRKus5NfTqPCYwToJuPj6+3rhosMpQDL CzAPj5Meuo42yHJRRiZNlgueik3qAXWDEiFwf9AWmciz/nAjozzkuXzN8/F6XwJHcL4vj48+tVHZ uKaZGs3Gi19WqgFJlcYV6iinCoMioDw3sXLZ2eC8MooIhKZR5yUS4maRUOXT8k2YQF/r6USriHnn +pu3H/8U9J6iV2aOpS34uACDogU4nFrJAqALji7u9OvRzqx0bhB1Iq0K9Yxph0x1XJ/svvuXnwCg ntlxw1BYa/n9NVveCMuuDM6Xdv74/LF8aplZVK7Q/e6773Z/+7d/u/vi5Ze7H1+/4ZV2QfeaqZEf M4fpVMVPr76L/OwQpK1MPZNjLPrf//73u7/5m7/BQi+AC47GPemkLZmtTmddgWXKt6w0OBpA5DYu zwGL8UEse5Q2oKMUy1KAO6jbyYtYdnjSamcwwEX9EMcUdoEJVyDLJR/C8+q288QfOMvS8nR74/0I 7axLr9MX5G9ji1c7bNuiv8lVgG5ZpCWftjNCw9fGt6G2q4StePJrtE0+xuqzvIxrOUurujC5N0ZH h4sOBI2TfpV70x7S936e536uk9/nfj2C869pAQLfaky5xkrDLkw77bBWkA2Yrrasheg/v48Xa9X5 AlzOxoCWfs4Hal2qWH0ZREsCRWE+N2/xuRhJ3Cpal88wu/HDCtVbBYWHKhbPAW/AU09+Wj6nALhW 3xkHDLlwZr5ax198/QXgd7V7/fo1ALrbPcWy3bEvNdvhAGKnC56d/W73hNOaBEl3Wlxe8nVw9ipf sOCXRUW2DzrdcYrf7373u9A6hTeB+RFWNlAfa+qaNwLNl5kVeJdfTuC78KvlXQT8x3/8R7bjfZtt du6NrmyqzJG3GJOCIsO5WnyLbEcUIBoQGaUv+B5OLzjVEXlKgzQFMXkSZEIN3u4DSUFsaApi5jdx HPk0HZ571zqrf+8t8wZkmZ6yzgFw0yfPgdnw1vzSaSAj20KmsATKjIgAV/j3LItkf9CZtEzmZRuQ h+E9XIfHjRehF8NC6xt6mT5LGqPRfoanpKpfb5Vf6eblojBRVgxPh9aI6+/SEdhJfR7kMfK5F/34 EAkcwflXNIRpUFGipYtAccDPle8ql9MZKC7AI3iaJnN5KJAgfQJQzhkMsXIcjuPvBn6/bJETvbSE TIdi2PxjlmoJE8/nHKgfJO5UiHllwQuAcnW/DV3wwCWdlkufTeYinEDo4t754/8+8T3r4uLiGuv3 99C6CMi+efvTjvXD3ZPHL5mWeBOwFXBPAFx5T9kgKED74oyW8RUTyKe+xg2waxkz0bw7+/ILJGI5 ARhYEoy7OMnr3QC6VvOrH3/KfPVf/dVfZYFSYI7FTHxfbzY/YJp/AhlMUeYCkDJR6e3QxhkmcPLX P5FvEAFUEND049lLnFxF0ly9r3MEMvjRg+PLw4QfXitzQWeIyrM89DkjqiSw82hexrWOXRSmv9ji +rzSSnd40E8LO3nEE5lCyvn4O0dXuPKxyiDAB7Dl4VA+lCPyG15NKE+2Q8yE5Ele9tb6EdcjZxun eTS98lhu3di+R7CWTacIBP4+HHaGbUMNOP79lASW5D4V/Hn6j8Idln6URr8MNWm0uWYf8WqMAK1H Zna7kwDKsJ3dGHdMDeh3xhSDP51Qcct8cRf5SK9F5K4MPwLLPKvTEEQmFuAaP6dOtLSdtug88unu eZTy7sy38KRKdTJfHMcUS/lEEZjjFBSdOvi7v/u73Z//+Z9jndovS58XS9hdccV0wvUN+5B5bdwO 5+yUl0l4scQdHQKzQKrOzo6PTEdEIaECaH/3L9/v/vmf/zn8vP7pVTqAG9I5z6yFrpMHFyfPz9hm F6vxIjx989XXSScw1yI/y25DO5YMiwUObgbwHDEoL8Yl4TX7tQWqtTCbeXZGHaeUwzIW6AQEQa6/ MPSJP1PXBUXHNgJN4BSwImtA1KLv+SFc/vqDJ1Fpudm+Z3mnY2uQ8bVaC1SW3XuvuqHXjt7yujuG CpCBdLy1q7a80gBIad62p3bWlZug7M8w05MHPy1349p22ubr32ptm5aO6foTtMfpZ+d8IF/ZXD9v xOXRlaYyP3+bm/JvPse7kcDRch5J/My1St8tTVq4mZtdc8p3t9/QvJ0iYIjOHCr2I3uHOT+C/bM3 l4AR0x2xjlEO3pOLEnDWEWYk1iRm0/XFF9yT5tTXoTlC9OT57pJjOJ1iOLl7lWkJgf3U855RpoCw iIXSeEZ0FCnKagHw9z5HwnXu1jfEmIXAkP1+97//H/9595/+0/+8e/TkRfhlggJV7ssm/+E//GXA 84dXP7CDw7LaKTj0dprEl03eZI74jq11gqFA3R2Cj0n3fnf6HPuYV7rfYXWrkE51XAdZ5cMFSXeS QIqOxFPMlOmbN693X//RvyvgEzjTDgLBNT8XO1VeYdFy44PsoSHg0lF1kU4+9TSO4OJUEJLQJBXQ eC4oCSYClPGsgAGfJ9CFhvHjBmyID92IEn5NYqr8pT6Sh52D+Vkw1xwWICa/BWo5g5t7uj5k5lyv +2jsZJGf9AkTxUICGneOQPgnfx7yf31KB88/GogpUoZ07XQQSiRAm3wHQNtJFfQ8lpXxxjXfrqSy prMWsO2w3Y1zdvsCKm2LmUFXPqXMX6S82pZxfNU8i8GRH1lbT3YwdhhyHQEpV2QIv5mDZqtpOwjy I31HDcraeKsOuNO1Xno9vG/o5/f3CM6/os6noRxGbeNX2Rmqg4caPNlTSlO/ZX73WhSh8Z6d0wCx FmOxBUlRlpyCj2VLojNA3rZ9pxIIJFmN77yrFrLDzYKLFoyNGboqNE4eDq0x46k3Y30ZR8vY2P/l f/3fdn/5F3+7++N/9x8CzCqboOQbixcAuDxfgbhacwL240fPObjoBS+GYMXyUsqlbwze/rdl+ZIH eHEDcrkTxLM0jPP82UvyZs6ZzsWflrLAo9K7O8WjQn0Zwc9p3dIhIRimQHjZBQ6jwFzHgsQzflro H5O/4XWCEfJdFqe0UjepDwDL1+HXNsMAcKY3nGaBN/eJ808pBVcWRS/KMnTD/0EAt/f4sU5Sf9Z3 0yXcjjR07Jwbp/WiJU45Exc5cr3VIo6DL/nOvTWE8027PM8fa9MfTlCm3Th9ljiAvXnPIrDx2iZo R7GSaS+TluRtVx3VtEzSlWvrRmenUd5s5wVZnyst0wvYK3f8LaecZFyYvHqUwOKXcPPJCJC27ajg 6D4tgSM4f1o2nwix90cBaFyiqgDnjg1Bkn1Lu7MLlQOx8iq2h5ALRFWQNuhpnDc04sxB32F1Rols 2r7ySuOF3tk5SpC5jaUoAWRp0f5LqnnGmkZBDFiKVEWrn/O//8///X+yM+OL3f/wP7IbImcrSwP+ fasxZbjZ/fjmuwWMlIEpDRXT4z893yjDbyxhDyWSP0cJWWTEKvNgffPWovIgI6dALL94FBqMEM4Y Kvjra+vu/vAY0WsWIbHCRz6glBaxLvLCWoylBqhvR3omOICmDCwn6o6nnVQVf9IPxOV5dkxEbvyJ NShgAVX8giex0gNxzUSq0P+w89NvomjZD/DoueoqQDgAZ63YGRBKB5J2Iu2QIC3ytP513OJsF14b Ix3xPj9pzg9PrHCf22lLo+DMDbfNy/apa1kk5M+4lsP4zRuP5YZvrtDouRkEKQvSZRoucoEO1zqn SFYeArNyNYj0brU0v4J8+Z2pjrbTReJ4+UACR3D+QCS/zSMr7losNs7MB4+l0YZ/q2XjkJlhnm8K ajfcYK1qUbhS7uebehi/rRlg06I487NPKA3JVN02Yp61lEYhAgAqhA1+gUSUtWBpYoHg3VvAkR0X f/3Xfx2QvaUzOGPOV+td0BVIT516ASy17l0UFFhv/Ko3c9/ea1GfXXeRs3nB61JQDVbnVft6roAX pkPLe/uXE17RPlnz5rvrp3lV++wci4194B6kZJnO0hFJC16gp04LZlrcuil3huNLBvGL5QqTyH8P NgEmPJSLw+tUjhGUsWDhjzpQwN6HHqBIuNLsq9NDzzRb/nn4yJ/y17jmW8DkzrG+rOydsjbe8lxt InlaFp2jrr07vDdc3km9pjmksy8f98q8nceUc65J9pE/pUempDOvJZPwV9k/TNR49RWUU97kzQMV l5EAdZBdIFYN5U2dIufIKYla1n29rjp9mNfn/HwE51+s/aUwB/HS2LQOABLBSzzqXCfWCo07liYN 8pQ9uh4CFOCi3caimEZMEhumNlXsqugrxADgU5SUpg3dArPpqhDyIsADgvwb1zCVVOum+RhW5bjN sZ6Yruyo6Kehbp3XZPrBqYB8/48hvtZy8pEbOwYB0nnvc7bFpYOBTyzmTM+Qj5+dcoucc9PyUiDt 3KxTKZ4HMSzKl1v2rnjh5KuX7OBY1jYZdqExcmzHoxKPkx+t5lHg8Edwj/Fc5Sf/ui2dz5FRQNBp DYbPLhZmSkOerQyeXTQFKCI/OztkXxlUllIZlzg8eB1+DMt6xN76nDqhQayk7oAg0iKz0UvaWJQD jiQxqmU+7Hi5F7hredrQpG0babqCtNlZC5PPPvvwCsmWMXwuEMavn1c75En6uo1OrfNJb9wtfmVh WBLxxzo3rW0UmWM4+I3D6ov1KM+Gz2+z6vE8ugcS2FrGg4Dj489LYBRUy9P5S59VrnEOB/N5J6Y2 nKY44QAfNCpKkleTAYezLF45ZwioxxKybQvL7mYAGKHbDmDNyaIFgpeNvRaziqGlVIVVacfJj4B5 BrhecU6ye5vP2ebmwpxKdCZQoUjnZxy0hIvymx6l98wLt1BdYWWrSCqhP+d/nVt2B0YAjtCC9QIs QFe1rNICFcbD56dXv9/9wz/84+7li2+ZVnHBkPh3Tp2U35HlWFcByQVCRNrnP3yI3+7ZzoFHS+aV /zxscqCE5CLAFbo8S2P/7HTUgcwsu7QrW+vBUcRWfvMffuaqAgmUGoMNN+/tV1kUmMojEqJu9mUR VOEJSIZA60ba1BA/mQHA0gFtZZLPpI+X/DnNZH3uUTJAnXYhsSXn3B7+kc5BZ9jpBnlVjlOGKRdX 4jaMYNLmt6cXSfBUueWqxWwHmSu8HSrIPt3x5lMSUKJH9xslUCWzAaskWhu9ajHawLuIpaKg7FqF 3KkDztd1yKxC4cvvEVrtanzn5lQJ5m2xVGNRc+jNuCqF+ZhvlTthgsseYMxJHagSyZs7Qr788qso xnff/zdW7oUB0zPlgPV8y5e+BZe+XGF63szLYh23WNB2JKP0Xj1K1Pll90y7wNfT6MjPUnjCHa7x BXleWOcku//6X/8vzu34Y3aNPCUOZeRkP2Vjx3ad+WvykKt7yisv98sj7SkbxCFRWUhrA4qmq6Wp NW7HSWfgfuCAnE3eyQvTrk4NOtPZ4Rn+t07wAJAMxA2f5cV6Lp+OeKbs4Um+DuKPHO+lJ03e8hxc pS4Mt9Pwdftsn0M6cCWl9dPqd7rMciw3ICgrc099Wc/mqzx6v8k0Kcln4kw5Nt5pv3SwSWv60Gh7 iHxJm3aaNrnJpe0xjIQ2BWxWq11OJ+Cc18hileJ4OZDAcVrjQBifvm2DPgyvYhbksn+ZBa8svgTo tHRttogXcKCFEjaKCy2sViYUICck0cBpuwJZrDstEgD7xnng83f41wJOfoAKMAM5LdVys1mwZqPi yGuVtvG0vs9YEOSDtOxhPgEY2bpshuiQ880u5DEE9YxHh50qHPydCXxR/ipj87vlFe43TFG8yosm ZBeAFZgFca1mGVP5amWdEffH3X/8j38BOP8uaQXrgCLlvs20jUlaJtVfa58Sk3flo/2Idzo3S1w1 52rmuBu3hBmHv7nCv7GUS21lh86UT6tUEAlAm5Y8HUVQ1uRFWAF6BCswKab1LNWVJ7dxke/iaAuz oyOh9YjrCy0tX+IvcnbUHtt6aufnP/KXc12N2baX2cpGhAYuMM1zQG86tZWv6TNnXWoaB3FLxjAW Gctf+Mlornk1C+mZl3LnnoO8Nmfa0p86mxGfo5G0TtI67dSpGPPefqYJ3RAs/Y328e6hBGidR/fz EqiSZR9rVnuYFigAACAASURBVL7dmWHjU6VsYO77BfTO2NbA9/FU9pNrrEg07JSpDHdlOIXg7o1H tGwb8RVn9Lp5/+7ke/w5JwNfG64LhndYpgKoJ1icXT0hxx85E5gpjhssJcAz7ZupEt8uE7480lMF yFtdWmE81cKp0oZPzxxG+R+fsdsiceELC/rq3U+7Jy/MCQdvLs6548JizIszd0xjCNi+oPKEw5Hg bvfNlxzpCeDfXgKwWlaYw8QiXkHIq7QuLgjnnOoXHOKsBe+aX14QAZi01mS24CeYCY4rPQEBeEhe IztKEpnbWbhg6dYxpEd6gddPIRUAcj4x/tM5CAS+CNTzTyyU3Yfx7QZciO0LOIKR/NvJWLc9H5p8 0Y5TtxYy1ZR88cg0h3t7scRNZ1xTEiP5CkzuzmAZlWf5Rq4+IncY4J9TQpQPGfhxVxeDA8bIwrrT 5W1S5OFulY609BXA7YiMpb/5QhMLunJQTrrWu2y5mhHp2enikfQrk7ydGOC2LPBpu5AvR3r8LFGe lW3qph1+yo9fR3DQpQ6Ud9cBSoPKdtCV9O+Z17+hY0xWMkU+7u+Wtu1qXJ7XQ/kcaUyMz+96BOf/ j3V+cvaWhqaVLGi4wIQ1quWoiUEDPPWQGUHdRg84qAS3TFdku9kp8TWbcbT/pXyqWMEoAJZQlAE1 EzyIFZ/5Y5ytYZv2vvPwdBUolroKwQ6JM6deHqEkWEVv375miuJJP8bKNIdD875oQDKU1rQqi2/1 vb9E6ficlt8PfPkSHgG3K3Z1PHkCUKd8KJ1pcHmDkEIFHpCJlmLwhPJ/TPkCBIIDaS3tuJa5Stxy qtjKqn45IjWwJIRT/iTljx2icl+kzLPytEyCT+tisRvA16IP0MSahA9ICJA6cxPCJLjJGz9HRgkz hp1F+XP0YrweXm+M8runtNYYDkcnCQtv8AcPuizq2jhwlmGcHUMW2PCy49VabugWp71hnw95Dvgq a8u2ylc+ItjIUTnUDd/yYhp/7cTwIQrxHCX4S3Lr15TKTevc9pPeiXQPZTf0Wj5TTR7ef+7uCM6/ oQVMA59rGp97krUceYPv9PZpgGWAQyWgtaE0QrLDfpwNGLPilj3GdwBlvghCa75xVZtG7/RGF4aI qvmBS+pYmig/9FTiHHqTMBu+tvey/swPelpc8nmK4hbgzAv4Icytc1ECpjMeAwIq9jUHDtXPDgUe sOzzDT+yC0gJrtDLF7IBMc/TuGY73il7lgO2ASN4NW/K7Ve2vbrDgzP+c2/6Q5d0y8/7vfN+gdOC FoK2tMa1s0qBBAEtsD0glIeJnu2LycPOpPVhPs1b61DQNrGyNo+VTwAnksfPUY75cds/8bM8WVAL XekQJ8kFJpw09m7zs050yddX9bm369UazSIwz46EUh9ZVC2P7UgqkbCcP7SjXKW4uaQ1m32YZfXR 9rLyTlkWL3YWjUCoAFuZ1MiQQwCZclothjWVMbsYHlILoCNuSqVEzU998Fqe2h5zX40gllm3feXh +CcSOILzb2wINiJdtwWhVFdYhexu8AChNOA0RhQNddNiPnULF43Qfz7bwHM2A8CVIT6NWBBWFaIQ GYLWarlvaagYxCP/KIdsRPmdQF7WC3dwFvCXYBVMUEGBVBbS+NJBFy5b9dnRYeciLUDar2C7r9nj RM+YH+52PuzfvGTiDg621j06ZyGQqRXBBMRwiuSCuAKxLm8GEmYanZ2XTn7Mrw4+KI+LkinHWFUC ncq/5NwyrCSh0Tz2PgOApovlasjKw3lm6CqTWsWR8j48wErUdKZ2PgRnSiI020m5Hz3TDqRKhwCp 8ETcHPZD57y5KZtAs8B6vFakgNu6lysXR2Ol0jFnjcL6I0+72vTN4X/L4d4dYSk2ciRH2oahKz00 ZDxTZdLjp0yVf2VqQRa1lNcHOyHqBBrCrlxUdlNmjICkaUKrqLRWrDDDfepOAIeeeiAvy029zvPx +mkJHMH507L5IKQNy6YLmNHI09A96IhGmHm/zL9xz0KTzduXTPLtt8TBQ0WkoQqEWbRpS8daBrij xM5tlq7WayxYXj++36Db0NPgbfRmhOuHXQ+RwHuV1ip27pvFxQWEfvcwloyfQCJcMtJz/teDje5c pOL5kv3QvC+TcqLyGSVfMbUh+F6yqngB6BZgC8yqs0DsW4O6O94O7N7oAsYMpxPIH8sVgBQEVOwo 9YRuir+E04AFACZR7pENfpbhoQv9WG0GfhjBcOdYFaHA1vl5qQgsdUKV8tMJuHWEUmGyW4uaOBLA L/UC0I+FaudlsuHP8PAMoYBpFl3tvJqP4ekEaD23CL+du+kn78UCl9Ipb1aO4ydi5tfo8Ej5zEhe +S+hfdl8ZAyXgACp1q0jqUXHu8Vk0hk/NLzu6wr50WbT6Ut7+W+7kjRSHnSoEsIZd371Of49lMAR nA+l8an7KP80y0baNyoW0Gr5agHxXTzmnm3ouhygz8JYdkL4oVIXibCkBffYkkSL7tCos8CiAqnJ mS9FHzIvWcXvHCDAnbjEX+yE0l5vVU6SA/qGJ02AggfSrUAuVeCAieoGqPQr3oBB0hdMH7Ev+ubm NT68pMJLLDeerpcYBcX9YhXyEYQ9LlQA9ovjbg384TsObvJ8jeUEmAHrGRW4uKcT5EemAajFb87M GNahW2/zsGMQDLRcBXk5n7yglaM0WeB0np94Wr9e6xaI8FhLUovwPoAY13n6vkBE4nQKprPmlpz2 ACVtMyB/8/BnfNci9IOSUaVpJzwY73N2c6Q+7GAI91+mAMxGDsrziaupekk74OkDlKVrnUjLUZdh ZECr5JlyI9+CJxGXS748Ku8622b/lU79G+79/Lwz/0m3aFBW/2l4zPnZUpOz8ttcpg1PPVemDTv+ /VAC1ubR/awECngfiwKeoFwO71HiHGbkIhCNMoopgDisY9iulN1hgf+aeebZObha4EaQli6Lh0v5 5qvJJSCR+TmRMV0ApJaSRbmjvCEFMSx0FUb6WsgZn5sRa/iwecaekM5HMyEAqObgo4UcOayH+A0H vAi3nO7myNWtgwIa1rX5a3ELDHfsZNB69qjRt2y5e/mMQ5EADfl9BMAPj3N1O1l+hE855D4KbBe2 ZKlfFX2rj+HdsHGHNPRrJ4AEkIXyLkAsWtKOTI15XxU6Y7rySjzTWOYCjvLwt19IkwTxBNvGAcDS MSwgE5XXT2vcqkh1KDN/yDLylEw6AMHY31bnkUnqun7JR3TOzp8F3qvtTA/QER5UaIttm3YIm1ya 14zW2uk2H+7tlNMC2taUSfluZ5cpIDjUtW62+3mOzFJQeTbf1vPDemrK499DCYypceh3vP8ZCVTx tArq1BUbcc6PAOxUtNu7flpKBDw5eYbyYD0zN3mrcqNsfVkBZUS3/SLIXYBdpbbxo+C89h1lIu6A dhqzyq1VtPS9FpRKiZ8RBY6EmQdpue8OEmjGwjQq0yUCOEQCBjkZzPLAD3mfY6EJOh6MfyEonTyG F06sYyud3wXs6jvFYeHSOXOPI71kbjn8ASqZFuGg/Vc//pCvmzx+/DSHIZllgEKAD1DIqHwV8HhQ XCm/EtVFwU3I//rUbxRbxR+wDTCujiUJKKfpPayzTiinkxlCy3dfn/EvgAxflbPy3nhcyeJXPpgG kkfk1/rgIh/WFfk5WvI6tHiInHOFux2LyHWmt8OWluUUsEmpnCMDZa8/gWkDMmzdk8cqlBch1XpV LuRKeF07VzuPPkc2rC3YUcSynqKHpvmYGZ4YEd4nX0rjvylLym87s+P2H/e13mVS3hed3G+8TP0l 0vHPJyVwBOdPimYL6MIdM8iAQeaBPcQHizj7ammBfg3kxIN8Ll5xFCbWcMJUTHSPrXZOPdze8CVu PFQ+j9r0HOAzpjre06D9lJT7Xd3/eSaWoGV3xMkLKE6ToGgBUk6GC00VolpqTtyjBOSRE8MW2yqA 84AX7HE2rs/VYQF30cFDLgvSAgWEAOJOGbwH1t4xr8xBRUxZ7EHQV7Sxnm+uOUAJkL1i/lp6JA7/ bDthe9773QXfGnz28gmva78jHKWFruRP2CEimMARaQCQ/YJawcdtYXYq0iuQQDuABX+44cMyedj+ tdNEhAv8KQdxrAHTS+BWkMrUienXfWRXNHJeNxnCkz6VE7xyr/PAfqetbqdzg+8snhIjLxop50aN nOXVkYBrEMrbIz3lZQAzQJoA9zkIfqlwOBPIqJfwqp8SstO3HKuO8O3WPgER4rDuImg5x4+Xetzx 45RORmm0K0d06RTDpYuvprE83Lri6MtHhCXfyHmb3onVa5hWPW01/LDDyG4uVjQ7jOz0IzNf6MG1 XdIW6Fwkl7Rc7Ryy5VSeIlzaPZTaTmHm6D6QwBGcPxDJhx42oAKGYVXbaVSnKN8Fx3ueYR1fXT3j /hkgxHf5aJy3d89opG6RU31sziocPyzQwiKNnA/ABh8EJRbsxI2bGw5HRyE8lKj5Nc+xkIwk8MqD iqUToKQ+zkUYdS9fW4mnoQKLDyqg52toEQu8+EepVUSV2cXIm+zI8C0+X9UOuDJlkSE0ADJfRLEk ctevnADnbsmjfM8fe/Jd+TbHuPC88KEoIUcEGe9+3FrFlAc51BlvOTonXVP410JN2QVkSmccfwHJ FJo4vpLBP7cK4pRnzv8gnqIcCgk0nLzB/IDzLHgpeztBYBCZGcff0Lde9ISuHdbyblkEWD22XHyW blDMTAW0BAta8u8D6VLQprOWp/6k1XZIXDkKuDbTZLXK1TonCs488wKL0ZJ/bniw7uXHWDplYpdh R0HUbLUjLvxK2zFJ8vQhbhKG2YYFheWNZBCejrX3xp+4iXLvj3Eqr3ven9XDEZx/U3XbMNsYp4Fl OgH8cBfDGW/QXeVgfTWahp4LSkMbTDO05fMgZuTtL0hd6IeW5wwLFMIZDvcis8QWCxWIJ88ZWi5F WMCcIXD4qQIE/gWORIMQ/2t1VQm6vxZ+kqag5xe5jSaFfJOOtJbNczA8UczT5JxDdrFHgn77z/lk d2QIILd5E9DXtF/nI7Bffvl1gNoymETqXs1D0NR1sc47yhmLq12XPhNHIck1qfXG9Xp/nlkAKXgo rwK9UU0rfDZfU4/r6KIlzhSSlbGc+UWGKWtlpqx8k8+yxpJcDEb26RDbJoyn3HynqMBacOu2RfNr +J4j4vovIBf0bb1IYw/W4Uv+LEn50WsvI/Inl4SZvz/LPfkb17dTQ5N4favQMq72Allq0WjkCX3b plndc9azHU15bWdiXPOxvMrGLqP86ScfaeTkk/vk1zylVX628phd/e5l/Nk/HMH5VzQBG879xkPD igVRhWPygH3BX+1+fPV+9/jJc9r4gJlvAgpgbfFpniofybPTgQY+FqJDTD/W6VSBBtMVX1jV8JhG L5vDQ6m1cVeZagmHT/MyjwOnf5VET9MRZ3jSilzW0DnTFfQt5OvUxcU63Igzod/xqSQWAD24/5Jv DZ7nQ68sXebbgig98aWv9ewvi5BhzPKZ3+SvJZZHuBjQqFdBk7grXX2BkQWeAlLLL72UgL+9r0eV P/frT8WgfyWmd+QAYDWfB/6E+7q9bmS9T8o0VMB/hcdfUKJzsI5MlZ0dXLPzJKCH70FVmPc8Hlqz U47muWLEaibEx9Qf1484aTaOAGlk62J1DMoy4YTRaafsi4b5m6Kbqetp/p0CUmbUnW2E2wBqaEu/ Uy4dVTCllfo9SK/QrTMvlMEXmA7zTR7mc/Br6vt/D9PcD/l8no7g/K+saxtXGhALaP/dv/+zKGfm nrEMrq/4ujVfRHHKwOkCA51DdluY6fw6ip55OSPgI8izIzrAShymBQS+TmMQdwDhZ3iV7lhUPefA yM6LbolmeG2HYf4BVbf38U9lcyta9rli/nmAPiQzfZE5S4qhdeybgeal9SwQ53VvAMCFPz9sQlFD 16kD5ROrSs9YT72mXNAQO1R38xxXufYJSUCwnUcI+6yFJyibEGdHqFNEzrOafh8n4UYcP+KknPox GuGfawfyGV4XH6FBmI+3LAKcrDqyDJLXOWJK/ZNeWvVXhubBn/BCx5yH+CZO0xjHPG0ThuXPdl3A bEiBblmvAd5NVgZbCv/Lc6z50GrbHAA2RcvdfMpD6Qw/XYWQlHEWP5G1uZS+RWn9TFrLW4EMnURe fodxh0bDS2fuj9ePS+AIzh+Xy973fqOj8dIWR3diPfBm3P/0l38dS/MKUBbIBKqbK6xNLFGdyp2G TZsWrDOcBoijUNmPq5VSRc6JyAz1Be4zdm3cXm3DQA8P2gAYqxLyTnvoN6BhfpkTjf6gcr7+m0Do E6+LZSgv1qOH3wh1mU/lei1YEFfs9vVhy26H4gsupyx6Cs4Bavych3ahMPubH3HiHdMbdiiml/fu ryVDym72Ge7LHDnOsFtozDBZdMEtbIRPEkTBAUCZMZ4RDsFCgeoCnKsH8l5rFjm1zEboglzikT55 7NNaB5QT4smS2KbLD5IpPx2WfO7n+8NDrVPJ3CCnyStfyg74QyepWBRcNPX5qEvmtg+IhS/Lu8pm GhcOltvaInFSbuuz9W8UwwP41pcAS3INgUjPF4tGwIlrWduxmc4RQ8o9WSdP8y5vrmEo/+axCITP dgRG3/hDJnDWTrT8j4yMpyude5k14Ph3L4EjOO9F8etvpqHZwK7fvdr9l//lP+8u37/ePX3mMI8m STsOyNLgo0SZB1Zd9W+D1MrWMXsRwFR1z51iEEFpzx6Mv7d6pzcgzl6/iKYlrOWkIoxiyFvvpagC CjZVQnlxcdIpBVSVQIHTnwP2UbxajHIpnYQBkD989y90FJyW52LmysOrC46ZBvHtQ8Levn2ze/bs CbeAGuXI3C90AqzE140V12mC5mu5LEnyM3OGz+2IBKtDV2WHYDyzM0H6uOGrgLI6GuhMOSxyLcNE NwU/rT/TLhlxn/hIRHZzZnLk3zxSOQKf4V5Z0J0uLwzXFCad5bL0yGEB32KT+OW1+UPDeKabbXOr bAmnEVQOU27zHiePfaHJjlX6rXvjmjfypKMcN/IxjjRTHbYJOnBS8mzbWPTthGy/ebkHGaXhGVeZ WU9SbWye9nL1rjwo19atV3/Sr3Vv3mN0eB9i+6uUj85x7NH9qyQwDeqcBbVXP/0zFuRPtLJvaZh8 DordGu5u2N29xBp9HatrFmE86EhFoCVm4W/HgUm2zRO2vJ1yGBKnCTEUvgEE+VKIX16+fbsau2za yKs8VQCoCui4gY50BiiWylcgX8qGEg7PTUs4oOsioFau9/KRr2/jp9NPIDXck+i+/fbbTGvYabjg Jz2tZN5DydXzNd5zeL/+AnZ4Cb/lriCAd1DKeHYqyWr/p2GWE5lQqlsKkT5uxTsE0c5HF3wbPy/L h36s84BIQdJ85Ev/AIzySC7M83OHxHgybBhqOW7W2RfKJvLX0iZOoA8aiAg5C0jtFAXsyBmm96RI OWX2mnDJxU19Wl7uTRQe204SPyyVr1RN/ky60mtdGQfOBFDzD7DDzxqlUdkpcymt7A8uUwa93Nse Vii4nUyddSqo+nOuHUqL2JSpcldG8B8ZWI5xq15TD63/LV1r4/C5Mpu0n9/1CM6/UOc2FhuaP+8z /wjyCT7+3CZ6675fho0XF5dgK8rBix2nnGVxtnvDlCkDQvY+++XpKBD7RP2E1Slb7wTGc5SfTWvM SaOaflyVaY4oPH9u+cTU3TsBUKtUC8z5UXhAyRyi2pyzE1ZgRxHasB3osiiHTvSQJPjGeOqba2NF ak0BjFhFvmotoSgC5ZNHxsKLltFO6Xxe715+9TVTGZxE180RwEjPNj5lH+AFeb/68Q+75xyW9OWL 58RBCZOpwpV+gSq7Y6OD1ejMR6854yyQGh3uBcvwQ1k9F3usPD/75VhBkOl8Pfuc9QvIQzMWYIgI c5Rvpm18GuDt1FDOvDBdXkm3Xk3HlX9xqXeBl7TWvyR03CSOAEqcc6agcqCVc/fECXAxlXLryz3Q N5llm9eaWw+8GgPynUdG/SqMdXHjW6SUL/UIbTIrPcuhSPErn9KTJyvOzlUAdBF38Q6HgcT1QpGA ab12oTYhoe2owS2fyc891lZV8oWa0yDEoib4SymYwrIcthc7Wc9ozlna2S1jW/RlG+IaXQcr6odv pt54RrllhZ+UIYUQqAvWif/gTzqlxcuDoM/m8QjOv6Gqpye3gdnY/WURj7e87m7dpaG/yjofS61S xYokH+M7rHZrlnOwLnbZrPeH6O95QdFUBIfkpNGZt4rr3uQB5oAvDbwvK+CPknZe0Tf2qFroZz55 b/lU+abhW46xiupXzRoFtSNQSd2l0XlkOiMXOVN2FA99s2yGnfGqoKrYgsGwgEQ5h1aulGGeK0vR 7EMFpRQBtRT84I9pk34waB8mjfuekdfKr2Wbsvc6SSveQRSBZ+4XPeszfvfBJOBIntZS52ObTn9Z EX/CgzKezNZ1ZNBHZGCHSzxu9vIREJ2uyhfSDwgYb+NRChtf+u/D7TzSHo3TNNmJQRy89/kYP2ms PQOMrV86f3hI2e0gqWzubRON1Hw7z66Pzy1zbvJQv/3zvZu263tex4d7EjiC8z1x/PoHG3AAiAar Zesc8SlX31jTYjM4OrUUb3/+MvG1xvh6ICpT8DRX23ybPWndVhfbR2UAqvKrhkb5ia+Vps8tX1jp PB5poK2FtU11aLFsgNMhZ3JLXPMpk/pxS/reVGETH79zwFdlvWbO2TgC2nQQWkRu++u3BttpCa45 m4OIkcUCsOg+6Tt8To6L94O8y0EARKPepaXhEa7yLy/4RO/LZ5NsQCCP/vu4g6d0VoIDsl6RWvZa 1fUq0LmbIwxALqMWmVpAlKuWY+it/K0YgQ4e6hYwIqeAYPy1Vgnl3q41lcmjpauFvZVlEUnauZ9r 87C9jM9iZXtcd+WH2uF5IsvflF5WlJj56sdvsV+rX7odbTWceJQ7bVyrnZs9aJM20yiRE6Rw0o6+ 9HH/92N++8DjDehwdL8ggVFm22Ab8yieVmQaHq9unzAFccs5FKr7rcdz8oq3889aFn7pqTpJi/eT UYDWhZYt7lpLi/B+msj7KtI06OZZK8r4+kelQTpV6ZThsDsvXBiLogv8kCFmFGiG08OzIeNUImYw SAvNMNiriua0RQ+q73DVYDsG+eme5FI5zcl175c1DS8MtbUaHUL7HcLMvRNVoB8eFKN0tAx79kSf J3z4W4Zc4o6f16SVj/DcEO8rqz4f3ivgDTxgDmf8WIpijs+95G/Twp8YRX0Fq4aZxKA+sPgNt6Pw Rjnb5TatwjogmFtry/azBViP5cv4aQSJGb/01savOyyrPuZj/hDg5z082CIQfkF4+Gq+g5UZ9ZAs HShJ85p1JpIgBo0p5sizu26WkJJdGpcckLX8e5SBjPizoVc23PDctszN4rd8lnfjb/55OP65J4Ej ON8Tx4cPVbY2osPQvX+AF5ADqD0nInOZATGUgnYcRcsY13sabIbxNNpRUoDVRlzwosGjHdG3aMlq 8DZ6foJZpymGE9SQRcQb5xe0wqOcTgoLqMT1e3nMZ+vKbxXCEF0VnnuBIZa6ipWQxI+VHv7Ihw7F n5a5ZRoFu+R17VMs6yeP+D4hjG/THms6QB2Nmw6gTxmyB0hW8AcXedrcgMXmc/9uXx8tAEwSDv0Y tXn4GHgr68qCyCE4dErdcGVJKGWvayfTbEzTAlp/WY84KG/qTFQUH+OkYQQ9GrGyTOD6M2ErHxfm zMY5YBsGTh5tHl5tL+WZsFUW93vXzdV0E28FrUtp2ukWgP2belzXjBySvO00bdXMw4o0ySNZCyXc RySrfQe8h+8t/8lrsZDLfbkfhny+90dw/hV1/7Dh+Kyues1n7dlVcXLnyxk0T4DZBcBzPt/kfJ0n 0XkiHU0Ua1plt+HauFHmg2kFaS3dS5ggKIDZ4LOwcqCYZyysRBG1Ro0TBIKXmEdNY/RsM5OOjOFU ugBzH+OXOWwjyydJBeAq7LJ6Vr6JzB/1cqx+pywE50eP+XgtZ1lfUXZ5jVyWpbzPm7QtY0ESbi1g LH9p1o1V5hOM4wY8h3evsloeE2X/Z/LaexAxMjGBmR24xkXmB37WyWFxE0ayxvXJOpJH40F71ack tg5vyiAQG68rqC3HYW62IReSTY2LJd42IN0cC4C3I5A8rzo0amSwroH7MG3aysxC9ZyN8t7dG6bc XPqMfdmmzlu/tlXzaL5tT1vZpWk5zFknhJCev22v+uHkgbYQXkPLjr8y267S3pz+R7dJ4AjOmyw+ efdzQKDSGU7To3U6pcBKPF+lvsDfga7bf4MLIFBiAX5ORbhg5wsQAoLb0mzgabSegoTSClj+IIm/ 4ctpDcYyn4ZNOqY0QsuM1lRKzo8GGA7be+iHmdLy+YZ9cAOA7mlNx5H8VHR/zcfOglwCKAPgYt4T PlklSOdVbsrmvtpY/9CQvmECz0MZ+izwBMKI4jB7U/gFMviEZ+gIJt7rAhe9he7mn8CDP+bRJBu9 CS4/LG4CaKWroOFJEfoHF/6ppwBkZCGPy9m58mj68G1FrQ6lyfEnzllA3DQSNg6XlJXwVR79yoO8 EG6hVj31fp4mnldT4dJZeCPwuePigEe9k1duPhJGqB29sR6kk5/Wc0cODS//LSe88njHbpXwbvrF U07GW51Yc/74X9O13PfDP+Z3P8bn8TTS/jxK+/9DKbvA1rlmQVIA9vNTHP65qAuWTm+wXY4T664D kIKESqC4ScEOABcDXUSrtTFhKh3pFzg6PPUbcwFj3yTkGbs8zy7UhJf5jJVHUwLMWajhAwBVGI8b VWOqsGPdyegoozstfA37jF4kO01QslrqgofbAteB/ALLAhdPcstpbvDZ7Vta92ubHmAc6zlZbs2r fAhkmxuFt3OYMzS20N4ZZ376DN8TT7rzG7+5Trr71zFVFyhTBjgmSX/Owzt3vOc8R37aAQl8ytL6 GWTkFK9gKQAAIABJREFUkfRTX+bbw4Uqb6328kb9LtkZR7fnCRn3Wb7kZeMvAQ/+PCx/vppjJx8+ CtBpZ3bSLGZanub1UE6UkY5lz4fgOnW8eG2Ylj88Jox1iHVQlTLLlA/+4Yly5OUm2n0XCzfgTfi+ HJXsoQwP7/fRjjcZkxzF8DMS2KxUrdMOUdPo3ctKm3Xxza+dOHx1EfDx6ReAHS+QnL7Kx1Bd8nIv 7s5FQvLJWc9Y1zcspLij95r54QsXAWn0N9A4Ix5PROSQexQrJ0djSascJzfAK4uOvj0HOgKmKh7+ 4X8pOcAhOMpV5r89Xxq/4EpARSWCExLFcp1pjJimlpGsQ8M82coVy3CBzAIb6QfoKYd7rwUn/c45 HAlyOO1gOigy9VCozC9TtnOAPlapeRLH7YK+ZBJLOwyGrZSmYM2oYsDK80YiR+LIGmBS4HPkooVO x4ScOLop+ROlnc1aYA3AhDKWt4Hml7J18FjL3XoSWKeDpPOB7wAg+e8AavPM2c6h67w6b4VSBuvO ctrpanHyOiVU2A881qx0rSvlDO8RU6Tj0Mp8A22Vz2LPtYOZKog1bsGNLZBm9JVSkkZ+ka3yzBnL 1IM5KBM6+8rKbC0b3hZ9ydsHy+TueEISxz3zOqnLqaOfzmMTroypa3OgcAjTFkpu0POEupQxiZWJ 7bz5Kz7n5GONR4/M70N3BOpNJm2Z2/Px7oEEoox766ONdqKksZ8Csnz545ovUJ8xJXHC67yZ72Mh 6RYwzWZgQKur+wJRYUAaGQmzaCeYeeB+wb/z04ZrrannmX/UMsXK7WHrWnHQOWjfUo0SRouHTwEa f/610S+rDB3yOcpH2XQJX8qvSja+AcsKN5IGWgBobEtp+NWUWqFa3rWgBUyBCOZ1gAY+4IAdg1gm R+XFaZWOFhw9qNyLR5/Co1xubvgS4wxJR7buclA/lAtGDrch54s7y29xY/HiClZLiMQ9XKgyzJ/9 oqBcJ4DK4lAaOXGVH8onsCd/gWrJM2BNiB3YwsfIQVCTN0sxTCkLaYxrRyupxTQBIcuzEiNnoiv/ 9VGFJDWunJqfdVE+U6YUyPgE42IBczW2MtWZRjnLa/lt5KSPB3IxrkX05RVuO9bgDhk4TXfGzw56 SyPfK1MzObpflMARnH9RRJ+OoNKpNOpTrml8KloBxmM2QYdaOjRVD5fxrbAqsbBi3Fe0cTVKC9Mp BBu+2+1o7rxF6KFDpd1r952qBFghbscTEMiXaHFVANW2rtMqguimGAIqiRJBpTJtlFFgD8DAkeBC vOwEkX600S6AsiWpNHR8moqXVN6+5YsvLA46TVKQ3vKQTvWSDsiimg2U/Cs8hVx4EixWQQ54HKX2 qm0ahTdr4hS8CkIto/dSUV7IwaqwfOZSJlZZQoA/zX0FjWfkkXxlx+kinG926vYgjgWo1WodjzPv OOudjFdxY3Hqb/jDvMIDnVl5kZ73dTmYyfKMWPAuiLp1sh2BFWi3Ib/ZMWJS/Pwnb9M56G2nXicf xKdCIi8yMEQ/6bcchMnOYeZJvNo9cTNi0Y9202kceaVeEIktYGgn2foTuX7k/jDO8f54tsavagNt xDbkKqENzgaf+VaGtQVoQSHNmxbpp5tUFsFM60E1RZXS0oUJhr5RHsJj/qqMNu4BPHXL1s2wGZIn j6pg5uO/skEaraCltOFR6FJh4G/wwnnB4XuuFnqso6arGBJO+rGKsvQGz7HmDs10ed3LgokHRgMu CJ4+YzsdpHISGuHXbEUQrGGUHzIIu8guafUXXpwaKD94JC9pz7SG8/mzV1tgXliatD5YDwWArTMw vZRP951NAamigg+iDv8Crel1XsffZ+8dmlfIlFlPKPc395X5xpjtwI6z5Stp6JosznAoSsziaHna LlaE8LL4MXq/ui3gyZsdN+VdlR5e79Y0F3w2mVKSpvuz7QzJeDWGOWw/dNNLyoh1U2DXX5fBV+9S dPMZ2YS/xClAlzR5hH8LacGUp2m4LGc86cxv/I/XT0vgaDl/WjYrZK9VPNuQl9NSSIOzkWpBMD/K OQ0eNidg3Ga+FnjLZJsNtkrsSx+3HlABsDr90QZs+ND2Wpqx2FQehtGMiPPzzbwAEmmdQjDluP19 QLuaUSuvFtLEyzVKif/SoCidZTqgGIVkcdGCWsaCEqCDJdlkAgXfGrx2rzMMLoDJTj/A4pyDkPJV ckVI+r7QYNpyKofO/xY6wxV/BFv8iHO4BUxeKDnhBaqJPVc5kSqphJp4O8roC0DStCNEZshNl+Jw ne1nYphpIYOTYZ2ACNDl5DnjNn8+aRtOOFQlhEKDLCPD0KDcYQGQhlZ4t1BpM+UNTzPEWdelnc5d /tbaRjiwgw5PRArvjW+YLvUCgQA2MsuzJOInXcptWwtDU4+rzUK4nbQdicSG18MaUXbKARqJH2Ya X2Gt+eP7cczfDqIjjZC2kAdOeuH1wM/bofPA+7N8PILzr6j2aZReddNQfeFirI7TnedrCBFYkJqe BDlN4dkUgoQNv0N+bgEyQTZWNUG+Sah1U3ixSkgsDrBDIziGcrUhDzgQZnCMs9XoAY4oqAGyubw7 EaByGrC5zm2q8NtWKXJJhLGcWlqVU2+VUz4kP5YW4Idl/P33HsJP+QECZeLuj4Kex1l2eN+cU6hF j44AwsrGUYL/MkxfYGYZyrLA4J1WrPOs8ljOBCs/CjBfEx8Zhk87C2PSSVIFJCdvixtfrgEL4xhI 2KrbFZxLRyreEkcekLHpBNw6eBb8VneQEQcBc2JfwJgcp92YZtqO91BL7tO+9GupV/n23DbEt0j1 GnqxkLNLSJC1LVqO1mckCq/6TplLxTogGrQssmeEG1dHq8z18I8+hu7zjNyMIZDbuTq9opuYxM+o YfKQt4J7ZW44Oe7p9Dkk+HPoP36f6/UIzr+i5h82JpOouCpfFnkEGBpbVF1l5V6A8JNTNlp3PKRx L+UWVLIDIM/uAHAXA6eTsbgYwEGljN/5PKgSP40WeiqKp5BlWgV0djeDYSqKbpRI5QnfcmV28hct W8oZZWZ+eMWzY/BfFa3xpXfqKXrySxlCL7wQa3UYfmn7++9/2P3xHz/OAfx+0uoa/gTovC1InsnR 6QeLAh8yG4sSxXa7iwc/6edr6Ht8CK9y0DSWL2WIBzRlKYWuojfc3orpJoj4zzrKwVSmQdbj7PCS lJguxLYjUYZCWfMxrfllp4IlIL90mqmBWprJf8lGK98oApN3KSfps4fdsizJlme4gwHbzmlef7Zj tRx2Vom8+KO+Kai7djYn7VX2xLX+2Wsxi5RraqyWsunt+E1tugO+hW2zsr0SLr+dSoJT4pXPRpm8 2zH61IVR75SZUzhCfJ1ybvnttKSzp0UekcuK6f08z3UFHS9I4AjOv6IZtBHZsNeK+GpUAlAPzQd8 M/TteRS+eXLH4tGtUwKCn62fn3RUGhVJy7WNunEEjMKYmsJ0hXuVoeGcYSxSGvwZSiCNTHFkj7Qg NYptFtFC0q/OQIp65Y9WJ0qce/xIp4pF8c1bkBHWFo0oi+XMIphhwrZ0lQPxfISfH374/e5P//TP OGD/Gd8avASUGS1AI+HyxpYyiKT8e/qCoB0akU5ZNBVAF+d7ZSUB/8ykIeFnIsnJwoJYjwGYxs3U xAKFQMiSu+n9ScKkU84et0kqeTxwCRegnSKig7IONlnwLAMuCCZvqEK79beI2HHLB2zZkZp3wHiV J7kpa+JZxoxwiBNox9v87eDdNinPusiA6/COT/xpfFzdnUIZV9k908WR3G12w1Bu5WAHuQ9ve+w6 RwFVZgVwu2w4D+05++Rwrlt+zVqaGh6ZZkv0RSc8Ii+mNWK8WM6fcVOuuf5M1M8q6AjOv1jdNGg1 LEBBm2QO+ZZT2Hw54+b6iXBFO2VfM1MTZ+xBzqZ/z7ZgeO+hQCdcVTJj9cUNgI0vWAcLfc2bRn4N ADo3ygeu2MuLggFWqPPuhj2kpywuZpiucqMyGVrDjVMaHtBvKuNGmbmLAxQFFRUDzUlYFVeNahT/ uih5k+15BS55Us2rdFXeTMmk/EmRclp2Cb3nU1xPLh7tnjOl4SKg0zZayxe8un7Nzo0LJuBvnFSW H8ulkjpHCZv5arNb7wRwy8UUTvZjB3UtB0CBVX2CrNqZ2XEIkMSzbHCaU/24cy47QJYCdAHUqQ6L 336hdWA9nTpVxJyx/PsxA0cGYpti0YK37OYuSGXvLuDY1+CdP62cslbAk52NNqPAWCC1NbCA6T86 Mfe0+9FeQUrgs3PN6W7Z/eHZzdJMzqtupekzjvq2c1I6MhjrWD7DX+tbS/7utJ0hB1+TT5NmjlkJ cZZ4DsYiXqba8CuQS0ea1gN1440u9H15ytu2pY5q7MiXS8ev7E2vgB93dECwvOmk5/21Fj9l9giD 5gFPhFmWfZ5JcfzzMQkcwfljUvkVftMQb2/YhI91ew663rDXWeTR2DrjteYrjtg8V/N9hxslUJky x8tQ2jOdaaEAmgpDGFaOOuJz9jzLww3nQu/e4i9d4wlOROKxllvBxKjyc5J91guoAQM7ldMzwd30 m9KMYtRXvgSTQOQWT19511KOQhlHIIIHvE3jbpWLi4vdq1evds+/eJnOQIC+5nB1+oTma9xYh6OQ AJRykAL0+yJNObFMKUfoKw/9+SU9ccNKy5wjSWEkAGZmoddylIa0BXSJFVrCv7LQK/XBdXUKzpwm HfINNySZbxnKx6H1q7VtXMvqnmdBql8OaYdwxhbHLAWyYBtwAsLN1BmHkaHp/Scf1ofx5TN9E/RS v4FA/CMP+csN8XSWacoWjvejidYbYa2o0De+eZqm6w3yUrCUmi48EcfaAVL527K1g2se+m3uoI7w LH1D5cu6mDz1+9AVqA/L9GGcz9nnCM4/U/s2nq3BfSqiYIVlgv5dX6mcNkjiZq7PeVesNSwkpziy PS5Wk0NQ/LCMAzIOSWN90axJq05xlBDKjF0mIA9ISZaYwUyVW+suwCVvKDZxk7ePOOe8tdZV9Idl yZ7UKBGMo0Rx0Eo84+PBE0FVylOA2DAB2VfKM0Qn6ePHF7u3lx6PqnUmGC4lZoThCMBfAQeV3wOi QN28TuUvchZ05aLKT4z4V3UpV+amba4qfcGyINAYApIWtDxsQMTd4t+4yjVuAaJ+lm92cEjXMkYG mI+E1prHP+VFnoYN8Pji0Tmd3/UtawXEuXAUQr0VcC1f4DfPlstRSOe428HlmNiUtx0XJHhSTv5v nWR6woDlKt/yOX5JkAd5Q37IokDesoQPSZC/bcGOxHizRbE0J78KyafyL1T7ZL1Itx2T1m+dhFsn PpdWaXjf58as7D68r8/x70MJHMH5oUR+47NWiPOsgTLapMNwQfiKOeG8jMEw9/bsHc33HXEUN3uB swWLBo+yXPMWoTiek+vQgxvCnCsMSMTU8q077KogcoGriqHSqAyjgCpTFSwBUaYqS4G4aQ+VxXjB /cRt2lGu0JU+v1qNWFQ3ThkASL6eHmeBb/ICil9LYQp+z0/AjMTZoYKSCtCDMZOH1APq0AKuoF2Q EtwKAibq0D98OM0hOEIoWxRJrxSkNyBcAMDuI25BhfiUT38H59ZNLWLyMDVzsxayPHmqnnKUFzs2 fut16GBy+JWTTeama550zgD9idsbKYe7SNJhIB9zLrgp44K2L4vQQsxsn146UtcNzfJFKosRS9er McZJe/MwfoFd/3aWPR0OYBZkU6Z2jMbtFIa02nl4pzPMFDEo5CsduEw0zBrL/bqaniQ44zR+eMGz 8hyZ3S+vKY7u4xI4gvPH5fKLvtPg7q7PmWN9mvg3zDXnlDLmAd++4o055lyfPPHVX62pAo9Al2NE fW3bsxp4CxBzqoqTq0rhHgyAIu3cnRwqmouNs+e1IHXDYpvnbQhUWew5UIQCnIpR0EUlwuMovdaV TgXSBXxQ3IcuMwZaXEQ7HNpn2I2VKvh6bKjTG843Z6i/YUXoW47kO4uRZFLFndzcYTGgiR/5ybUd h/FMq7UXiy98CwTISSS17CtcavrLh2FZsAU0DE8HlekIRxiW3TIB8kw5ZVcJZXFR0HtyJo3gaQfb 9MYdlzqElnlcXr3OtxXNwxdxdnRghltXrkOcnDG/TXYdgWB18k8PwTtfxwG8E4G/dkjGFejiVln7 UEB1JDIurSaNhLxSR9IynJ90tNwJL7AuP0NDd6ODV9uaN8tZHnnN587w4zHyMvgUPiVvSxXAO1Ko zAxPWvIYy3z89Fc285wb/uh/dB9K4AjOH8rkN/owIQFA1fVwnqt3rwEsFsYuOOxeBRUgnfqgIUfl BWGVHX8Pqr++psHeuHiEMnhWBwt9nY4QGAT1BewkEbTjBDDA4erdVbawCY6Y7fgJ3MYoKKtCdQW5 9XBwaTynFnTyVWsa4MIvh/wkpLwIHAEfOh4txR9++mn3zTffkKdTHuXV8zKMIwa4UCgLo4BRUOKq 2PEzeyLeAoYPXY6epLwC5WKPKMYDNqL88LpPJCEt3cpF2s1zK1dlgn/mgOGJhdgAorKyLgiRjfZR gje0FtBLd2gK+lrqArnrDVdXLNyySKq8Ti6Wtaoc5dRr6r91X/6VB22G+E6pGN4v4VhXra+xtoXz lmMVtJWThwB+5NaOZvq+thDloQxmz7lP1I/1YsUYav4rv8qhfgnkj/K4NyV2kLeNREmOjL3WiAjl hG0GwsQr/XvlmcyO1w8k8KFGfBDl6PFzErhln6pvyPX4Ty1kzpl4wwH0j9ipwWLTDZa1FpQN1emJ 6ysUA2tXyykLiG51IgOx2u1KWlO1Iwt0/RJHQcRtTR2KVxk9KeyaaRN/gss5inqexSgeA7ICmypU cG85rHIVtJZnLEri6FTa6QiqQEHOWKCe43FFh/PmzZtYyi76/fTTD2yl+yFf3c4XUbAWB8QOQbK0 BVQKSXn95SMFgF8Vus0w4cKFFiQuAIZF615hOelcqmDVzjBTJoILr13GouRKSXeP6Dj8CVaRl7Rm mgNQCYimzEQQGI0IT9ajeRvXKRyfdVrB/szXvsZvJracp+xW4SMLWrP5ujrkAmlLraB96oiJ8Mwl U4qAGPWUHRWDpuShARwjmPsNvIi/OhL5GBfAl/WUwU6l5Z50kh3Slr/+1rEAiuzWCGnfMS2+pC/t 7WcnqqHgDhTrxPK0DBNXv8hPD8p7zylb299qX4fX8R+/e+mOD5HAEZw/0RB+TaOJkpwKjAIsSsi2 t0cXzxkqP9598cUXKDCLfrsf03jZNIcVBsgA5juOFnUL3ekJb9XR5r0/dytUGr+Lg4/w0xLTrnHF X/sJWljU2GU0drRPpaDRf/XVSzoCrFjmZgXM8BSFcEi+FU5/QXlcQViQIw/zSfiEGlNFax6CkcD9 /PnLfIn7/fu3zDM7OngXq1mgyv7mZbVqNY/8vM6vB9MLmOQHGHqa3z5fOybi5kS/wbaklcfSyHGV C5hNdzhEbh6Wkdgrz4kzz8rN+3aUnqbHkZ7usCFvT9a7vIQn0RfnNZYx+XnNdIc8Ws+LfkYHrg/A 7/kFdKEf4HYKiq+RO82VjjkUQzVSVZbS9/VmRwVKuzSpXfkzVuq4CcMzt7P7YS+zpGw9PUwTmkH7 1mF4Jd+m3dqBZ4fASfynXOaqoRCAd86c0UGse4to0sVbaVkOO6t2WHveFjBLa/j3ftzH/CbM6y+F H8b9t3p/nNb4RM3uG1nCbZHuRmi7zIsYWHQBTJTs5OQJyrlj3+93u0enXyWFlqT7f1+9fQd4AgDM jV5dne4u373dvXjJHDXgdMac8zVET7HSPG4UiGNdkF0aAPEdc5W3xHeu+kbL2z3UWqZaMCiUyifg CyoZpqJMKvaNr2OT3QBRAaCWu0rkGRjZp+s8NtZwu5XGt4zS9ZdBvhYeHYlaeqNlCH13Z1wwdBfc v/zid7Gi7XQKVA51sfzlRUsVAAVW+WenBF8otRbpKXujOwWDFcu/WnDueCBX6GpNZ9eFUwdMAdnZ Ob8uWGilZeYW/0vCz7Rqka10YYp0LMbSmbiLQov77kqge89OCkHZ+X+G+Xx38e3rN6S52z1jbfPq /evdBR2ceV7yFZunT8kPehePKQvJrelHgO27d++pJ8rv1kgkBxxFDudnrh9YDxaZcruFjtHROfnd CFK2FcIyuuLZHS/dnaNFTQCueCdICqDUAeWIPwBrnQvMAtYtYOmUV9YwXMuAkhZr9mjLqcYCVE+y 6KzMSAuN7FcWWcnIj7K6D1x6OXgKOco3jysP81RudIzURcu18jc/czUsi6mGWw79DGm9m8gOrZ1C 24f5Jc9lNRjm89F9XAJHcP64XD7qO4B92KBOAc27m3dRPKctNLwMz8KYyusUxvX73Xt+l+9ZMPNr 1RrDWiPnb1B+FxN/Ir3g8JwUV7srlDsgxmJhGnP194AnVaHOcH/lbYu48briosC6AvnE4yj8mEKl lTQqSxS4VwsklBy6ye/qqotfWoE5lc6Ohl/Oy4BOFRP9Jhz1h09I04v5DFqE5DVz7ecppzyZk/uy VXiUnLcuz1hczZwudJWpzk7C/OT3Wv54zuhBSxhAcEpJi/j9ez5+wC6S93SUvuXz+BHz+uR7hcUu jSfPnzHNRKeAuwbQnbd3n3nPpHaNoHvER8Z2TB0h0BHTKWaPNvWVOXYAV9B13JMRE4BnOiqa54Kr 5W6niTcyFrRjt1KOvKAjI/Gnk00HbJ9Op0Os1qdgZjux69ThrywT7jN0CIFc49OpIzbSGIM/i+bU vinS0ZFOeubRfEjDc+ux4NtFRWSfTmO1uX2+grmdWGkkP4vOzfwIunfv8+Q1YV6PbpPAEZw3WXz0 LgpG49VNY6pfo1+/V0Gw/7Cm2EVHpFoDTjEIKheAglbM9bs7LLKXu0tA2pdFVEK3zWHE0Wix5nib LKDF/HFAiGkNXwGPshL3U06eRgHu86d64VyQzPhUBVdBVUM11nyh63wtSmRag8+Ia26Co0oulZZ3 OgAVjvRElt41HckZz/IcOtqTe5qobO7LowuIArbAmFe8pWH8QJr2qdYbcEW5jadV7d5tocX5dKdR BF+tV0HFOHZivgTz5ZdfBpTTEcD4JW8valE+xsp3/7nxu+i4AYbVoP3rq+fv3wuCygbQB/zaEVh6 AQmAhY8bynJ7+44XjHizED/l58zByF+cdG7aueqTWMc2CGGL8iPXc9Lo4CDXhvXWhUHlr2us3s8b h7YRRyWps6S33Sk7rXZHIsiMsjAYwPHHc1qoa2XbdmH9JzD8UhWJZj2k3qgTm8nEkQq5Bc/tQORa t4XbPvTbuHWL4mo9ieufkc1c9wEHN4bp5noQ9FnfbpL9rMXw6cJPY7ThzP3E9lkrzWHmzPcKDh78 c4lV6ZYtQTvnbzA073z0kywKnvDa8BmKFYC5YspCcD5hfpo90SfE5dOpKFrzNJ/5FVyHA1Qj1pDK 429zW0Ov5WNIyyBNgEXldDgchbUZbE1BVckPbdWiU2lVVN2eDx+wogQxqJSWEEh88wmgIQt3oAhg GVaXKnGSOHGXMcw9QJLDe+S3fAHVAfcLLExB2UOVlK/TKs8eP9k9di4Jl50quSt/meIQljx8ibc0 5SkfJiCOdOx47Ap0M02S18ntXQFV61Nrt4uATJ8wF32Dpfz4iR0mVi0dQjsB4sJzvrYCeF5irWOA U//uc9e6BjxFbJz5KxOvUzeRPYBfF4nDGzUZ5BQs7Uja6SVNRj/GJ0+nLZjysg6sLevINmCH1pok HmHZ8rg6ZOM0nnE3JwVp2oHpzGt4lH+nqax/F1J1Uz/m1052a58pE/5tj+34TTP0Dmk/9D989v5z d5tGfu6S+Jnyt8Hdj2Aj0/+alexTzN9YfDRk/Z8xkSloXb0HtGnPnq9w9uiaN+k8WvPF7t1r4qFc 51ho1zdvdq9fuX3OBT/etEMZHZJr66kw5jEN22fd8KNdZNih0hnWn4rU9IdpvN87UZP52hxfquIJ 2gKD1q7ghBkm9osvAS9VdJVbQA5vRL9bAJNnLUDl4p5fXC3QKueAqPSM47PKf3X9ls7sJ2SBtYul f3b6DCgQeJ066FSJtIxv/s7nC7LuHPH34sWLxBO8/UnbfLP7QjGM3CwvznCdtMxfWvvOZKU1zGkb r06NpD4B6UvehtTP+KYz/TwbRx6Nb6fd8lpnthVKwzf3BN5mb90AgpG5dWiHSVkF1+WXr5oIwMhE nu1UzM9f55yZMHdNwE9UuWMH19ERsmPX0MktO0ngdX6Gz71X3bLH04aUk6MLO0WBev8VnVXedrBJ tv/zkN7QnQgT7vNh2KH/xD1e70vgOK1xXx4ffbIhqVDTuFQUlTMOMDr3SyVsubhkKuMMUHrM4pJx BGeB24W6GHkoV0+ac74US+vdze7VJR+CDQB+ATks6d1zAPEHlAugEiRJO9bTIXNVVngSmZeFjXoH 0g/jCXDG7a4AQ6SJwi8nTCWctDqVe+YX4wF4dwjcTmJkQM4Jnrlm2IxFKUA59HZxzbgZ4nOVrpii FarLnDK8XGbOd1ngZuTBSDh8+OsLIu7ooOOCvnPEgu9b5pIHfJ88aUf4448/Eq+gLHhrNRvHdGQL c9L0TsDnjuqTBxfz3I9uX+ActeDpPDdJd5d8eusEkJ1O7ow566e+AZry3FHPT5ENUxixaK0npWmn qnXOBdc92tRM0oST+MmrnaHNaDo6KDeRFi/hebUcQCda0lsC60bZFITJEwI9UxpaybP1TQJoQWNa hNkBvPIBleYjf/ofPO8DaIkpF/SN7dduFneLF9LBY+ege29aZWoe4+Z+rg/9fZ6wuU6cz/16BOdf 2QJsiIeNJ2+f2dB9w+y61toFuxAEvivmO22fL5jL7HYqlBKUOEOx373/kZ0BPhJyBRBhGT19ioKB XHktGkV3R4ULhmMNlcXVGfAgLzMs5xaPrRDhUW1GlXIvncRZfjw7r6rGOzT2aNICconk/GEVU4Cu gxMYAAAgAElEQVQQzALk3q9nEVbqIer8LwCI3/v3PezIey1OAc+r8+5aki6aybdg7m4Iy54XZhhV nJ895fck88QtM3mwQOoecXm4BKDtDM/Pm3cY0OIPD0TFgn3y5Nnu66+/Dii/efNq9/r1a8Kxikly DsCesbjXOWPmyKGTnRyZutDCdksbQENZ/FnER+z2OH9W69h6ZVYjcnZniIDqg+A5bUIedJ2SIBTe JmzuLcPwnCt5OpPjfUgq5dVx2qnQn1G4yq3+AiZ+tB2ZzDG1fqaKzksQzmvphAm2fqLLffZWofTv 6CzHWd/9grbB1Dv/zS9tYsCcR1PIQztSr20jbVtSUz7O1dfZOYQ909B+HrqRx0N/n38u7GPxPwe/ Izj/K2o5ylQNZShOQ898MQDL/Q3KoR5U2Xxx+wUA8RpdYsj92l0CT6OAZ+6DBTweXT/LcaGehXzB q945g0NFB5yIsmPEH5fpBujaiGv5VPl9Hp3x3nnK4AieiQsANFyOVC5DceoOHYPWGjElvE+XeUy8 8qIMid3epq45L1xLNinUwBz2c/nuDbswTliU+wbQvcxZG4KzQO3Q3h0OV1dvA7A++3N6AIQgZzs0 83ce133cPgOGWGBX16+YHni2ewx4K1OBYnYxmGQOY2pHeRdAFmg9IVBXUFImHbyfayYiU3C3HQEE nQP2Q7wu0gZYiXvDUCY7ItyBwZDHhUzLXnD1ZRWBWIsSWdrBwUykyLVtQ1odAdhMCmqVu3zjQ5rW TxbbUq4FfLQJ68uy6i7SIUFXHiBhpykNO2872Ww9dOHYzhae/Aq39y4SnniWtogp8spbeOYWvuVJ vvtFnsrLOE635esoJDOfLsh6vxgi1+HP64wg0z5XlMiDsHF5Pkg//sfrz0vgCM6fkE8a7mrAHbY2 okozQzfjnN68ZVpCyxmFZYWcyQ0QRH1wR4FKg2XIt/SeYRl6Att7hvV5OwwFOmFP6uUV4IDVh33I eRyvd8+fPvPVBd7mfrS7BDw9SMcXNhzu+yXuzI86BwkfjFKz+NTdGPKH+oFiqppvdmGnctMnt6Vp BcdqEpJVFn6+g/H/tndmP35t2V0/rtHlsn2HdKendEg6Ih3gARGkSDwBL0iMggAJkQgNUnjgz0Ji ptNBBAVeACkESEReQImERIhIgoB0+rancrnm4vNZ63yrtn/+le327dsd33u2/as9rT2ts/d3r7P2 cHQKNAUiuKmZAUiz6j/RgSPluvvg6dPHpKQMZw3TsvPkkklEdcDd7bvTsyduK2PhjLtGLgDpbd4A JhY3a/HK6glm1p3KV/m175g6WhhAXouPoBkyIGqH8+n+93CQ5xy1ww66+ZPOu7ShPJcttjBeXLCA Cpgo6YoFp4i3mxsspBpA231z2d7bm46eqaO+mO7c5dAPubvrY3uLC6hsvGobdOsXAG5JfqW/Rfq3 PsRNSO+qLjYAwNrZ4O6H4jBFkEDANL1vIC4Kb7Pn3aPYTnuX5ywW0w5KaPAuQHWCoVxnO3i4wTcC NQXS5fKPJQCh0NkuJ1x51h9K4DmRvxRwgZ8LntD4mDEXLDT7PCmecswbvTnPzope0pcEU9tpt5Df To6VQalmeBaEW5blOnlXv7avkmk9M4PtV7Oaw4nPfuN0lXiTasjGnkS4k1v/KmLlz8viVkg/Ud4F nL/Fx20HtIOnszo4XdV3oLuQs+Hl524vE2RYDdzgwnP6MQPk9nRnD5XH+SM6qtue3KGxw4r+E/SY SJO7HI9mW96tW+icPSTAEOitXso5/hji9vQrw3Au6YtRiOlXT2hqVBkCAAMM/TrcgUqy86iUgDQC siOI3yyRdUT9rXp7ZWldE1qA5xWhAByj27zU9yrx797hbaBUNoe08e50yqerTGO+Sl6ZPLagaWAm PTzYLl5JRmupuFLg8RGSKdXdYbuaR90vLw4rbMODPlzif3npwuHxdIReeQOJ2ufg4O7nASDBe9gC /7fhPbyBaW7dE7Brt4cqgGoTbynWj9fysLV55TMwxLS6rVerMrIAKA9n7QNAz2Eh7/SuNBS8wUQN m1VRbWyhYuA6UYFrE6ArRTfuglyI6qrS+YHZhueN9X4+ZPQVPWlqC552PZ9+nlUXwdZn2/CIfZ1/ 9SPLpc4Fq5B1+QHgmdY3GydQ8+JHKUXXtD0b+BzLzPrs9vjXtO1L25pH1xSL6+UcWMD55fx5ITYd zcHgYBUEavuShyl4HZ8AEU/V1W4DJM5n7EDYY4eGJ/k2kWrvAl7u8DAfV+O3NlB70IkP2cmxf/vd 6ZSTdB7lvkCPvS141wADvKDnf5k+bu2iEwNAUUfoJq7yZAg5CNQxGqdetxOZh645E13WIShTY5k/ GkgykAQnfBXci30CnWHmrXTNiUZwR2nUQxVH7i9WjGNmOUHa3WJxVGNQ66LhD1KqtfPn0JaP3oWx t7ePxMr7xlN3baCeoO3b1G+bxqnOqPRIvCe0z4XFu/duIy1bXXkpiNomaotDFcUzJo6N+TW/VRKR 3pqftsuJw+cgm04BbY1tN9xnLHgLYJH+3GNd/KWckpih3b3dapPKj2eLZqUm0/5El2oGpG/q5v3c lT/5lX5YFLfu5BHjMxlNPfeZ38ZI2ou7NtQQ89R2IjGfosLGVXkZ5gRmOt978NPOUPWkLnV4ojtm 7g/lxY3Krsp3oimp3L6H3o2HqyvtqDpTYNoSO7mu+hO+2M9zYAHn5/nxSp8dsDphDRiABXipo7BX A4FhUh2TAchr7gkbXne2e0GrdiKo0+PnG/P5xTOkayQ6Lkoyz8tanEPiZuRsb+3X4QlVFwJbgQge 1NoFxG55usZNh4aDQ1vpRuB00PcQzKB5zlYacqiic70eoORBescvETW46nWa9ighBeAEMvW8gpeD VYnYhT+0IFVPRUfV5lu8EQi87maRdt8TeYrFlCu47u5k8qiX8+kcPbTS+DvvAtK1jc3JB7UF+QEd ZE5dURfdu8ckiDlHnbSBGqPr4ZuLYaqN6Na+CZDWfeAFFpZKO+q1HoYqSQvqpql4swe86jkAXtb7 zJOE8NJJaRM1U4FK8RYemU4s50/voaY8eF6fZKLk5j3x1NeaaOqyfR2WVf1HR8FlUfhECKi/2tbN 52i5LiB3PolvMsu2Ha1YaIDuxT5Bm8mF+lae9kmTOiFgV6nlp5CrMgmHrvtJ88325c3HN4aY5hn5 2/9RzVxNGNBUN6w8zbtN8W52px8mbrHXc2AB5/V8WRuaDmbnEhDo+QguSMEAbMOL7EQlwfY5d2ls bNOxPb7NIKjtTgCOuwrOOMat9Kk65PYuFwiV9KcM1K/9F75KumvAlXeBQkmLQaP02HVgkNRgM2OB oH9WuoC2XkPxiJwOFu2K64HXg63D1KdqpPH1vweqMCEoONhd0HPPb4O1dK0O6W1rApe6VsFao11v FIRry6cLAHlnxy1v7sC4QHfNcXVsFw1tm7s5egHxrPYHW7YSv/lyOcZcf2hBl1ulO3fCYqFOsVvQ 4jHUhUECHfXzZaDvbCbcmQRodxLSVL7ePkeYC5WCtW817h7xOHbaUfmQ1+3d3oFTh09oR/qAeUlD RpRB3q4JqMpBR84eFd6ifFNSDWMa6lDPBL216QjjLz+fo8/Ux/i85FokkmEsW2pN6YMr3BAng+4T uKhPJxCEheaYsc4VViArXzqPaocNuSolKS1ByV++jzlK2n2kblHkjakmcceELSTr6rfO0IN5oR5D 3OJ8kQPdY18MX0IGDqx2Kv0Cj/YWaowTANmzWSWN2JEBXQfgpoA1H6xQEjw6Ppq2biOdbXsHhDsg 9qZ37t6ZniI5Pzl8gl/1hPdJGM8rOXTTEYOupCwqVDaDWLQXGBwMWNajh6UDVUnHaAFJSccBeG2K tgaRNA66Bt2mCPhfxzkptBQOeCvCawpopO20Lbl2OR6lVprbZhHUvM9QLXiD3d6dXaTlE7a7faby ucMXYU7h4e6m+7pvcc1qv10cceOdUvgWQCcAi7zuIT9zUdIjE+aJWkQddU8EglIDh+BNrcBrJz+l d2hQr5hGCielc1QtPgsnRg98eEBIdsgXwa3067jPSzfhdkcXIv0slxiFmmWH5wYfzHNmI27qVTjr 2xJx5jvwrUBY0CoDP2GVVG2aVrcThkaMrfTk0cDcT7ci+SO/Is2e80ZjXXpbX9er0s7ZG6fp9um2 PBcpcRcez8+0qMY/hsuT1FvvNa3h8uuCicl+MJqeJOxbrrtcA7R1iBndCVvs5zmwgPPz/Hipz45u p/aXzl67BdA1nDJgvMdgB6n3Ej2lOkWHgHdVlITMNjm3bLmzwdNjhk2srB+xbcvDDe/sAFKkc+vW BYBepwe5IU3dnuCjVGv5hYvYNbIcIDVeAOwaHw2kDjpq2DTUwkFifQPhFTW3VKCpOONJ4k9w8XCD 6hoKZgA2AAScSxoGmRyELoQKkgXA6Izff++d2ir3hEv4XfjcZWfH1m324oKOSq2PHz+kACCU9P68 Rc/BLZDaBt1KtIKzeuyd3XvscHlUPChdPCzZ3OiFwLOzQyZHYdfX65bYjwV26uOC7BYS3TZXeZr3 qXeawDfb2rpz3nFOnpXUXgcpqMeZN9+JnEq6MMn22lZ3wLj9r4Cu2uGiIowvgJLxTBaA0GmJ8tQk tMT0l7d5LrQrX6shuAG6+N1gbZjtKCBXUsZZC5nUF4ridcXVmxBkMquev3E+Q/1UjjzxWHCXQf+r 3R1GEyXwt/H5UvN5B0n150rcAFwCQKWYAdmEPjfr488tpJRb/Zj6MZ2RbeKtQgswxZIUiV08HPyL 82YOLOB8M2+ei0mnttNpHLTVSWs1ngv3WRhRUHbvbYMZNJJ6SECoZMB7J8TRkVeH3uLYMcCALnb7 NqfQkJQL5G7dYbQA3ICan7+6dca2MACIogBs8mbQMtLMlIErIDko8NeAFaSQdBxx8c8AQkQNigyM agNx7kKwXk3v0NW0XYPdrGm4krAqBvcQ7/CaX6/vlLvHtj8X8SI5a6siOOJLMJZheZvuOabO3nEB YqKD5yY+QU9dJaDnljf5JKA5wGWvdTKf3g+NXplFOCcpF/hUH23WIp+qEG70Y/FV6Uw9vdwQLEzn NkCl3hP1xk6nTmzzj1YTz8Nii+IFk6OHVGqSKrATeBqArMwuu0aKFy6CUYJt9EcTKj9B7JRnVIsB TsYs5joJUywE1JW2VJdBPeSWQjG0GowapHbbEFnPY5b+bbv0tUg515eCSEQgxjZUfWwthBeAK1N3 hReBPHXrZYz0tMtM67NYc7jdpAz9oMunHvXoyVfJ/AqYU7aTvIkstwixe23DfKxz9cW5ntGV22fS F6q8+c+6sDF+cTMmFia8nAPVcR2UJYECErgEwAuOV7tV7aKuBAUA6LBHHNeeVFsAeh4i2eL1+uTW AZ0eqZmFq6MjF8jQv3Ilwtk5umb2Bb+zeZeH4M3MDiIGLyVsAdabXKO5sfkMae4pvd4veAPOSNpq LftYrYOUUMadkqBDo/atujfVAVoDh4HLgKoL7DMIoaz6YTfIIBGaDdKxelPdjj2vPxWBrJl0Dth3 33132r/DhfuHx+iNDwDQ05KEOx+6EmXk6yFkTzlMVExOdRcz+ldqXBNYDczauYC0yYTjnFMLdJTj 7hfLEridsNRvHx0eFdDWJVPQWK+L0wPaS5lMeE4Wt3geG9CXuEi4d24ISuyloE0UIEDJLPY7e2pQ 0K3JElXLmfdx8HwFde8JEWgs/wgVyCU80WxuqlahBcwkyNHkI2+YXHedhNw+aR+BZ/zqAv+SJHnO BbrQVC7Ux2fmM/H5SF2g6TMKINKnnKTmnRHe+NfYag6m4w2gnlHTuw+d0HqmvtF5J4p9qA4QmcS3 OApS/13Po56zj8q2QO/+bXek4HZPeimAaKt5+Jy2eZsofTjxTqKGkyltANQNELCpex3vJsxJropl cdeJ74j1Fd9kAsY9nuSvwC4HFnMTBxZwvokzc3ikLW1N/Ols7k/eYKDWIphb6TB2OpUaSkFcAQxA em8ww/+sda+nJ5d83uj+tHFbIEAiAUs7dwepQ9NOSxzuSCnmaxWk67pcd+zUxeHqf/XENYDw1Hf4 ZkknbcgA0W/5AkrFFZAIID3gKjMBm3C3kD0DlNUpO5CdEAQAAbkGNGVYv5Z+BQvrQMCcdwO4A7Il KdNbjwskq1NAteoC39x+5o6NU0BSGrCXfc6cpES63d/fLzp5fYpErg57BzWQxaiPPmPxUOD1sLZb /ORkANeFM8sIKHipD54CDoF8x+cosBRwCoKXdRxc/nedAV/SFKB4QRUl+hLjta+mCdAA15W2dcL2 A8G4GAMvNNfPjZyhnf3SYHyGvtFY16qvUryhRMtu+Rkwto5y378aec8Dr3TlNow05lP9qR6JfMiz IZ78nTBqL/c8EedUoELDufXwGTsjWHIBMq6uDPWnnxNmCVXvah/joWrTx/VbeIBgxXS9VgIX7xUH FnC+YsXNjoBZdUQGhH4lYEHrzMFMz1Ti85rIC17HHXAFPkjYDtJLwETJevc217eD336argHhctq/ +w6gABwj8XhyrDqykh4/9/w66P1V2XT56vaUWYuEVbBSsyBr/R0imvJU2eUjMoNdv8dzy4a+oMFy HcAMQndPtMEmqFQ0DFK/TuIpRoXyOtwhLTzY8KQM7isepWzyqzDyFvR8vbUdqYegV18WQaq6O19o dAswViffR7Bb2rpkIVAJVcAOL8Z8fPnz/ug6gk3Fd9ie584Q632KKkYgF4salF1otYXNU0HKdHf2 b6Oe2atya5JlIrIOflHFiaekekGIlLYpO0OIou1zO6vdMIwJVVY2ABLdj6LC5dOVURzGeHinjPle /cjAfoPfuveeaEGeMNMIlJUvtnsr5XVN5PC6wgFU+5DprSRktVsIf9WP0NL5U/f+ArhtsO/Obwmk 7QnHN0QnmG6j9VG15oTfBTlRMNkCzpn0bIv93w8cnNE/5KO7cXriM9/+SRdwjm3YYq45sIDzNS9e 4qJ3zwMzRDXoa1DQTxlgSnbc/tl9lnDGPPpApCCubZxQUXjJ/vb8FZQNXhvv7bt7oQeDIC/4AsEM Fgcm6cjTXR8FfDXOHKyCQ4MNXZuqMMB9tc/gcSRjHMIZBAwbQhxgDhrCe/RKVqbyq/ylIyfKz5dM Kg1h0pCwpSuA1td2mlim00cC7DzUUQuYDsyjoycFfteDl7aRh3VxInLhTt2wEm4BJ+DJWK76n6I7 9T6MGrxU4Ry34CCtp/1qoXTOy8q46Ock6eKkvCz+0H7ZsuXGcnmB7T4N40othG19lMKtUyYAy7T+ Db42ljS0S9rkiwNe8TxkBmXIO93FZwCL3Ipv0mkyKc5CZ4VdXxzUPDF9b2m0HI3P3bwaKPUL53lb cR+2wCzUW555dx06P9+iUicnF4F2NOc81wpX+nXmlR8F9Kp/bBs8l3dMzuGPAK/kLC9cD4ikfQ4P TxBO1PM/evJ0OuSTbNa06KC1Hv4W83ocWMD5lXyyU11LfJKnsztAqrMzQJ4+5WIftsbVIGYQCDQO Fl9zz08OeSXfnR495NSfC11Id3xskNHE6zvS2VZ1WvIiH4RLwE/gsFNfb9taV03rkcFnvGkKSAGw q0HAAGtAMR4E8Sf4Y8UY7ja0CmOwXqWFwG1ibl3b2naQIwm57ZV67rCl7JRTjK49qVO03UnnYD9D j3nCIqDjXV5YB+OrDikYW1D04vxjFkjrbWIP/Tq0dbxbHbBvDoxn66duWTAzP3eDuBhZ0OLEBri4 dfEOR8m3sfuqUvdadxn9piOw997jlr6pNWVZJ/c5245a/ASU/WDrWFcXGmsiskTab3vNo5gm+pch jsrKYqrTRrzDmNdNsNR869iUGbuzprwhcd8cSAFVD8oqHlkXyCxbv8LEXNdSndCHUw+6BPVpP0yz w1U/2lQiJuUpPDYfJXS/QKPbvgyr6hmiSq4J1btVnrD24ER5zLcye5L1lOzmdAAwIzhPezzbPHvL t635xa+tKR4Rv5jmwALOr9ET7DQZLEXuoOBXnYkFGceoV1SW3hIVqIAiKtROBV77d7j3V9rdOy4c 8Tp/wujA+KFR12cu0J96r4SSoCOsbAcQ0mck3a6Dmmw6L/nbh50aOpxRcGWoG0PJcAear/2jMdzB IeBpnFyKFLdhDRQCiaqMphWUHXiqCra51KhP/p1OTw4eTns7n4YV1lvZTn2y0pZV5CAGgL67w4VI 3IvsABX8atKiQAHkFD7YPi/LN2+/A3jfU4QAhxcVAQGVrzs31EVvu9uBf145qhrC+5RjbJcqCqVx 8+5y5JNbEZtPhlsPTfHAetQ+XHdZ2F6Boycb2yF9Dr3IEcv2X99t7NuOofYFQqGVB+WXSv4WI3QY I1zOhkeTOjmh4isK+1RRV7z59TNpPW/nY1g9YdJZl/rqOmUrPdcl/ZRjvQmhDPKYFyvz3E1PdTG2 FfhGODCuDDy2XrtIw9bXWxZPyMvdMN6hYh9/8uRR2X7WywntFicnTeP+cUHaZ+fbyzagfI8v0Mvv gLN0468LXf7exIHnR+5NVJ/g8HTc0b52AwbsxNjjMqAvfOGL02//zu8CwL7Se3cEkpZjg4uPzhA1 XB1vvWZLn9/85jeQVk44inyvBkfpMU0F0F0gzTj03IYlwPYOAofLDATEObhqsUZxd5aKBFSNekKN 2KCm2MHcYOyAJWc8YoLu0kHWin8l6T+AROehXtmdI+hg2XN9zADULQgo2ToIPaEnwDjQY5RiBVfb W0DBAFdFUPp0iAr0qGupNQDUx0hfAvcOq6cPHz1gRwg7WFjok88npLsLj+7uv1eT3QlfypYnd6Cp 3RzwuvSr8MPJ6oiJoEG1VUv1pRoAwgmvJhhYGrAwH08FllQ98+7q2cJjrx5NXrLKNhnvROKVohQH 0slzHD4ryhDUG3DlB78Z+ARSTfE/YAgfrYPPo+PKqjL6ARGXCNK4UFugaRjP2HJ8vkrv9h9l5eoK Pg8pqwN21Vr8tTwFAWJr8uGNZlbVFK+ZLI9Qtbnd8cljgZiv9HDnS11GxQSpcW6zDb7xedvf0dGD 8pNR8VX13jYqOVVPtdec51rPmcmv3kxmsF4FbfOu/qhjMcWBBZxfoyPYafKTfHQLELfZ7/vlL395 +u//439N+6cuRgHOvi5m0NFZPUaseuCCwexNb/v3kCgPufKyDgH04BQIjHNrU4nUuNs4MAQY6QBv BykDz0G2UaDY6WfiHtymAOiNceAVGQOoJH48VyBUY04Ab2BPuOWRDLWEIECbmWyEvxMObpyyt9gB VwtTuJWYpai7hQEc1TKnJ9y7hwph53aD0rjQZz3n+QPA669l5/CI5QtAmxAImuqI3cp1yOnKy6fy hkU+9pZvMzG4SFlvFoCmy3z1ZWzSWE9fxwVRrDLma51LH06b67J9QEz1g+HW5xqIycEw+F+LnvBN 1l+D7gwkhLvbQYDtZ0MmvkXYBjJUvVOSu5kLxCDnNX8JqsdGOfybK3lVVx31uLGth3lqKt96qErH 9omeDIytSdIqVL5dx+4e1t83CNU88tVrU5+xza0/kfb02eOSho+4EdDtg+TEXSLuFacvU3evYhWM 3WduGtsgH7X9gLFlFxBzmMp7yv35FqQaSkCWl/kFlDNBNt9mfpLPYq45sIDzNS+ecz03iOiEdqKr V3Kkxl10khNbqs6RnCfA4st/6PPTj/zG90+/9mu/waXz700bdwUvOibgqy7ZS+Q9LODnp7Y4RLGB znmLPc6XvtrX546Ugho0/aKy+4M1NeAYVLcc7FxNqQGeC/e9FW3b8l0U5MCDe2P9/JV1VZL1zgfn h0uOl2suzwAOyvZLIAJKfVD1jDopfVtP0pVkxiRh+x1QfUIRetIJhPfvv8fA8wTfzvTggw9qh4qX AgmE8sd8H/Pq+72f/mxJzh539nX3BCnrjH3gfmFEKa8WHWuRDqAUULj+84xy9+9/D3U4nY6VTl28 O+cWO6T3My6FujYsIjIhbKgXLoBGGgTpen9xU5kXucJr2lYSKpOG/7gsSVN647pP2jcdJUkhBsPW QcHSfd5m4SSg6kD4F9zgCnzw2UIr6JaoanoZ7UwgaPoc+YsX7Tc+ZVrr0f3IfqG0nIMa9dYhcJvS bAq1AV4mcssWnANiVSZZqW6xChfwx7rYHX2G2bXhBVO26fj4QaskuMZVnf5j7gyv58EbiU12Qc/n bP5qeBQefMM4Rqd/cvJB5WE+Kd991xbswqyTs2kFWm2l5ZacvY9FgO7vKBoekI70TG2v8tQ9mpQ1 hn0S3Qs4v+Sp94C11ztgMrDmgaxkLJwiEZ8825o+/9kfmn7qb+xP/+yr/3L6pV/8telLX9qf9vYB LBfMCqRVByBx0KkvTgRi0nOA5XybzfrEF5YArm6ru2Q3x4X3awAEGgdv/xzQDioG3jw4Wtpj8JIj NYM4A8l6MlgLQBxIUDCIHPiCUUm9NbxD320sEKlSGahUSinU0Sjwli6RO5UPWfw84yslfjjAQSmd xjJOfDUGjPv4NjD7uI9N+zpcB0sAmoJNaD0EUiqWWV1QefiKrq67m1LtKU+nopK2Uz6YD0QAyqYg X8+nqkGaeaIhrK/1hJYMSwIlbZVD+bbVL4cU6AKWAcUiAKRygtJ2efRaHtvU4j9F48JvvrjEabIu YNFh7laveO2k6LNgcpAQwK2+U3WeJWcy7vpZJ9pDw0ryp0wRO89PsbjqY/1tH5R+6d2j7ur2BWB/ Bwfcg13fRGyVknX3mgDVUsxq1XYXbI+h8/kJyD250k7bO//sM5r4tSP1avuzD4zgLCi7fc7fOoCW NmmTl/ku5nkOLOD8PD/W+Bw0NRKv4vT3xz2BLgYxMgen2Djtd+/z09/+6b85ffp7f376lf/83+jw 7yNpumDCC+gOC2RIEw7uDfSpXiRfHb52ATDQlDo9jSa4AjwNANrtFojqrgtqoTRcKg0HDrN41ugA ACAASURBVGDVNFbPgSXkkI2gqhSo1KVbMW7u/0rURYOfYYne3NyVmvzLgKt8SAJAmJ8TioPoGcey Hz95WBKSbfGjqu4/VhKMPla+fP5z38di4Abg4Ha3Bhs/waWAXpBKOV2UPKAciy0jr9t1NVipWyFf 17DaINDYpgJx3N1u85GHwlW75aHqGLe7FYpXOGWaln8XF72bRPqUp0Rd6QqTqI+V9j95OdEJZD5D Wdm8Vgru8G4rvIZfAr21tIGe0Oz0lcriMNazJ9squ9rZdJ7qFJCdgDbmz30VDRPB0RELsUi1/gTj R3VSs99arFuDns/boc1JSZ6ZwOuiquCr7t+6WEcNmoeqq3XJLX0VwR/LHMGz827wjjvAbH+I5Cwg u97gz/4RkA5QB5zNP7+UudjXHFjA+ZoXN7quBxZD3IHIwNm57XftvOPXgw7ev7w3PXrwmE8hXU4/ /pf/4vSlH/yR6R/8/X8x/e43tpGq32PV2yPeqhzYDw1YXLD32fucty/uEgZQCMxA14aqB1UNIDDD kzAGUoGnbsp2vPNPQFIf0AciSOsrOvUiAwjIo0DL031mAS3S2AUn6NoU8uDswxtz4JVlNuKDA8ej 13VhDyDe4COo9QDf2TVfgV2J3zyVLAVjmgAI9MC7DlPPa1hL0AARtO6RrTBVBjMgmd6wlmSpyBpj vPWXF/18BGBN6I2Xg9RLaRVXgRLArKTs57805/C6ql4+8+r2uOBZeTH5CnqVdgZZSa2bGKdOlpZU fVX7ENphxtfj6wmusjfOvPBUHeZ2dludFKRiuqQpJ+yG8A3k0eOvFwgLxErC6n5bwp1zZATLawHY bYnugKGI+klhV/DtxDKKZwT0ZVzXINs5Nc+brzxJmCKIJl3AWH/itAVl6UZwFqQFZX8B6ABz6BeA Dtdvthdwvpk3VzHpsAY4AB2om0i8d+9/anrwjd9BCGEjPjrA23xF+5CveJyd7E4/9qN/Ynr3/p3p n/7zfzP9n//7v6f333+fo8Z36NiejPPyH17r0cdeoBposHUkxzhwHFUCW4dbB2ToItCtvN47KgwT FHpAFZAyaAoYGgZ6UEqlZIkpmY48vETIz2WVTrTiGrQFHmM1vYDG5UAcoPETVQ4qQcI6uM9YMLGO HjqRJkYAcfBWTWcQEsQKSGuG6fxDr918tiUdJ637xC2j3iqMKQSzHTPYCI6QC6amr5rPYGT54H+Z Krfygzdz/lUSYdbficfJpX6EuchZKiFyjKn85ZsFYrSdjKp++utZOXl3Xg3AvYdY2oCZz1VJ1lvs vB5VcFUV8ejJQQFxLaiSrzysk3bEF49hQ4BYe+wbzTtr1abuG5EfqnzIy/h6Hobppr3a1KrCE6et CX0A2vDxZ7i/gO0qOCstB6Cj4ojuOWlSZte4y7TcxTQHFnB+RU8Ap6pTRlqx8yj7qCx47/1PT7/3 jf+LRMztYw5n1924Se7pid+5O5x+4Is/NP29v/uT09d+9l9Pv/yf/ut054e5NOg2cOOKPoPi/Ji8 NklUi3+EFUDwisoOCK+v9M6J3uFBJQRMALtBBjAB3K86MtKdGGKtIJjBQ1C3owdwBTRB30EpTUuO Ja0WwJGn1QI4qhokbTomEJI6oCiA7VNK0EpLfPMQac2tdBnAgr/4VMAgR2bgbOCzaqmb5dQUQXHw wGrD1QxWsa0nCOtuG9qYXn+BH+4GkM7XuoUfXQ7AYxtI0X5tkzPFAVZXNC40+kxNz0TQPO7n4+S3 USoR4wijbU4CVQ+BzQLsDWRsnXrnjLYFy2vqD43xgukxKgklYA8seSuh/pbQ6TYCMdLyUw5v+PUc wds0dfqvQN9qWl49xapnPZMK6T/iqjTNF3nXdVONVsBa3LBqPVEUvxEyksZcArgJq3QzMBunXzt0 o1vwHVUbAehRrTECc5U/17dbsPwdObCA88iNl7gLsOZ4O647DJQkv/9LPzT91m/+z+kAnfNtAOz8 8rBeGy94XX74wSHS9b3pr//VH+c7gvem//hLvzx93/d/sSRMX0HtyH1vA4Oodh0wsBzPAFYNNMcX gFoASkTvTwVFBAMHrBIRSsPWIc+v4QWKohCg4xc6MLlZreVtwaLVG4IsswDx0mPMD6sGpiv/gFNv C3QLlvcuu/cXsAYJvbeiv+pMMupiHa2zA679AqAHEjrvCiNz9xVX+AwUVSLtLYATYSnDf9qNRbhF TsOuTPOEmkJmjVvyNQ8NteYvbqX3ojE7Klf6aCcp6QRP2jLzoieSnrAEVHlgfvUPSbzcTD41AZLa yl26aEh7XVNwoc2dDE7iqiMO2Cap7eKpgOzPu1I8aSgv9NdbFgBsmgJiyvPYvnlqrBM1qb3v1idg Zlw9o2bQlTvx13HXE55tNT6/0GgLsNrGBWwTrz/hAmvSB2SNj1s76ouA9AjMhiU/80kZsW3XYq45 sIDzNS9ecFWnIbTvGOgB60CyY2lO3VPL17I/87kvTt/43d8GmLkcnv2dJ3xFW6l3Z+dievhgAqB3 pp/4qb80feb7PjX9wi/8It8U3Jvuv7PPR10fo1RgQc1jyepulTz9HBRf7RZYproutMHOcrdYHLJo X59LGr0anAKPwK48zyPF3WASkOkdCQ5QIolrENrk69d1skyQLp030TMGml4QuYVkec7CmRGb7tcu gKLdAGoZ6OWT8daRipe/QahCyy/QWLYhugtvpQY0BTbzsDzjBc78qjzrK1DZxipWJkBiW/wLKMqT Bk7y6GIkqHgB3B/wg1/J18lJxRBqGN5a3ILYuy4auOWTOVt2b2M2wwbz+dET63Ph86bP3BlxwOIo Komnh633Vf/LOXffLDa2+eILtkDtTxDWNM90AH7U3+2IPtMOD6i2BN/t7mdJLar/GWY/rOdXlWrg Tb6CYNNYVgNs+5GUoS+QJXsnFN3X9AHwflvyOSZemoBr3NojOAvA+gPOxo/u0Cb9c7zQs5grDizg fMWKFx0CFCO0OrlqUo0n+FQ52NHFOvfWnnF38933PsupqgfTwdNH6JYBDyTNUzaOnj07nw64Q4Nb BqY/9af/JED9zvSP/+HXyJdTbuxguACca3+qr8sAm19COT0UbFg4PGWXLIuG1sMBAnwBCIKLsqHg QbbURZAtoCFNgSb7roWlW7dIy+egpkvvOwCAUJdUvVVdUPkCQ/TlBXglPQtstrnLqRNps3Ro3UqN Qc41YAF06+WXNOryHZJ6dar5Oz8IeH5eShWCpsqViVHBuGWQNltv1Rp1a5rfXwT0pRUYFXS3abeH UGBzt1dJ2WdheygfmRU6CHEZphGGJTFf4LXrZNGE0bQC1brHGKC2slL38XkTIUlShn73/aoCcHL2 kIy6dlUS7lJR8j0jnPW3K0CWnx5akU++GTlZXV76FRdrQ17YglLxYg7zuSYu4dr1vLFvCkt87DGN YfklPP7QW4+4x7iAZuLjD038q7agK412ftJEWh5BOeWm3cUA/ljXxVxzYAHna1684LKzFEAPMens V52T49kCg9/A2925A1Rs4n6IRKIWGsmJy9hPuFj/9GxvOn5wOv2RP/xHp5/+ytb0c1/7+ekb3zzk s05c3oMqhOMkAMI9JKvH4Bd7TwGqdFaGarsBVXGoBn3BDx0aMAcJie8FMUFRuU8VBtBGVOt+bYIq CiUtY+uVuXBT1CMfEbUATpDrRUovs5ekeeDk4OKcAepolfSZIMhTzC1wq4Ms1LHCAXjRFbft8IfP grotOiu8v8/XmycASiY2AZG9hcW/U74MQxa4/aPkay0FPX/6yH8GIw+O9EdhAacqG9u9YpiS6kmv oViq4ZNSx9qLmA2s6n2f3y8sEJ+hA04bjtgb7G2CtTNCEOZn3i31m7e5tjGN/SRp19kBqsTFv2ob P4bFnfz1JyzudXbyMV3i38RtmqQb3SMIJzy25elOW7UXczMHFnC+mTcVM3akdObRFht9HfW2s8cP lZKARC77eXrwAXdCIBWDOh5FPj5j29zW3Vo0/NIP/vD0la/89PTVr351+u3f+s3p05/+HOkEOb+7 B8CAdhtb7E1FTeKXqx34twhLXUpyBV6qc7M1jz5PJQRLX9eR5MlDibRPogmJAqT1dDA0eAiV9brP jo0GXfMD/OY8ar8vgB0Q7LI7LfBLPhjy661z5oVf3XEBp1J9A6d/NRmGnR81Ejzh23xYscqpNjAR 9Xf8mFQA2/7GXefXkrzSru3TkAcFeHmRE4E7SzyJiY8JwnjajU69XuuJ22AR02cnmAquSsIHPCfV De4bPkQaPkYdUXyiLfLdDwwY7xY2VRKmNd58nCg3vc/aOuP31zwmZHY3366BNWlXw5M+6Ub/6E76 V4WN8a/rFjhH2vhjJy5+7dRnDAuddsITlnZra2KXZ/nzHAcWcH6OHes96UDpWOlo6Xju5TzhYqDd 23dQbTzkNfh42t27V4Pd7wS6t7lu+lLdAIg8fvB0usvnnn7mZ/7W9LNf+7npV3/lN6bPfP5765NH l8e8ToOxLtJ5sKPLjsTH4AFkuHaGigqkgENHzRUHHMU8On5JtXrKAG7kF4CcA6su1I7CpDONlvlC z2RQ0jXSsEawdjHP4q71sygFoC8K2qWSoeolKJKHdQXOKr/a4zxLrmomAt6nnKATZGsDCy5iSGEZ VAUHexagNUTTE4pH2Xsy6rcEvV4pqgrDvBsUevI6464Iv9ztVrUnbFVTP/wUt+As2LorwueoEZil c/uawGyLgJcBQDaYhOG//IXeW/B6h0aXabn9vKgeNP7SV2Kvho3+9KeR1vjV8MR/J+ybyk946h87 dVrnNyw/+a07ZnQn7JNuL+D8Gj1AIEmnSudzwPjbZe/yMfpTjyJ7SZCfrTrngpiDJ8f1WaVjFv32 +LL2OYt8WxzLPkfFscn2OS9X2968N/3EX/tJVBv/fvp3//Y/TO++/7lpHz30M9QK7sDgg4QMbm7w n00Dmp4GUOvk/mpVEkqH3uEhaFVdRdFC2wZx4HYGxAZGd37UgCjVBaAG4AtFfk28DfBTR5sFSkFX CZ6/DqhSKcy63FkSD4DWNZXzNFB8U5oW7EFN61AAi1hrns1X6q8qQF00eblfuqRrPpjrROG/Sl+Q bTVsY0BR+R8/SW+h71bHL+h6SZLqiCdPHlc5JwC0UnJdpGQW1CeSszcGKg1XGVfA3otcFQatzzzP PzbZXAHv6DY+fUQ7cfaVMW4d4K4LMw/Dx/ShM78xfCx3dL+MbqzTahr9SRt37KQb7VW3/vEXXhRT +GOcPNZezIscWMD5RZ5USDqOnrGD6baDOihKv8Yqex/Q4LIiVBj+PFhwDBg9fPRsun/nfr0Wb/P6 u3uXb+CBT5cAtN3x6ODZtAmY/4U//2enT33qPmqOfzUdPOLEIGmfPAW0PO0HuAloBY8Fci2f5jpG Do6TF4BcC20CnAOiO7yUAm6nsB292wKiMn1yDCeAbhllvNRH8bMWywRT3Q0yJa3iq2jyMmfv76VE BlnXMxOHJXskvXZRVJzlzzQ1gZhn/9wRoZTeEwse41FpdF49wN1XrZ5YSTfA6n0SB1xt+ZSL3t2y Jviq/xZsXZRTAtbWHynZSWF8nsUhJtbee06RGJ9R0cB7n7FpAoiCSZ6/bm9g0wS0tMdf0o1hus13 DLuJThrj/KXvJUz/mG6MlybxY/iqO37tuJNWe7VtoRvDV8OMS1hsw0Yj7zTGL2Y9BxZwXs+Xq9B0 nnQyO6w/B1f/zrks/g4A4Hapw7pHoEACrPGCcgH6zl3AC+n6m0hz7967P+0B2Idc03h8fDDtbexP jz94NP3YH/9R7nbem/7JP/qF6dd//Tenv7L35+i5HvDoQdPlzxK8e4VnwKQm1LWlS2CJNBRcHV8g lq6lwut2COCi4Tww3EJX3oAheZRfVYLw60Kl0ix5Zf9bgbGb0rz+VMlXeCYZ6eoP9HVQRG+l6UFe imDfCorY8tUra9MuJgfvSHa3RknQtgtp+PDoAFWDPy/0OUKX74U+AO7cLohr54RhgqgHOATkAk4A repNxfLcAnKGJ0z36vONX/rkpVtjujE8+SRvbcPMYwThhCe9duLHuOQX2zh/Y52M0z/aN7lHuuQx 0iZspEs7E6Z/dMeftPo1o390d2zHj/xO+GK/yIEFnF/kyXMhdqSYdDYHikDgNqGWlFFAcI/ANL1f r9NE1YBWAuNTrlwWdMKF/DtcGH8LgP5gegcJen//HlvsHk0ngM+tbcDswXvTH/yBPzZ95e/sTv/l V39l+uIXPstlSnTmAmLBzoUwFv/Ya+zHXdPBS2K9QjsL5tdQWVvJNthNolTazWigsVbCqe2p77+h 2oiuWYm5VRQAKioEd2VIJ8xHuDZ9JgS/61ffeFVkLSB2Oc5oJyRSzXrz4oX5UBEB2x0W5ru5paoH pQp70uqE3NO+1Mcta8fH7ozw/mbqIL7TTnX7T7n+0reTkojZLZLnYrEaAa/fEqib1SJ99lKzNeaK 3ueoqXoM4CdwydIA4ghkbqWU3rAu5/pNyrD8nFR1W27bDbDX8Q3glpF47dQldPGnrgnX1iR96jTa q279r/sz75F29OvWGL/OrsAhPv7YSRf/Yq/nwALO6/lyFZqOpO2AcDAIMNqCswCxt9cArvvOHUG6 4KnoBKmNjb5L9xzVw/6dO9PBM/Y4c2nQvXvvIg2y5MVx76cPvz6dPnkw/YH3vjh98c98YTotUGTh 75x9yEiRdcdFQSRA48AEPdS3uiDnPtxeGWRRrJzQk6ruOC7gtjnWSaDtQS04C/h185mLjNIJnP4r MIde0Kb+V9vm0DWbb+XmDITxvmrBT56UimCOF4y3AOyLWunDY/YkofYl2R4esjsCafjRwz5JV9vT uF9VHspN81OFIU12SViOzyE/8wxAWpeEx66PDQz0Pj/jYuteBbfEaY/u0CV8nT9hsaXVnV/Sxr4p PPGpX+o8hifMdhs++uPW1qzzGzbG3+RO+sRXhnOecYdm9Me9mi7hi/1qDizg/GoePUdhZ3MwOLAi PRcwARxXIDUDl/7ReHDBT/+8cw+AZl/0Hvfr3t5jXzTAqHrinFdyP1+1fWd32trhNKCJWWT0tV9J 1UWzkprxK92637cQj7oo5SpFb9VpO+I91YdIezlf2m9WY3V60Y30qBbU+fpHeK09xhLPxjcDTdoo ykaar3AW1OTFpeoXCpDOnztNvC/iKW12K9rjAyYgvkHnbWvyxaPMAvE5ErO2/qvDG7Atg3q0A8QB o8Tp1+TZaI9u4/NLePJIeGzbEvdor4bHH1ta3fHHTh7xxx7DxzolXDvtSPxoj3Gv6y4mzXwKv3xW po9/1U58aIpw/rMuLPEviwvNYr+cAws4v4Q/djA7pyadzUETY1ziDRs7soNQ04Nt3k0BEKqX/oCr RT/13rvT0+Nzzweik96fTvlAxzlg6m13yo4bm34JhQMSAmzpYQFOwv1RGcoimvyE/9qlge2mtqod IirKCQBalJPQegrOgLHpMQZX3W2PIm2ZIoKiQdZEvdA3R1sa9AEO0yvRq3o4QB/s5ONPMFbi1d7a vl2Sby3ieaQZMO7FObexcdgFNUMMueF08usJ0HIE8uZhlyutzyK/1GWdPYYFFE1n+Ko/YQnXn7DR Xg3PhDGm0x2/9Y17XT7JL/Ua7bTxpjDzNr1GmthjurFPFsEKbeKTNjSxx3wTts4O3bq4JezNOLCA 87fAt3RAbQecHdtfzGpH1+/YyQA0jeYcdcj/+/o3p3ffuy/OAlIe5fZ0IMeXOdXi5UIlJfsJKgCx ymUhTZWC2gflbKH4avtZ3bks8HqnB2AGaN9id4OfHHLbm+FdNwdxLx6qqiAjVB/GCfbahs30M1Cq M23jlrNe5HSv8KNHjwp8jzikoW7Y6y89HONEogQsMAvIJ3yayrLrZ91psPrg4iE7XdK+rl/ztdpL TNNeg+kYHp6OtvGjP/w2bB1AvirspnSr4atljv5XueXt2M6419kjrfHxx14NK4L5T+JCm7iEx074 qv2q+FX6xf/hObCA82vycOycDrhIdAEAswnA6A79Zi3INUirnvCLzp5Gu/fOfe7hYPuXn5C/yzWj fGPvzu19AJUFLk6WqC+tQxzshtAE4JR41TH7+SWnhf5ArJpcX097oijJ2wW62hPs/mVD5okE/DWv NgAyeQnOAiZ/6ndBWo8snyHpPnz0eyUNRxIWcGt7GvnJh0v2Fh8CzoLxmXUibz/FZPsbmMi7/jVP wpfEXzJZyEP9Vt805caf8M7nOjz+V9ljet3Sr7MTNsYn7zFuXZjxaUviY6cdo1/3GB73qu3zGcPm B3YVNvpHt2luMmPcdR/octalGenXxS9hHy0HFnB+BX/TQcfObBIH2RgWOm3Djdd4U5wgq7RZAEjY /fsAM36NhyNOHz6b3nn37vSE/brvvsMRb+6CNrXHr70zAzgFRNUNszjITge/TnJ+7odKKYfylFgF 1HM/PzUDr4qNqot66Vn69vYzlSNK3aVzBpSzb/jA29XQh1svd03UPdIkPaE8AVm9sBOSqgj92pq6 q0NgR2KuO6bJv5YjqZflU1LZtj3AZDrdxUOqI8B5O1rRz+BlXIAv4UkT23DVCvEnzehfVTtUWTNQ j3SGr0ufOiQ+dUm4/oQlv/ht5zo64zVJGzthq3boDY9JWGyfe9zSjO6kGe3V+FX/SLu4vzscWMD5 Nfm+rvM6GGPiDp2DUiM4HFweAMhbJYEapl723j2Od6OXdVCdnbEf+sGTAu2Hjw7YZuf2q340XnC3 NZfTuNvgX0eYgdrpotUOZ7WNTdADZABEUJyS2CfN0XEvAzrlCLOXux8ecVfE/CXmp+wfdt8wuFhG 8K3PI0HrbXsCspOH4QW+I6iUdO/kESmcLKIrBqDDD2154k93/LFXwUv/SDf6445tnq8C59DGTt6v 8ocu9Yx/tR3mk/ats5NeBo/xo3/VHf9o6141yW8VmKUzTpPJOv4KXP68FRxYwPkNHlMGRZLqdxBk IGg7KCsMqBSYlUhVHxjuFrwA8+bGbn04VbXAwweH0/27O1y2w+ejbrvt7n5JuiV/kuc5lxJREvm0 1IpsiZu91ki47lhzb62qiEMA9Zj83B3x5LELdL04V9+fQ8L2RKOHZqwDF6whCauSQBpWqUx9bU9J 45TpHOMC3bXuWT9orqQMnddr8r/ckVLFaxf6Cpi4zrTsyrPT6h9/lc8Myl32i+oH6UdADSjKyzEv wxM3hgfEx/yl02iPtNKEzvC4x/DVMPNJfOwxbHQbH3/6zBhWkfxJPtWPeBah0b/OnXSjHboxbHG/ HRxYwPlbfE52dgdHSZOkdfDGH1CQxtf+DHjVAPv7fn9P0OsCpTH+kLszbm34BetLbpO44GvKR9Od PY6CI/me3no6vXcX4GDHxsUZOx+KTuDgKlDAr7agsc1DEH700H3DfaG7C3S5M+ICyb0kYupgPUaV RAautmoHFyLHMPdQb2z0RfhN06A1utNGw9a5DUtcQFB/3Ekz+uPWzi95ZAIwXehuyiNp1tGOccbH r73qflmYcZrRXudepYnfvhN3OVb+JN46xiT/+Bf748mBBZzf8Lk6QBw4GSjj4EmWI41uafLT379Z wpzjS5oFRJVsBdVzTsSdcGnS7g5S7FF/3kgwlq701RzcOGEiUEfck0Rf/u4uCRfuvBB+rFvqEdu6 Xtel65gw0yUu7nW2Ya/zG8H0Ve7Ex07+r/KHLnbaGb92wtK2df4xLPwIffza5jcaaTSxEzf6b3KH dl36MW5xfzI4sIDzGzxnB9cIzBlsGfj6V38BB8PjbqBxILfEql8j6J5xPPkZOzi29m9PX/+9B+iC vz6rIy5bHYEqwjocnniU+fo+idSl8kTXgbB+BSCpk2WMdV3nTh1DG39oA5Lmuc4tXcLXuRMXex2N Yau/0I/lhsYw3Ykb/Qkfw3Sv/mzvTWFjnG6NtKNdnuFP4oegtc7XpVubeAn8WHJgAec3fKwZTAKk Jn7dAoFmDFvnblCRrnWeAo90vrofHvZ+YQ+sSOfhjaOjJ9MR118qEfduC6Vud2hY5rw4hy44pvJC p52ytQNSXfaLUuRqfOhGUDQs/lX36JcmdNopP+H6E79azjr/SJ+8YkuvO7+kz3NI+MvskW/SJe26 8ITFDn38sW8KT/xiLxy4iQMLON/EmTcMz+A3ucAdHWnCtQMkApNGYJVuBCrDlaCPj/uOiVPvnWD/ sHprP62kyqNO2BWIXAPJdTlRl1yDonGWcU3zPDimbgE27dQpdmj0Jyz2OvrEaa+m1Z/4sUzdoU34 6I9bO7+kaX4+D9Sh0dbEH/doj+7QG6ZZ9Xdo/31Z3Ei3uBcOvC4HFnB+XU7dQHfToBQsBGd/ASZp AzZmpzu2cdJqJ0/TCdpuvdO4MyH7jE3rZ+i99U2TNO6SyI1vXZYS9TUop/yExR97BMuXuce41bQv ixtprUP82vFrx21e8ccObfyjHV5IM5rQJH60QyfNaPT7TDSrcaG7KTzxi71w4E05sIDzm3LuFeky aAWJDHCTJFy3cf4EoICQYJywlqZ7q5hAXLpoFv90Kzn7S96m0Zh/8o2dMO2UlTISZ3jCRjt5jOnG +KQb6XSP+cYdmtipT+hDp60JXdwJ1x5/xq/GjWEvcxunSfr29d/VsFX/SLu4Fw58uzmwgPO3m6ND fg5mASYAapRhGeRtXwOZdI2xrb4w7TYqDE/PnfDBV8Ha7XNuhxOY21yDcvLfmIHW9FuoQSwnIBrb uLhX7XVxho2/pBnDxnSWGb/1GunilyZ0ozvtSFhswzXxa8fEvWonfrRDM4atc/s8Xpd2XfolbOHA h+HAAs4fhnsraceBHEA2rEG3QTigKtAa5w/cu3I36KmDBpS5dOho64hPIW2U1Hx6ul2Lgbu7fhKr JWerkHw6r+dBNAC5Cqb6x7DRnTQjoMa9Smf4WG7cqZP0ca/GWfekD83YnrhjS7NqUrZAGQAAA/5J REFUTL9q1tGF5mVxoVnshQO/HziwgPNH9BQEgUheAZD4AxDa+UkToBLQ8hPElZTVN9e+ZdQaueci QJ88tJPPCKLJK/lrj2FjmuRhvO7ksxqevEKXeO24Za10moSPtuFjfOhGe3Sb9ibzsrikeR2a0C72 woHvNgcWcP4In8AqGMS/CkhWwbgxXpoAqMC8Cs4C/U3gHEA1j/wSZhnJO7Zhq/FJFzvp9OvOb9Wf 8NjGxximSdxq+Ko/9Kvh8a/aq/Sr8Yt/4cDbxIEFnL9LT2sVtEbAMi4/JWclZhcB3anhT8l5HTib xnwCtMlDO2HGr4aPYalHaGSP7oSv2sbFhE6/dLHjjr8i+JO84h/tMc0Yvup+XbrVdIt/4cDvdw4s 4PwdeEKrAKJfcA2YxTbcX4BUWzAWoJWcBeX8TO9Pk3Sxze+mnzSJi3u0xzziXmeP5Y5uaVfNGDa6 k+5l9Ktxi3/hwCeFAws4f5ee9CpICZgxxvkzLMAsSKvGiL454Jx8kibpTHtT2Bg3utfllTys2+i+ yZ9w7dEk7zFscS8cWDhwMwcWcL6ZN9+RmADeaAvCgmYk57gN9xdgvklyTl6m02j7S/hNtrTGxR7p KnCIf11/6NbZKWtd3BK2cOCTzoEFnL/DPWAVkATYhK0CaEB1lJYDzqvVHoF0dEunP3nHH5rRH/do r7r1j8Z8XmZW48f2vizdErdw4JPOgQWcv4s9YBW4ApixA2QCq+7VX6qefJLO8LjHuHXhCdPWhH7V XZFr/oz0a6JfCPpW6V/IYAlYOPAJ4cAtBnyvKn1CGvz7sZmrj2AEYes7+ldpV9sj+I0AGPdNtvkl Lnmt+hOu/bK4kW5xLxxYOPDhOLCA84fj37c9dcB3tEf3qwpcBc/4Yyf9qj/h2i+LG+kW98KBhQMf HQcWtcZHx9sPlfMIkLpHCXeMe91CbkpzU/jr5rvQLRxYOPDRcGAB54+Gr9+2XAOesb+VjE0TqftN 0n8rZS20CwcWDnx7ObCA87eXnx86t3UgGoB9k8zX5fcm+SxpFg4sHPjOcmAB5+8sv9+otAVg34ht S6KFA281B66Ppb3VzXh7K/9hpOK3t9VLzRcOLBx4FQcWcH4Vhz7i+EUq/ogZvGS/cOAt5cACzm/p g1uqvXBg4cDHmwMLOH+8n+/SuoUDCwfeUg4s4PyWPril2gsHFg58vDmwgPPH+/kurVs4sHDgLeXA As5v6YNbqr1wYOHAx5sDCzh/vJ/v0rqFAwsH3lIOLOD8lj64pdoLBxYOfLw5sIDzx/v5Lq1bOLBw 4C3lwALOb+mDW6q9cGDhwMebAws4f7yf79K6hQMLB95SDizg/JY+uKXaCwcWDny8OfD/AW9k1ADL mMWXAAAAAElFTkSuQmCCUEsDBAoAAAAAAAAAIQCsMbrPmXIAAJlyAAAXAAAAZG9jUHJvcHMvdGh1 bWJuYWlsLmpwZWf/2P/gABBKRklGAAEBAQBIAEgAAP/iBUBJQ0NfUFJPRklMRQABAQAABTBhcHBs AiAAAG1udHJSR0IgWFlaIAfZAAIAGQALABoAC2Fjc3BBUFBMAAAAAGFwcGwAAAAAAAAAAAAAAAAA AAAAAAD21gABAAAAANMtYXBwbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAC2RzY20AAAEIAAAC8mRlc2MAAAP8AAAAb2dYWVoAAARsAAAAFHd0cHQAAASAAAAA FHJYWVoAAASUAAAAFGJYWVoAAASoAAAAFHJUUkMAAAS8AAAADmNwcnQAAATMAAAAOGNoYWQAAAUE AAAALGdUUkMAAAS8AAAADmJUUkMAAAS8AAAADm1sdWMAAAAAAAAAEQAAAAxlblVTAAAAJgAAAn5l c0VTAAAAJgAAAYJkYURLAAAALgAAAepkZURFAAAALAAAAahmaUZJAAAAKAAAANxmckZVAAAAKAAA ASppdElUAAAAKAAAAlZubE5MAAAAKAAAAhhuYk5PAAAAJgAAAQRwdEJSAAAAJgAAAYJzdlNFAAAA JgAAAQRqYUpQAAAAGgAAAVJrb0tSAAAAFgAAAkB6aFRXAAAAFgAAAWx6aENOAAAAFgAAAdRydVJV AAAAIgAAAqRwbFBMAAAALAAAAsYAWQBsAGUAaQBuAGUAbgAgAFIARwBCAC0AcAByAG8AZgBpAGkA bABpAEcAZQBuAGUAcgBpAHMAawAgAFIARwBCAC0AcAByAG8AZgBpAGwAUAByAG8AZgBpAGwAIABH AOkAbgDpAHIAaQBxAHUAZQAgAFIAVgBCTgCCLAAgAFIARwBCACAw1zDtMNUwoTCkMOuQGnUoACAA UgBHAEIAIIJyX2ljz4/wAFAAZQByAGYAaQBsACAAUgBHAEIAIABHAGUAbgDpAHIAaQBjAG8AQQBs AGwAZwBlAG0AZQBpAG4AZQBzACAAUgBHAEIALQBQAHIAbwBmAGkAbGZukBoAIABSAEcAQgAgY8+P 8GWHTvYARwBlAG4AZQByAGUAbAAgAFIARwBCAC0AYgBlAHMAawByAGkAdgBlAGwAcwBlAEEAbABn AGUAbQBlAGUAbgAgAFIARwBCAC0AcAByAG8AZgBpAGUAbMd8vBgAIABSAEcAQgAg1QS4XNMMx3wA UAByAG8AZgBpAGwAbwAgAFIARwBCACAARwBlAG4AZQByAGkAYwBvAEcAZQBuAGUAcgBpAGMAIABS AEcAQgAgAFAAcgBvAGYAaQBsAGUEHgQxBEkEOAQ5ACAEPwRABD4ERAQ4BDsETAAgAFIARwBCAFUA bgBpAHcAZQByAHMAYQBsAG4AeQAgAHAAcgBvAGYAaQBsACAAUgBHAEIAAGRlc2MAAAAAAAAAFEdl bmVyaWMgUkdCIFByb2ZpbGUAAAAAAAAAAAAAABRHZW5lcmljIFJHQiBQcm9maWxlAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYWVogAAAAAAAAWnUAAKxz AAAXNFhZWiAAAAAAAADzUgABAAAAARbPWFlaIAAAAAAAAHRNAAA97gAAA9BYWVogAAAAAAAAKBoA ABWfAAC4NmN1cnYAAAAAAAAAAQHNAAB0ZXh0AAAAAENvcHlyaWdodCAyMDA3IEFwcGxlIEluYy4s IGFsbCByaWdodHMgcmVzZXJ2ZWQuAHNmMzIAAAAAAAEMQgAABd7///MmAAAHkgAA/ZH///ui///9 owAAA9wAAMBs/+EAdEV4aWYAAE1NACoAAAAIAAQBGgAFAAAAAQAAAD4BGwAFAAAAAQAAAEYBKAAD AAAAAQACAACHaQAEAAAAAQAAAE4AAAAAAAAASAAAAAEAAABIAAAAAQACoAIABAAAAAEAAAEAoAMA BAAAAAEAAADAAAAAAP/bAEMAAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB AQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAf/bAEMBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB AQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAf/AABEIAMABAAMBEQACEQEDEQH/ xAAfAAABBQEBAQEBAQAAAAAAAAAAAQIDBAUGBwgJCgv/xAC1EAACAQMDAgQDBQUEBAAAAX0BAgMA BBEFEiExQQYTUWEHInEUMoGRoQgjQrHBFVLR8CQzYnKCCQoWFxgZGiUmJygpKjQ1Njc4OTpDREVG R0hJSlNUVVZXWFlaY2RlZmdoaWpzdHV2d3h5eoOEhYaHiImKkpOUlZaXmJmaoqOkpaanqKmqsrO0 tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4eLj5OXm5+jp6vHy8/T19vf4+fr/xAAfAQADAQEBAQEB AQEBAAAAAAAAAQIDBAUGBwgJCgv/xAC1EQACAQIEBAMEBwUEBAABAncAAQIDEQQFITEGEkFRB2Fx EyIygQgUQpGhscEJIzNS8BVictEKFiQ04SXxFxgZGiYnKCkqNTY3ODk6Q0RFRkdISUpTVFVWV1hZ WmNkZWZnaGlqc3R1dnd4eXqCg4SFhoeIiYqSk5SVlpeYmZqio6Slpqeoqaqys7S1tre4ubrCw8TF xsfIycrS09TV1tfY2dri4+Tl5ufo6ery8/T19vf4+fr/2gAMAwEAAhEDEQA/AP7+KACgAoAKACgA oAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACg AoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAC gAoAKACgAoAKACgAoAKACgAoATPJHOQATwcclgMNjaTwcgEleCwAZSQBaACgAoA4PxP8Ufh14N1K w0TxP418N6Pr+rKzaP4cu9WtB4l1kKsjt/Y/h2OSTWtVISGZiNPsbkhYpWxiN8YVcTh6FlVrU4Nu yjKS5m3eyUVeTb1skm3r5lxhOd+SMpcqvJpNpK17t7beZyTftBfC+K48i+1HxRoyZAfUPEXw2+JX hvRIVP8Ay1uNf1/wlp2iW1uBy1zcahFbquWaUKM1i8xwSlyyxFODeym5Qbv/AIopK/m+q6jVKpK/ LHnte/I1Nq291ByenX5vozv/AAj468FfEDR4/EPgPxf4Y8baBNNLbxa34S17SvEekyTwMFmgTUdH u7yzaaJmUSxCYyRlgHVSa6qdWnVip0qkKsJK8Z05KpGSvZtSi2mr7u/fsyGpRbUoyi07NSi4v7mk /mdVViCgAoAKACgAoAKACgAoAKACgAoAKACgAoAjlligilnnljhghjeWaaV1jiiijUvJLLI5CJHG gLu7sFVQWYgAmgD+fH9qf/g59/4JH/s0+I08BeF/jF4w/bB+Jx8YeGfCD+AP2MfBafGBpm8V+H31 3Tdc0H4nazrngX4D+OtLhnm0fwxqGnfDz4s+LvF9p4v1618Pt4Xa60jxafDgB4V4k/4Ks/8ABeX9 obwV4z1v9hP/AIIKeKvh5Zad8StW8OeCfHn7eHxz8F/CzxJrXg/RrxJ4NU8S/sq+O9f/AGavH+i6 t4j8P3+k3C6j4e+LnjDwHoOvHWdC0rxX8QTol7dqAeU6f+1f/wAHid5pV7qFz/wTK/4JwaTd2v2n yNC1Dx7YSarqfkWyTxfYptL/AOCg2paJH9sldrO2/tHWdP23MbtefZbQx3UgB13w+/4KH/8AB0B8 KtJ+IPjj9qr/AIIe/BH4yeDfDfhG+1/TtD/Zi/ab+G3w98f2cuhQ3GqavJbeHP8Ahe/7X3i34qX1 7plu9poHgPwB4BtfGGq6uYbXRhrt/d2ukSAHoXw8/wCDqf8AYJ0rxxa/Bz9ub4Ofth/8E3fjVpvw 78NeKvHPhf8Aae+AXiqTw/o/i/W7Xw9LL4K8OP4Dh8SfGDVdPuv7Yv8AV/CPjvxz8Dfhf4f8SeEN Dm1zU08K6tqOl+GboA/ot+FvxZ+Fnxx8CaF8Uvgp8S/h/wDGD4ZeKP7T/wCEa+Ivwt8ZeHfiB4E8 Rf2JrGoeHdZ/sLxd4T1LV/D+r/2T4g0nVdC1P7BqFx9g1jTNQ0y68q9srmCMA9AoAKACgAoAKAEJ A5JH4n/Pv9aAPxy+K3/BQu/+Imu+KdF+BNl42sfgl8PviVJ8L/G3x70DwXqviVfi142i1G28KzfD b9nLVdOs9R0zXpl+I90/wv13xb4dg8VeIJfH+l678LvBmk6R8QIYfEOjfOZpmmJgnSwlKUlOMo+0 pKVWtKUmoR9nGKlGDk+dJ3c4Nc8ow5qTq9+Hw0dZ1raRcuRuN+Vayk05xbUVfflV07u3vHd/DvxB 4j+Cnwug8RfEPRdI/Y/8L67o3ibxFYfC2yguP2hf2yvH82geA/CPibUNT1zT/Bv/AAtf/hNvif4S tNK+IOma38KfhHY/tG6zrPhDS/BHizRviVo12uufD3SujD4TGYego1MTSwnPUnUnLDx9pia96ko0 /a1MXGb0pKndunQ9k5yi5Xk0uepUjXqa0p4nkX2pqFGm7tuMYUVGTWqc5e0SqScpXlo31mifE74e eMNPHiTxB8KviLYatq1/qen6r4N+P3jTwvqNzaaXDeSWltrdjafDvxN8Z/CUcOu2MMesaVpR1TS9 WsrLUYbfXNP8P6/Hf6Vp0ezytSdSrQq4yStzTxU5Vpt2WnvtxcU1yv3uS/vQuveKdPFqCdOpShfe NNKHJK97N8ltVfVN3Tac7tn8/H7Qf/BOLxR+zX8ZfH37Uf8AwRN+KnxV/Yt+OSwXXizxh8B/jbrS /EP9j79ta7h8UeFda1HStH8ceK/H3xCf4QfEPxd4p8Vad4A0bwz8XtT8Av4+1C7tdN+Edl4C0Hw/ 458dQbe2wtOEXC8I0YSapuyxFKKUYxp0ayilW55qVWVLEznOvWrc/PenCklKnPnUqrvVnrKrFVad C85znXlXpSUXGNOjB1I14U1Towp+yXv1Zzj+vv8AwR7/AOCx3gf/AIKbeCvGvhDxj4E1T4A/te/A XUD4S/aN/Z58WLcaXrvhDxZY6nqWhapeaPpGvCx8VrosGs6TeaXq1hrmkWes+DvEKS+F/ECm+ht7 u/8AUhJ+7GTjJuN1OPwVErLmjdyaeqbTcr3upStJrn/PqtdPm+nq2+993+2PWtACgAoAKACgAoAK ACgAoAKACgAoAKAPyZ/4Kq/8Fk/2Qf8Agk78KtW8RfGXxZp/jL48ar4X/tr4PfsteFNbs0+KvxRu 9Qvr/R9C1G+iEGpf8K5+F7avpWsjX/it4q0/+xbSx8N+JrDwhp3jz4gWWk/D/XQD+ST9vHxb+1R+ 0p4El/aJ/wCDin9rf4jf8E4f2KfH99fap+zb/wAEkP2UP+Eav/2p/j9oVx8P9B8c+HJvE/hh31mD R28L+MfDPgPUdT8V/tkaVrieAvjDB458Dz+Dv2R38e+BH1MA/Nb4L/8ABZf4k2Hx++HP7Fv/AAQi /Zg/Zo/4Jd+FP2i/2jPhd8I/BXxc8VeGP+F9/tKePJfiB44vfAnhSx/aI+Nvxp0744iT4aTeI/Hm m+M7jwbongPxp4h+FT6adC8C+OfEei/2raeKAD86P+CzPwL/AOCl/wCy7+0/pvwB/wCCl/7QfxE/ aQ8ceHPB9j44+FvxB8RfGj4rfGn4cat4L+IQhuNYvvhJqvxZttG1zRNLg8UaHf8AhHxXpKeE/Cuz xN4NuUisL7Q7fw/rOogH6D/B/wD4IqfssfED/gpP/wAEZ/2OtZ8fftAW3wy/4KJf8EwPhd+2t8a9 d0zxV8OofHfhf4p+NvgL+0h8UtV0D4W6ndfCq98P6J8P7fxB8H/DVnp+leLPDHjfxHFo99rtvc+K 7u9ubDUNMAPyq/4JI+HvG3xB/bt+DHwY8B/t2/E7/gnZrvx91aP4I2X7Qfwii+Ll74zute8f6hpu n/D74XW2j/BzxP4I1vVrH4kfFOLwJoV+fEvjfwl4F8PQn/hMvEeshfDVpY3wB/QR+2Z/wVI/4KO/ 8E/59N/Y4/4KYfF7/glZ/wAFt/gt4t1S08J/E74Rafr/AIW+Kvjv4I3HwK1yfwf8R/AviDxd4F8E /Bv4ifBf9ovWrTXWtdN+KXxy+Hfxc8UeHPGPhxfE3hZpPFPhr4jaVqYBqfsIeIPgV8R/iz4Y+M3/ AAbeftAePP2HP257i3bxx8bP+COv7Y3xL8UeJf2c/wBqrw58Gvg9pGsar4K+BPxU1J9R0T4xyS+I da+KWjeG9G+PHxI8MfFyaw8V/Ez43+EL79jjwZ8MItVuQD+sH/gk3/wXT+GX7efimT9kD9o3wHrn 7Jn/AAU0+Geh6za/Gf8AZs8a6Fq/h3w/4o8TeBpfs/jbWfgjqevXd9qFzZrp7WXjG6+F3i68i+I/ hXRrvXRpM/xS8FeAdd+LN8AfvlQAUAFABQB+a/7afifxf8Y/iL8Pv2HPhj4suvA9p460Kb4v/tef Euym8R6ZJ8Ov2QNB1gaBr/gzS/Fnh2XRpvBvxP8A2m9YbVvhp8NNeTxt4P1/wr4V8M/Gr4w+GJvE d58HLvwprOFX3nytqFKC9rXlK3L7NXtCXP7jhNpupd6Qg4SUo1uaFQertzOdlyKC5puTbUdE01zS Tip3VrTcW5QsfnF8Bf2zPB/xG/bl+KmheBPAmg+Bf2VP2LdIk/ZH/YT+GvgvwzpFz4a+J/xp8O+E 9CP7Tfxyh8O+HdMtIvgV8J/2N/BDeDf2bNG1h7fQPCug3Hxr8SfCeTxhcfFv4yeA/gZo/FTxOFly 4z3ox9nKphKdaFnKlOo6dLFxUpc1RV4v6xCU3CcqFek6ns25yNPYzV6EleUqilVnGTlyKK55UfdX L73M1ZNJzoyunGOnHeNfix8Tte8WSeG/hl4h1/4r/F6/0DwH4X+Jnx11XSfDdt4r+IMvgbSNVsNF S/tNE8N2Pgrwd4N07WfEHiDxLpPgjwF4a0Xw0fEHjj4keJPDWleD7nxbfeLviHnClVzCaq1Zezop RSrKC9vWUJO9vgXLdy5arXJUUlOFCMWkuhzp0FyQUW037sdYxu76y0c3omtb20ck9I9Tof7KH7Zm j26eJ73xLr/iK3aaPU5PDuo+K/GEMcSrIs7W9peWmtw3qIoUxRwX76nYMuDeWN8DIr7TyrCT+zUi 76TjiMRzaWtKUXVcJS+1K8bSlfSzsYLE1U7t8y101Xa1pRakmkrX5r72fvM9g0X4xaz4blsYPHPh /WvDesT+JU03UlhjNzF4duNa1GBtBNzNEsDf8I8bi4m06HXXjRbSCxszqcayrqN9XjV44jA1o0sV L29GrJRo4lQnd81SKjSqxjGXK5ScbPnfLyrWUqjkvQhOnXXNC8Zxj70feck078y5felFR1k1ey5p PRO34K/8FLfgfq//AATP/aM/Z+/4LJfs1ST6V4O+DvxJ8G/D79qT4c+HdH1pvEusfAP4iahpfge7 8Kw65Drtv4R1X4ZeFrOPTvCPwY8KeO/D8V38HfEGueBvBfhrx/qvwV+HP7N/wS+APqYSq3J017S8 4qpTheEoU5qMXywahCUI1VzuUpXhOUnb2Um1W5K9G0JSXKnT0ac+aTi5y1aaXM17SEIuLpxjCKjG lFRVv7lvhh480f4keDND8W6FfW2o6ZrOn2t/ZXtpIJra7tLuBLm1uoJV+WSC5t5Y7iCReJIZEccM CfWjJSSlF3TV0/X9e/mcd09U7p6p90+p6DTAKACgAoAKACgAoAKACgAoAKAPyh/4K/8A/BTPSf8A gmn+zNF4n8GaBpfxZ/a9+OHiCz+EX7Fv7NSW+v8AiHxV8bvjT4h1DSdFs/sHgTwWkvjnxX4T8Cy+ INK1nxZZeH20aTX9RvvCPwt0/wAW+GfG3xR8EXNwAfxOfGL49aP/AMEP/Fet/tP/ALXNx8Lf+Chv /Bx9+0zqXhL4pfEHS/jKR8R/gn/wTl+HuuQafrei6TqK+Ar/AEHQtR/aF1rwtpWgeGdA0b4X+JvB mm/Cb4dSeHtF+Dt74V/Z/wBF0S9/a3APBf2bvh74C+Pf7I+tf8FSv21v+Ce/7Sf/AAXZ/aj/AGwP 2z/Gnwt8dSfCn49/HDwBZ/sxaN8PvC/w00nwdo/jzR/2d/BcniHSPiJ8Wdd+IemaJ8M/h5Ho2ufC LR/hL4f+DvhP4e3/AMJ9QMXgnxkAfHHxA8M/sr/8ESP+C+Hiq1kh8SftcfAL9h/4qah8Qfh3oWm6 x4VsPE+u/E+2+Br/ABK+B3gPxX4rt5dS0HTNQ+DX7RPiDwP4K+Kvjaz0W51fTT8PvFfimx+F/wDw k1vD8NAAeZ/tff8ABWP9qj/gov8AAuy+BXxb/ZS/Y8s/A998cPH3xC/Zt8TfCb4Bar8Hdd+BPjnU 7fw74w+OXwu/Z18T+HvH2l6L4it/i5rWuweOPi14E+JNn8YvG3xF+I3xN0HxBPc3fjNfg3L4XAM/ 9jr/AIKpf8FifhR+yz8Qf2UP2Of2oPEnhH4C/DH4d/FDxjqnw28LWXwDj+KfhnwF4nk1vxF8XPEn wX1bxN4dl/aMaTwhaap4u+Lfi7U/gNrM+vfBXwxpvjj48Xk3gfw14S8VeOdHAPAv2Afi74x/4J2/ tM/sn/8ABQnxp+zRovx28AeC9a8c/EnwR8OPHOq6Tolr4403wwNR+Elv8VdOW60Pxnr3hTQfAvxh 8SW0Hwq+N934DvvBsvx/+GGu+GvBWtat4/8AhP440rwqAcP+xz4R+Dn7XH7cXhGH9vv9pzWvg58H fiD4m+Knxh/af/aQ8R3Mvinx3qGn+FfBXjr41+OPsl9rDapqfiD4tfGjV/Dc/gPwjerpXjnxPqfx J8eaNc6T4C+JniKay8DeJAD+jD/grl8OP+Cbv7Q3wP8AH3/BZ3wh8a/EHw78LfF74X/s6/AX/gll +x98OPgl4c/Yx8f6L8U/gDpOi/DT406B43Sy+C3jXS/jz8J/2WvDdr4X1W3+OPwy8ZHwZY61p3/D Gmi/GrwbB8OfglaaiAeT/sq/tVeBP+C3ngT4L/sh/te/Gj/hnj/gsN+zv/YFj/wS/wD+CoF9r+se GdY+NOseGdYGv/D/APZY/an+IGgN/wAJb/wsD/hLfKvfgf8AHCylu/Hc/ju7TXtCfUvjxqXi/wAI /togH9uP/BF//gpj8T/2svC3xL/ZG/bu0bR/g5/wVQ/Y71i98KftL/BG806DwprXjXwZbyaQPBn7 RngzQbS5v/C/iDwX4w0/xBoFr4l8QfC/XNe8BN4g1HQvHXh628K/C74zfBay1cA/cqgAoAjlkEUb yHoilj+Az3oA/ms1v9pkeG/gF/wUh/4KJX3h5PEth43+I/7QV34Ci0vVYtN1bX/2cP8Agmf4O1H4 U+H/AIX6kZIdSsrFtW/aU8O/tN/EnSdcggmvYbPxqyalNdWUGnaLpPzWaVZVsPQw0OenPNcVy31j aiqlOjB8jUnFONSjK8XzONPmlKSbjL08JBQlUrOoksNTclGyVT2zi3OKkorm5VTaackk6yUdz89v +CXHh/4o+Gf+Cb3wx+JHjvWvG178Yf2sLCfxRFoHjG+dY9E8IeKPiX8RPGFp410DQ9V0+fT/ABKv x58bfFTxx+0vrfiO48N6P4i1Xwj8Z/CXgKfUbvwp8IPhzNbdEsPF4tYSNnT0VaSjdPD0KShSouUp SnOPI40pOcm+adapZOo4vKEuWjKo9JfZVtXKd3z7esrJJcqS73/pq/Y6/ZU8LfCLwTY3tzZ/atev x9pubq5EjytI0hkLO0paRndjl2clnbcx617v47vXfXXV9fXd9dTh/r/g/M+8fIi2eX5a7MbcYGMf 5/zxQB8E/tf/AAk0u80iPxfY2qxXMCNa6oEjgaO50wSJd3EUsdzDcW7CZbY2zs6RlYJ5ljuLd385 fNzbD/WMFWitJJKSlyqTST9+14ytzU3ODdldSavqdOEqOFeCSUue8GnZ3UotddL+ulr9T5H1vwB4 X+Lvwh8Z/Bvx+X8ZeDPin8LvE/wt8cmbZpNx4j0jxR4YvPCPiyK5XRJbMaXcXyXupRSDSZbEWE5Z tPW0MMIi8XDzn7OK5lKryJ86TUlOMbc1totTabjy6SjG6UkuX0pK7crt05NrkbaXJrFrnj70VJc/ PJttqXLLTbtv+CMmh+Kvhn+x58NPgZ401o+INd+CugQfC3+2JA6T6npXgC5uvCGgajcRPJLJFPqG g6Np19LG7yFJLk4d+Xb6HA1/rGGhUcVCXNUUoRd4xaqzXLF9YpWUbpNxs2tbvya1NUqkoJ8yVnFp p3jJJx262evnfQ/X2usyCgAoAKACgAoAKACgAoAKAOf8WeLPCvgLwr4m8deOvE3h/wAF+CfBfh/W fFnjHxj4s1nTvDnhXwn4V8Oadc6x4h8TeJvEOsXNnpOheH9C0mzvNU1nWdUvLXTtL061ub6+uYLa CWVQD/PC1X9uG2+L3j39qn/g5d/bM+GN9qPwY+EV9qH7Jf8AwQd+AXxc+El9rHh7xJ+0TbT+NvEX wv8Aixr2jeHviNoeiXNr8Ir3wb4u8bfFnxjqXinxZocXxI1n4pWPwR+I9h8W/wBm34P+E4QD+MT4 /fH74y/tS/GX4hftB/tB/ELxB8VPjJ8VPEE3ibx1468TTQPqOsai8EFlaW1taWUFnpOheH9C0mz0 /wAPeE/Cfh7T9K8K+DfCulaN4U8KaNo3hvRtL0u0APR/2ff25P2y/wBk/R/E/h79mT9qj9oD4B+H vGf2uTxRoHwl+LHjbwLoetX95p8elPrt3pHh7WbHTv8AhKLfToYbTTfFcVtH4l0iKKIaVqtmY0IA PYPhH8G/Dnxq8YfEfxB+2J4++JHhb4hfEP4kPeeC/jh4y+KHgBfB/wAcvjRqOh+JPiR4q+F/xF+J nxLvbibRrj9oCbxH4Dv4P27ZPEXxC+DH7O+u+L/Avib9pHwdq3wu/aD0v4zfCwA2fFfhLxD+0X4h 1nTfjF4N1r4KfHX4K61r/wAIdN+BcWmeIPCOofFfUPCPiDVbvUv2b/h14Q8dvrOveCP2ofBGvazq beOZ/FcerXvxhvdW1HxN8Qf+Et/bu8W6VoP7cIBe+BOk3Pg2y+Cv7WnxV/tjT/G3g7/hHY/2HPgZ 8PNW1b4R+Mf2kfFHwh1/xVLafFSbxb4E8Y+C/GXwh+C/wy+JXhu30LxB8Rvg/F4V+MH7Wnx20rxb 8Hf2d/Fun/tIQ/tLftOfs9AH0Ymv3fjDSr39tvw/HG37fOk/ATV7bxf+x95+o23hLUf2cY/gFefC y4/bG8C+A9KvtO0+P4KeHv2d28nxb/wTHhs5PhZ4c+DunN+0TpHwv1P/AIJDt4s/ZT+GQB+enxS8 IaB4+8G67+0v4Z1j+0rjxLqGmR/Er4d698Y7Lxt8YvAHxG159PfXvjB4ii1bQIfEvjn4IfFzxrpn xLh8J3Rv9V+IXwb1y/8ABng/9onxbqFx4v8AgN8U/wBrQAo/tN+Nf2uYtQ8F/s7ftWfFP4veKrn9 mbw7p3grwJ8Ivib8XNZ+I+n/ALO2m6r4Y8IyXnws0LwveeKfEmlfBzxF4Y0rR/Cvgr4j/COC28Ne LPhf4n8Ef8Kn+JHhbwt4z+HOpeE/DwB8vUAf2W/snft2+LvjB+zF8Ov+Csvwg8Sa5rv/AAV2/wCC UmseDvCn7ffgjRvH+uRfED/gpJ/wSZt9b8P6Tq3jr4o+HF+DHjXSPGfiT4dWmq+HPh58RvjRqj+L PEHwm8F/De+/aO+NPi658a2/7L+n+EwD/Rv+A3x4+EH7T/wd+Hn7QHwD8faH8Tvg98VfDdp4r8Ce N/Dz3IsNZ0m7aSGSO4stQt7LWNC1zSNQt7zRPE/hbxDp2leKPCXiTTdW8MeKNH0jxDpOp6ZagHrl AHE/EnXG8NeAfGPiBBufRfDetami/wB5rHTrm5Ve/VogO59OazqtxpVZLVxpzl/4DFvuu3cqCvOC 7zivvkl+p/Bl+1R8Of2nP2bv+CL3xa/Zm8Q+HQ/xY02eL4NfC/VfBHimbxnP+0LpP7WX7WMviHVf EFppUuhaVd+HvE/i+T9pv4j/AA/1vwVc6bNcw6x4ZuJ9H1rVdIvfD2ty/FxlLGZ3lntZSpwpYOjL 2W0Y1KHtsTGMEozjPWF5VFKH7lUE1GrzRPVUZUcBWS95yqv3rpxk60KUJzirKUbuLhyy1jOEneUZ RlL+hb4ffCvwN4T+KfwC/Z28DaK9l4D+B/g3wZ4a8A2V1PcajJpHgnwF4ah8CeHdIa+vri8vrmWy 0jR9MhluLq8ubi6MKz3M9xKPNb6PBtzxeIm2nJU6e+klGtOo23Z319klHmSbitLwkzjrrko0431c rvVPaEXfS2r5+vqlqz94rG3jtbSC3iUIkSBQo6DFeqchboA8G/aVhhf4N+Op50Z47Tw1rd0ypu8w rb6XdysIyhDeYwUhCCCGIwwJrmxv+54y+31XEX/8FT+er7a/ia0Na9Fd6tNdes121Pyo/Z91K81L QydUnW4upvil8eLNH2krFZad8afiLa6XG2C3EWl2lrBGxwrOEfjNfMYduMldJNtXuk7Wc/dd+a7j dpu+ltJylq/YlBwpaxXu811dbOUrNO8r8yeibbs1GV3c+kP2Jd2leP8A4o6QhIgl1SLUUQH5Fa7A 3kAE4y6Oe3XONu2veytSVCrzO7+s1EnaUXyqNO3NFu0Xdu6Si27ylFSbb83HNOvo02qcE7LreX36 f0j9QK9I5AoAKACgAoAKACgAoAKACgD+ZL/g6V/ax8d/DP8AYk+HX7DPwBfVNS/ai/4KefFzRf2Z fhx4U0C71vRPEOufDp9W8Nw/Fa30fxFFbQeEE/4TDWfFnwt+BWu+GfFviTRB4j8J/G/xBc2cOo6b oPiKXTQD+J7/AIOLviR4J+HPx4/Z+/4JV/Ai40uX9nL/AIJT/A/w38FdH1HSI/CG34h/H74k+HvC vxC/aL+LWty+ErWGO18YeKfEEvhzRfiH4bv7q8k0L4seF/iRqKxadqPifW7UgH86tAH3L8P/ANnD RfBvh7SvE/7W2hXXw3+EHxS0HwJ40+Dfxp0XxLJqFx47lvZ5hceGfhpc+ErD4leFvHHg2EXms+Fv 2n/EWk+E/FPjD9kXxv4O/svxHpeqfHTwi37GX7RIBkeJNLk1LxFr2l/tGeGvD/wn8H+HNQ03SfAT eALa1h0/Q45tI0bV/D3gr4Z6lpI8cH4jfCDxJ4R1bQfGuufFQ3/xNu7bTPFNj+0ZZ+KPiz8QPind +Ev2kwD9af2Ov2Dfj5/wVr+Lf7G3wA+PPhex8Eaw/irQvC3gT4s+H9Z8Qw/EGP8A4JlfBXw54yj+ IerPoekfDv4r+GvGXwS+EniLQPBH7P37Gv7XPxW8Y+E7PxT8WPiPJ+zVpvjL9q/wX8Pmtf2HgD++ PxN/wbY/8EjPifqNt4x/aD+CPxg/ad+Ml14f8J6N46+P/wAfv2w/2vPGnxl+K2o+EfCujeELTxZ8 QvEdl8btC0m88QXmk6Fp8U1t4e8PeG/CukwQQaP4U8NeHPDdhpeiWAB/C1/wXf8A+CVXiH/gj3+3 f8Lvit+zt8U/jB4m0D48XC/HP9lrx94s8Uxa98dPDn7UHw5+K3gG98e+E317RNI1rxF8SPEHhrUv FvhT4l+EfGviPR/hzd6oPG9hoUniPx342+Het3fxEAPNPhrqfx0+Dvx0uvj3+x34G0vTP+C32maX ba18QfgD8LtJHjfxD8GvEPjcfEDQPj38QPgh+y2fhpqPgTxT+1X4o8CajpVr+1Z+xpp8/wARvDn7 DHhz4j/GTxZ4C+CGm6xpvxO+Ff8AwRhAPyk+M/gL4SWHw91/VfgnpXgfxO+lah8DL/4t67bfFDXf E3iP4QeMNd+Geq/8Jb4B+E2j6kvw+k+InwI1X4l6hrlh47+K918OvihafDHx/wCFPhT8F9D+OOv+ FdZ8F/tDft2AHxtcQPa3E9tI0LSW80sEjW9xb3duzxO0btBd2ks1rdQllJiuLaaW3mQrJDLJGyuQ D9S/+CMP7Zng79h//goL8HfiP8YbLTdf/Zm+JsPiP9nD9rXwb4lzd+A/Fv7N3x40t/Avj8fEjw1/ wifjhfHvgXwHdX2g/F7WPhw/hjUV8fzfDmy8J79PbVV1KzAP9Ab/AINrPHvjD9mq+/bt/wCCJ/xv 8Wf2r8Sf+CcX7QHinU/gbc+ItP8ABvgDxD8Rv2V/i/4h1LxPo/jXwt8NNNvtS8W3Hhu48W6kvxj1 3xFrfiHx2fDdj+1J8MfBc3iqPTofC1i4B/VDQB5J8eOfg/8AEZP+eng7xDEeT0k0u6U9PY/1rHEa 4euns6NVP0dOV38tzSl/Fpf9fIfjJep+OXxj/Zm8G/H7xh8BdV8b6jrS6R8F/iD8Ivi94f0DRZl0 yDUvHfwo1vUfF3hC48Q6iglvrnSNK8WL4f8AEdtpWmPpQub/AEJbXWp9V0rUJtNX5ZU4rMI4y8JS jhVRpr2anKHNzKVRVeZtzlCXs05K8YTrOTlKonT9aai6PLJvWpKopKyU/h5VO6vyucZTST6Ru9JX 6/8AZw8Uf8Jl+2v8U9IltYYpPhjrtv4VinjLGW6t9T8C/D7x2ks+4bUaOfxbdWyJGSmyDdkSSSKn tZbBxniXdOEvZclk1bl9rGV90/fTa1vyuLkk2cGKelJK9kpX7c3uxdvK0Y/8Mftwv3R9BXqnILQB 4n+0SQPg38QMqzj/AIRTxBlExvf/AIlF58q7iq7m6DcyqOrMFBNc+LaWFxN9vq9e73ai6U1Jq/VR u79N7PZ60Na9Fd6sP/Sl/Xm7JatH4sfsp+LoNZ8H3GoRvDLE/wAaP2h5rW7gmS6iuNN1L9oD4o6h pctvcx/u2il0fUNPmGx3ixKxjMkZjZvkaVRyqqUZKSl9q6qe/J3nGm4tr3aknS5krz5PclK7cPZh aVBptX568dOq9rPl01voknK/vcqtZNM+2/2Oo/M+JnxDudpAkXTm69cNNzyM4yODgZGME5Br6TK9 cNKe3PWm97/DGEdXeWqSSfvSu1du+h5eMv7bXfkjrbff1+erd99WfpxXpHKFABQAUAFABQAUAFAB QAUAfycftwfDvxD+2b/wdJ/8E1fgfrTaT8RvgD+wj+yNr/7cfivwTD4g0vQLv4XfFO7+IXj3SfDv jm61DQb3RvG2s61L8WvCX7FGr/8ACvtR1bU9Hm8P6XZ6tdeFZfB3iHxw2vAH+Y18afi340+P3xj+ LPx3+JN5Z6j8RfjX8TPHnxb8fahp2n22k6ffeNPiR4p1Xxj4pvLHSrNUtNMs7rXNZv57bT7VFtrO F0toFWKNRQBj/Dt/h3D408P3PxYtvGmofDuzvHvvFWj/AA7vtD0fxp4i0+xtp7xPC/h/xJ4l07Xd D8G3nim7gtvDr+PdR8KePIfANtqc/jMfDf4ky6FH4D8RAH3pp3xgtdZ8K6T4E/apZbv9in4g6D4t 1/4DaT8ILfS/FHiT9lzxppOqReDhqn7OfhC78cSWfgP4jWN/Y+H9R/aj+Avxw+IPhWf9rL4QS6N8 VfiZ401P4z+JP2R/2uPDAB6VafCj4X/Cz+x/EH7Z2u/AzxL8G7jXLjW/2NrH4R/8JdrWi/H7SJ9B 1Kz0HxFqev8AgnWPCHxy8B/8E5LDxkvh9v2jtW8W6In7Zknxd8M/Fv8AZ7+BngvwH+13Yf8ABQDx j8AAD+tv/gz3+E/xn+MfxH/bZ/4KIftFWXiLUvEP/CO/DD9lT4KeLL6bw34Z8O6Z4Q1TSPDvxk+I nws8GfCbw7FpFp8Pvhd4G8E2H7JU/wAE/C3hzwh4T+Dngb4e62nhP4I6TZ+H4de0nSAD+6ugD+fX /g5n+FPxL8V/8EuPHHx2+CF/4o0z42fsVfETwh+1H8O9R8G+EtE8V+ItIXTtL8T/AAb+IXjPTp9W 0jWL3wNqHwi+FPxk8dfHTw98WfCa6T45+DnjP4WeF/iv4K8T+EfFHgvSvFOjAH+ZHY+O9f8A2dPF z+HPgL8VfDfh/wDbT8O65qOt+Mv22Phf+0h4r0Se2vdS0e5h8WfB74F/GKy1zw/4Gg8SLP428b6B 8ev2i9K8b6j4C+Odh4F0DwP+zR40k+Gd94z8f/tvgHa+FpLL443el/HT9kfTvhv4Q/az0fw+df8A 2oP2dPE3ws+BmmfBjxBY6B4vk8SeKP2g/wBmrwv8SE1/4UWXwgXwh4a0jxL+3B+z5qPh/wAC+CPh L4C1r4xeKfAHgvUf+Ccl18efht+ySAfIP7S+jfs26B420HSv2aPG/jL4haJZ+DbOH4neJ9e8Iz+D /Ad78Y4fEHiSHxWf2e7TXtYv/ibq/wCzs+kR+Gbn4XeI/jfovgH42axp9xeTfEb4ceC9bV9HiAPn agD/AEJv2Bf2nG8Rf8HAH/BKz9ovwXrfh34leMv+Cr//AARe8ER/trfE68srpV8R/H74WfDj4q2f xf1bwZpGgy+G/B/gPxVoPxP/AGCfh78PvEugaD4b/wCEIsLXTvGkWk+F7PU9estfsQD+7DxB4w8J eExZt4p8UeHfDQ1GSaLTzr+tabo4vpbeIz3EdmdRubf7S8EAM0yw72ii/eOFTmplOMFecoxXeUkl 06v1X3ruUoylfljKVtXZN2Xd2PmH9pv9or4J+DPgf8U9f174h6E2k6F8PvF3iDVrnRRfeLGttJ0b QtQ1HUrk2fhSz1u9uDb2drPL9ltraa7n8vybaCa4eOJ+XEYnDujUputT5q9OrQpLmv7SpUpyioJx 0veSveSUV70mops1pQmqkJcrSU022mkkneUm217sVdt3sfIWn+I9KubjSLi01C0ubZ9K0i+jmtbi GdHs72KRtPvI2hZw1tfrDcNZzZMd2Y5XhaQIwr52NamqlpSjKpOmtG4+0TmnZ2etpS5ruTUnyuSt 7/P60480U72s2mruT2cbXjv5vbz3t8S/sn/GjwvoP7av7bnjTSb218caNpXxH8JaPbN4T1Gx1S2b xFofw28K+B/GugXuoQ3M8Vnq3g7xn4H8Q+F/EdgiXV5pOt6Te6XeWtveWdxBF6dPFxwkIt0q1R1Y zk+WOkWq9e3NzSU0pQlCcZOCvGTndpOR50oOvUrR5owVKcbc11pOjSm2m1Z+9zttW1vzWdz9S7n9 u1kidYvhqkEuCIpLjxXKyAjIDSQP4YtWZQ2CQlwu4chxWcs7fMorCTjzO0XVnKN783vWULqKlHll OzUb3u20nccDzO3tb/4U3qrOz093R7trdPU811b9tP4rX8M6WNn4U0NHY+Td2OlzXd3Arcx5k1HW tSspGIViC2nANh/3fArKec1vejalCXLF3jKFRR5rO75ak+jbSSlJyjyxUrq+iwUFZtuWveSfz9xW XVSbs9NbSuviz9s39qr4/j9k79o+/wBN+JEtlf2fwP8Aifd6Vdp4e0CyuLPVIfBWsLY3Om3VjoEM r6l9rkhOkIzrFPqZso3OyRlOMcdi8ROlCpVbo1XFVVGnFJUqkoRbk+RNxlz2Xv030a+JS1eGp0qc 5xptTjTlUpyctYSinKErqSSalGyU27vTW8b/ADl+zx4j8eeGfjVB8Fvhp8FfGPxJ8Hal4k+Imu3/ AIq8Mz6SdP8ABtsA2q6H9lgJm8POfHk2pW8ug2njXxl8PLmSwsNW1Xwsniq7tNUsLPiwUniMxxib lLDU44eUYQ9lKTnUp1aa5JKpCnpGhH3IVakvhvC0oSWcaioYXDXX7ybn7SN5pxgm5xm0oOTTkpRa kox5W5QcrSicj/wSk/av/ad17wXFZ/tE+KvDXw5/au8TeNfiZqNt8I/HA0X4V/EOL4UWvj6ez8Gx +JPg98RfDngPXPBb2CeXoWmJq8Wu+IdU8KxaF4q1Pxhdap4o1C3sfXmsTg68KVGFWlR9nRjUk1Ul CVdxvUnzVouhaThJycKitKNenHlhS55ZRq0K8Je2lFVfaVHZOHtKdK0eS8ab5nFSum5RlvzOWp/Q v8Jf2tH8X/EfVfg749+G3jzwV4z0K0tmk8Sy+D/Fb/DDxBdNCZJotD8fSaQfB9zcSBHmtrHSvE3i IJGDBc6il41tDd+ph8RVq29rRVPmvyyVfD1Ob3pqzhSqzqU/djFpzST51ZtWlLjqKMZyhH2rcfi5 6FeEVrp+9nSjSbe/LGblurd/swEMAwOQa7CBaACgAoAKACgAoAKACgD+BP8AaD1bVdA/4L2f8HPe u6FqeoaLrei/8EEfjtq2jazpN7c6dquk6rp37Iv7Ct5p+p6ZqFnJDd2GoWF3DDdWd7azRXNrcxRz wSJKisAD/PzoA9B+Gt94K0vX73UviBpVj4i8NWvhnxNDN4auJPENrqWuajq+j3WhaN/wjGq+H7zT 10LxV4e1bVbPxlouu+I7m+8H6VceGjdeKPBnxV0hLj4R+PQD9F9H+G/gv9nrwhcftM/GXTm+Mv7H /wAaG8ReDP2RPhLrvgnxb4Ml/aZ/4Qnxf4Z+Iviq1s9Y8VXuuePf2a/hT+zP498QWXgz9on4hfBb 4q3fxD+KfxFvviN+yX+zP8c/Hvw9+IH7Sn7UnwXAO68L/tJyeATB4o/bxht/2gvDvxz1DRvix8C/ AY8D/DTXrv8AZN8QWvhjwp4N+H37Tvh74F6ommfB/wAMeG/DHw38F/DHwP4b/wCCZOv2Hg39nH9q v9mjwR8Hbb4i6N8O/gH8Pv2D/irqoB/p8/8ABCz9nPV/2Zf+CVP7H/hPxhqepeIPif8AEr4cn9pL 4veJvEvha68K+PNY+Jn7Ter6j8dPEFh8SI9U1LV/EOv+OvAUHjvTvhbrHizxPqDa/wCI4fAllqF7 p3h5Hg8NaOAfrbQBzfjLwd4T+InhDxV8P/HvhvQ/Gfgbx14b1zwd408IeJ9Ms9b8N+K/CfifTLrR fEfhvxDo2ow3Gn6voeu6PfXml6tpl9BPZ39hdXFrdQywyujAH+MX4u/Yx8Z/FP8AaB8f/sBfDHSW +I3/AAUK+Dnxa+IHwU1/wl8Ovh7oll4E/aR1T9m/xH8YPCPjfVvAnji/1Ox1zRfHXhHwJ4NsvH+r 6/4i8MfDbwv+0P4U/wCEn1r4iaZ4Z/aA+D+k+J/2ugCHT/iHYXvi3QvhJ+yH8btL+EHi/wAHxweO v2m/+CiuseOPif8ABq3+PGofDTxv4B+Imi+NNKh0vw2nxD+HPwb+BnjPwfpPxC+EmgQ+G7f9pn9r /wCL3hHwH8XvFHww1P8AbH8Sfs4fstfCkA8Q/bL/AGg/2c/j1ovwWn+A/wABdL/Z98ReGdL8TxfH fS9D8IeBbLRfjP8AF/V7TwY/ib9pvSNf8OJpd98LtL+MF9p13b6f+wv4M8N2P7Mf7H1p4Oivf2ed Y1eb45/E6w0AA+FKAP7Mf2ZPGvin4Y/CD/gzA8Y+ALiTSPFOtftd/t6fDTVtW0+OWPUbzwF8TP8A goH8Pfhl470W6ubNobqbS73wF8QfG+nT280r2UVpreqGeCS2ur2KcA/sm/4LNfGHWPgZ8Kvh/wDE jStD0XxNF4b8R2M2r6BrgnSLUtGvvF/gq2votNvopDHo2vRlILnRNeuNP1qHRtQt4b5tG1Fokt28 HO52+pw9o4OpLELmg4KpG1JSUlzqUUnNRjKUtGm0nc9DAJN15NKXJBS5XrzJNtpXUr7aqzvG6eh+ V3hL41+H/wBuX4E+OPhh8Htd8Paf8SPiP4C8UfD3Wfh/8RNe1DS/FvgRPFtjf+E9Q8bGTwho3i7U vFXgnQr3xh4POn65YaHp9pa6TI9/4w8W6P4lOoaVpvle0blDmXtlGrCcbNuq5KpL4/Zc6p88bSb5 XTSlJqrOSUX3zpQfPzy9nGdOrHnSc9XCc+Vw5oP+ZqXuNytFQa+L6k8CfAj4ja78afgxDrekfHb4 O/D/AOAZ8A2M3jC6v/gZdaR8edF8NfBO9+Gt/oPiLQfhx+03471/TfC1x4ov9I8Ztovjfw7440qd /CkKp4bg8UWvhPxno2kcNOea18XU9pToVaKhGEPqtVtTnBqf7yVRw9i6f7twS5Yza9/WLwmnDDUY 06tOrOOs404Yqg6fM5yTTrUsI6r/AHvvxtpKDjaULJcx+yl+wj4w/Z6+PX7S3iLXrfwBqvwt+PPx p+KPxaj1zwf8WPHEHjHTYPG3xK8d/EXw9oMXwy8TfCC/8F6NNoknxA1PTdd1jQ/G1rH4pltIdZ/s TRmmTS7PatTlUn7Op7KpRi1FuM5U6yp8sJqLq1JVINqUE0oUoKMISS5nL2cYhGnRo8tOdeVaUuaT qUYKG+kV7OdS3KtpTn1btKTuvrrVfgf4rtvGdhq3hf4heE5/BEd2JdT8KePvhhruvatf2ojjD21p 4o8GfFz4dvps0115ssl3LpF+BbPDaRW0M8c2oTZvCUOfnj7Rp6SpSlCcbvnkruMYyUIOM3eTul7v tI8rc9VWcqfLypVeZJz55tcq5ua0JRl+8aSjGTlyR5ZOcJyaKHif9muHWfiXofxA8P8Ax0+O/gbR dGvHvLj4UaJP8FtZ+GevI1tLb/2frdv49+CnjLxtJp8bSLcxjT/G+n3onhi8y9mj8yOTb2dDRqnC L1bl7Sve7au3F1/ZOLcr29naPM3GKaRClNXScYS2UoqKk1bZPlck00l7rTvZap2ff/FT4FfCH4w6 p4V1zxN4TvtE1nwXqNprOgaj8MPHXxF+DE0WqWUV5bw3N+PhH4v8EQ6sjW99cQ3Vpqkd5YXqGNbu 0n8qDyri6fuvkoc238ClzR5oyTd3Bcrd5puN5OMryTcpIz9m+ZqUpyXMtJOUlZWasm2klK9umru7 OSOs+IngXwF8XLfQLX4seA/BHxPTwvcC68OyfETwj4e8b3ei3QiFubrTrzxLp2p3dtdeSPINxFMs /k5hL+XlRr7WryxtVquElK15TdnaKbbUrOLbSV0or+VO1xUaUlrBNSUY7KW7ve/dpv31Lme19jpL bFjZWmm2KpZafYwx29lYWSra2FlbwjbDb2lpbLHb20MajZHFDEiouVVR0Od4pvktrKUlyR5XaLtd X95qSSXNdRulGOkEXa0UkpJR5pxv5qOqi21yr3XJ2vy8vRIw59Ru7TX/AAQtvM0dxceM9ItJnR8s yPb3s8sbMoQ/P5ALDaofAONtdWAnKdeSe3I5ONvtXjaVre7e7tb4uySSWWJv7K+ijzKMY2Sa6vmW m1klu7PV9X+p1nk2tvnr5SZPqccn8eteyecWaACgAoAKACgAoAKACgD+Sr9onwJ8H/DH/B0bYfB/ xx8JtY1vwN/wVo/4I8/FT9nD4na1YxppOja94msb/wAe6z45u9V1cWsLatcRfAH9mDwl8Pby1sbq 51zSG8TeDb64eDSPskVAH+W5QB7x+zr8aLX4GeP73xRrng23+J/grXfA/jnwT45+EmtarHpngn4p aP4j8OXseheGfiOp0bWNQvvA+l+P7bwZ451NPCFx4J+LGlX3hDTPE3wJ+MnwA+Omg/Db47/DcA/V b4xxQfCVtI/bw+IFz8QP2gPhp8dfiB8BPF+hfsl+PrHwNpCfs+y2fww8TX/wO0X9rTwHp/gaD4E+ F/8AhB/gTdXjf8EnPDtj+zFdfsoftSfsyrqPxQPwN+H37Pnwy+Lf/BPfxwAea/8ABMn9mrUP2vP+ Cif7NH7OXiXXvBv7SXh79sr4leAtd+OVtdeIL3/hIbv4ZeDfFngz9pL9pC68ReM/Hfg+08f+Bviz Z+A/APxj8Balr/w18XeB/i1r2r23iuLwl8Q/EnwS+Kukal8agD/Zsu7u1sLW5v7+5t7Kxsrea7vL y7mjtrW0tbaNpri5ubiZkhgt4IUeWaaV0jijRndlVSQAcP8A8LZ+Fn/RS/h//wCFl4c/+WVAHUaJ 4h0DxLayX/hzXNH8QWMVw9pLeaJqdlqtrHdxxxTSW0lxYzzwpcJDPBK8LOJFjmicqFkQsAfwA/8A ByL+wjpGs/8ABTG4sbH43+Gf2RYP+CpXwJ+HtwP2iPj38ZfAPw7/AGUvE/xL/YsNynxa+B37QuuT 6NN8Ufhp8NdW+GOj/smfEH4c61pd94j8AeJv2l/AXw/8L658H/HviPxN4f8AjF+ykAfy7/G3Vb/4 1X/jj9mPwvpnxz+G2qfDb456enxA8O/FX4e+G/DHxn/at+M/hjw3d/DbV/FXx18KaNBoL6T+23pL 6D8WtQ+EX7OHjj4h+NLMWfjT4tfDbwj8SPFX7Yfir44fGb9vcA/NPxX4v1Dxm9lqWv7bvxLCtxba lrkdnoOnvrlqTDcWt7rSaRoWnX+u+Lpr+bWbzxF428Tatr3iDxOb2wGoXCTaW9zqAByNAH95v7CH hX/hXf8AwUN/4NQf2K9bn0/xz8PvAv8AwTw+Of7e/h/WL7Sf7L1WL4j/ALdfgP8Aas/aF1bQriGG /vIp9P8AhZrfwx8Bad4W1Dzkl1O50a61u8srJtROm2wB/Rd/wcFqzfst6btBwdT00MfvD5fGXg+V VMZDB9zRjg4HBJYfdf53O1evgHro8Td9I/unaT2d4v3lr0b1as/QwDS9s3eyVOT0bVlPXZp3s3yv vrurn4P/APBFsAftbeKZCqgn4F+JeeAd3/CY/DWT5ePl4ALdGKgFlOUc81KS9qoxnGSUZRny81rx lCnUSh7sVCpPlnpJRTlSjNU4yhBdtecdFypSlJu8FGWnLO75o2bd1Zyto9lZI/qnjc/KNw3BMO2C oLE/MFXc52/dAUsxIGMk5J6k1LkUZb2ckrPl99a3k/icm9nzLqpPlMHq07O2+q1tq1Z9UnorXukn u3ce5hQxkzRxrKJHSWRgsI8kxBg9w37qNt08awpK6PcyGSO3ErxOFUpWi7T96zcopJq17K6TcYNx tFdW+VXk2PXZrtayezt0+e3W6V7uw8yMsjxsy7wFdlUhgFk3BWDrw6Fg6blLJvjkTcCjYzveVuey tZyb3aXKtLq0OXTnd20+aSTmxJLXW7V02pJ26LVNpOy9dNbO6Gs24fd4J68k9Ouccc5J4HHcbaat ZaqVlJWalJ6wtdtJ2Ssr72cXyuTsO1207+d9ter00s1a7+fnWLlCRtAGMDGDwATg5zxgMT0JH45h Nq6UX8Scm9enW/q7bWXXduW1rZ7Jt69W4/au7y15m97Ste2gjSfKOQcHAI5OD74APGR1IOKHzLS3 XS66p9ZWequ2pXTte70Sbck2mk21e1tHLe/2bWSSvprd3W5GW3Ak8cZOT+HUHjHHIIJJB783Ft3t du9lq7WSdl8TTunHXeyundsh76LXrpZ37aJbK3pLmeqdznLlfN8Y/DBV/i8fWAYgddui69IPUnBj 69v1PVl95Yhys7OjJu6dnLnpaxdktHe9r+d73JxLfsEpKzU4q1720k0uvTrd6Wu27n6vWn/HtD/1 zX+Ve2ecWKACgAoAKACgAoAKACgD+WL/AIOXrbxV+z14q/4JMf8ABVLR9Z+MEfgn/gnt+2/pFt8d vD/wU8NajeeKrj4BfH7UfAEvxP1nUPGNr4s8MaT4a8P63pPwYi/Z/uvDXjGfTvBfxS1H9obSvA/i HxZoVtfLo/isA/hL/wCDhL9kKf8AYz/4K1/tZ+CdP0rULD4e/Fnxo37S/wAJr240HT/Dui6p4K+P hm8d6pZ+C9P0rGnN4L8AfEq++IPwj0O4tEhjkX4d3CPb288csKAH48eE/E2o+C/FXhrxjo9t4fvN X8J+ING8TaXaeLPCfhXx74VutR0LUbbVLK28TeBfHWjeI/BPjTw/Pc2sUWs+E/GPh7XfCviPTmud H8Q6Nqmk3l5ZTgH3fo/xF1bw9qXjb9qn4a2Vn8T4vi74b+I2r/tffsyaxb/Enxl8N/B/gHxX8fvC VhNo3xv1jV/GPxC8c/ED9nD4j+IdZ8BWPww+JPiz40+Af2rPhP8AtLWfgfx9b+LvB3xV8Ffsu/tK fHkA/rv/AODW/wDYd+D/AIX/AOCnP7Y/xs1Txe2rfEz4J/AH4ey6B8B/jZZeF/Gv7Sf7O3xG/ai8 QeJ7n4reHfij48tILDSov2gfgBpXw1vfhJ8R/FPw80PSNd1Xw1+0JP4a+Ovgr9lr473Pxl/ZD+Gg B+un/B2z+2RL+zR/wS1vPhD4b8S2+leOf2yPip4W+CdzpmjfERvBPxIb4L6JDefEX40674X02weT WPEnhPUbPwz4U+CXxOjksbrwpD4d+OtvpHisXMXiTTdD1wA/zlP2f/Ang3XPiQ/7LE/hbwf+0T8M /jf9i1Y/H34SaHJ4b+KHwfuvC/gd/GOo/Fbwz4w+Pcvwd0Pwh4X/AGYNDvfH2p/tR/Dn4va78Mv2 cfiF8M7T4h+KPHfxh8HaZ4O/Zm/bT+AQB/Xv/wAGrnxi0n9k39tnx7/wT2svHupeKfg/+1D+yl4U /ab+FHxN8TeM3/4Vn+0H8dvAWu6laeMPGH7HPgaKGyttF8A6/wDDbVPGfgLx1YeNBd/tDT69+xXr M3x78Kfs7/Ezw146/ZI/Z4AP1+/4O0v2Wfhb8dP+CWF98ZfHGraT4L8Sfsp/G74M+NfD/wAQT4J0 /wAUeJLLwl8XPiR4V+APxH8JWmoKYPE9h4Vv7L4j6D8TvEegeHLvHi7Xvg54HtL+ynl0/TtQ0oA/ zrrG10X9ov4b+LNJ/adeP4ReKP2Tfh38ONP8NftQaclp4sbxp8MNN07QPC3gT9mnxvpGo+M7fUvj x488R+EbKfWv2I/Gfw817Wdd8NeD9B1T4W+PRp3/AATx8FeEfjZ/wTmAPgDx54mbxn428XeLnn8S XR8TeJNa10XXjPxFF4w8ZXK6pqNxeJc+MPGEOjeHU8X+LLhJlm8S+LDoOjS+Jtbe+1yfTLKe/kt4 wD6T/YD/AGOvHf8AwUA/bJ/Z7/Y8+HV5/ZPiD44/ECz8O6h4l+z6Pf8A/CEeBNJsb/xZ8UviL/Y2 u+J/Bll4l/4Vv8MvD/i7x5/wiMHifSdY8Yf8I7/wi/h2eXxBq+mW0wB/oyf8Eh7uz/bi/wCC63/B V7/go/8ADrxJ4k1f9lX4B/D/AMBf8E6f2YTcWNv4q+EOv2fh4eA7jx/f/s7/ABF0LxPrHw80f4d6 B4h+CF78TtI8H+AILq31zwx+1p4f+IOrjwpqHia6s/FQB9yf8HAcDS/sq2kgBIh1PTCwGACH8Y+E EIJI/i3YHIw21sEKa8DO4p1MufLObdetBRhycz9pQnTaXtGorSd3LWfupQjObUJ+llyUnXg76xpv Syu41FKOr296zlo3yKdlzWPwX/4IxAJ+1h4qYDcP+FG+Ig7qScv/AMJn8NlLM3OTIAcjP98HA5Pn UKqlKKftafs6Mfdn70faKac24tznzNQdN+0a9+M1UgpTp1V24iDsld6VG4walopU5SlG04qV+b3r 3m3JyTaaTj/UbfXllp2nXt7f3sem2NraXT395dS2kNjaWggZpb26mvU8qBLVQ7iaWTyYQzTSJ+7W SPo5b80Yt6+6muVXT0ellJ90mmleUpLe+GsVfRNtO1raqUtLPlaSWrcn0unpcqWGt6PrulQeIPDO tadrWlahBcHTb/Stfim0PVWmuoHikGo6RNd21zFJfQfZUuFgutrPdJHFOXIa6ifNez2clq0oyk1r FNStaSSevNpJ2V4snTR3i07y0vrKKab0SaSV5J2d7a3b11oo0jknki8wGd0dw000wXbBFAiwRyyP HbQiOJX+zWqw27TPNcmPz7m4lkWjlzycLat80tHGDXuyk1OV5JWvaTve2tiVK71XR6pta333v20t 9z3eXOQD7Ek9QM5568kjjGd3oSaJO75dL3acVFJKWmjV7STastUlKNrK7ky7fTSzavvu9b93K6Xn otWcH4u+KHw08ASadH48+IXgfwW+sahouk6Uni3xboHhw6pqniTUH0nw7pmnrrOoWTXl/r+qo+m6 LaWwkudU1BGs7GOe5UxBuM5uVo83u3TjeMY68zs3ZPlTceWT0tdppcwPSzvZyuk20k/eWrvZSUtV ZrW13c+BNR/4Ka/Br4e3H7OHhz4u6l4eHjL9oTxF8a/CsX/Ck9S8U/GPwp4a1z4Kaz4y0PXbFZrL wTofjvxDJNrXgrWvC10NN8A50vxdpWt2Nzu0nTP7YuNHQlLnlBXUIxtzNQ0nFcl2nOPuppq8vhls 21Y50kqbfxt7e84uLas9bv4Vd8qSta19T2jU/wBuH4K2vhS/8Tac/i/xDcaV+1R4d/Y21XwjpegJ Z+MNN+N3iT4k+Hvh1Dpl7pPiXUNBhi0Gyh8S6Z8RrnX/ALc1tefC2QeMNCTWI7mws7yYU53i0uXn g5fFFrk9nF3srpttWaUfjjZuBXNCPM9W+fkTaT97SK+Lom+b3fs232PrGxQT+OvhlGRk/wDCbW84 BPRYdC11G+v+uXHPGOwNdOWx/fTk2r+xeml2pVINO6k9la6lFW5opPVmWL0owXV1Lt7apTvotN30 tfd3er/VeAYhjH+yK9o84loAKACgAoAKACgAoAKAPlj9uD9lbwj+2/8Ash/tF/sl+NpdHsNG+PPw n8W+AbLxFrnhaDxtZeBvF2o6dJP8P/iZB4UuNU0KPXNY+F3jy18N/ETw9ZLruhztr/hjTJLXWtJu Y4tQtwD/ADcv2kPgz8Xv28/+CaOrfs0/GD4YzfC7/gqx/wAG7/g3XfDfxp8GePfFXwa8J6z8cf8A gm5Y2GsXv/CReBrLRtE0vWPH837JHh/wp8NYNKurPxFqPw41j4XeI1+J3hH4ifF74pftSeFfDEQB /J3QB7X8Bfj141/Zv8a3XxO+GNr4fsvilZeH77TPhz8RtUsb3UPEvwX8S6he6aZPil8LYxqVvoGm fFTTNAt9c8N+D/GHiTRPFM3w4m8U3XxI+G9r4R+N3hH4W/FL4fgH338I/wBpP4ifsV6pN+1V/wAE 1/iTZ+Dfja9nD48+OWq/Brw/8e73Rv2Uvhr4nl8M2S/Ah9A+N0fiT4f/ABa/Zg1v4gfGP4aeBPE3 jf8AaCsPiv4ntf2nfgt4R8HeGdXtvDOjfC/9o/8AbcAPqj9qf46/tvft8fF7wT8WNb+Nfxk/bQ8I +MvEnjb4H/EKKX4q/s+eFbb9l3QtS8KeF/Efxp+By+JfCnw1T9mz9kb+3PhX8Afil411j/goh8Pb TQv2cP2u/wBk7wv45+JPjjS/CenfCv8Abj/Z/wDh8AfMsXh2y8A6Dqnwm/Zk+3ePf2JvjB4d1pP2 kP2w/jD4Y8TeDvCnjnRvBPxD0zwKPHnj/SfgNqXxK+KP7Mfwl/Zn+KHxG+BvxD8Hfs4azrfxA+Iv xy+MU37Mnxv+NHwd+LenfGP9kz9lvwGAa3w2/bctP2c5/Av7O/wu+LHijwn+yT4W1jxf8WPhx+1F 8CNH8YfC39sfwN8e/iL8PLXRvFf7RGia9H4ltPEegfHOx+HU2hfsvfGH9jbSvijp/wCxr8Q/htoU vhPSviVP4317wn/wUycA+kP2sP2qf+CgH/BQK7s/hn/wVF/bVk8UfslfDvR9P+Nfwp/ah8D+EvAn h39n/U4/Gutat4B+HPxU8DfCv4cfDv4M63+1JrHj6fQ/iN8L9K+GNz4W0/8Aad/Z51fRvj5d+NfD nwnh/Z7/AGx/hnAAfjh8cv2idd+LOh+APhVoFleeCf2cvgbeePU/Z++EF3qOjeIdQ8D2HxF1nT9X 8YeIPG/jzSvCngy4+Knxc8eXGiaBd/Ef4l6p4f0OHVptE0Tw14G8I/DX4S+EPh18LfBAB86UAf02 f8Ej9R8af8E2f2Jfj9/wU08N6F4i1X9sX9sm+vv+CcH/AASi+GWi6LDrfjjxl488VapoWo/Hj9pH wj8NPEXgPVb/AOI+g/C3XLL4f/Dr4aeKfhpdeONE1P42jxj8BPiZ4Rtn8ZaNfRAH+h5/wRj/AOCc 8X/BLj/gn98Iv2WtW1Hwj4j+KkN14k+JHx48a+CtKvdL0Txh8XfH2pnUNVe3fUribUNdtfA3he28 I/CTRPFl7a6Fd+LfDHw60LxFdeFfCdxqUnhvSwD50/4L7qv/AAyJcSOcKdU0GLcN+7c3jTwpKoVl ZVXeYdjeZuR1bYUO7I+fz+coQwbi4q1eT9+MppyVNuHLGL5ubnUXzRTlBJyXvKJ6GXpudRLtFvWz SU03JPe68tbN2aep+BH/AARsQj9q3xaVOQfgj4mBIDbjJ/wnPw62hmbLYKOjMOBkeoBrz6VWEqnu 03FulUfM+ZS5aU6V6fOnOk4znOMouSUtnG8YSb9CtK6p2u4yk+ZuTsoKnHVpzfvK7alulK1k73/b v9vL9mzxr+1F8E9D8F+AdQ+HreJPBfxa+GvxdtvA/wAY9M1PW/gr8XYvh7rb6rL8LvjDpmjxT6jc +BPEbSR3k80Gla6un69o2hanLoOsw2Umnzd1Gapzd3NpwnDnjdSjG7UZRvpzWs3vvZNNNHHPmnez jZSTtJRd5Lo0lrfvrFpat2Pyq+K37V/jfwP8GbL4FeC/gF4a/Yq8TfDb9un4V/Av9rLwj8Hfin4S +HXwu0HwT8b/AIYeJPix4W8YeAv2ifDXgLTrb4deGPjH441b4YeH/EfjSbwH4X+IXh258Xaro8lt oviHWdL1yPeNOM37SU/a81KcqblC8nKk0rOlfV0/eaV6kXe90lZ5yn7riounKM4xklKytJOT+Uny 3ej1d1e95v8AhY3xs8LeE/gV8G/i/wDtjeG9L+CvxA/b48WfDb4ifFv4KftRzfFb4jfB34T337OH ib4m/B79nb4oftR6r4C+H3iLRPF3jP41aTZ6TceMpNI0jxq3gjxF4O8IWvjo6hq0esamS+KpNQcq kKKlFTg4qU1U5ZTjDnleMYtWSbV9Vpa0uUmuWUt5tSnzcz5eVtQbt1lp5ppPoz6Gv/jp8Nf2ff2m fgF8UZPjZ8QPi/8AsqeLv2Zvj5+zvN8VbfU/F3x/066+PPwr+NHgTxB4W8MeI9X8B6V4h/t7x7rW gXfxY8G6Hqc9le+JPFOq+CJfC9xf6z4j3i5zUZzpyg4QhU9pCbguWn+7lCUXJbtRT5W7JaO+xo2l 7N3c48rXxSfvKS93ZrZtaW2d3ff54/YB/Zz8QTeMP+CaXj34mfADxZ9h+F/7FX7W37Pt+fid4Avb fUPg94w+Dv7RPwy0H4NXviGy1u2mtvDniTxN8OofiVaeEL9i1zqGjXOtS6BqM+k3s817pWq+7X5Z xu6tKpeEmuZSjNybtvqkmlvZX1sRGLkoNxfu05Wunpaas+y057PW689T229/ZT/aU8CeEfDXiHwH 8OtJ8VeL/gB/wVO/aA/av+G/gVvHfhrw5c+PPgJ8fLn432nifSNF8Q3k1zofhvWGtP2ifFOoW2i+ JptLDv4XS1uTbNe2fn588bttyi5YeFKUuSfu1abpWbS992cIu6u7Suro1UZtXV7xqylFXa92XNza vT7V1dK+z30m+KH7OviXXP8Agp/+yd4+0ez1XQvBfj/wv4g/aW/ah+Http8+r+D7b4zfs0/Da++D PwR8T3PjaKGHTR4pvv8AhpB9EurSGK1l8X6f8C/BmspbCHwnIaVOovq9RNxdpezpytH4aknKUeT4 WvdbUbe7zyj1RM4pVYuySacpxXw80U1a7dnKztu9VfdO/wCzXhr9/wDFH4YxHnGt30/f/lnp8qBu 3/PY4PTk/WurLrurOV07Un/iXNKPxdbytsm1e7k3fmeWLneMI3T95vS7VuXR69dUmumvy/VePiNf pXrHEPoAKACgAoAKACgAoAKACgD+Zr/gtT+wT+1j4A+M/wAOf+Cyv/BJbRvDdh+3D+zx4f1nSv2l fhJpnhzVr+//AG5/2fIbPw9GPCHijw1pOuadpnxU8SeAdA8OXWlR+DRplh8WfiD4Ol8OR/C34kaZ 8WvgL+zv4VvgD+Kr/gsP+wP8A/iT8PbX/gsf/wAEpfD2j3X/AATg+NV5pFl8Z/hh4eNtpHiz9h79 pnVNTtdL8Y/C34i/Cm0k1G2+FXgvX9a17wle+FLDQPEOu+BNE8ReNbfRvASaJ8FPFP7PN540APl3 /ghx/wAE5vCX/BQT9r+K5/aB1TSfA/7D37Mmi23xx/bJ+JvjPXNV8B/D2w+Hml6lHBoHwt1n4owX OhaP4J1r4xa3FNo8c97438Fa9bfDnQ/ip428HavLrXgH7K4A79vj/gl5+1T/AMEqvDvg747fFiK8 /ZO8U/Hz4x/tJfDD4Lfsyav8VdA+L3xsk/ZusPAfhax8Q+KPEvxk+BFlqHwM8ZeD9X8KfGS6+BPx e8MeJNQ+GniPxuNUmm0/4Q+Ivhv4x8Vw+DAD4c+Ev7Snj/4F+Brm38NfBj4V3fw0+KPjzxRYfFV/ GfgTxN4i0L9ofwTpOj+EZ739l/xh4s1LxMNWsPhX8Pptc0v4kWmlfB3xF8NvivoXxW8UfCz4+av8 Rrj4x/An9j/4hfAoA9C/aj/aL+BttP4v/Z4/YP0T4jeGv2Fr2bw5rNrZftG+FPhXeftL/Fnx7b22 j63e/FH44+K/CB8S+G7Xx98PNck8T/C/4EXXwnuvBvhv4c/AbU/F+j6R4Z0zxd+0p+19rfx1APn1 dV8X67efE34K/AS9+MnxB+BV94k8d/FfR/htq1hqc95f+G/hN4T8da3Y/Gvx18NvBOs+IPDOi+O/ hh8GYfF3iXxd4w0u81Sw8B+Ex4/gufE1x8PZvEp1AA9Y+Nfwe/am8HfsafsQfF34qjS9M/Zh+M+q ftRW37J+iaTfeELZtYvvhp4/8H6F8f8A4leI/DXhCCG7k8WeIPGereHPh1L8QPia938VfE/g/wCE PgnwTJd/8Kf+FnwXs7IA/uk+CXhyz+Hvw5+FxtvAv7JGof8ABpj8Vf8Agnx4Z8QftO+LPG9r8A9O +KMfxhb4UW9vqvxD/aGuvhT4uT46+Iv+ClZ/aV8B/Db4T38fwRPjXw34Z1KbwX4M+Fuhaf8AtIeC NG13wmAfyE/8Es/+CXA/bTf4i/tM/tM/EVf2W/8AgmV+ys1vrv7Wf7V+vQvChEB0u5tfgT8DrWXT tVk8dfH7x6NY0HSNK0nRtE8UP4MHizwvf3vhnxh428ZfCH4R/F4A/uO/4JKfsv8Aif8A4KX/ALXX h7/gsZ8dfhtofgD9hT4FeC5vgZ/wRX/Y78SaVpdtN8Hfhh8N9WsfBeh/tCXngfwbrUngjwdrlpB4 R12z8LaT4qPxI1yfxbrf/CR+FdW0DwH8CP2YvF/iMA/rpoA/C/8A4L7w7/2LtZn2k+TrngxVZdpe OS4+IPhOEOqukqNtVnLb4pVCBj5bsFRvDzr/AJg5crlyV5u0UnJ3oVk1d7J21spSn8EeWTVSHoZf 8dWybfs9Lb31W/Ratt30t81/Pt/wRhvUm/av8ZwOgWa3+CHiR5ExIMRN46+HkUDfvo4mIKwOrFVV N/zIHiMch8ujrUlJ353TbfuylG0uSt78opqMmowpqEq3LN0701JRcV11dYpXfNGc7x0UuWUHFOSS 3k0uVRlKFrQTk00f0p/FT4SfDv44+B9S+HXxP8Pr4l8Janc6be3Niura1oV7Ff6JqNvquk6lpuv+ GtS0fxBo2pafqFrb3NrqWjapp97DIhEUypJIh76U2lzKPvO1rpuy5mpb3fLZS3do8t5XvZ5Ss9Go rTmVnZPS918PZXd9Wnr0OL+HP7M/7P3wc8E638N/Anwx8JaR4H8Q3Gs6n4t0DUNNfxP/AMJvqviJ dItdb1nx7rHiqTXtd8ea5qlto2kWN1qfifU9Wv7nTrC0tLqSe006zSyipObkqk3acbWVl7kbXiub XlSvZR3Te7JtGKdorlbvaSvfdNrmtJ+Tate2x2LfC34T2vgO5+GqfC74fJ8OJ1S3ufhxH4N8Mp4K uYp76ORYpvCSac+gyxvepHcbJLExyTwNcJvkijc481STdROo5apyXNfmd7Wersmot2kndtv4kPlX LLmjZbJPe9m79Elfay8tdTqtF0fSvDOi2Ph/wxoOmeG9C0S1Sy0fQ9IsdN0nSNNsbcxJbWOnabp6 Wum2FtbqzrFa2nkwoIgInYPvpvncbyTldSespN3jZzk9b6qVopvVRnJXbsNcqfu+69Vvdp+7b5Le TtquaNmi4ZJDsBeLLBiQhClc7D0yx6ddrtsJwSQwKxqrxdnzWSXNfVNt7RvLrKDVl/NzK6C6SUfe naWmmjflu7O92rq+j7lWR/TJxnndnPbPJ44ODwc9s5NTdWaeqvr8T0cJculltON73as25L3IxqW5 qzbau1ZtcyvrHX3o30T2tp727uihJMyjjnPIHTt06dMjvngjqcVcrpt9rvS63bWkWo2Ta6pPrpey ytdy5pd/tRleyeu9na+695tvlXNdrY+H0Ruvi78OmZvlin1lyDxkm3swPT7uGzxyWPcFj6eVf8vu rfLdpWWspu1u6tZvq0n6cuJv7rfXm637W6t7bN7rVNo/VJBhVHsK9g5R1ABQAUAFABQAUAFABQAU AFAH81n7d3/BMz9r39lz9ovWv+CmX/BDC18E6D+0P8Qrq0sP2vv2EvF+qweFP2Zf2yEuE1fTNG+L 0mgv42+GXhDw98avAmo+J9T8T6/Jd+MvA9j4zS78ReOdF8T6F8TNS+JGiftIAH8qvjT9jT9nH/gp 9p37R3hn/gkX8TPH3/BOr9sT4g+Pmj/bd/4IW/tQ/FaP4FeAvjF47+EPgfWPii/g/wDZV8MaXFoO l+O1+Evxs8GfFS00T4bfGDR/D+m/CrV73WPF+saD+xV8N/DPgjwv4sAPyk/4KeeMP2tfj5/wUM+E Xgj/AIKpfDPQf+Cc9p4L8O/Bj9mbSPC3gL9nPWvD/wAHP2af2Svh7471zwDceM/gP8M/Duqatq3x q+D3hLWh8V/GvhO/8DfEHx1ovjmW21Lwf8KPGaeCtN8H6LoAB9x/8Fa4v2ZPDn/BGz/glF8EP2PP +CivwN/a4+GX7Onxe/a+0z4heF/DOs658HfjV418SfG34p+LvH3wy+K3jb9jLxde3fxC8FaL8NNB 8O/EPwAPG/xDEVzaH4i+HpfBM2peEfihFqVyAXP2APiL+z7+yN/wRL8PftieP/2Pf2Pv2iPFevf8 FwPCH7OHxM8VftI/s2fDr47eKLH9mNP2XfBPxg8a+DvAeoeNNH1K88N319ceG9Yt7C4tRdw2K+Kv EN5Z6cuu3GnarpoB5N+3/wDFD4i/8EK/+DgT9qrxX+wD4jt/h3B4A+JGg+LrDwC+haXp/wAJ9c+H X7Q3w8+HHx/8Yfs5eJvhz4Pi8LaFefAjTdS8cDwj4V8K6Wmjap4R0fwl4H8TeD9e8O/Efwd4Y8a6 QAdp/wAFvP8Agpj8G/8Agr74S/4JnfD39k/wp+054z+O+jap+1j40+KHwq8fpqnxa8ZeF/jJ+2J8 bvB+u6J+zf8ACnxRpdrHrvxY0PwPqvgvUdG+C9l4Z8GafpemfAfXvgR4NsbTTvHOm+N/hv8ADwA4 f4M/8EjfgD+w3p/hT9pL/gvH8VZP2f8Awxbah4L8aeAv+Ca3wy1Hw745/bj/AGrfAut6H4k1nTbv XtB8I/EHTL39mj4T614h8PT+ENY8V+OdR8NeJbnUvDHxL+GWo698BfiI3gDxXqwB/Tl/wT+/4J1/ tB/8FhvD3wH+O/7d/wAIPDf7C/8AwSs+AHjhPib/AME+/wDglP8ABDwrofgzwf47kt/iEni21+LX 7TXhrxb4K1KL4j+C/HXhe+8TeEL7WNf0Hwh4p+NK+NviL8Vvh34f+CvgD4nXupfHUA/tSRFjVURV REUIiIAqqqjCqqjAVVAAAAAAGBQA6gD8bv8AgtP8J/FXxo/ZkfwH4Pu9Os9b1TVdGns5NXa9i0tp tF8RaP4ldL+5sbe5mtYZ7LQ72zinaCaJby7tRKqRM80Xi51SqTp4epGLnChVnUqpXb5XSnBS5LWn yuXMlOUIXTjKcVNs7sFNRnNNrmklyxcnBTafw8/Ru6tf3Xre60f82f8AwSU8Oaz8PP23/ij4P8V6 fdaL4s0X4QeI7LW9Jv3D3FjjxN8L762gSVZp4p9OurK6i1rS7yxnm0jVNO1O21vRZ7jS9Ts7q48a lOSVOe7d1SlandxgpydbZS5pynHn5velKLlJzauehJrkd2lyyc+XlU5NvRN1L2ioS5lpUi5P7Osm f1FW90AgPzEH7pA6gYGQOc9znkk7cuAcj0LXTstHJ8125txULyScrtys07tKykuWblyRfPJa3Tvo 7Xav52d/K1rtLWyUt7NxdRMkXzL9oiVwMW8LBR8zoDMrh5WkeVoZppEEsMBXyxLGqQ0nG8V7trJe 81HllB8qveLXvczi05NWTk3f4VNm3q3bbW+zf53lddIuyerKb3SZLSybwsj7trtCCu52gDYbJaNX Vjvyp7qu4tRySnJK8mtF719G5SclKV3K14S0Xwyldu8bsa0s9NPiu73lvra3Xa71u21718m71Kyt rWWW7vI44LeKV7m5uJljWKMoyTyS3GUVImyTISUReM8ojBcrleK192y6Obu2223Jxa+05Nc14xfx aDaS9ddmtbt6eVuum297NeS63+0L8GPDqbdR+JHg9JEZY2s7PW9P1PUVLgYLadpc93fiNgoPmG2E P3F3DGRvGhXkpJQd9knrFrmk2m5RlzXk3y80raKTfwkyqrW8oprz1vrfzlfpfRPfXfym/wD2yfhR E6poNr418Xu6sxfQfB+rRAOrY8vPiNfDwd32lYmQvByHeQKxY39Qrt3aSeqXNNdE+V2jzRtezlHT S/xNJPJ1oKV2+Zbuybk5Nq2/u2WravaV3dN2Rzq/tN+P9fmmj8G/s/eNdSiOxbObXdUtNEZy5G57 m3s7DxAItj4CRxXUxlVmPmW4Ga2hl0rxlOrDTdRhKV1f4bz5Gl11UrX3M/bxvtOTVtZS5W2lq2lz cyfXmet3ffT6z/ZJ8N/Hzxd8SNK8YfE3wtpfhXR9Gtrg6fp2nJfktLf+QJ5by5vbmZp5EW1TyjHF AIxNMNrFwU7cPho4fm5ZSlKfLzOVvs320vq23q36mdWq6lrq1r9b3v3+WmiXfds/YodB9BXQZC0A FABQAUAFABQAUAFABQAUAFAH5cf8FKf+CO37DP8AwVU8HW2jftNfDi4034i6Pb6Dp/g/9ov4Vnw7 4S/aE8F6FoGu3+uR+E9J8eat4Z8UWWteB79td8VWt14F8deHvF/g6zm8W634m0LQ9G8dLpHizSgD 8C/ix/wTm/4OGf2NvA+tfDb4T/G/9nr/AIL8fsy/EttPPjX9nL/gpb4M0nxBr+hePbjWrTXofHEV v8evjWf7d8E+ALf4Z+CovDWnz/tVy6RbeMvH+v6zpf7OMWr6bJ8TYAD8N/i5+yF8Kfi78SIfBv7Q f/Br1/wVD/ZN8Tad8RNfvP2gfjh/wTM8YfGD4l+Hdf8AFkces2/i6D4H/BP4pfs+fFD9l62+C+q+ NppdV8A+G/hD8VNH8L+HfCseiWXgj4k+IPCNhBa66AfIVz8L/wDg2xs/F9n8Prv4d/8ABxxa+PtQ m+z2Hgi58JfsFQeL764MlxCILPw1Lp661czGa0uovKhsncyW1wm3dDIFAPozQ/2Hf2R/hT8R4NQ+ D/8Awbof8F5P28vhn4s8I6ZaWD/tqeI/iN+zDZ6D4k1PVIbldb8P2H7IP7Llz9tsRpcVrDb+JfFX xnm8Oy2Or6nJdeDbOWx0/XgAftl8A/8Agnl/wcC/Fm38RfBv4c/Bj9gb/g3q/Z61GHQPC/xP8X/s ceEfhzqv7Sfx38EWqaqvgW5v/iL8KPiL8XfH/jbx98EI9OvLUeL9T+NX7MGu65N8X/Fer/2141l1 PVdP8NAH7Mf8E+v+Dd39hP8AYf8AHL/tC+PIPFn7bP7ZGt6ppvjrxZ+03+1bJpvxC1q2+ML6x4c8 b+KPij8MfB+qWuoaV4E8Wat8U9Af4geH/H3iHUfiL8ePCV3qeo6XF8btWttS1qfVwD96qACgAoA8 o+L3ws0T4seF7rw9rStskjkEEqFlkhlZWCSRuhDxurkMGQg5HUUNXunqndPzTVmn3TTaa6ptPRgf g/4++Bifs1fG62+Lni/wxqniOfQ/CmteCNM8Z6DpjTa5P4S1y90zVZPD2sQh7SHULW11TQ7O+0ue eWX+yZJ9Wk0+O0n8ReJLrV/Hq5Uvbe2w83FO7+rydqCqckqftUleSfs5OLSvblg1dLlO6li0oShO MVOy5aqT5mo/ZnZ2a7Plbuld2uUrj9snUtUlEPgT4I+Ptc+QqZdde08PK0+/aqoLCPxO/kkEssrq sgyq/ZcgtWkcBVT9+cEk+bRTlKTXLrK7jaUlG0pR6666pz9ZjdtKV9VbRb66u8mntfdtdepcs/G3 7Y3jmV08NfDLwv4WtLnIt21Sz8S63e2kUgKoftEU+iWksyMfMDyaeYScK9uwYmtlgKenNOb2T+FN 66ttxbu+tmr63erbh4mXSK62u5N63vs4rW6u+ttU7tS7nTP2Yf21fHaIniD4q3ug2hkSQwaDoOma K6uDtZhe2ukx6mVK4zE9+0TEA7M5ZtY4TDxv+7TbVm5Nyutd7uzvzO7td31bMva1L3Uren+bu776 3v8AM9H0v/gltq3iYwy/Ev4n+MvFe1Npi1zxBreqRojkM0SRX93PHHCSFIijVY12javAA3UILaMV 6JEuc5XTlJp3unJtO+r09T6D8Hf8EwPgR4dCPd6YL+RSpPnKD0IPG7OO31wRx1qiT6X8PfsifBDw 6I/sng7Sy0YCgvaxE4XkdVPcnP1znNAHrel/CvwFo+BYeGdKg29NtpEDnrnO2gDtrXTrKyXZa2sM C8cRRog/8dA/LpQBdoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAOY8R+D /D/iu1a01zTLTUIH4ZLmFZVPXswPr/higDmdI+D/AMPNF/48fC2jwkHIK2UI5yCD936/n+QB3Nto ulWYC2un2sIUAARwouAOmMAUAaKxovCooHsBQA+gAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgA oAKACgAoAKAPDf2ldS1jSPgX8SNS0C8nsNatNDSTTbu3vrrTZYro6lYpHi/sg13ao5YxzTQJJIsL ybY5PuMAfO3iX4ufEHwF49+KsvjzVtE8IXlxov7P+jaDD4d1WLxb4W02TX9R+Oc91fG/+JGofCjw r4YvtVXQVt9R1TWLlbOddP0jTbcavrd9pFjEAVfDX7RHxd8SaT4b8XC68HWGk2nhP9lfWPEugf8A CMXs9zr2ofG74na18P8AxYdP1dfFUkegWenWGnjVdDtlt9eePUTBFdaleWMU6XwBYv8A9oL4x6Bp Ov8AiaaPwt4nt77wv+1Dqvhrw7YeF9QsrnQLn4GfFbSPBGg3epX/APwlEreIrO50TVL3WPE1ukWg M/8AZttFp11pw+2XdyALH+0X46sNE8O65rHjD4Z3nh66+JV9oA1DwzrHw/8AEXjbxH4f/svwLLpw svC+j/Ei+0LUb6w8Q+JdV07xPpfhHXtV8XHQH8HavonhyTUNYudOYA9W+O/hDRtV+Iv7Plze3vie zj8S/E3W/DHiOLSPHnjbwzp2peHtN+BPxv8AF1tZXll4f8Q6ZYKkHiHQtI1R7xLdLx5NPt0muZLd PJIB5BoX7SXivUPDHhWDWviJ8OPCt3d/EPUfCPjz4q3NroWs/Cvw/cWPw0i8bWWk+DfEWn+OpdB1 yx8SahLEmhat4l1zStettKW90fXPD0Hif7HcygEWifEz4meAr3xXrumXWjePdC8T/F746aTpXg+w 8P6jbatf6v4Z+Evif4naTdaVrZ8Qam5TWtU8Evodpoq6XJHDYa3AUuLi+tGuLoA5zxZ4/wDF3xd0 CLwbD8RfAHjvwtc+Nf2W7zU/GHhTwnHd+F7688f+PtWtvFXwt1rS38U6tp+oQaKNC8L+ILvSry+/ tJ9B8RwaH4rsnhv7a/vwDZtP2k/i1dWnxGubE/DzTZfDdp4qtYPCmpSaFN4i8E6zofxZ8PeBfDVr qHhbR/Hlz4u1LR73w5qOoXXiS813R/CAj1iHRZ9Bkj0zX7e1tgCf4g/Hf4i+BD4pbU5vDfiDxF8M Nc+LWh2uurpWp6Jp2ppYfCX4a/EDRb2+0FPFaaUpspPHh0y9Oqatb6Y8Gkx30ureG4577U7cA+l/ 2efGviHx/wCB9R8ReIfEfh/xLJJ4w8R2WkXWgyeGXktPD9jPDBpFn4gj8IeJfFuhW3iNrcf2hqNr b61JLBHqFql1aabceZYW4B7tQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFACEBu CARx1GehyOvoeR6HmgBf8/lQAf5/OgBnlxgKAiAIxdBtGFY7ssvHDHc2WHJ3N6nIA+gBuxNu3Yu3 du27Rt3Ft5bGMbt/z567vmznmgB1ACAAcAADJOAMcsSxP1LEsT1JJJ5NAAFUMzBQGbG5gBubbnG4 9TjJxnpk460Ac/4q8LaF410DUfDHiWya/wBG1RYBd28V7f6bcb7S6gvrO5tNS0u6stT06+sb61tr 2x1DT7y1vrK8t4Lq1uIZ4kkUAqeEfBHhzwNaalaeHbW+i/tnVX1zWb7Vtc13xLrWsau9hp+k/wBo avr/AIm1LV9c1O5i0nSNK0q2e+1Cf7Jpemafp1sIbOzt4IwDrKACgAoAKACgAoAKACgAoAKACgAo AKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgA oAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACg AoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAC gAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKA CgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAP/9lQSwMECgAA AAAAAAAhADNFff8M0QAADNEAABQAAABwcHQvbWVkaWEvaW1hZ2UzLnBuZ4lQTkcNChoKAAAADUlI RFIAAATfAAADZggCAAAARW+62QAAADV0RVh0Y29weWxlZnQAR2VuZXJhdGVkIGJ5IGh0dHA6Ly9w bGFudHVtbC5zb3VyY2Vmb3JnZS5uZXQ6Z1UbAAACTHpUWHRwbGFudHVtbAAAeJx9VE1vm0AQvfMr RjnhAza4ia1aVRVCXVVRHFtgp1Uu1RrG8arAot3FlvPrO8tHC46TC7DMm9k3b97urdJM6jJLLRZr IWGjUFoF/eIxL1iu4cr8Af8F6du+k+JIy8EVMAUbvw8MUYlSxgiByFWZUZb9E7cQoTy0KWHQT/FL vReSvzLNRd4gK6AJPL9TvgMLI6ui53wlNjOY5xolEQsfTDf8wDTWDW18AwmDGSwLzM8R/v9vIhgG LTYy0sDScIGVFDEqdQFpNg4x4RJjDVo01BPsIuv9q0hNAWSb0aNS51bPtvRKojLam5+Pz8BNizsW Y1PTtPcRqKNOC4ppb3pzlipgeQKsGQKCTQag0GnQJ9wmqnKbca0xgZ2QGSRMM9hJkdUa/2PdZD2h 5LtTtYMiZ9XNPcKojp9lD/tNd/UklY+cJtD3SiAS7Iz1u0hTcTzL6wzoG1dFyk5mjC/SzLES5otz OdgZHpmjuzKN1lXPtLnArmuA9yZsuIeoS5mDHxuDwVr8IXvYx9GyMKVYSvEdbbKvI4MunTdWu+S9 /ioVomgtHpFuqOM9FFJoUo0GK9tDdhx1+QwvN0PHj0qRiqZU08bbWsMPCEUW5ol1Sw9zBVmrlI76 ZvEAdMCVEfLGnUztiGm4L1PwpuBdz27c2diDYB6tYex67sC6ZwdmrxcDiOYQlmTsDOkmOHAp8oxG U8Xhh9BRIXSFm1w7d1w39wg8LSxvOBm6v8eus3XHznj62fHcxSd3cmMtWAzLCH79BZn+syGPAUds AACAAElEQVR42uzdCXxN577/8UylJVRCBBlIQpq2omhJaSkyNTG0CQ05OFpHHdpqG8ehOJeWa7i3 gwgHJxRtOjlFgqiiDYnhmqJuTUUMFRIhTUg0gwz9/47n33X32ZOdiEw+79d6ea39ZO211155fs9+ vvbeK1a/AQAAAABQ06wqfc+S/IKMLXtPvv/Z0Zmx8u/Fr7+XFk4oAAAAAKCa0mnRtdyjM5este/9 lVV33WWt/XNHJi2Un3JaAQAAAAD3Np1m7Ti00TVExdFvfAalvjH56MxZRyZN/7bz4DV2T0tjfIug jC17ObMAAAAAgHuVTiWarrXvJRFUsmjO4Q3l5Yd1l+snvtn+9FD56Rq7Hpc37eLkAgAAAACqPp0W XctNaBUk4fPw2++U3TqkF021RX6q3kEtzMzm/AIAAAAAqjid/vi3xepd05KCA6aiqVq2PfWSbHlk 0kLOLwAAAACgKtNpSX6BugyS4Qd6DZfrJ75ZY9djrf1zt3LzOMUAAAAAgCpLp5c37ZJouqVj2B2j 6e9vn0bI9he//p5TDAAAAACosnR68v3PJG2mvjHZwnR6ZNJ02V7uxSkGAAAAAFRZOj06M1bS5tGZ syxMp7Ll7e1jOcUAAAAAgCpLpxV/7/Q/eO8UAAAAAFDF6bTi3zuN5HunAAAAAIAqTqe3r9n7nMXX 7N3CNXsBAAAAAFWfTn/71987Xab+3mnZrUPm0+n2p0fw904BAAAAAPcknRZdy01oFSKx8/Db75gJ qIffniHbxLcIKszM5vwCAAAAAKo4nYqsHanq873fdh5s+BHf6ye2qHdN19j1uLxpFycXAAAAAHBP 0qkKqPEtgiSC3r5IUvjuIeO+f27E/wx9fdtTkV8/+Kx615RoCgAAAAC4t+n0t9sf8f3xb8vUm6i6 i7QcmbSQD/QCAAAAAKojnSol+QWXN+3aEThBcunOoAkXv/6eK/QCAAAAAKo7nSpHZ8ZKOj327nJO JQAAAACAdAoAAAAAIJ2STgEAAAAApFMAAAAAAOmUdAoAAAAAuDfpNGtHqiTPOy7fPzdO0mlSn3GW bHx1ZypnHAAAAABQgXSq3hSt2oW3WAEAAAAAFUunV3emSpi845LUR713Ot6SjXnvFAAAAABQsXRq Ib53CgAAAAAgnQIAAAAASKekUwAAAAAA6RQAAAAAQDolnQIAAAAASKcAAAAAANIp6RQAAAAAQDoF AAAAAJBOSacAAAAAANIpAAAAAIB0SjoFAAAAAJBOAQAAAACkU9IpAAAAAIB0CgAAAAAgnZJOAQAA AACkUwAAAAAA6VTfwdf+W9Lpodff51QCAAAAAGomnZYWFH39UG9Jp/KvrHM2AQAAAADVnU7Ly8p2 h02WaPqVzdPyr6xLCycUAAAAAFCt6fSHqAUSStc7+F/evFv+lXVp4YQCAAAAAKovnZ5e9E+Jo/9s 8MzVnalyU/6VdWmRds4paty/3tJnqVMLv2sWOjN4TWGhAEG9U5iVSaeXN6asuf1p3gufbdEaL8R9 Iy1rbJ+Wn9KzUeMjS3n5YZa6stxlOuUEstSPzgxeU1goQFDvFGaF02nOoZNrGz8nD3N89sd6Pzo2 a4W0y09lGzo3GFlYSKcsdGbwmsJCAYJ6pzDvVTq9eSEzoVWIPMb+V2YZ3WD/y7Pkp7LNrz9n0r/B yMJCOmWhM4PXFBYKENQ7hVn16fTW9fwtjw+TB9gR8EbZrRKj20j7Dv/XZRvZUrani4ORhYV0ykJn Bq8pLBQgqHcKsyrTqeWx8/9CrP/rpkIswMjCQjploTOD1xQWChDUO4VZmXSqPrK7oXWoJR/ZlW3+ /weAX55FLwcjCwvplIXODF5TWChAUO8UZtWk00pc7ki7eJLcl44ORhYW0ikLnRm8prBQgKDeKcy7 Taf/96diNu2q0K7/9YdnbG//4Zm4b+jrYGRhIZ2y0JnBawoLBQjqncKsfDrN2pH6zwbPyE5PL/66 Er/g04v+KfeVPVzdmUp3ByMLC+mUxfLl1q2DpaWHmByjfr+m1MV+TgGCemepmXR64+T59Q7+sscf ohZU+ncs95U9yH5kb/R41OzI8uWX83/44Svt5s8/b/nii3lVXoQZGdv/8Y+/ZWZur+biLytLXbhw sqzEx38kB/Dxx+/Kk5XGGh+VVq+elZOTXM3pVJ0EWbZtW1pUtL8ODeLyK9u4ceG7744bP/6l+fPf Wrv2g9zclDr6gqT6pHSAtLRNqqW4+ID8Us6dS9Tm5bGx/yH/Gr17nz5PzZz55zvO7DdvXvTmm5Hz 5r2ZlBRbpzsz6u5s9W6GfUv6uZll06aFhw59cZcdu0p2Uv31SAGiOuu9js4rarwqqzKdFmblbPJ4 UXa3O3xKeVlZpX/Hct/dYZNlP7I32SedHjU4snh6usydO0G7mZgY07Zt6yovwmnT/mRlZTVjxtgq 3/PFi1vOn99s6qfvvPPKJ5/MlpXu3Tt26tQhJOQZB4embdo43bixq2ZHxhMn1j//fE9TCeQepVN1 EiIiAt3dW9nbN9q1a2WdeBW5dm2Hv393V1fnqVNHL178TlTU8Mcf9/r++3/U0XSq+mTv3l3l6aiW PXtWS3XMmfOGupmSstLbu+3dzNr79+/l59fx/fej/vjHAUOGBNTpzoy6m04rNOzrjeR3mU6HDQv+ 6KNJd/lqUrmd1Hg9UoCoznqvo/OKGq/KqkyneyKmyb62+71SWlB0l79m2cO27q/I3mSfdHrU73Qq 09bWrVvIhNvNzbnKP6w1cGDviRNHGP3R11+//+yznbUBdMqUl2Xl0qWtDz7YQL2hWrPLX/86ytSR 37t0qk6CLF27+sjcq068iowdG+7h4ZKV9b3eO5B1MZpqfVJm3vLrUI3z579lY2MjL5bq5vTpf5ow YVil0+np0xtkb5cvb6sfnRl1NJ1WdNjXG8nvMp1W+atJpZcaqUcKENWZTuvcvKI2VGUVv3cqYbKq 3u2s2r0BVZ5Od+9eFRj4tINDU3f3VleufKcaJSSEh/eTRh+fdtr7VyNH9l+wYNK4cUOk/fp1/bcl 16//sGVLx/3746ysrL75ZrHWnpm5/YUX+jg6Ptyli8+7747r1u1x8w8hkXLWrNfkYHr2fGLfvk+l 8T//8/XGjR+SLWUOtGFDtN7jSgxYvXqW3gCak5Nsb99Ibax32Neu7ZAWZ+fmrVo1HzVq4C+/7JRt wsL6xsX9p9rJa69FvPhiX7WenPyx+v+2Sp8lGR/lSG7e3Fsj6VTmYYMGPWfmaI0+L6OnSJYBA3p9 +un/P0urVr0nv1ajT1nuPnr0Cy4uLZs0aSy/dDOPri3yEPIq8o9//M3U26pGj8dobzH1pMwcvOxE smKbNk5PPvnoqVMJslmHDu6PPea5adPCypWD1iel/9ja2qifygFIX5JCUJFbXuClDE3tXGbtM2aM ffvtP8izbt/eLT7+I8P3f6ytrVesmKnXfsdDHTGi/wcfTNS2f/31iCVLptV4Z0YdTaemhn2j5WY4 kqt0aljCZkpet0PKzZiYKSokyz51FxV6pbR79erSokWzgAA/U68m2k4qMdTUbD1SgKiRdFpX5hW1 oSrL793fOwXqdzqV11opLZkxnzuXqH2dQF7Lx4wJk0r7+9+n+vq212bMTk4O8+a9KTN4w/8mDw19 Vg1ekj8HD/bX/d/xvn27ybxWBilJfVLA5h+idesWEyYMO3r0axkFJDRKY17e7qCgHuPHvyRDQ2Hh Pt0HvXFjl8yKtA+ZyAA6fHioDEYyMsrMvrj4gOFhy678/bsfP75Oln79uoWEPCPbyJGrRCpnoHnz hyVRqKFTHlRmJHdzlmTaJHv79tu/V3M6lXMlI36DBg+sW/ehmaM1+ryMniJZOnZsr03jPvpoUufO jxh9yvJAXl6u0sdkh8eOrTXz6NryP//zqfwejxxZY/QZmToeo73F1JMyc/DyYvnee+Nl42ee6SxR 8A9/CDl5cr28IGlve1aoHHT7pDx6o0YPyiRYDkZy6YEDn8mP5FlILTz0UEMV80zt3NXV+cMP//K/ //tPeUmWPllSol9xU6eOlpfel18edPVqktZ4x0NdsWKGh4eLSshyRzkM9SnHmu3MqKPp1NSwb7Tc DEdyUyVspuR1O6TuW6+yT7UsXTpdxj31HbO1az/44Yev5LHkdWHo0CBTx6DtpKJDTc3WIwWIak6n dWteURuqknQKVDKd9u7dNTi4h+73cNLSNskcev36D2UQOXToC5mPZmRsV0U4dmy40f1fuPCNbCYR VNb/8Y+/PfCAnfoPM2mRXW3cuFD7xKNKp2YeIjLyebXx8uUz3NyczX8WSwYp2Y92QQ4ZQJ94wvvp p31lsFi16j01uOge9tmz/3pc7Q3Y+PiP5KYc/I4dy5s0aSxpdsuWv8ugKTuRQ5WBRnLLiRPr7/Is yck39a7gPUqnDRs2kBFZDm/r1iXmj9bweZk6ReZfRbSnrB5I73tcph5dW6SHyAYXL24xfDpmjsdU bzF8UuYP/rXXIrQvi3bp4qNeYOSQ5DWpEuWg1yfVf5RIyHzsMU+56eLSUg71k09mS7v5ncvBaP/l LNvs2bPa6JUqpIvKPlUYtuRQZXbeuPFD0uFl/YMPJj7/fM/a0JlRF9OpqWHfTLkZfrLXsITNl7xu hzT8YPCBA581avTgypXv6h3qkiXTZLpp/tPFlRhqarweKUBUWzqtc/OK2lCVpFPA3Mji7d323XfH 6YYBmWWqdRlBZKJsZ2c7efKogoJ//V/y99//Q4qwR49OzzzTWS0pKSvNf0dI2ps1azJhwjBZXnll kNz9v//7bfXJRlnXPvevpVNLHuLTT//T1fUO6VSio+wnPf1bvQ+fyKgnaVM9Zd19qsfVjkfuKDd3 7lxx69bBhx+2l5+OH//S0qXT//rXUX/+82A5+Mcf97r7s+Tu3srwsyX3NJ1GRQ2XaaLMxt54Y6ju Ezc8WlPPy/AUmX8V0TvDqan/dg1MU4+uLT/++E/ZQK/R/K/MTG8xfFIWHvy0aX/y9++uXclTpdOK loNen5w7d4Kvb/vFi98ZN26I3HzppUApkD/8IeT996Ms33nLlo7R0X81+uv+5Zed/fv3kkOVF1QL 9/bHPw4YNWqgrPj4tFu79oPa0JlRF9OpqWG/QunUsIQtLHnDmzLsyzR0+vQ/aS0JCQv8/Dp27eoj S7t2bcwfQyWGmhqvRwoQ1ZZO69y8ojZUZdWk06+++urIkSPazYsXL3755Zd0VtSDkUX3cxSyfPzx u1JauhvIMOHk5LBo0TuyfubMRilCw8/vmSrCkpJD8mr95puRf//7VLUEB/eQkpYf/frr/8iIoP1P 25Il01Q6teQhLEmnN2/utbGxUWOc3lcjZABV2VJ3nyo5bN++TN3csuXvclP93/+QIQGTJv3Rzc1Z BlDZQNL7W2/9Qe/5VuIsFRXtlyP87rt/VP/3TnfsWC4Prb48aepoDZ+XmVMkryILFkzSLupj9FVE PZD6koa2mH90WQoL9zVv/vCrr4abCntGj8f8lFH3SVl48EbTaUXLQa9P7tv3qbW1tez2s8/myE05 hg4d3Fu0aHb06NcW7vzq1STZ5uuv3zfzFpb61p+Fhyqvso0bP5SYGCNTeXUN3hrvzKhzrylmhn0z 5WZJOrWw5PVuXr++Sx506NAg7VJqp04lyPxYvfqsXPnuHdNppYeamqpHChDVmU7r3LyiNlRl1aRT T0/PefPmaTc3b97ctm1bOivqwcgyZ84b9vaNDhz4TP15ur59u2l/6CI5+WOpPXlF9/PrqF3kVibT so36YEZ+/h71p1lMFaGMUzLb1v0TWOoiGeo/lmQqIMNNXNx/zpgxVoYh2dLCh9CdBERFDZeNTX0p cfnyGboDqDyd48fXPfqoh7omqu4+S0sPPfnko8OHh8rD5eQkR0QEduv2uJrNSGJ/+GH7p5/2VWGp UaMH5eaPP/7zLs+SHImj48Om/j7Yvb4qkgRseXlQnz8xerSGz8vMKRo82D8y8nk5OatWvScnx+ir iCzyKL6+7Q8e/FzWf/opXn1Q1uij6330ztbW5oMPJqovWMq9Nm5cqO5u6nhM9RajvyxLDt5oOq1o Oej1SXk6TZs21j63rL56qju7NbXzgAA/eb5y97lzJ0h01ztj0q9klqC+WS1dV2bh6g+rWnKocmba tm3dsqWjNgjUeGdGnXtNMT/smyo3vZHcaAlbWPK6N6XeJRv36NFJ+6yEujSL1MXZs5tkABwxIlS7 5IGpY6jEUFOz9UgBovrTaR2aV9SGqiSdAuZGll9//R8ZDmTq4OnpIiUqE1/tgmkdOrjLy7aHh8uA Ab1kM+0PrIeGPitpwcvL1dm5udFPVWnLoEHPTZr0R73GJ57wVp+LkF2NHNlfUp8U+YoVM93dW1n4 ELqTAEmJcpxyX+1tWG3Ztm1ply4+6j+3ZAC1uq19e7fXXotQn67UO+xTpxJkWJRBUOK6HJX63ztZ Ll/eZm1trX07NyTkmUceaafdq9JnacyYsNmzX6+pvygjh+rt3VbCkgy1Ro/W6PMydYqSkmJdXFo2 bNggLKzvnDlvmHoVuXRpq7TIb0GSjJubs7r0iNFH11uke0gMk0woZ15+9XJI8iJk5nhM9RajT8qS gzeVTitUDnp9Uv0Hjfa+jTQ2avSg9AptY1M7HzYsWJ0HmQdo/+Ws+10a2U+TJo3lycpv/PPP51bo UP/jP16V3q5eqmtDZ0ade00xP+ybKje9kdxUCVtS8ro31WXVpCKaNWuiFnUY8ugPPtigTRun2Nj/ kLFFXRjJzDFUdKip2XqkAFEj6bSuzCtqQ1Xe83S6Z8+ewMBABwcHGdKysrJU49WrV8PDw6XRx8cn KSlJNY4cOTI6OnrcuHHSfuPGDfo6asPIol1e5dChLwz/+tONG7sM38tSXw3XLu5SJcsf/hASHNyj 0g8hw5PRS6LFxEz58MO/VOhI5FTk5CRX6C6VOEt7934yfHjoPfoLdeZ/16YWw6M19byMnqKSkkMW nrfsbCN3t+TXffHiluPH1xn+pdMK/cqMPinLD97CU2dmqWif1Nv59eu7ior2y0mQPm/qj75KLZw5 s9HoH3OrdOXWVGdGHX1NMbOYKTdTI/ndj9JGd6IeKz9/jyyWHEPlHrea65ECRO2p91o7r6jxqrzn 6bRnz56SOcvLy8+fP19cXKwaAwICxowZIxF0yZIlvr6+qrFPnz5OTk7z588/ffp0WVkZfR11YiZx 75b589+aPHnUZ5/N+dOfXmzc+CHDd4GqZPnnP/+7Fv4x6A0bovX+BE6Np1OWaltqZ5+snZ0ZvKaw 3OVCAYJ6rweFWbF02rt37+Dg4AsXLmg/PXv2rJWVVXx8/IkTJ1JTU21tbTMzM1U6HTt2LF0cjCxq 2bFj+axZr73yyqCpU0frXXKNhXTKQmcGryksFCCodwrTeDr19vZ+7733tJubNm2SvKrWJZcGBgba 2dlNnjy5sLBQWpKSkm5fXLjHM7/btWuXSqczZ86ki4ORhYV0ykJnBq8pLBQgqHcKs5LptF+/fiEh IdrNlStXSubU3SA5OdnJyWnx4sWynpaWdvuP0m7V2wnpFIwsLKRTFjozeE1hoQBBvVOYd5VO586d a29vf/DgQVnPzMzs27fv1KlT1Y9SUlJKSkrKy8v9/PxiYmJUo7+/v2yjPu578+bNvLw80ikYWVhI pyx0ZvCawkIBgnqnMO82nRYUFERERNz+qxuednZ2AQEBOTk56kcdOnRwcHDw8PAYMGCAbKYaJcGG hoba2tp6eXk5OzsnJyeTTsHIwkI6ZaEzg9cUFgoQ1DuFebfpVMnOzk5NTc3IyNBrz7vNcPv8/Pwr V67Qp8HIwkI6ZaEzg9cUFgoQ1DtLVaZTgJGFhXTKwsLkGIwzFCCod5a6lE6PzoylK6O2jSwsdWvh d81CZwavKSwUIKh3CtOqSn6LdGWgekZMTgLoWgCoeoASrq9PjXQKMBKBrkXXAqh6AJQw6RQAtQa6 FgCqHgAlTDoFGIkAuhZA1QOghOtJOuWqSED1oNZA1wJA1QOoxyXMX5QBAAAAAJBOAQAAAAAgnQIA AAAASKcAAAAAAFRROuWL9UD1oNZA1wJA1QPgqkjmcFFyoHpQa6BrAaDqAfAXZRjgAEYi0LUAUPUA KGHSKQBqDXQtAFQ9ANIpAxzASAS6FgCqHgAlXNvTKV+sB6oHtQa6FgCqHgBXRQIAAAAAgHQKAAAA ACCdAgAAAABQT9JpQkJCrI7//d//rean+tVXXx05ckS7efHixS+//FLv2LZv315cXKx7zPv27aOX AAAAAEAdSKcWfiu3e/fuHTt2HP27LVu2mNk4PT39woULVftUPT09582bp93cvHlz27ZttWPr1KlT RESEu7u7vb397t27tfZJkybRS1BLcBEL0LUAUPUAuCqSORZe0bhCSW/gwIETJ06sznQ6ZcoUtd61 a9dhw4aRTlEL8QcAQNcCQNUD4C/K3Kt0OnLkyJiYmNmzZ7u7u/fs2XP//v3SOGfOnMaNGzs4OHh7 e2/cuFFarl69Gh4eLi0+Pj5JSUnafaOjo8eNGyftN27c2LNnT2BgoKzLrrKysiqdTiUYDxo0iHQK RiLQtQBQ9QAo4XqbTvv37//Fbd98841q7NOnT+vWrSdMmHDs2DHJn2FhYdKYn58fFBQ0fvx4CaVF RUXSEhAQMGbMGImgS5Ys8fX11e7r5OQ0f/7806dPl5WVSbiVsFpeXn7+/Hnd745ank7l4eLi4ho0 aLB+/XrSKRiJQNcCQNUDoITrbTp9/PHHR902bdo0LWFGRkaq9RUrVri5ual13U/2nj171srKKj4+ /sSJE6mpqba2tpmZmeq+Y8eO1fbfu3fv4OBgM99WNZ9OGzZsaG1tLQ+0bds23WMmnYKRCHQtAFQ9 AEq4bqRTy6+KZJj0JGHOnDlTrcfFxbm6uhqm06SkJAmNPXr0eOZ3u3bt0ruvkFwaGBhoZ2c3efLk wsJCwwPw9vZ+7733tJubNm2SvKodW1RUVFZWloeHxxtvvEE6Re3ERSxA1wJA1QPgqkhVoNLpNC0t TdLp1q1bzdxXk5yc7OTktHjxYsMD6NevX0hIiHZz5cqVEnS1Y1PfO925c6eNjU1iYiLpFAAAAABI p79FRUX17dtX28zf319uqk/t3rx5My8vzzCdpqSklJSUlJeX+/n5xcTEGB7A3Llz7e3tDx48KOuZ mZmyw6lTp+qlU/HWW29JvlUfHiadAgAAAEA9TKdWVlbWvwsMDDSTTo8ePdqhQwd3d3f1LVDJiqGh oba2tl5eXs7OzsnJyYbpVLZ3cHDw8PAYMGBAQUGB4QFIY0REhByDp6ennZ1dQEBATk6OYTqVzby9 vYOCgiTo6h2z9l4rAAAAAKCuptNKuHz5cllZmXYzPz//ypUrZrbPu838PrOzs1NTUzMyMvjdAwAA AEC9Sqd8sR6oKkXXcqk1VD+6FkDVA6CE60k65aLkQFWRatr21KiMb/ZSa6jmjsdJAKh6AJQw6RTA v1WTLGtsnl7btE/qWx/pvZVKrYEXOQBUPQDSKQMcUH3pVFvW2PjpvpVKrYEXOQBUPQDSKQMcUAPp VO+tVGoNvMgBoOoBkE7vPIFmYWGphuXi198zIqPKcX0UgKoHQAnX4XTK/8YB9+h/wnSXLR0jd4dP +ebRoYntw0/MW23+ir4AAAAA6ZR0ClRlOl1r/1xKyNsp/aPWNfPfM+SdK9v3l5eUcnIAAABAOiWd AtWXTnmzFAAAAKRT0ilQ8+mUN0sBAABAOiWdAjXM/JulXMQC9whdC6DqAVDCpFMAVVZ6AF0LAFUP UMKkU8Y7gJEIdC0AVD0ASph0CjASAXQtAFQ9QAmTThnvAEYi0LUAUPUAKGHSKXC/4CIWoGsBoOoB cFUk0ikAAAAAgHQKAAAAACCdkk4BAAAAAKRTAAAAAADplHQK1A5cxAJ0LQBUPQCuikQ6BWoexQW6 FgCqHgB/UYZ0CjASga4FgKoHQAmTTgFQXKBrAaDqAZBOSacAIxHoWgCoegCUMOkUwL9Y/g348vLy 9evXT506ddKkSV988cWtW7eqe9D86qsjR45oNy9evPjll1+q9YSEhNjbtm/fXlxcrG0j7fv27eO3 XMu7FgCqHgAlTDoFYKmcnJyAgABvb+9Zs2bNmzevS5cuTz31VHp6enUeg6enpzy0dnPz5s1t27ZV 6927d+/UqVNERIS7u7u9vf3u3bu1dsnS/PoAAADuW6RToL55/fXX27Vrd/36dXWzsLBQ0umLL75Y e9LplClT1HrXrl2HDRtGOgUAAADpFKhvcnNz7ezsJkyYoNs4f/58Kyurn376SdZHjhy5cOHCt99+ 29nZuX379gkJCWqbq1evhoeHOzg4+Pj4JCUlqUbZOCYmZvbs2e7u7j179ty/f79q37NnT2BgoGws 7VlZWZVOpwMHDhw0aBDpFAAAAKRToL7Zt2+fBNFNmzbpNv7www/SuG7dOlnv06ePq6vrRx999OOP P44ePbp58+alpaXSHhAQMGbMmBs3bixZssTX11fdUTZu3bq1ZN1jx45Jdg0LC1PtklSjo6PLy8vP nz+v+91Ry9OphOG4uLgGDRqsX7+edAoAAADSKVCXWPINeMml2tukmpKSEmtr62XLlqnA+c4776j2 7Oxs2Xjv3r1nz56Vlfj4+BMnTqSmptra2mZmZqqNIyMj1cYrVqxwc3NT67179w4ODr5w4YKpwzCf Ths2bCjHI4+4bds2bRvSaS3vWgCoegCUMOkUQAWK6/jx45L6YmP/bcxKT0/XoqAEzpkzZ2o/atmy 5cKFC5OSkmSDHj16PPO7Xbt26W0cFxfn6uqq1iWXBgYG2tnZTZ48ubCw0PAwvL2933vvPd3MLHlV S6FRUVFZWVkeHh5vvPEG6bSudC0AVD0ASph0CqACxXXr1q02bdq89NJLuo2LFy+2t7fPzs7WC5zX rl2TULp27dq0tDRZ2bp1q97eTKVTJTk52cnJSXZueBj9+vULCQnRbq5cuVISr5ZC1fdOd+7caWNj k5iYSDrlRQ4AVQ+AEiadAvVwJPr0008bNWr07bffqpv79u2TDDl37lwtcAYEBOTm5paWls6bN695 8+Z5eXnS7u/v37dvX/Vh3Zs3b6pGU+k0JSWlpKSkvLzcz88vJibG8Bjk4SQPHzx4UNYzMzNlz1On TtVLp+Ktt96SY1OfIiad8iIHgKoHQDolnQL1bSSSJOno6Ojh4dG+ffumTZsuXLhQkqSWTvv37//I I49I1JRk+N1336l2iYihoaG2trZeXl7Ozs7Jyclm0mmHDh0cHBxk/wMGDCgoKDA8AGmMiIiwsrLy 9PS0s7OTPJyTk2OYTmUzb2/voKAgOTxpl+2tf6e91wpe5ABQ9QBIp6RToHap0DfgJe+lpaWdOXOm rKxMt10FTvnp5cuXtciqyc/Pv3LliiX7z7vN/DbZ2dmpqakZGRn87qpf0bXce9S1ANxvLygAKGHS KYB7Qu+qSKivZCje9tSojG/2cioAAADpFEBttHLlyqSkJM7D/ZBOZVlj8/Tapn1S3/qoQm+lAgAA kE4BAFWZTrVljY0fb6UCAADSKQCghtMpb6UCAADSKYAqDhgsLNWwUH1A/cZVkQBKmHQKgFpDzfzX xpaOkbvDp3zz6NDE9uEn5q2mawEMEZwEgBImnQKg1lB96XSt/XMpIW+n9I9a18x/z5B3rmzfX15S StcCQJkDlDDpFAC1hurrPLpvlup90ZSuBTBEcBIASph0CoBaQzV1Ht03S+laAChzgBImnQIgnaIG mL8qL10LuM9xVSSAEiadAqDWQNcCAAAgnQJECICuBQAASKcAqDXQtQAAAEinABECoGsBAADSKQBq DXQtALUDV0UCKGHSKQBqDXQtALV9EABACZNOAVBroGsBYGoLgHTKtAYgQoCuRdcCGAQAUMKkUwDU GuhaAJjaAiCdMq0BiBCga9G1gPsFV0UCKGHSKQBqDXQtAAAA0ilAhADoWgAAgHQKgFoDXQsAAIB0 ChAhALqWvpKSkrKyMroEAACkUwDUGupw15Jo980337z55pvz58/fsWPHPTra8vLy9evXT506ddKk SV988cWtW7f0NsjMzIyNjb1y5Uoldt6nT5+ZM2ea3yYhIUH2v3z58nXr1p07d47+g3qAqyIBlDDp FAC1hnrVtfr37+/n5/fBBx/88Y9/HDJkiGpMT0+/cOFChY7HzF1ycnICAgK8vb1nzZo1b968Ll26 PPXUU7K97jbTpk2zsrKaMWNGJR7LknTavXv3Tp06RUREeHp62tjYxMfH04VQvwcBAJQw6RQAtYa6 1LXOnDkjUS0jI0OvfeDAgRMnTqzQ8Zi5y+uvv96uXbvr16+rm4WFhZJOX3zxRW2DkpKS1q1bS3x1 c3Oz5DO6eo9lYTqdMmWKWu/Xr19wcDBdCExtAVDCpFOAoYdaQ23pWunp6dbW1h9//LFu45w5cxo3 buzg4CBxcePGjdISExPTq1evFi1aBAQE7N+/X202cuTI6OjocePGyZYzZszQu4smNzfXzs5uwoQJ uo3z58+3srL66aef1M34+PiWLVseOHBAGrds2aJtNmDAgLi4OLW+evXqF154wejhqXQ6e/Zsd3f3 nj17akdoKp2+9tprsqXeU7hx40Z2dra0ODs7t2rVatSoUTk5OWp7aR89erSLi0uTJk26dOmiGq9e vRoeHi539PHxSUpKUo179uwJDAyURtl/VlaWmUaAqS1ACZNOmTEDpFPQtf7N1KlTJaC+/PLL165d Uy35+flBQUHjx4+XAFZUVCQt69atO3LkiKwPHz586NChajPJhE5OTpIzT58+LdFO7y6affv2Sebc tGmTbuMPP/wgjbJbdTM0NFRFx27dug0ePFjbrGPHjosWLVLrCxYs6Ny5s9HDkyNp3bq1BOBjx45J YgwLCzOTTs+cOdO0adNXX31V7ymUlZXJbv39/U/c1q9fv5CQEHVfyeReXl6bN28uLi4+fvy41jhm zBh54kuWLPH19VWNko0l7paXl58/f142NtMIMLUFKGHSKTNmgHQKupa+hISEVq1aubi47N69W7WY +pju0qVLPTw8tHQ6duxY7Uem7iK5VPdtUqWkpEQi8bJly2T9559/trW1ldAo67GxsQ888ID2BqPR dPqbsU/2RkZGqvUVK1a4ubkZTaeenp6PPvqoPK4E4Ly8PL2ncO7cOTlO7Y1fOSdyU47t7NmzsiKP rrs31RgfHy85NjU1VY4/MzNT2nv37h0cHKz3/VujjcDd46pIACVMOgVAraEedq2cnJz+/fs/9NBD +fn5hvFvw4YNfn5+XW9r166dlgl1v+1pKp0eP35cgpzETt3G9PR0ady2bZusy06aNWs24bZXXnlF 2t9///2KplPtSOLi4lxdXY2m0yFDhqSkpOh+yVb3jklJSfLQ2k8vXbokN5OTk1X74cOHdfemGnv0 6PHM73bt2iXtEkEDAwPt7OwmT55cWFioNjbaCAAA6ZQZM0A6BV3LuJ9//ln72qdu/Dt9+rQkK5Uk V61aVdF0euvWrTZt2rz00ku6jYsXL7a3t8/Ozi4tLZUw+eabby75XXBwsI+Pj5ZOo6Oj1fr06dPv Mp1q3zs1eseTJ0/K0//uu+/UzW+//VZunjlzJi0tTVaWLl2qe0fVuHXrVqNnUjKtk5OTPMc7NgIA QDplxgyQTkHX+pcTJ07s3LlT/fXRlStXSgo9e/asrEdFRfXt21dts2fPHmk/d+5cZmbmiBEjHBwc jKZT3bvo+fTTTxs1aiR5T93ct2+f5LS5c+fKemJiYosWLXS/jamujaTeihw8eHBkZGRRUdHq1asf fvhhLZ3qPVaVpNOysrInn3xy+PDheXl5ubm5ERER3bp1Ky8vlx/JY/n6+h46dEjWT506pa4q7O/v L+3q87o3b95UHxVOSUkpKSmRe/n5+cXExKg9G20EAIB0yowZIJ2CrvV/EhISJDc2adKkQ4cOkt++ +OIL1X706FFpcXd3V2+ZhoWFPfjgg23atFm+fHnz5s3VhZH00qneXfRIaHR0dPTw8Gjfvn3Tpk0X Llyogt+gQYMmTZqkt/ETTzwxatQoWdmxY4eLi0vDhg3lACTNaulU77GqJJ3+dvtdYkmkEoPt7e2f fvpp9VVYcfnyZdlSMrM8BTc3N3UpJsnqoaGhtra2Xl5ezs7OycnJ0ihHJeldnuaAAQMKCgrU3Y02 AgBAOmXGDJBOQdf6N2VlZWlpaYZ/8lSlMu2vj2ZnZ6v1m7eZ2pvuXfRIHJUHkshnyV801ZSWlubm 5lb0se6GPFOjj/jLL78Ytufn51+5ckW3Je82vc2MNgJ3iasiAZQw6RQAtQa6FoDaPggAoIRJpwCo NdC1ADC1BUA6ZVoDECFA16JrAQwCAChh0ikAag10LQBMbQGQTpnWAEQI3L9dS26aXzhjQD3DVZEA Sph0CoBaQy1Np+Y3riULvzgAAOo30ilAOgXptA70NDo8AACkU2bMAOkUpFPSKQAAIJ0CRAhqDaRT OjwAAKRTZswA6RSkU9IpUM9wVSSAEiadAqDWQDolnQIUFABKmHQKkE4B0ikACgqghEmnAKg1kE55 JQYoKACUMOkUIJ0CVZ9Oi67l8koMMLUFQAmTTgHSKVAz6bQkv+DHaUvinYKrrR/S4YEqxFWRAEqY dAqAWkOdT6dZOw5932vsGtse0q4W0ikAACCdAqRToJrSqe6bpXoL6RQAAJBOAdIpUB3pVO/NUtIp AAAgnQKkU2oN1ZpOM7bsNRVKq3/hFwcAAOmUGTNAOsV9mk7VT08t+HKz90vxLYM3uA4kNAL1AFdF Aihh0ikAag11Mp2qlawdqftfnvV1o16J7cO/fqgX6RSor68vAChh0ikAag21Op0qRddy9d5K5XwC TG0BUMKkU4B0ClR3OtWot1LphwBTWwCUMOkUIJ1Sa6jJdKoUXcvlfAJMbQFQwqRTgHQK1HA6BVAX cVUkgBImnQKg1kA6BQAAIJ0CpFOAdAoAAEinAKg1kE4BAABIpwDpFCCdAgAA0ikAag2kUwC1A1dF Aihh0ikAag2kUwC1/fUFACVMOgVArYF0CoCpLQDSKTNmgHQK0ik9DeD1BQAlTDoFQK2BdAqAqS0A 0ikzZoB0CtIpPQ24X3BVJIASJp0CoNZAOgUAACCdAqRTs8rLy2/dulWPz2dJSUlZWRn9inQKAABI pwCqo9YSEhJib9u+fXtxcbHlD7d27VoHBwe1npiYmJqaWgvPSWZmpjy1K1euVOK+ffr0mTlzpl5j YWFhrIGMjAzSKaM6AAAgnQK4q1rr3r17p06dIiIi3N3d7e3td+/eXYl0OmzYsAULFtzl8aenp1+4 cKGiPzJv2rRpVlZWM2bMqMQBGE2neXl5o3V07dpV9l87kznpFAAAkE5Jp0AdS6dTpkxR65K1JGdW Ip1WiYEDB06cOLGiPzKjpKSkdevW3t7ebm5ulnxGV+9RjKZTXTk5OS4uLiNGjLjfuhajOnC/4apI ACVMOgVQ3elU4tmgQYPU+tWrV8PDwyV/+vj4JCUlqcZr16698MILjo6OXbp0mTRpkpZOR44cuWjR Im09Ojp63Lhx8tMbN24Y3U92dvbo0aMl2jVp0kR2JS1z5sxp3LixbCZhcuPGjbpHaPgjubs8irOz c6tWrUaNGiUp0ehTi4+Pb9my5YEDB6ysrLZs2aK1DxgwIC4uTq2vXr1anpHRR1HpdPbs2e7u7j17 9ty/f7/e/iMjIyX35ubmkk4Z1YH7+fUFACVMOgVQlelUMqQEtgYNGqxfv161BwQEjBkzRuLlkiVL fH19VePzzz8fHBx84cKFS5cuScbT0qnu24yy7uTkNH/+/NOnT5eVlRndjzR6eXlt3ry5uLj4+PHj 0pKfnx8UFDR+/Hg5kqKiIt0jNPyR3PT39z9xW79+/UJCQow+tdDQUBW8u3XrNnjwYK29Y8eOWpZe sGBB586djT6KPJHWrVtPmDDh2LFjErDDwsJ0d75mzRpra+vt27ffh12LUR3g9QUAJUw6BXBP0mnD hg0laFlZWW3btk01nj17Vm7Gx8dL/EtNTbW1tc3MzLx48aI0SqRU2+h+slcvnY4dO9bMflSj4fdU Lfxk77lz5+Tu2vurCQkJcvPnn3/Wu4u0yMOdOXNG1mNjYx944IGsrCwz6fQ3Y5/sjYyMVOsrVqxw c3PTfpSRkeHo6CjB9f7sWozqAK8vAChh0imAe5JOo6KiJLl5eHi88cYbqjEpKUkiX48ePZ753a5d u3bu3CmN2vVpzaRTbd3oflTj4cOHK5dO1d21w7h06ZLcTE5O1ruLHEOzZs0m3PbKK6/INu+//35F 06n2ROLi4lxdXbUfhYSEPPLIIwUFBaRTRnWA1xcAlDDpFECVpVP18VcJnzY2NomJibKelpYmcW7r 1q26W2ZmZlpbW+/du9fydGp0P6px6dKllUunJ0+elLt/99136ua3334rN9V7pJrS0lIJk2+++eaS 3wUHB/v4+GjpNDo6Wq1Pnz69oul02bJldnZ2Bw4cuG+7FqM6cL/hqkgAJUw6BVCt6VS89dZbTk5O kkJl3d/fv2/fvuovrNy8eTMvL09WnnzyyZEjR+bk5Bw8ePCJJ564Yzo1tR9p8fX1PXTokKyfOnVK XVA3KipK2o0epO6PZGM5jOHDh8uucnNzIyIiunXrVl5erru9ZOwWLVro/vlWdW2kXbt2yfrgwYMj IyOLiopWr1798MMPa+lU7wCMplOJ1o0bN5Ytr+uQMEw6ZVQHAACkUwBVlk4LCgq8vb2DgoIk7ElG DQ0NtbW19fLycnZ2Vh+d3bx5c9OmTaVRsuWiRYssSadG93P58mXZTOKio6Ojm5ubugrR0aNHO3To 4O7urn39VaP3o9OnT0silWBpb2//9NNP671xKgYNGjRp0iS9RonTo0aNkpUdO3a4uLg0bNgwLCxs 7ty5WjrVexSj6TQ2NtbKwM6dO0mnjOoAAIB0CuAe1lp+fv6VK1d0W0pKSvRaKrcf8csvvxj+ORYJ rqb+Nqnej7Kzsyv911xKS0tN3dfMAdC1GNUBAADpFMC9rbWia7mcQJBOAQAA6RRAzaTTkvyCH6ct iXcKphJBOgVgCldFAihh0imAe1hrWTsOfd9r7BrbHtKuFk4gSKcAqGuAEiadAqimdKr7ZqnewgkE 6RQAdQ1QwqRTANWRTvXeLCWdgnQKgHQKUMKkU8Y7oFqHnowte02FUhYWSxa9nmb5xgCY2gKghEmn AEOP/k9PLfhys/dL8S2DN7gOJFGAYRyAhbgqEkAJk04B3JNay9qRuv/lWV836pXYPvzrh3qRTsEw DgAASKdMa4AaixBF13L13krlBIJhHAAAkE4B1FiEUG+lUolgGAcAAKRTpjVAzUeIomu5nEAwjAMA ANIpACIE6FoAaimuigRQwqRTANQa6FoAavsgAIASJp0CoNZA1wLA1BYA6ZRpDUCEAF2LrgUwCACg hEmnAKg10LUAMLUFQDplWgMQIUDXomsB9wuuigRQwqRTANQa6FoAAACkU4AIAdC1AAAA6RQAtQa6 FgAAAOkUIEIAdC0AAEA6BUCtga4FoHbgqkgAJUw6BUCtga4FoLYPAgAoYdIpAGoNdC0ATG0BkE6Z 1gBEiGpRXl5+69Ytfrl0LQBMbQFQwqRToP5HCEmA69evnzp16qRJk7744otalQbXrl3r4OCg1hMT E1NTU+/hCfzqqyNHjmg3L168+OWXX6r1hISE2Nu2b99eXFysbSPt+/bto2tRfQBTWwCUMOkUwN3W Wk5OTkBAgLe396xZs+bNm9elS5ennnoqPT29FqbTYcOGLViw4C53KE/twoULRn/k6ekpZ0C7uXnz 5rZt26r17t27d+rUKSIiwt3d3d7efvfu3Vq7RHq6FtUH1G9cFQmghEmnAKqj1l5//fV27dpdv35d 3SwsLJR0+uKLL9bCdFolBg4cOHHixEqk0ylTpqj1rl27Sk4mnTKMAwAA0imAKqu13NxcOzu7CRMm 6DbOnz/fysrqp59+kvWRI0cuXLjw7bffdnZ2bt++fUJCgtrm6tWr4eHhkht9fHySkpJUo2wcExMz e/Zsd3f3nj177t+/3/ARZZvo6Ohx48bJfW/cuGF0P9euXXvhhRccHR27dOki2U9Lp3LfRYsWWb6f 7Ozs0aNHu7i4NGnSRHYlLXPmzGncuLFs5u3tvXHjxsqlU8m3gwYNIp0yjAMAANIpgCqrtX379kkQ 3bRpk27jDz/8II3r1q2T9T59+ri6un700Uc//vijJL3mzZuXlpZKe0BAwJgxYyQWLlmyxNfXV91R Nm7durVk3WPHjklWDAsLM3xE2cbJyUkC8OnTp8vKyozu5/nnnw8ODr5w4cKlS5cGDBigpVO578yZ My3fjzR6eXlJyCwuLj5+/Li05OfnBwUFjR8/XtJsUVFRRdOp3CsuLq5Bgwbr168nnTKMAwAA0imA Kqs1yaXa26SakpISa2vrZcuWqRD4zjvvqPbs7GzZeO/evWfPnpWV+Pj4EydOpKam2traZmZmqo0j IyPVxitWrHBzczOaTseOHavWje7n4sWL0ijJUG2j+8levXRqfj+q0fB7qpX+ZG/Dhg3ltMg+t23b pm1DOmUYBwAApFMAVVBrx48fl7gVG/tv35VPT0/XMphuIBQtW7ZcuHBhUlKSbNCjR49nfrdr1y69 jePi4lxdXY2mU20bo/vZuXOnNGZkZNwxnZrfj2o8fPiw5enU29v7vffe043ukle1FBoVFZWVleXh 4fHGG2+QThnGgfsKV0UCKGHSKYB7Xmu3bt1q06bNSy+9pNu4ePFie3v77OxsvRB47do1yXsSF9PS 0mRl69atZpKnJenU6H4yMzOtra337t1reTo1uh/VuHTpUsvTab9+/UJCQrSbK1eulKCrpVD1vVMJ zzY2NomJiaRThnGA1xcAlDDpFEBV1tqnn37aqFGjb7/9Vt3ct2+fk5PT3LlztRAYEBCQm5tbWlo6 b9685s2b5+XlSbu/v3/fvn3Vn2a5efOmaqxoOjW1nyeffHLkyJE5OTkHDx584okn7phOTe1HWnx9 fQ8dOiTrp06dKisrk5WoqChpN3oq5FlLLJcHVSFZNps6dapeOhVvvfWWnCL1YWbSKcM4wOsLAEqY dAqgympNkqSjo6OHh0f79u2bNm26cOHC8vJyLQT279//kUcekagpkey7775T7ZLNQkNDbW1tvby8 nJ2dk5OTK5dOje5n8+bNchjSKNly0aJFlqRTo/u5fPmybGZlZSXPzs3NTV0G6ejRox06dHB3d9f9 +qhSUFAQEREh23t6etrZ2Uksl4RsmE5lM29v76CgIDlL0i7bW/9Oe6+VrgWAqS0ASph0CjD0VOan ErTS0tLOnDmj3mDUC5PyU0l6WmTV5OfnX7ly5e6P3HA/JSUlldiz0eP55ZdfcnNz9Rrl6eg9U012 dnZqaqr2xVcwjAP1UtG1XKa2AK/jpFPGO6AuRQi9tyhB12IYB+pNXW97alTGN3st2ZirIgF1GldF YloD1JMIsXLlyqSkJM4tXYthHKh/dS3LGpun1zbtk/rWRxV6KxUASKcAqDXQtQBUZTrVljU2fpa/ lQoApFMA1BroWgDuSTrlrVQApFOmNUC1RggWFhYWFpYqWXjNBUA6BUCtga4FoGrqWnfZ0jFyd/iU bx4dmtg+/MS81VQ9UJ9wVSSmNQARAnQtALU9na61fy4l5O2U/lHrmvnvGfLOle37y0tKqXrgvnod J50ywAFECNC1ANRwXeu+War3RVOqHiCdkk4BECFA1wJQTXWt+2YpVQ+QTkmnDHAAEQJ0LQA1wPxV eal6gHRKOgVAhABdCwBVD6AqcVUkBjiAyQToWgCoegAgnQJMJqg10LUAUPUASKcMcACTCdC1AFD1 AEA6BZhMUGugawGg6gGQThngACYToGsBoOoB1A5cFYkBDmAyAboWAKoeQG2vaNIpAxzAZAJ0LQBU PQDSKekUYDIB0LUAUPUAFU06ZYADmEyArgWAqgdAOiWdAkwmALoWAKoeuF9wVSQGOIDJBOhaAKh6 ACCdAkwmqDXQtQBQ9QBIpwxwAJOJGldSUlJWVlbnDjsrKysnJ4euBYCqBwDSKXDfTSYSEhJiY2OX L1++bt26c+fO1apnlJmZKcd25cqVSty3T58+M2fONPp8k5KSdFsSExN/+uknWSksLIw1kJGRobcH 2T41NbXKn2xxcXFQUJCXl5erq+vJkyeZpwKg6gGAdArcX5OJ7t27d+rUKSIiwtPT08bGJj4+vtoO OD09/cKFC2Y2mDZtmpWV1YwZMyqxN1PpVJ7vQw89lJaWprU899xzEs5lJS8vb7SOrl27yqMbBtFh w4YtWLDgLp+aoW3btrVt25Z5KgCqHkDV4qpIDHBAXUqnU6ZMUev9+vULDg6utgMeOHDgxIkTTf20 pKSkdevW3t7ebm5ulnxGV29vZtKpra2t/LS8vFwvnerKyclxcXEZMWLEvXhqRsnR9u3bl3kqAKoe QHVWNOmUAQ6open0tddec3d3l5WRI0dGR0ePGzfOwcHhxo0bV69eDQ8Pl3UfHx/tY7F79uwJDAyU RrlLVlaWajS6pewtJiZm9uzZsmXPnj33798vjXPmzGncuLFsKflz48aNhgcWHx/fsmXLAwcOWFlZ bdmyRWsfMGBAXFycWl+9evULL7xgdG8qneo9qHq+f/nLX+zs7JYtW2YmnUZGRkoqzs3NNTwweTqL Fi2q0FMzdVq0k/zhhx86Ojo2atRI7qIORnbbq1evFi1aBAQEaAefnZ09evRoic1NmjTp0qWLmXPO PBUAVQ+AdMoAB9TVdHrmzJmmTZu++uqrKto5OTnNnz//9OnTZWVlEpDGjBkjMXXJkiW+vr7qjhLG JFyVl5efP3++uLhYNRrdUvbWunXrCRMmHDt2THJUWFiYNObn5wcFBY0fP17CVVFRkeGBhYaGqgPr 1q3b4MGDtfaOHTtq4XDBggWdO3c2ujejD6qe7+effz5t2jR5sunp6UbT6Zo1a6ytrbdv3270jOm+ K2vhUzN1WrSTLHeJiop69tln5S4FBQXy03Xr1h05ckTuPnz48KFDh2qn18vLa/PmzXLCjx8/buac M08FQNUDIJ0ywAF1L516eno++uijksckBObl5angNHbsWLXB2bNnrays4uPjT5w4kZqaamtrm5mZ Ke29e/cODg7W/XalqS1lb5GRkWqbFStWuLm5qXUzH3/9+eef5e4SmGU9Njb2gQce0N6eNZpOfzP2 yV6jD6rSqaS+xx57rH///obpNCMjw9HRUQKnqTOpl07v+NTMnBbtJIu//e1v/fr1M3y4pUuXenh4 aPvR+8qrqZ0zTwVA1QMgnTLAAXUvnQ4ZMiQlJUX34rS6ASwpKUnyT48ePZ753a5du6RdcmlgYKCd nd3kyZMLCwvNbKm7t7i4OFdX1zumU9m+WbNmE2575ZVXZLfvv/9+RdOp0QdV6VRW9u3bZ2Nj89ln n+ml05CQkEceeUS9gWlJOr3jU7PktBim0w0bNvj5+XW9rV27dtp+Dh8+rHswpnbOPBUAVQ9A4apI DHBAXUqn2vdOjQawtLQ0yT9bt241evfk5GQnJ6fFixeb2bKi6bS0tFS2efPNN5f8Ljg42MfHR0un 0dHRan369OmVTqdCtm/RosXjjz+updNly5ZJ3j5w4ICZM1nRdGrJadFLp6dPn5bD2LZtm6yvWrVK pVO1n6VLl+ruxPxvh3kqAKoeQD1GOgXuu3Qq/P39+/btqz7Ee/PmTfXp35SUlJKSkvLycj8/v5iY GDNbmopwUVFRRq9Sm5iYKKFR+y6rUNdGUu8KDh48ODIysqioaPXq1Q8//LCWTvX2Zkk6LSgoaN++ vexZpVNJeo0bN5b9XNchUbkS6VTvYO54WvTS6Z49eySdnjt3LjMzc8SIEQ4ODqpdduLr63vo0CFZ P3XqlLqUsdGdM08FQNUDIJ0ywAH1MJ1KRgoNDbW1tfXy8nJ2dk5OTpbGDh06SGry8PAYMGCA9jlY o1uainBHjx6Vnbi7u6s3CTWDBg2aNGmS3iE98cQTo0aNkpUdO3a4uLg0bNgwLCxs7ty5WjrV25sl 6fS32+/9Wltbq3QaGxtrZWDnzp2VSKd6B3PH0/KbwSd75dk9+OCDbdq0kWNr3ry5ujDS5cuX5V5y VI6Ojm5ubuqSS0Z3zjwVAFUPgHTKAAfUyclE0bXcO+4/Pz//ypUrui15t1mypRmSuCz5c6a6SktL jf6tl8rt7d7RO5gKnZbfbv/9GHX3m7dp7b/88ovh06/ozhnGAVD1AEinDHBALZpMlOQX/DhtSbxT MJUIhnEAVD1QL3FVJAY4oLZPJrJ2HPq+19g1tj2kXS2cQDCMA6DqgfutokmnDHBAjU0mdN8s1Vs4 gWAYB0DVA6RT0imA6phM6L1ZSjoFwzgAqh4gnZJOGeCAah16MrbsNRVKWVhYWFhYKvRflkzeANIp 6RTA3dbaqQVfbvZ+Kb5l8AbXgbx3CoZxAFQ9cD/gqkgMcEDtnUxk7Ujd//Ksrxv1Smwf/vVDvUin YBgHQNUDIJ0ywAE1Npkoupar91YqJxAM4wCoegCkUwA1NplQb6VSiWAYB0DVAyCdMsABNT+ZKLqW ywkEwzgAqh4A6RQAkwnQtQBQ9QCqHldFYoADmEyArgWAqgdQ2yuadMoABzCZAF0LAFUPgHRKOgWY TAB0LQBUPUBFk04Z4AAmE6BrAaDqAZBOSacAkwmArgWAqgfuF1wViQEOYDIBuhYAqh4ASKcAkwlq DXQtAFQ9ANIpAxzAZAJ0LQBUPQCQTgEmE9Qa6FoAqHoApFMGOIDJBOhaAKh6ALUDV0VigAOYTICu BYCqB1DbK5p0ygAHMJkAXQsAVQ+AdEo6rVElJSVlZWV17rCzsrJycnKobSYToGvRtQCqnqoHSKf3 XTpNSEiIjY1dvnz5unXrzp07V6vOQmZmphzblStXKnHfPn36zJw50+jzTUpK0m1JTEz86aefZKWw sDDWQEZGht4eZPvU1NQqf7LFxcVBQUFeXl6urq4nT56kvJlMgK5F1wKoek4RQDq9v9Jp9+7dO3Xq FBER4enpaWNjEx8fX21PMj09/cKFC2Y2mDZtmpWV1YwZMyqxN1PpVJ7vQw89lJaWprU899xzEs5l JS8vb7SOrl27yqMbBtFhw4YtWLDgLp+aoW3btrVt25aqZjIBuhZdC6DqqXqgLuKqSFWTTqdMmaLW +/XrFxwcXG1PcuDAgRMnTjT105KSktatW3t7e7u5uVnyGV29vZlJp7a2tvLT8vJyvXSqKycnx8XF ZcSIEffiqRklR9u3b1+qmskE6Fp0LYCqp+oBkE5/e+2119zd3WVl5MiR0dHR48aNc3BwuHHjxtWr V8PDw2Xdx8dH+1jsnj17AgMDpVHukpWVpRqNbil7i4mJmT17tmzZs2fP/fv3S+OcOXMaN24sW0r+ 3Lhxo+GBxcfHt2zZ8sCBA1ZWVlu2bNHaBwwYEBcXp9ZXr179wgsvGN2bSqd6D6qe71/+8hc7O7tl y5aZSaeRkZGSinNzcw0PTJ7OokWLKvTUTJ0W7SR/+OGHjo6OjRo1kruog5Hd9urVq0WLFgEBAdrB Z2dnjx49WmJzkyZNunTpYuacg8kE6FoAqHoAqKvp9MyZM02bNn311VdVtHNycpo/f/7p06fLysok II0ZM0Zi6pIlS3x9fdUdJYxJuCovLz9//nxxcbFqNLql7K1169YTJkw4duyY5KiwsDBpzM/PDwoK Gj9+vISroqIiwwMLDQ1VB9atW7fBgwdr7R07dtTC4YIFCzp37mx0b0YfVD3fzz//fNq0afJk09PT jabTNWvWWFtbb9++3egZ031X1sKnZuq0aCdZ7hIVFfXss8/KXQoKCuSn69atO3LkiNx9+PDhQ4cO 1U6vl5fX5s2b5YQfP37czDkHkwnQtQBQ9QBQ99Kpp6fno48+KnlMQmBeXp4KTmPHjlUbnD171srK Kj4+/sSJE6mpqba2tpmZmdLeu3fv4OBg3W9XmtpS9hYZGam2WbFihZubm1o38/HXn3/+We4ugVnW Y2NjH3jgAe3tWaPp9Ddjn+w1+qAqnUrqe+yxx/r372+YTjMyMhwdHSVwmjqTeun0jk/NzGnRTrL4 29/+1q9fP8OHW7p0qYeHh7Yfva+8mto5mEyArgWAqgeAupdOhwwZkpKSontxWt0AlpSUJPmnR48e z/xu165d0i65NDAw0M7ObvLkyYWFhWa21N1bXFycq6vrHdOpbN+sWbMJt73yyiuy2/fff7+i6dTo g6p0Kiv79u2zsbH57LPP9NJpSEjII488ot7AtCSd3vGpWXJaDNPphg0b/Pz8ut7Wrl07bT+HDx/W PRhTOweTCdC1AFD1AKoTV0WqmnSqfe/UaABLS0uT/LN161ajd09OTnZyclq8eLGZLSuaTktLS2Wb N998c8nvgoODfXx8tHQaHR2t1qdPn17pdCpk+xYtWjz++ONaOl22bJnk7QMHDpg5kxVNp5acFr10 evr0aTmMbdu2yfqqVatUOlX7Wbp0qe5OzP92wGQCdC0AVD2A2lDRpNOqSafC39+/b9++6kO8N2/e VJ/+TUlJKSkpKS8v9/Pzi4mJMbOlqQgXFRVl9Cq1iYmJEhq177IKdW0k9a7g4MGDIyMji4qKVq9e /fDDD2vpVG9vlqTTgoKC9u3by55VOpWk17hxY9nPdR0SlSuRTvUO5o6nRS+d7tmzR9LpuXPnMjMz R4wY4eDgoNplJ76+vocOHZL1U6dOqUsZG905mEyArgWAqgdAOq2H6VQyUmhoqK2trZeXl7Ozc3Jy sjR26NBBUpOHh8eAAQO0z8Ea3dJUhDt69KjsxN3dXb1JqBk0aNCkSZP0DumJJ54YNWqUrOzYscPF xaVhw4ZhYWFz587V0qne3ixJp7/dfu/X2tpapdPY2FgrAzt37qxEOtU7mDuelt8MPtkrz+7BBx9s 06aNHFvz5s3VhZEuX74s95KjcnR0dHNzU5dcMrpzMJkAXQsAVQ+AdFrH0qnl8vPzr1y5otuSd5sl W5ohicuSP2eqq7S01Ojfeqnc3u4dvYOp0Gn57fbfj1F3v3mb1v7LL78YPv2K7hxMJkDXAkDVAyCd 1sZ0WnQtl/4EMJkAXQsAVQ+gcrgq0t0OcCX5BT9OWxLvFMzwBzCZAF0LAFUPADWQTrN2HPq+19g1 tj2kXS2cdIDJBOhaAKh6AKimdKr7ZqnewkkHmEyArgWAqgeA6kinem+Wkk4BJhOgawGg6gGgWtNp xpa9pkIpCwtLJRYmE2CeCoCqB6CLqyJVbIA7teDLzd4vxbcM3uA6kPdOASYToGsBoOoBVE9Fk06N /zRrR+r+l2d93ahXYvvwrx/qRToFmEyArgWAqgdAOq2BdKoUXcvVeyuV/gQwmQBdCwBVD4B0Wt3p VKPeSmX4A5hMgK4FgKoHQDqtyXSqFF3LpT8BTCZA1wJA1QOoHK6KxAAHMJkAXQsAVQ8ApFOAyQS1 BroWAKoeAOmUAQ5gMgG6FgCqHgBIpwCTCWoNdC0AVD0A0ikDHMBkAnQtAFQ9gNqBqyIxwAFMJkDX AkDVA6jtFU06ZYADmEyArgWAqgdAOiWdAkwmALoWAKoeoKJJpwxwAJMJ0LUAUPUASKekU4DJBEDX AkDVA/cLrorEAAcwmQBdCwBVDwCkU4DJBLUGuhYAqh4A6ZQBzrzy8vJbt25VwwOVlJSUlZXVxadT PUdez37d1BroWgCoegCk03sywCUkJMTGxi5fvnzdunXnzp2rTydx7dq1Dg4Od7+fxMTE1NRUMxv0 6dNn5syZdeXpVOGR3/HMWJgqY2JiatX5+eSTT3Jzc5lMgHkqAKoeAKo1nXbv3r1Tp04RERGenp42 Njbx8fHV9iTT09MvXLhQC+Oc3oENGzZswYIF9SOd6j21uzzyO54ZS7zzzjuffvpprUqnJ0+efP75 50tKSphMgHkqAKoegIW4KlLVpNMpU6ao9X79+gUHB1fbkxw4cODEiRNrYZyr6IHVoXSq99Sq58jN P6lnn3229pwfzV//+lczfYDJBJinAqDqAdw/NVsz6fS1115zd3eXlZEjR0ZHR48bN06m+zdu3Lh6 9Wp4eLis+/j4JCUlqY337NkTGBgojXKXrKws1Wh0S9lbTEzM7NmzZcuePXvu379fGufMmdO4cWPZ 0tvbe+PGjXpHlZ2dPXr0aBcXlyZNmnTp0kXbzx2P6tq1ay+88IKjo6Pca9KkSVpcuZsDk80WLVqk 7iLb9+rVq0WLFgEBAWp7vYxn9LToMroHo0di5unccYcDBgyIi4tT66tXr5adGH1q6sgNH1fOvxyS s7Nzq1atRo0alZOTY/RXoJ2ZkpIS73/37rvvmjrtuiSafvLJJxV6UN273/2v++WXX542bZpuKP2v //ovWTlz5oy9vf2vv/7KZALMUwFQ9QBIp9WdTmU63rRp01dffVWFFicnp/nz558+fbqsrExiz5gx YyQYLFmyxNfXV91R5veSGcrLy8+fP19cXKwajW4pe2vduvWECROOHTsmmSEsLEwa8/Pzg4KCxo8f L0GiqKhI76hkP15eXps3b5Y9Hz9+XNvPHY/q+eefDw4OvnDhwqVLlyShaXHlbg5MN3yuW7fuyJEj 0j58+PChQ4caplOjp0WXqT0YHomZp3PHHXbs2FFL1AsWLOjcubOpp2b0cWUzf3//E7f169cvJCTE 6K9A94lf/d2yZcsaNGiwY8cOU6ddk5eXZ2VltXv37go9qO4e7v7XLdG9WbNmhYWFsn79+nVJ70eP HlV529bWduvWrUwmwDwVAFUPgHRafenU09Pz0Ucftba2Hjx4sAQGNY8fO3as2uDs2bMSIeLj4yUz pKamypQ9MzNT2nv37q2CgbYrU1vK3iIjI9U2K1ascHNzU+umPkCr9mP4hcY7HtXFixelUTKt2kb7 qOddHpjRj78uXbrUw8PDcAPD02KK3h4Mj8TU07Fkh0bTqdGnZvi4586dk8fV3tBOSEiQmz///LPe r8DomTl48GCjRo1WrVpl5rRrjh8/LhtcuXKlQg+qqZJf96+//tq0adPPP/9c1uWM9ezZU9u/1EVs bCyTCTBPBUDVAyCdVl86HTJkSEpKSkZGhtHUkZSUJHP9Hj16PPO7Xbt2SbsEsMDAQDs7u8mTJ6u3 nkxtqbu3uLg4V1dX8+lU7efw4cOG6dT8Ue3cuVMatSeixZW7PDDdzTZs2ODn59f1tnbt2hluYHha 9NxxD9qRmHo6luzQ8nRq+LjqdGmPe+nSJbmZnJxsGEf1bkqYbNWq1fTp0833HM3JkydlA9l/hR5U U1W/7j//+c/+/v6y8thjj2kfMxbu7u4ff/wxkwkwTwVA1QOwBFdFqpp0qn3v1GjqSEtLk7m+qY84 Sn5wcnJavHixmS0rmk7VfpYuXVrRo8rMzLS2tt67d69eXLnLA9M2O336tMTObdu2yfqqVauMZkvD 06LLkj1oR2Lq6ViyQ0mn0dHRal3iYoXSqQqN3333nWr/9ttv5eaZM2fMp9MbN27Igw4dOrS8vNyS nvPb7fctbWxsVAS1/EGr/Nd98OBB2Y/kUrm79h8KxcXFcmzff/89kwkwTwVA1QO4z9WidCr8/f37 9u2rPq168+ZN9enflJSUkpISiSJ+fn7a36s0uqWpVBAVFSUbGz0qaff19T106JCsnzp1Sn3b0JKj evLJJ0eOHPn/2Lv7uKjq/P//XFhekVeIeAEk4GUqaC6itZTKlReoeRFqyI101dStDD+kqbu65pa6 flZUSlsptbRtuyWBgutlqBiuZvRxtdUCJRUFFQIVU3AAf68v59f5zGfmzDAgDCCP+23+mDmcOed9 zrxfb95Pz3DMz8+XyOHt7a3GuYdpmLpaamqqRMHMzEzJRVOmTFE3rr8dzdOismQL+i0xdTgVbnD8 +PGTJ08uKiraunVry5Yt1XRq6tD09ytnW/YbFhYmZ6mgoCA0NNTHx0fJnKbSqRxycHDwoEGDDC4X a552fUFBQR9++GGldqqvWj5u4eXl1bRp07lz56pLzp4926ZNG82/HGYyAeapAKh6AKTTWkunknxG jBhhb2/v6enp7OysXOzq2rWrhAF3d/eQkJC7d++aWdNUKjhz5oxsxM3NTbn0p+/q1avyLhsbG0kI rq6uxncnMrWv3bt3t2jRQhZKuI2JiVHjysM0TH+1sWPHNmnSpGPHjrGxsY6OjspdiPRX0Dwt+irc gn5LTB1OhRs8dOhQp06dGjduLD9999131XRq5tD095ueni7hUGKtg4PDwIEDlWuYZtLp8ePH5cNq 1qxZq19FRESYOu36Dhw40K9fP+V/FrVwp/qq5eN+UH7fY2m/JFJ1yfTp0//85z8zmQDzVABUPQBY L51arrCwULmBjep2OUvWNEOCqMGNWFU///xzQUFBZVslUcfU3qulYXl5ecryO+WMVzB1WizfgoWH Y36DJSUlps6emXNusNkKz3/Veo4+SZVr1qyp8k6r5eNevXq1n5+f+vJf//pXWFgYkwkwTwVA1QNA HU2nQA354osvanHvkm9dXV23b9+uLtm1a9etq9eoNTBPBUDVA7Acd0VigAMe1qVLl5YsWWLwn+5K vez/TUT2P49Ra2CeCoCqB/DwFU06ZYADqj64yONzu4E7WgxOm7umKLeAWgPzVABUPQDSKQMcUDvp VH18buerfymVWgPzVABUPQDSKQMcUAvp1OBSKrUG5qkAqHoApNOHGuB48OBRXY/LX3zFZALMUwFQ 9QBU3BWJAQ6oqemC/mNP78lfj1vwz54Tk7qMO7tiK7UG5qkAqHoADQfpFKj9dLrD4fmU4W+kjIyM a+WfOuGtawdOlOlKqDUwTwVA1QMgnTLAAdabLuhfLOWevWCeCoCqB0A6ZYADame6oH+xlFoD81QA VD0A0ikDHFALDC6WUmtgngqAqgdgHndFYoADmEyArgWAqgdQ1yuadMoABzCZAF0LAFUPgHRKOgWY TAB0LQBUPUBFk04Z4AAmE6BrAaDqAZBOSacAkwmArgWAqgcaCu6KxAAHMJkAXQsAVQ8ApFOAyQS1 BroWAKoeAOmUAQ5gMgG6FgCqHgBIpwCTCWoNdC0AVD0A0ikDHMBkAnQtAFQ9gLqBuyIxwAFMJkDX AkDVA6jrFU06ZYADmEyArgWAqgdAOiWdAkwmALoWAKoeoKJJpwxwAJOJ6qXT6UpLS2u9GWVlZffv 3zf10+vXr+fn59eFllS5a5k6BIZxgF8oAEinpFMA1VBrCQkJmzZtio2NjYuLy8zMrI8HPnjw4KVL l1btvUlJSWlpadXSjB07drRu3dp4eXFxcVBQkKenp4uLy7lz56xwQky1pMq22/iYOYTqGsb/8Y9/ nDp1Sn15+fLlzz77jLoGSKcAHhJ3RWKAA+rNZGLAgAFeXl6hoaEeHh52dnbx8fFWa3BWVtbFixdr N51OmjQpOjpasz2VbZ6pTLh///4nn3zSmj2hwnRa2UNbbNPdzCFU1zAuPXDFihXqy927d1v5vAFg 8gaAdMoAB9RyOl2wYIHyfOjQocHBwVZr8KhRo+bNm1e76dRMeyrbPFOZUNo2ZMiQOpVOK3toE2w6 mTkE0inALxQAIJ0CqOZ0OmfOHDc3N3kSHh6+du3aWbNmSci5devWjRs3xo0bJ8979OiRnJysrJya mhoYGCgL5S3Xr19XFmquKVtbv3798uXLZc1nnnnmxIkTsvCdd95p3ry5rNmtW7ddu3YZtEpz4yEh Idu2bVOeb926dcyYMWo6XbJkyRtvvOHs7NylS5eEhAT9/S5evLhjx479+/dPT0+Xt3ft2vWpp55K SkpS14mJiTFuj3HzNA8tNzdXmtGmTZt+/fpFRUUZZ8L3339fftqsWTPZTmxsrCzJy8uTnUpT27dv HxERof4lp8E5t6Tx+ky1RDbi5+fXtm3bgIAAU2feeB2DQ3CwaaR/CAZNjbV52tQRVeoQzKTTSnU2 /bYxLACkUwCkUwY4oP6l04yMjBYtWsyYMUPJe05OTitXrpREUVpaKqFl+vTpMtffsGFDnz59lDdK zpQYUFZW9tNPPxUXFysLNdeUrXXo0OG11177/vvvJU6MHTtWFhYWFgYFBc2ePVsyRlFRkUGrNDfe u3dvJUmK6Ojovn37qtt3cXFZs2bN6dOnp02b5ujoWFJSoiyXvPT222/LRp599lkJri+99NIPP/zw +9//Xo5afa9y3dWgPcbN0zy0YcOGBQcHX7x48cqVKxKejdPpL7/8EhkZ+dvf/la2c/fuXVkim/X3 9z9bbujQocOHD1dbon/OLWm8PlMtiYuLO3XqlBxCWFjYxIkTNc+88ToGhzDCpr3+IRg01cumpakj qtQhmEmnleps+m1jWABIpwBIpwxwQH1Kp5IKevbsaWtrO378+Nu3bytT/JkzZyorXLhwwcbGJj4+ XrJHWlqavb19Tk6OLH/uueeUOKRuytSasrXJkycr63z44Yeurq7KczPfLzXeuPl0+tZbbynP8/Ly pA3Hjh1Tls+ZM0dZLiv069dPiSuJiYlNmzY1SKcPzH6zV/PQLl++LAslRCnrmPo+7R/+8AfJbMrz zMxMeYt6rTghIUFeXrp0yeCcW9h4lSUt2bhxo7u7u/kzr7+OvnE2HdVDMGiq+SOy/BDMp9NKdTb9 0wiAdAqAuyIxwAH1KZ1OmDAhJSUlOztbP36omS05OVliwKBBg5791dGjR2W5RIXAwMBGjRrNnz// 3r17ZtbU39q2bdtcXFwqTKfGGzefTvX/7rRdu3br1q0zWL5o0SJ/f3/leVJSUmXTqeahHT58WBaq 582SdKpsR33LlStX5OWRI0eMj8KSxqvMtGTnzp2+vr5Pl+vcubPmkWquYz6dGnSPCo+owkMQ3bp1 W7ZsmfpSQqzkVVP9wZLOBoB0CuAB/6MMAxxQv9Kp+nenmvHj/PnzEgP27dun+XbJIU5OTu+9956Z NauQTo03rqTTtWvXKs8XL16smU5zc3OlDRLPqjedah5aTk6Ora2tcp3WwnR67tw52c7BgweVl3v3 7pWXGRkZD5lOTbUkPT1dEt3+/fvl+ZYtWzTTqal1LEynFh6RJelU/1vBYvPmzZI5H6azASCdAiCd MsABj1Q6FZIrhgwZonyv8s6dO8q3f1NSUnQ6XVlZma+v7/r1682saSqdRkZGmroTrObGx48fP3ny 5KKioq1bt7Zs2VI/nQYEBBQUFJSUlKxYscLR0dF4v5akU4P2GLzUPLT+/fuHh4fn5+efPHnS29u7 wnRaWloqbwkLC5O3S4NDQ0N9fHzkMB8ynZpqSWpqqiTPzMxMia9TpkxRm6d/aKbWsTCdyhF52DSv 8IgsOYR3333XwcFB2q/kbWnhwoULzfSHCjsbANIpANIpAxzwqKVTiQojRoywt7f39PR0dnZWvrfZ tWtXSTLu7u4hISHKzXJMrWkqnZ45c0Y24ubmply406e58UOHDnXq1Klx48Zjx46VJKOfTidNmtS9 e3fZspOTk3odr7Lp1KA9Bi81D2337t0tWrSQhX369ImJiakwnT4ov1Yp+U3StSSxgQMHKpcZHz6d mmqJnKsmTZp07NgxNjZWcrty0yODQ9Ncx8J0KtbaeFV4RJYcgnzQEm5tbGw8PDwkMAcEBKi3/61a ZwNAOgVAOmWAAx7NyURhYeG1a9f0l9wuZ8maZly9elXz3qqaGy8pKSkoKDBYeOvWreLi4rKyMtmU ctXuYRi0x+Cl8aHpdDrLD1aVl5dnfCAPyVRLZF/KIdwpp3loptaxvGtV1xHJdtLS0vT/CroaOxsA VVFuAZM3oIHgrkgMcMAjmE5B16JrAY9SXe//TUT2P49R9QBIpwxwABECdC0AtVnX8vjcbuCOFoPT 5q4xuJRK1QMgnQIgQoCuBcB66VR9fG7nq38plaoHQDoFQIQAXQtALaRTg0upVD0A0imAmo0QPHjw 4MGDh4WPy198xeQNeDRwVyTSKVAX0ymnCHQtAJr/ZLmn9+Svxy34Z8+JSV3GnV2xlaoHGs7vcdIp AxxAhABdC0Dtp9MdDs+nDH8jZWRkXCv/1AlvXTtwokxXQtUDpFPSKQAiBOhaAKxX1/oXS7lnL0A6 JZ0ywAFECNC1ANROXetfLKXqAdIp6ZQBDiBCgK4FoBYYXCyl6oFHGHdFYoADiBCgawGg6gGAdAow maDWQNcCQNUDIJ0ywAFMJkDXAkDVAwDpFGAyQa2BrgWAqgdAOmWAA5hMgK4FgKoHUDdwVyQGOIDJ BOhaAKh6AHW9okmnDHAAkwnQtQBQ9QBIp6RTgMkEQNcCQNUDVDTplAEOYDIBuhYAqh4A6ZR0CjCZ AOhaAKh6oKHgrkgMcACTCdC1AFD1AEA6BZhMUGugawGg6gGQThngACYToGsBoOoBgHQKMJmg1kDX AlDvq/769ev5+fk1uouysrL79+/X989Lp9OVlpY2kEbW0Edmhc4G0inAZIJaA10LgJWqft++fYcO HTJYGB8fn56ebslOk5KS0tLSlOfFxcVBQUGenp4uLi7nzp2ruSPdsWNH69at68I5z8nJ2bRp07Vr 16rw3sGDBy9dutR4eUJCQnJyssFJ/uGHH8xs6vTp0998843VGnnv3r1NRrKzs635kVmns/3jH/84 deqU+vLy5cufffaZ1XoXd0ViWgMQIUDXAtCwqn7t2rUyv9e/PpaXl9e4ceOLFy9astNJkyZFR0cr z/fv3//kk09a4UgrFXWysrIsPJYqWLRokY2NzZIlS6rQElPpdMCAAU2bNj1//ry65Pnnn4+NjTWz 5dDQ0Li4OKs18vbt29P0PP3007J99R8pqvaRVfZjsk5n8/DwWLFihfpy9+7d1unhj/xvatIpQIQA XYuuBVD1GnJzcx977LF9+/apS95///3nnnuuCg2QGDNkyJC6lk5HjRo1b968mmiGTqfr0KFDt27d XF1dLfn6q0FLzKRTe3t7+WlZWZkl6fT+/fvt2rUrLCy0ZiNV+fn5nTp1mjJlykN+ZJX9mKzT2Uin pFOAyQS1BroWAKtW/bhx4yZNmqS+HDhwoJKFbty4IT+SUNGjRw/1u6bh4eFr166dNWuWLL9165a8 jImJUTJtmzZtmjVrJkFI3v7yyy8vWrRI3eabb765atUqg/2uX7/ez8+vbdu2AQEBJ06cULcvy5cv X+7m5vbMM8+oyyVFjxkzRnbRr1+/qKgozaiTmpoaGBgoP5L3Xr9+XZa88847zZs3lyXSql27dj0o vzIsu3B2dm7fvn1ERIT6V4sGx6V57Abi4+MlFn7zzTc2NjZ79uxRl4eEhGzbtk15vnXrVmm2ZkuU 4Gd8pJJO/+u//qtRo0YffPCBJen0q6++CgoKMvXTGmqkavLkyZJ7CwoKNP/hQ/MjM/7cjfer2Tf0 /wFFv7MZf3xmPmXZ8uLFizt27Ni/f//09HQ5CV27dn3qqaeSkpIqlU6NO5uFJUM6JZ0CRAjQteha AFVv8qeJiYlNmjRRAobM1+X5zZs35bkEg+nTp8t8esOGDX369FFWlrji5OS0cuVKWbO0tFS9tvbL L79ERkb+9re/lQn63bt3JfC0atXq3r178iPZmmSPM2fOGOw3Li7u1KlTRUVFYWFhEydOVLffoUOH 11577fvvv5eJ/tixY5Xlw4YNCw4Ovnjx4pUrVyRZaaZTiU8SA8rKyn766afi4mJZUlhYKMlt9uzZ 0irZkSyRl/7+/mfLDR06dPjw4ZrHpXnsBkaMGLFgwQJ54uPjM378eHV57969lcQuoqOj+/btq9kS U0cq6fTTTz+VbN+iRYusrKwK0+kbb7yh7s5qjVR8/vnntra2Bw4c0Ny1qY/M+HM33q9m31AZdDbj j8/Mpyx59e2335Ye8uyzz3bp0uWll1764Ycffv/738tpr1Q6Ne5sFpYM6ZR0ChAhQNeiawFUvcmf 6nQ6Z2fnjRs3yvM//vGPL774ojy5cOGCjY1NfHy8zO/T0tLs7e1zcnKUqfbMmTPV9+p/8/MPf/iD JAE1P0i4kpQlzyUFyVTeTNtk1+7u7uoGJ0+erDz/8MMPXV1dH5TfjUYaI9lAWW7qa6LPPfecEof0 F+p/ZTQzM1O2o1yde1B+/yF5eenSJYPjMnXs+uRdsjwjI0Oeb9q06bHHHlMvoGkGvwdaX5o1PlI1 nUowe+qpp0aOHFlhOpWIZeovNmuukSI7O7tNmzYSXDV3bclHpv+5m/pmr/46+vQ7m8HHZ/5TnjNn jrL8rbfe6tevnxIXExMTmzZtWql0atzZLCwZy3FXJKY1ABECdC0ADbHqo6KiJBSVlZVJElCm9cnJ yTLVHjRo0LO/Onr06AOjP0Q0lU7FK6+84u/vL08kZX388cfGO925c6evr+/T5Tp37my8wW3btrm4 uMiTw4cPS2PUu8KaSqcSFQIDAxs1ajR//nzlsq1B7FEOSt3OlStX5OWRI0cM9mvq2PXJyq1atXqt 3NSpU2X91atXVzb4GR+pmk7lyfHjx+3s7LZv324mnUoQMnVpt0YbKYYPH969e3fl0qUxMx+Z5udu sF/NdcynU4OPr8JPedGiRUr/fFB+V2TNdNqtW7dly5apLyXESl411dksLBmQTgEiBOhadC2Aqjf3 0++//14m1n/729/atm2r/L+U58+flyX6d0syjgHm0+nJkydtbW0ll0osUbOiKj09XWb2+/fvl+db tmwxn05zcnJkU8eOHTOfThWSQ5ycnN577z3j2HPu3Dk5qIMHDyov9+7dKy+VS4v6+zV17KqSkhJp 2Ouvv77hV8HBwT169FCD39q1a5XnixcvrnI6FbK+fCK9evUylU7/8pe/6P99r9Ua+cEHH8jHZ/6/ sdH8yEx97vr7NbWOhenUwk/ZknSq/61gsXnzZsmcpjqbhSUD0ilAhABdi64FUPUVVL2Pj49M0F99 9VV1iczdhwwZonx38c6dO7dv365UOhVeXl6yzblz5xrvLjU1VRJIZmamxJgpU6aoadNUHOrfv394 eHh+fr6EXm9vb810mpKSotPpysrKfH19169fryyMjIxUb+5aWloq2wkLC5NjKSgoCA0NlaNWbo1r cFyax66SMCOhUf1rQ6Hcdki5VjZ+/PjJkycXFRVt3bq1ZcuWavDTb4mF6fTu3btdunSRLZtKp35+ fmoCNFBzjZQY1rx5c1nzph4JwwYN0PzITH3u+vs1tY6F6dTCT9mSdPruu+86ODhI+5W8LS1cuHCh mc5mScls3LhR/9vCpFOmNQARAnQtuhZA1RvasGGDRJfjx4+rS2Q6PmLECHt7e09PT2dnZ+PvRlaY TmXWLts8e/as5h7Hjh3bpEmTjh07SvRydHRUbn5jKrPt3r27RYsW0pg+ffrExMRoJpauXbvKcnd3 95CQEPUbp2fOnJHlbm5uyrW49PR0ySqSxyR1DBw4ULmkZnxcmseuGj16dFRUlMHeJYBFRETIk0OH DnXq1Klx48ZygBJv1OBn0BJL0umD8qtztra2muk0Ly+vQ4cOpm60U3ON3LRpk42Rw4cPG+zL1Eem +bkb7FdzHQvTqYWfsiXpVHqRhFs5Og8PDwnMAQEB6u1/NTubJSUTGBjYs2dP0inTGoAIAboWXQug 6iutsLDw2rVrVXvv6tWr/fz8zKwg+UoJV3fKmd+aTqersCW3yxkvv3r1qn6Kk/1q/ico1XXsJSUl prZv0JKHIXHx5ZdfrvLbrdBIUx+Zqc9df7+V6humepcln7Il20lLS1P/kLXCzvYwJaOPuyIxrQGI EKBrAaDqq4ckE1dX1+3bt/PR1JC5c+cmJiZyHhpmRZNOmdYARAjQtQBQ9Za6dOnSkiVLlP++EgDp lHQKMJkAXYuuBVD1VD1AOiWdAqDWQNcCQNUDIJ2STgEmE6Br0bUAqp6qB+oj7orEAAcwmQBdC8Aj W/V15MEnBTRwpFOACAG6Fl0LoOrreiMBkE6Z1gBMJkDXAkDVk04BkE4BJhPUGuhaAEinAEinTGsA JhOgawGg6kmnQJ3CXZGY1gBMJkDXAkDVk04BioV0CjD0UGugawEgnQIgnTKtAZhMgK4FgKpnwg1Q LKRTgKGHWgNdC0DtVH1RbgETboB0SjoFGHqoNdC1ANRO1esK755etCHeKdhqYwKDD2Ah7orEtAYg QoCuBaBBVP31Q99+5Tfzc/tBslx5kE4BkE4BJhPUGuhaAKxU9foXSw0epFMApFOAyQS1BroWAGtU vcHFUtIpANIpAGoNdC0AVq367D3HTIVS6z/4pADSKdMagAgBuhZdC2jQVf9j9Ge7u70Y3y54p8so QiNQx3FXJKY1ABECdC0Aj3jVXz+UduLlt79o5pfUZdwXTf1Ip0B9rGjSKdMagAgBuhaAR6Tqi3IL DC6lcgIB0inpFGDoodZA1wJQa1WvXEplTABIp6RTANQa6FoAar/qi3ILOIEA6ZR0CjD0UGugawGg 6gH8H9wViQEOYDIBuhYAqh4ASKcAkwlqDXQtAFQ9ANIpAxzAZAJ0LQBUPQCQTgEmE9Qa6FoAqHoA pFMGOIDJBOhaAKh6AHUDd0VigAOYTICuBYCqB1DXK5p0ygAHMJkAXQsAVQ+AdEo6BZhMAHQtAFQ9 QEWTThngACYToGsBoOoBkE5JpwCTCYCuBYCqBxoK7orEAAcwmQBdCwBVDwCkU4DJRM3XWllZ2f37 9zntBnQ6XWlp6aOxl3oxjNMPAdIpANIpAxzwiEwmEhISNpU7cOBAcXGx5bvbsWNH69atledJSUlp aWl16myYOS7JM4mJicuWLZs9e/aqVavi4uJu3rxZqY2bOd7BgwcvXbrUko3k5ORI865du1aFo7N8 L5Vtv+WdR93Iww/jD/OJ6PdDAKRTAKRTBjigHk8mBgwY4OXlFRoa6ubm5uDg8PXXX1chFUyaNCk6 Ovoh25+VlXXx4sXK/sgUU8eVl5fn7+/v4uKycOHC999/PzIyslevXsnJyZXauP7xGrTN8ty4aNEi GxubJUuWVOHkPGQ6reznpXQegzaoG3nIYfwhPxHSKUA6BUA6ZYADHp10umDBAuX5008/LZGjtlLB qFGj5s2bV9kfmUmnmsc1c+ZMd3f3Gzdu6K9cVlZWXc22MDfqdLoOHTp069bN1dXVku/oVm0v1du1 TH0KDzmMP+QnQjoFSKcAzOOuSAxwQL1MpxI/Ro8erTyXtDBu3DiZ9/fo0UO9kJWbmztmzJg2bdr0 69cvKipKTQXh4eExMTHq87Vr186aNUt+euvWLc3t5OXlTZs2rVOnTk888YRsSpa88847zZs3l9Uk sO3atUu/hcY/krfLXpydndu3bx8REZGfn2/hccmadnZ2mzZVMEaPHTt2+/btyvM5c+a88MILyvOU lJQJEyboH69x25TcuHz5cjc3t2eeeebEiROau4iPj2/Xrt0333xjY2OzZ88edXlISMi2bduU51u3 bpWzXam9mDozBh+K2n4Jyd3+rz/96U+yfP369X5+fm3btg0ICJCNS+cxboO6Efmpmf3KpsycDfOf iKnNmuqHmp0NAJM3gIomnTLAAfUpncq0XkLR448//uWXXyrLJZZMnz5dksyGDRv69OmjLBw2bFhw cPDFixevXLkiOUpNBfqX8uS5k5PTypUr09PTS0tLNbcjCz09PXfv3l1cXPyf//xHlhQWFgYFBc2e PVtaUlRUpN9C4x/JS39//7Plhg4dOnz4cAuP6/jx45IG//3vf5s/k/JGJZFK8xwdHe3t7ZVcJG2Q oKV/vMZtkx916NDhtdde+/777yUpSdDV3MWIESOU8Ozj4zN+/Hh1ee/evdWcHx0d3bdv30rtxdSZ MfhQ9D+vG7/64IMP5EQdOnRIFsbFxZ06dUr2FRYWNnHiROk8mm1QNiI/NbNf82fD/CdiarOm+qFm ZwPA5A2gokmnDHBAvUmnjRs3trW1lZCwf/9+ZeGFCxfkZXx8vKSCtLQ0iWc5OTmXL1+WhRIplXX0 v1FpkE5nzpxpZjvKQuO/e7Twm72ZmZnydvX6akJCgry8dOmSJceVmJgoL7OyssyfycOHDz/xxBP3 79/fu3evJCJvb285WAl17du3P3funMHxGn/ndvLkycrzDz/80NXV1Xj70lo5FRkZGfJ806ZNjz32 2PXr182kUwv3YubM6H8oD7S+GHzy5MlmzZpt2bLFoKkbN250d3fX/GavupH1Nt5m9mv+bJj5REwd jql+qNnZGBYA0ikA0ikDHFCf0mlkZKSkIwkhr776qrIwOTlZJvqDBg169ldHjx6VzCYLs7OzK0yn 6nPN7SgLv/vuu6qlU+XtajOuXLkiL48cOWLJcZ05c0ZWljaYP5M6na5ly5ayo9mzZ3/wwQdvvvnm K6+8kpKS0qtXL+NjNPMXodu2bXNxcTHevqzQqlWr18pNnTpVmrR69erKplPjvZg5MwZx1OClRD4J 3osXL1aX7Ny509fX9+lynTt3Np9O/2jTw5L9ap4NM5+IqcMx1Q81OxvDAkA6BUA6ZYAD6lM6Vb5i KpN+Ozu7pKQkeX7+/HmZ6O/bt09/zZycHFtb22PHjlmeTjW3oyzcuHFj1dLpuXPn5O0HDx5UXu7d u1deKtchKzyuoqIiR0fHGTNmVHgyJ0yYEBUV5erqKilI9uXh4TF37lzNY6xsOi0pKZGFr7/++oZf BQcH9+jRQ02na9euVZ5LXKxUOjVzZsyk01u3bslOJ06cqN6IKD09vVGjRsoF5y1btlSYTtfYeFmy X82zYeYTMXU4pvqhZmcDQDoFwF2RGOCA+pdOhQQwJycn5fuQ/v7+Q4YMUf4HkTt37ty+fVue9O/f Pzw8PD8//+TJk97e3hWmU1PbkSV9+vT59ttv5fmPP/6o3LQ2MjJSlms2Uv9HsrI0IywsTDZVUFAQ Ghrq4+NjfItXU8clqdje3v6vf/2rpERla4mJidIGg7dv3ry5ZcuWAwcOVBJUs2bN5OWZM2eMj9Gg 2RXmMcnJbdu21f8vWJV7IykX+saPHz958mTZ49atW2WPajq1ZC9mzoypdKrT6SQbDxo06N69e+pP U1NTJZ1mZmbKGZsyZYp8ykrnMdWGz2wGWLJfU1eSTX0iZg7HVD/U7GwAmLwBIJ0ywAH1L53evXu3 W7duQUFBkgEkmYwYMUJig6enp7Ozs/JFzd27d7do0UIWSraMiYmxJJ1qbufq1auymkSyNm3auLq6 KnfZkezXtWtXNzc39c9EVQY/Sk9Pl6Ai4c3BwUECpPGFUzPHJS8/+ugjR0fHpk2bdu/eXfJSSEiI cTrNzs62tbVdsWKF8nL48OGysmY4NGhbhXls9OjRUVFRBgslYkVERMiTQ4cOderUqXHjxmPHjn33 3XfVdGrhXkydGVPpVLkpkWTvVr9SmiF7b9KkSceOHWNjY+VcDbJpY6YN0rUs2a+pdGrmEzG1WVP9 ULOzAWDyBoB0ygAHPAqTicLCwmvXrukv0el0Bkuqth3x888/FxQUGCyU4Grq//80+FFeXp7x2y2X lZV19uzZh/mfTi1sdmWVlJSYOi4L9/KQZ0bdiLKvO3fufGzzGzNtULtWDX0imps10w81OxsAJm8A SKcMcED9mEwU5RZwAsEwDoCqB0A6BVA7kwld4d3TizbEOwVTiWAYB0DVA48k7orEAAfU9cnE9UPf fuU383P7QbJceXACwTAOgKoHGlpFk04Z4IBam0zoXyw1eHACwTAOgKoHSKekUwDWmEwYXCwlnYJh HABVD5BOSacMcIBVh57sPcdMhVIePHjw4MGjUv9kyeQNIJ2STgE8bK39GP3Z7m4vxrcL3ukyimun YBgHQNUDDQF3RWKAA+ruZOL6obQTL7/9RTO/pC7jvmjqRzoFwzgAqh4A6ZQBDqi1yURRboHBpVRO IBjGAVD1AEinAGptMqFcSqUSwTAOgKoHQDplgANqfzJRlFvACQTDOACqHgDpFACTCdC1AFD1AKof d0VigAOYTICuBYCqB1DXK5p0ygAHMJkAXQsAVQ+AdEo6BZhMAHQtAFQ9QEWTThngACYToGsBoOoB kE5JpwCTCYCuBYCqBxoK7orEAAcwmQBdCwBVDwCkU4DJBLUGuhYAqh4A6ZQBDmAyAboWAKoeAEin AJMJag10LQBUPQDSKQMcwGQCdC0AVD2AuoG7IjHAAUwmQNcCQNUDqOsVTTplgAOYTICuBYCqB0A6 JZ0CTCaqSqfTlZaWGj+vRWVlZffv3+fTZ54KgKoHQDplgAPq92QiISFhk55///vfZjYyePDgpUuX Gj9/eGozDhw4UFxcbPkbd+zY0bp1a+V5UlJSWlpanfpQzByX5OrExMRly5bNnj171apVcXFxN2/e ZJ4KgKoHQDolnQINdDIxYMCA3r17T/vVnj17aiWdSjO8vLxCQ0Pd3NwcHBy+/vrrKqTTSZMmRUdH P2RLsrKyLl68WNkfVfa48vLy/P39XVxcFi5c+P7770dGRvbq1Ss5OZl5KgCqHkD14q5IDHBAfUqn UVFRFu6iRtPpggULlOdPP/205MwqpNNqMWrUqHnz5lX2R5U9rpkzZ7q7u9+4cUN/5bKyMuapAKh6 ACCdAqTT/5WXlxceHu7s7Ny+ffuIiIj8/Hzz6VRz/bFjx27fvl1ZYc6cOS+88ILyPCUlZcKECWZS nITA0aNHK88lv40bN07yZ48ePdRLi7m5uWPGjGnTpk2/fv2k8Wo6lTbExMSoz9euXTtr1iz56a1b tzS3I82eNm1ap06dnnjiCdmULHnnnXeaN28uq3Xr1m3Xrl36LTT+kamzVOFxyZp2dnabNm16tLsW ANIpAJBOASYTlUunYWFhx8upf3QaFBTk7+9/ttzQoUOHDx9uPp1qri+pTEmkxcXFjo6O9vb2Sn6b PXv28uXLNVOcZMht27Y9/vjjX375pbI8ICBg+vTpEi83bNjQp08fZeGwYcOCg4MvXrx45cqVkJAQ NZ0aNM/JyWnlypXp6emlpaWa25GFnp6eu3fvlhb+5z//kSWFhYVyLNJCaUlRUZF+C41/ZOosVXhc cqptbGzM/4kv81QAVD0AkE6BBpdOO3Xq5FcuPDxclmRmZkp2Uq8cJiQkyMtLly6ZSqem1j98+PAT Tzxx//79vXv3SnLz9vbesWOHBMX27dufO3fOuBmNGze2tbWV9+7fv19ZeOHCBXkZHx8v8S8tLU3y bU5OzuXLl2WhREplHf1v9ho0b+bMmWa2oyw0/jtVC7/Za+YsVXhciYmJ8jIrK4t5KgCqHgBIpwCT if+NTwbf7E1OTpbslJ2drby8cuWKvDxy5IipdGpqfZ1O17JlS/np7NmzP/jggzfffPOVV15JSUnp 1auXZjMiIyOvX7/u7u7+6quv6rdk0KBBz/7q6NGjEnr1d2cmnarPNbejLPzuu++qlk7NnKUKj+vM mTOysrSBeSoAqh5ATeOuSAxwQD1Op+fOnZPsdPDgQeXl3r175WVGRoap+Gdm/QkTJsjGXV1dJcXJ Ch4eHnPnztW8l5L695kSPu3s7JKSkuT5+fPnZVP79u3TXzMnJ8fW1vbYsWOWp1PN7SgLN27cWLV0 auaoKzyuoqIiR0fHGTNmME8FQNUDqN2KJp0ywAF1Op2Wlpb2798/LCzs9u3bBQUFoaGhPj4+yu1k NeOfmfU3b97csmXLgQMHKpGsWbNm8vLMmTNm0qmQBOvk5CQpVJ77+/sPGTJE+X9c7ty5I7uQJ7K7 8PDw/Pz8kydPent7V5hOTW1HlvTp0+fbb7+V5z/++KMciDyJjIyU5ZrnSv9HZo7akuOSVGxvb//X v/61pKRE2VpiYqK0gXkqAKoeAOmUdAqQTv9Xenq6ZC1Jkg4ODpIt1UuCpuKfqfWzs7NtbW1XrFih vBw+fHj37t1NNUNNcXfv3u3WrVtQUJCEPclyI0aMkCDn6enp7OysfHV29+7dLVq0kIWSLWNiYixJ p5rbuXr1qqxmY2PTpk0bV1dX5V5HEp67du3q5uam/pmoyuBHpo7akuOSlx999JGjo2PTpk3lnLi4 uISEhJBOAVD1AEinpFOAyYSGvLy8goKCmlvfcoWFhdeuXdNfotPpDJZUbTvi559/Nm62BFflUqox gx895FFnZWWdPXu21v+n06LcAoZxAFQ9QDolnTLAAUwmUPudZ/9vIrL/eYyuBYCqBx4x3BWJAQ5g MoF61nnk8bndwB0tBqfNXWNwKZWuBfALhaoHQDoFQK3BeulUfXxu56t/KZWuBfALhaoHQDoFQK2h FtKpwaVUuhbALxSqHgDpFEB11hoPHlV+XP7iK4ZxgF8oVD0A0ikAag013nn0H3t6T/563IJ/9pyY 1GXc2RVb6VoAv1CoeqD+4q5IDHAAkwnUv3S6w+H5lOFvpIyMjGvlnzrhrWsHTpTpSuhaAL9QqHrg Ea5o0ikDHMBkAnWu8+hfLOWevQBjAlUPkE5JpwCYTKB2Oo/+xVK6FsCYQNUDpFPSKQAmE6gFBhdL 6VoAv1CoeoB0SjoFwGQCdC0AVD2AasNdkRjgACYToGsBoOoBgHQKMJmg1kDXAkDVAyCdMsABTCZA 1wJA1QMA6RRgMkGtga4FgKoHQDplgAOYTICuBYCqB1A3cFckBjiAyQToWgCoegB1vaJJpwxwAJMJ 0LUAUPUASKekU4DJBEDXAkDVA1Q06ZQBDmAyAboWAKoeAOmUdAowmQDoWgCoeqCh4K5IDHAAkwnQ tQBQ9QBAOgWYTFBroGsBoOoBkE4Z4AAmEzqdrrS0lA+FrgWAqgcA0inAZMKinyYkJGwq98knn3z9 9de5ubn6P01KSkpLS6tCYwYPHrx06dKHORylYbGxsXFxcZmZmXy+zFMBUPUAQDoFHuXJxIABA3r3 7j116tSRI0f27NmzcePG69evV386adKk6OjoWkmn0jAvL6/Q0FAPDw87O7v4+Hg+YuapAKh6AJXF XZEY4ID6lE6joqLUlxs3brSxsfn0008fsjHVkk4XLFigPB86dGhwcDAfMfNUAFQ9gOqtaNIpAxxQ d9OpGD16tJeXl/I8PDw8JiZGeZ6amhoYGNi6dWs3N7fr16+rK6xbt+6NN95wdnbu0qVLQkKCcTpd v369n59f27ZtAwICTpw4IUtefvnlRYsWqXt88803V61aZSadzpkzR3aq7G7t2rWzZs2SZty6dSsv L0+WyK7bt28fERGRn5+vrH/t2rUxY8a0adOmX79+y5Yt8/HxUVur//YbN26MGzdOnvfo0SM5OdnM YWoupGsxjANUPQDSKekUQA2m0+jo6Mcff7ykpMQgZD7zzDMS7crKyn766afi4mI1hbq4uKxZs+b0 6dPTpk1zdHQ0fmNcXNypU6eKiorCwsImTpwoS7Zu3dqqVat79+7J85s3bzZv3vzMmTOm0mlGRkaL Fi1mzJihbNbJyWnlypXp6emlpaVBQUH+/v5nyw0dOnT48OFqq4YMGSJvlCT5wgsvSKpUl+u/XdLy 9OnTJaZu2LChT58+Zg5TcyFdi2EcoOoBkE5JpwBqMJ1u3rzZzs5OwqRByHzuueeCg4MvXryov7Ks 8NZbbynP8/LybGxsjh079sDEN3s3btzo7u4uT3755RcJnMr3h2NiYiT7aTbMw8OjZ8+etra248eP v337trLZmTNnKitkZmbK7nbt2qW8TEhIkJeXLl2SUCpPEhMTleU7duzQT6fq2y9cuCCrxcfHS7JN S/eZbSsAAE4uSURBVEuzt7fPyckxdZiaC+laDOMAVQ+AdEo6BVCD6fSPf/yjkiENQqZks8DAwEaN Gs2fP1+57GmcQtu1a7du3TqD5Tt37vT19X26XOfOnZWFr7zyir+/vzx56qmnPv74Y82GTZgwISUl JTs7Wz8Mq5tNTk6WeKn+9MqVK/LyyJEj8hb95Qbp1ODtgwYNevZXR48eNXWYmgvpWgzjAFUPoO7j rkgMcEB9Taf379+XaDp37lzN8Ckk/jk5Ob333nvGK+Tm5krekzSovzw9PV1C3f79++X5li1b1HR6 8uRJW1tbyaUSHTXznv7fnWqm03PnzsnuDh48qLzcu3evvMzIyLh7927Tpk2VPT4ov2CrmU7Pnz8v 6+/bt0/ztBgcppmFdC2GcYCqBwDSKYDqTKcS6tLS0oKDgyWd3rx50zjOpaSk6HS6srIyX19f9X+d kRUCAgIKCgpKSkpWrFjh6OiofgVXeWNqaqqk08zMzJycnClTpqhBUXh5eUmMVJNwZdNpaWlp//79 w8LCZI/SgNDQUB8fH2me/GjUqFF9+/bdvn37kiVLevfu3bZtW82w7e/vP2TIEOX7unfu3FFarnmY mgvpWgzjAFUPAKRTANWZTm1sbGxtbSUoent7z5s3TwlpxnGua9euki0lu4aEhEiUVVcYOXJk9+7d XVxcnJyc1CuZ+m8cO3ZskyZNOnbsGBsbK/FVuTHSg/J7+cquz549W7V0+qD8wqwk0pYtWzo4OAwc ODAjI0NZLkk4PDxclixcuPCjjz5S7vdr/HZZbcSIEfb29p6ens7OzkeOHDF1mJoL6VoM4wBVDwCk UwC1U2u3yxnHxbKysqtXryrXLTXl5eWVlpY+KL9EKZSFq1ev9vPze/hWycYLCgpM/fSll14y/3+l FhYWXrt2zfxhmlpI12IYB6h6ACCdAqjOWivKLajaTjXvzWsJnU7n6uq6ffv2mjgVq1atmj9//qef fvq73/2uefPm6hVdME8FQNUDDQ13RWKAA+rHZEJXePf0og3xTsFVrsTNmzcnJydX4Y2XLl1asmSJ 8v/WVLvDhw8vX7586tSpCxcu/O677+gbzFMBUPUAFU06ZYAD6uhk4vqhb7/ym/m5/SBZrjw4gWAY B0DVA6RT0ikAK00m9C+WGjw4gWAYB0DVA6RT0ikAa0wmDC6Wkk7BMA6AqgdIp6RTBjjAqkNP9p5j pkIpDx6WPBjGAX6hUPVAPcVdkRjggLo4mfgx+rPd3V6Mbxe802UU107BMA6AqgdAOmWAA2pzMnH9 UNqJl9/+oplfUpdxXzT1I52CYRwAVQ+AdMoAB9TaZKIot8DgUionEAzjAKh6AKRTALU2mVAupVKJ YBgHQNUDIJ0ywAG1P5koyi3gBIJhHABVDzx6uCsSAxzAZAJ0LQBUPYC6XtGkUwY4gMkE6FoAqHoA pFPSKcBkAqBrAaDqASqadMoABzCZAF0LAFUPgHRKOgWYTAB0LQBUPdBQcFckBjiAyQToWgCoegAg nQJMJqg10LUAUPUASKcMcACTCdC1AFD1AEA6BZhMUGugawGg6gGQThngACYToGsBoOoB1A3cFYkB DmAyAboWAKoeQF2vaNIpAxzAZAJ0LQBUPQDSaQNLpzqdrrS0lE4Jhh4mE6BrAaDqASqadGrRAJeQ kLCp3CeffPL111/n5ubqr5aUlJSWllaFvQ8ePHjp0qUPc8xKw2JjY+Pi4jIzM+nfYDIBuhZdC6Dq AZBOH+V0OmDAgN69e0+dOnXkyJE9e/Zs3Ljx+vXr1dUmTZoUHR1dK+lUGubl5RUaGurh4WFnZxcf H08XB5MJ0LXoWgBVD6Be4K5IVUynUVFR6vKNGzfa2Nh8+umnD9niakmnCxYsUJ4PHTo0ODiYLg4m E6Br0bUAqh4AGko6FaNHj/by8lKeh4eHx8TEKM9TU1MDAwNbt27t5uZ2/fp1dYV169a98cYbzs7O Xbp0SUhIME6n69ev9/Pza9u2bUBAwIkTJ2TJyy+/vGjRInWPb7755qpVq8yk0zlz5shOld2tXbt2 1qxZ0oxbt27l5eXJEtl1+/btIyIi8vPzlfWvXbs2ZsyYNm3a9OvXb9myZT4+Pmpr9d9+48aNcePG yfMePXokJyebOUzNhQCTCdC1AFD1AEinNZhOo6OjH3/88ZKSEoOQ+cwzz0i0Kysr++mnn4qLi9UU 6uLismbNmtOnT0+bNs3R0dH4jXFxcadOnSoqKgoLC5s4caIs2bp1a6tWre7duyfPb9682bx58zNn zphKpxkZGS1atJgxY4ayWScnp5UrV6anp5eWlgYFBfn7+58tN3To0OHDh6utGjJkiLxRkuQLL7wg qVJdrv92ScvTp0+XmLphw4Y+ffqYOUzNhQCTCdC1AFD1AEinNZhON2/ebGdnJ2HSIGQ+99xzwcHB Fy9e1F9ZVnjrrbeU53l5eTY2NseOHXtg4pu9GzdudHd3lye//PKLBE7l+8MxMTGS/YxbKA3z8PDo 2bOnra3t+PHjb9++rWx25syZygqZmZmyu127dikvExIS5OWlS5cklMqTxMREZfmOHTv006n69gsX Lshq8fHxkmzT0tLs7e1zcnJMHabmQoDJBOhaAKh6AKTTGkynf/zjH5UMaRAyJZsFBgY2atRo/vz5 ymVP4xTarl27devWGSzfuXOnr6/v0+U6d+6sLHzllVf8/f3lyVNPPfXxxx9rptMJEyakpKRkZ2fr h2F1s8nJyRIv1Z9euXJFXh45ckTeor/cIJ0avH3QoEHP/uro0aOmDlNzIcBkAnQtAFQ9AE3cFaka 0un9+/clms6dO1czfAqJf05OTu+9957xCrm5uZL3JA3qL09PT5dQt3//fnm+ZcsWNZ2ePHnS1tZW cqlER828p/93p5rp9Ny5c7K7gwcPKi/37t0rLzMyMu7evdu0aVNljw/KL9hqptPz58/L+vv27dM8 PwaHaWYhwGQCdC0AVD2AhlOz1kinEurS0tKCg4Mlnd68edM4zqWkpOh0urKyMl9fX/V/nZEVAgIC CgoKSkpKVqxY4ejoqH4FV3ljamqqpNPMzMycnJwpU6aoQVF4eXlJjFSTcGXTaWlpaf/+/cPCwmSP 0oDQ0FAfHx9pnvxo1KhRffv23b59+5IlS3r37t22bVvNsO3v7z9kyBDl+7p37txRWq55mJoLASYT oGsBoOoBkE6rM53a2NjY2tpKUPT29p43b54S0ozjXNeuXSVbSnYNCQmRKKuuMHLkyO7du7u4uDg5 OalXMvXfOHbs2CZNmnTs2DE2Nlbiq3JjpAfl9/KVXZ89e7Zq6fRB+YVZSaQtW7Z0cHAYOHBgRkaG slyScHh4uCxZuHDhRx99pNzv1/jtstqIESPs7e09PT2dnZ2PHDli6jA1FwJMJkDXAkDVAyCd1s4A d7uccVwsKyu7evWqct1SU15eXmlp6YPyS5RCWbh69Wo/P7+HPzuy8YKCAlM/femll8z/X6mFhYXX rl0zf5imFgJMJkDXAkDVAyCdVucAV5RbULWWad6b1xI6nc7V1XX79u01cb5WrVo1f/78Tz/99He/ +13z5s3VK7oAkwnQtQBQ9QCsgLsiVXqA0xXePb1oQ7xTcJXHu82bNycnJ1fhjZcuXVqyZIny/9ZU u8OHDy9fvnzq1KkLFy787rvvqA0wmQBdCwBVDwB1N51+5Tfzc/tB8kR5cJYBJhOgawGg6gHASulU /2KpwYOzDDCZAF0LAFUPADWeTq8f+tbgYinpFGAyAboWAKoeAKyRTnnw4FEXHgxhYJ4KgKoHGhru ilTBePdj9Ge7u70Y3y54p8soJtBArcwtAOapAKh6gIomnf7/Z+f6obQTL7/9RTO/pC7jvmjqRzoF GInAPBUAVQ+AOWEtpFNFUW6BwaVUOhDASATmqQCoegDMCa2dTlXKpVTGO4CRCMxTAVD1AJgTWiOd mv+r3KLcAjoQUC0e4b+AB/NUAFQ9AOaENny6AMA8lXkqQNUDAOkUAMA8FQBVDwCkUwBgnso8FaDq AYB0CgBgngqAqgeAB1a4KxKA6kKtgXkqAKoeAHdFqvp4B8A6cwuAeSoAqh6gokmnjGgAIxGYpwKg 6gEwJySdAoxEAPNUAFQ9QEWTThnRAEYiME8FQNUDYE5Y++mUO7UA1kGtgXkqAKoeAHdFAgAwTwVA 1QMA6RQAwDwVAFUPgHQKAGCeCoCqBwDSKQCAear16HS60tJS+okoKyu7f/8+54GqB4B6k065Uwtg HdQa6to8NSEhYdOmTbGxsXFxcZmZmXXqGHNycqRt165dq8J7Bw8evHTp0irvOikpKS0t7SHbXy0b URNmYmLismXLZs+evWrVKvmwbt68aeF7d+zY0bp1a0qGqgfAnLDepFNGNKAuzC0A689TBwwY4OXl FRoa6uHhYWdnFx8fb7VDyMrKunjxopkVFi1aZGNjs2TJkips7SHT6aRJk6Kjox/yiKq2EWN5eXn+ /v4uLi4LFy58//33IyMje/XqlZycTDql6vn9AjAnJJ0CoNbwSKXTBQsWKM+HDh0aHBxstUMYNWrU vHnzTP1Up9N16NChW7durq6ulnxH12BrD5lOa+KIqmzmzJnu7u43btzQX1hWVkY6per5/QIwJySd AqDW8Gim0zlz5ri5ucmT8PDwtWvXzpo1S1LNrVu3JBeNGzdOnvfo0UO9ZJeamhoYGCgL5S3Xr19X FmquKVtbv3798uXLZc1nnnnmxIkTsvCdd95p3ry5rCn5c9euXcYNi4+Pb9eu3TfffGNjY7Nnzx51 eUhIyLZt25TnW7duHTNmjObWlHRqsNMH5dchpT3Ozs7t27ePiIjIz89XG6l/yPIyJiZGCcnd/q8/ /elPslyOyM/Pr23btgEBAaaOSN2I+f0anxx9sqadnd2mTdpfADO12dzcXDkzbdq06devX1RUlJpO NT8gkE4BMCcknQKMREAdSqcZGRktWrSYMWOGEu2cnJxWrlyZnp5eWloqAWz69OmS2TZs2NCnTx/l jRKlJM6VlZX99NNPxcXFykLNNWVrHTp0eO21177//nuJRmPHjpWFhYWFQUFBs2fPlrxUVFRk3LAR I0YoDfPx8Rk/fry6vHfv3mrki46O7tu3r+bWNHcqZDV/f/+z5YYOHTp8+HC1kfqHrH/p9cavPvjg g8cff/zQoUOyMC4u7tSpU7KvsLCwiRMnmmqDuhEz+9Vsp+r48eOSz//9739rfnymNjts2LDg4OCL Fy9euXJF8ryaTjU/IJBOATAnrFvplDu1ANZBraEOplMPD4+ePXva2tpKCLx9+7YSmWbOnKmscOHC BUlH8fHxkn/S0tLs7e1zcnJk+XPPPafkH3VTptaUrU2ePFlZ58MPP3R1dVWem/ke7KVLl+TtEpjl +aZNmx577DH18qxmOn2g9c1e451mZmZKC9VLtQkJCfJS9mVwyA+0vhh88uTJZs2abdmyxaCpGzdu dHd3N9UGZSPm96t5clSJiYmyclZWlvFZMrXZy5cvy5Pdu3cry9Vv9pr6gEA6BcCcsG6lUwBAg02n EyZMSElJyc7O1sxmycnJEmkGDRr07K+OHj0qyyWXBgYGNmrUaP78+ffu3TOzpv7Wtm3b5uLiUmE6 lfVbtWr1WrmpU6fKZlevXl3ZdGq8U6WF6pFeuXJFXh45csQ4jhq8lMjXvn37xYsXq0t27tzp6+v7 dLnOnTubb4OF+9U/Of87fTlzRlZWzqQBU5s9fPiw/nI1nZr6gEA6BQDSKQCgTqRT9e9ONbPZ+fPn JdLs27dP8+2ShZycnN577z0za1Y2nZaUlMg6r7/++oZfBQcH9+jRQ02na9euVZ5LXKxUOj137py0 8ODBg8ryvXv3ykvlCq2ZdHrr1i3Z6cSJE9UbEaWnp0ss379/vzzfsmVLhenUwv1qptOioiJHR0fl G9cGTG02JyfH1tb22LFjBunU/EcJ0ikAkE4BAHU6nQp/f/8hQ4YoX+K9c+eO8u3flJQUnU4ngc3X 13f9+vVm1jQVwCIjI2Vl4yYlJSW1bdtW/VtWodwbSbnQN378+MmTJ0tm27p1a8uWLdV0arA1zZ2W lpb2798/LCxMGlZQUBAaGurj46NkTlPpVI5RsvGgQYOU68OK1NRUSaeZmZmSA6dMmaL+VaepNli4 X810+qD8y8P29vZ//etfJbcrW0tMTPzxxx/NbFaWh4eH5+fnnzx50tvbW22h5gcE0ikAkE4BAPUj nUoGGzFihAQkT09PZ2dn5SupXbt2lczj7u4eEhJy9+5dM2uaCmBnzpyRjbi5uSkXIVWjR4+Oiooy aJJErIiICHly6NChTp06NW7ceOzYse+++66aTg22Zmqn6enpEuEk1jo4OAwcOFC5gGkmnSo3JWrW rFmrXynNkL03adKkY8eOsbGxjo6Oyo2RzLTBkv2aSqfio48+kr00bdq0e/fuso6cc0mnZja7e/fu Fi1ayAfRp0+fmJgYNZ1qfkAgnQJA3Uqn3KkFsA5qDfV3nlpYWHjt2jX9JbfLWbKmGVevXrXkvzPV V1JSUlBQ8DBby8vLM7UFy8lGlH3dKWdJGx5yv1lZWWfPnjX+n041N6vT6Ux9CpX6gGBNRbkFpFOA OSHplBENqBOJAqjL6RSAFep6/28isv95jKoHmBOSTgEwEoF0CqA261oen9sN3NFicNrcNQaXUql6 gDkh6RQAIxFIpwCsl07Vx+d2vvqXUql6gDkh6RQAIxFIpwBqIZ0aXEql6gHmhA0lnXKnFsA6qDXU 0G81zUktDx48HrHH5S++srzqGScB5oT1NZ0CAOp7OrV8ZQB1tq71H3t6T/563IJ/9pyY1GXc2RVb qXoApFMAAOkUgPXS6Q6H51OGv5EyMjKulX/qhLeuHThRpiuh6gGQTgEApFMA1qtr/Yul5u/ZS9UD IJ0CAEinAGqqrvUvllL1ABpoOuVOLYB1UGsgnQIwxeBiKVUPMCdsoOmUIQyolUQBkE4BUPUAFU06 ZQgDGInAPBUAVQ+AOSHpFGAkApinAqDqASqadMoQBjASgXkqAKoeAHPCOpdOuVMLYB3UGpinAqDq AXBXJAAA81QAVD0AkE4BAMxTAVD1AEinAADmqQCoegAgnQIAmKcCoOoBkE4rwp1aAOug1sA8FQBV D4C7IlVivANgnbkFwDwVAFUPUNGkU4YwgJEIzFMBUPUAmBOSTgFGIoB5KgCqHqCiSacMYQAjEZin wnI6na60tJTzYLWzdP369fz8/Lr2kdVuN6DqAeaEDSWdcqcWwDqoNVh/npqQkDDDxn3Tpk0HDhwo Li6u3Wbn5ORIS65du1a7zfj73/++ScudO3dMvWXw4MFLly6t3maUlZWtX7/e8vVPnz79zTff6L/9 yy+/XLhwYVRUlBzR/fv3K9uApKSktLS0ajwiU2dJOqFyhi3phLJCUFCQp6eni4vLuXPnqr0xtdsN Pv7444KCAtIpAO6KBABoiOl0wIABbjbNQkND3dzcHBwcvv76azObzcrKunjxYs01e9GiRTY2NkuW LKndsydxblq53r17Ozk5TfuVmYt1NZFO33rrrU8++cTy9eVDjIuLU55LUwMCArp16/b222+vWLGi X79+v/nNb+TjM78Fg8930qRJ0dHRVkin0gm9vLws7IT79+9/8skna64xtdsNJG8PGzZMp9ORTgGQ TgEADTGdjrbpoDx/+umnJZCY2eyoUaPmzZtXQ22WGXmHDh0kULm6utaRb8nKwQ4cOLBaok5l7dix 47e//a3l69+/f79du3aFhYXKy9///vedO3e+efOm8vLevXuSTl944QXzG6nRz9d8Ol2wYIGFnVC2 MGTIECuk09rqBm+++WbVPgXSKQDSKQDg0UmnEk5Gjx6tPL9x48a4ceNat27do0eP5ORkWfLOO+80 b95clkiA3LVrlywJCQnZtm2bsv7WrVvHjBmjPA8PD1+7du2sWbNk5Vu3bsnL9evXL1++3M3N7Zln njlx4oRmS+Lj4yVfffPNNzY2Nnv27FGX5+XlTZs2rVOnTk888US/fv3MLDRus0hNTQ0MDJSFsvfr 16+bWWhJLJH9yuE4Ozu3b98+IiJCvYymxhIJhPL8888/N9MkS06IRNOPP/5YnowdO3b79u3Kwjlz 5qgJMyUlZcKECer6X331VVBQkPK8oKCgUaNGr732mv4GV65cKSf2hx9+UBqwbt26N954Qw6kS5cu CQkJmp+vrBYTE2P+wE0diyz08/Nr27ZtQECAutCSdGq+E77//vtt2rRp1qyZNDI2Nta4s1neB5TG VNgtrd8NMjIyHBwcfvnlF9IpANIpAKAhplOZPUvOfPzxx7/88ktluYSK6dOny3R/w4YNffr0kSWF hYWSf2bPni0rFxUVyZLevXur6SU6Orpv377qHN3JyUniUHp6emlpqbzs0KGDhKXvv/9e5ugStzRb MmLECCWi+Pj4jB8/Xl0uLfH09Ny9e3dxcfF//vMf8wsN2ixk3i/ppays7KefflL/plFzoSWxRM6A v7//2XJDhw4dPny4fiyRTclCOUX6jTduUoUn5Pbt25IklS+4yjlREqls3NHR0d7eXslCshcJNupb JGqqn8Xx48fl7YmJifrb/J//+R9ZqHz1Vxrg4uKyZs2a06dPS8iXzZaUlBh/vvph0syBax6L7OjU qVOynbCwsIkTJ1qSTi3phJLZIiMjJbrLynfv3jXubJb3AQu7pfW7gU6nk0953759pFMApFNt3KkF sA5qDbWSTh+zsRUSXfbv368svHDhgryMj4+XyXdaWprMlXNych4YffPTTDqdOXOmupq8nDx5svL8 ww8/dHV1NW7GpUuXZC8ZGRnyfNOmTY899phyjUtpicFfP5pZaNzm5557Ljg42ODPZTUXVhhLMjMz ZRfKdcUH5ffykZfScuUYlyxZMmXKlJEjR0rSM9+kCk+I5G15o3J3qMOHDz/xxBP379/fu3evpCBv b+8dO3ZIDGvfvr3+PYG6dOmiHo7kUvUyqUoyj3zKH3zwgdKAt956S1mel5cnKx87dsz481XDpPkD N38sGzdudHd3rzCdNm7c2MJO+Ic//EGyn34j1c5WqT5gSbesrW7g4eEhVUA6BZgTkk4ZwoA6lCgA 66TTETbtJQpKhHj11VeVhcnJyTKfHjRo0LO/Onr0aKXSqX4I0X+5bds2FxcX42bICq1atXqt3NSp U2Xvq1evVlvy3Xff6a9sZqFxmyWTBAYGNmrUaP78+ffu3VNW1lxYYSxRdpGdna28vHLlirw8cuSI coyyprxMTU2tsEkVnhCJnfJG2b6SKlu2bCmbmj17tmTLN99885VXXklJSenVq5e6vsQe9YqcGm4N 4k1WVpaa/Qw+oHbt2q1bt85MOjV/4JrHsnPnTl9f36fLde7cucJ0GhkZaWEnNE6n6jYr1Qcs6Za1 1Q3c3Nw++ugj0inA73HSKUMYwEiEBpdOlb87PXz4sJ2dXVJSkjw/f/68zKeNv1tonE7Xrl2rPF+8 eHGV02lJSYksfP311zf8Kjg4uEePHmpLNm7cqL++mYWmvg8p4cHJyem9996rcKGZWKKExoMHDyov 9+7dKy+V673KMc6dO7d9+/bSEvNNqvCE/PLLL/JZKIFHTJgwISoqytXVVRKR7N3Dw0N2pH+G//KX vyxatEh9ef/+/Y4dO7744ov625TDdHBwyMvLM2hAbm6uNHLHjh1m0mmFB25wLOnp6RIFlSS8ZcsW S9Kp8qVuSzqhmXRaqT5Q5XRa092guLhYTsJXX31FOgX4PU46ZQgDGInQQNOpkFm1TN+Vrx36+/sP GTJE+TLknTt3bt++LU8iIyP1b5c6fvz4yZMnFxUVbd26tWXLllVOp5JG2rZtq//3n8q9kZRLTLLH Pn36fPvtt/L8xx9/VG7nq7lQs80pKSk6na6srMzX11f970M1F1YYS2Qv/fv3DwsLky0XFBSEhob6 +PjIRtRjlOfh4eGSHpVzaKpJluSioKCgDz/8UHm+efNmOb1KS+RsN2vWTF6eOXNGXdnPz0/5aq7q k08+kdUkOCkvjx8/Lp/su+++q34iAQEBcgglJSUrVqxwdHTU/HzVdlZ44AbHkpqaKuk0MzNTzsOU KVNat25tYTq1pBOaSaeV6gNVTqc13Q3Onj3bpk2bKvznw6RTgDkh6RQAIxEenXR69+7dbt26SS6S 6bVMrEeMGGFvb+/p6ens7Kxcx5NE1LVrVzc3N+Wy2KFDhzp16tS4ceOxY8dK8qlyOh09enRUVJTB Qm9v74iICHly9epV2YKEVZmyu7q6Kjfs0Vyo2WZpsKQjd3f3kJAQ5T46phZWGEselF8VlCgi4dDB wUF+pFwx0z9GSUGyTS8vL8ktpppkSS46cOBAv379lP/3Mjs729bWVmKk8qPhw4d3795dXTMvL69D hw7G/wePbFlOjhxjly5dWrRosW7dOiVBKQ0YOXKkbER2LVFQvQxo8Pnqt7PCAzc4FukSTZo06dix Y2xsrKRf5cZIlqTTCjuh+XRqeR+ocjqt6W4wffr0P//5zzVa9fy6AZgT1u90yp1aAOug1mD9dGr+ p4WFhcq9efRJMlSzUElJiTL/rmk///yz8Y40Fxq3+XY5g9U0F1pIAmGljlrzNFYoJiZmzZo1Fa4m webll1/W/JEEvPPnz0t2Msiu6iU++SjVyKr5+T7MgcvKynbulKvyR1+Fs2dhH3hINdEN/vWvf4WF hdVu1QNgTljX0ykA4NFLp7rCu6cXbYh3CmaeWmd98cUXFa4zd+5cg/88pkKmrmGi1u3atUv5IgDp FADpFADQINLp9UPffuU383P7QbJceXDGGpTNmzcnJydzHhpU1ZNOAZBOAQB1aJ6qf7HU4MEZA0in AEA6BQBYY55qcLGUdAqQTgGgXqZT7tQCWAe1hmqcp/LgwYOHmQfjJMCcsL6mU4YwwGqJgpOAGupa P0Z/trvbi/Htgne6jGKeCvALBQAlTDoFQK2hNrvW9UNpJ15++4tmfkldxn3R1I90CvALBQAlTDoF QK2h1rpWUW6BwaVUThHALxQAlDDpFAC1hlrrWsqlVDoewC8UAJRwvUmn3KkFsA5qDbXStYpyCzhF AL9QAFDC9SOdAgAAAABAOgUAAAAAkE4BAAAAACCdAgAAAABIp/8Pf1gPWAe1BroWAKoeAHdFMoeb kgPWQa2BrgWAqgfA/yjDAAcwEoGuBYCqB0AJk04BUGugawGg6gGQThngAEYi0LUAUPUAKOG6nk75 w3rAOqg10LUAUPUAuCsSANSC6Ojo5x91ERERSwEAABoYmQLJRGjdunWkUwD1g7e3tw0AAAAeUX37 9iWdAqgfZMBSRq7fPoqUQxs8ePCfAAAAGpjOnTuTTgHUJ88//7wSTfMfRQsWLJCjW7p0KR80AABo mNO8wYMHV3M65Q/rAetogLVGOqVrAaDqATySJVxT6ZSbkgPW0QBrrQrpdM6cOaNHj87Oziad0rUA UPUAJUw6BcBIVGvptGfPnvKWy5cvk07pWgCoeoASJp0CYCQinVZs9uzZpFMAVD0A0inpFGAkevTT 6Q8//DBx4sT27du3aNHi2Wef3bdvn7KOqeXDhg3r0qXL3r17fXx85EejRo3KzMysoWh66tQp5Z69 pFMAVD0A0mm1pVP+sB6wDu6KVKl0euPGjd69e9vZ2c2fP/9vf/ubs7Nz48aNT5w4YWq5+t5evXq9 +uqrHh4e8nzx4sU1EU2///77J598Urbv4uLy008/0bUAUPUAGloJ11Q6BYA6mE7j4uLkibe3t7Jc sqi8nDFjhqnl6ntTU1Pl+aFDh+T5gAEDai6adu7cuS5EUwAAANIpANRgOv3v//5veRIeHq4s3759 u7wMDAw0tdzgW8E5OTny/LHHHvv555+r9wu9ajTNyMjgIwYAAKRT0imARzyd/v3vf5cnvr6+yvJl y5bJy4iICFPLDdKpcu3UxcWleqOpp6cn0RQAAIB0CqABpdMrV664uro+/vjjGzduTE5Ofuqpp2xt bffu3Wtqufre6dOnHzlyZNiwYfJ87ty51R5N68jfmgIAADyC6ZQ/rAesg7siVfaevampqf369VNu jduuXbvY2FhlHVPLlfe++OKLtuVGjhyZlZX1SN4Gia4F8AuFkwBQwo9mOuWm5IB18D/KVM3Fixd/ /PFHS5aryVZIhmw4t0FiGAf4hQKAEiadAqDWajydVu26a4O6DRLDOMAvFACUMOkUALVmjre3t/L9 2wVWERgY+Oyzz0ZFRVXXBmfPnq20v47fBolhHOAXCgBKmHQKgFozR7nqWN/V/dsgMYwD/EIBQAk/ IumUP6wHrKMB1ppy7bRz585L67O6f4dehnGAXygAKOFHJJ0CgDWHLQAAAJBOAYB0CgAAANIpAIYt AAAAkE4BgHQKAACAuptO+cN6wDoaYK2RTulaAKh6AI9kCfM/ygD1WwOsNdIpXQsAVQ/gkSxh0inA SEQ6BV0LAFUPUMKkUwDUGumUrgWAqgdACZNOAUYi0inoWgCoeoASfpTTKX9YD1gHd0UCXQsAVQ+A uyIBAOkUAAD8f+3dCXxM997HcRGlJaglEs3Sa0vjVor22i9CEhFCGzSlmgZ1FaWWR633olzLq1ok lFZV3XLbKhW11FYJCW4t0V6Kh1KqiEgaS1xClj6/+j89zzwzZ04m20wmPu/X/+U1c3LmnP8581/O 12wA6RTAA2nAgAEybMm/nAoAAIAyf5lHOgVQek2bNk2GrenTp3MqAAAAyvxlHukUAOkUjpGdnZ2b m1s2jiUvL+/evXs8pzRCAICD0ykfrAfs4wHsa6TT0ta0NmzYsMzEv//976LsNzAwUJ7isnEO161b V6NGjQekwRw9evTgwYOmS1JSUqQ9XLlyxbEV++STT5bpuXXr1oPQCJlQALow6fQ3fCk5YB8PYF8j nZa2ptWyZcsmTZoM+t3WrVutrfnzzz+fP3/e4enUlmoUywMfqHQaGRn5xRdfmC6ZPHmydNWpU6c6 tmLjxo1TLVNaqbu7u9ZQMzIySKdMKABdmHQKgJGIdFrW0qkEAFvW7NGjx9ixYx2eTm2pRrE88MFJ p/fu3atTp05mZqa2JDs7u27dun5+fj4+PqXkXbLy3LVu3dqWNUmnAOjCpFMA9DXSadlJp1evXu3V q5dkM39///j4eFkya9asKlWqyBJJLBs3bpQl6enpgwYN8vLyqlq1avPmzU2DwcyZM319fdu2bXvg wAHLPUZFRcXExIwePdrDw6Nhw4YbNmzQli9cuHDo0KGylxs3bsj2ZYms4+npGR0drV4rs6yGZVV1 62bjA9PS0p599tmaNWvKo+S06KZTs3rqbmffvn0hISGyUM5DamqqVivLIxLh4eGrVq1St1euXCkV sHZCLE+47t41ERERq1evVreHDx/+3HPPqduJiYl9+vTRVtu1a1eXLl1MHxgXFyd59eDBg9JbTV9O 162D7RXTPS26C21Jp9bOp5ZOr1+/LrfXrFljUCXZQmxsrHGLZUIBQBcmnQKMRKRT2Cmd9u/f/5v7 tA+dBgcHDx48WBLRkiVLAgICZElmZqYEmGHDhsklflZWllqnQYMGW7ZsuXv37vHjx7VgULdu3ZEj R37//feSBCQdWe5R1vH29p4/f/7Ro0cl1dSqVSsnJ0ctd3d3nzt37unTp3Nzc2V3QUFBJ+7r3Llz WFiYtWqYVVW3bjY+sGvXrqGhoefPn7948aKERt10alZP3e1IzpFgmZeXd+7cOamDWqh7RKJJkyaL Fi1StxcsWNCsWTNrO7I84bp710yYMEElUnmInGdXV1cV4eQ8SB7TVhs9erRWAaVbt27yWLnRokWL 3r17a8ut1cHGiumeFt2FtqRTa+dTpVPZlCyUIzWtvGWVbGmxTCgA6MIOTqd8sB6wD74VCQ5vWpJO vby82t8XFRUlS86ePSvPUVxcnFz0JycnS6RJSUn59f+/M1atI1HKMrn169dP3V6+fLmPj49uups4 caK6nZ6eLtvZv3+/Wj5kyBC1/Mcff5Tl6kXOX+9/dZPc/emnn3SrYVZVa3XL94EXLlyQhZKy1DrW 3tlrWk9r56pDhw4q5WqPMjgig3RqtiOzg7K2d83u3burVq167969bdu2SXhr2rSpHJQEXU9Pz5Mn T2qrNWzY0LSqUivZ1A8//CC3ly1b9tBDD6mXNA3qYGPFLE+LtYX5plOD8ynnberUqS+99FL37t3V f3wYVMmWFsuEAoAu7OB0CgCk0weE5Tt74+Pj5Tlq06ZNu98lJSWZpTu1zpEjRyyTm/aRv1WrVnl7 e+umO9OPBdapUycmJsZsudr+5cuX1d2LFy/K3T179uhWw6yq1uqW7wMly5nu1CCdmtXT8lxJ1goJ CalQocL48ePv3LljfEQG6dRsR2YHZW3vmuzs7OrVq8tqw4YNe++99954441XX301MTHxySef1NaR tGb2oqvs9NFHHx1538CBA2UX8+bNM66DjRWzPC3WFuabTg3Op5w3WVPu7tu3L98q2dJiAQCkUwCk UzgmnZ45c0aeo+3btxukO7XO0qVLi5hO09LSZDuSA82Wnzx5UpZ//fXX6u62bdvkrno1z7IaZlW1 Vrd8H5iSkuLi4qJeyLUxnVo7V4qEJXd398WLFxsfkaTThQsXquVTpkzRTae6B2W8d6VPnz7y/Pr4 +EiQk73Xr19/1KhRpv878NZbb02ePFm7m5OTI8/a66+/vuR3oaGh/v7+xnUoUMVMT4vxQoN0anA+ 1XmTw/T09JSaGFeJdAoApFMADFuk09KbTkVQUFCnTp3Umy1v3bp18+ZNuTFmzBhZqK0jtwMCAg4f Piy3T506pb7Z1cZ0GhwcfO3aNQlCc+bMqVWrltq+6WNla88880z//v3lT7JmZGRkixYt8vLyLKuh W1XdutnyQNlpVFRURkbGoUOHmjZtmm86tbadxMTE7OxsqXCrVq1iY2ONj6h37979+vXLyspauXJl 9erVddOptYPS3bupFStWyDZVrpNdVK5cWe4eO3ZMW6F9+/ZaIBebN2+uXbu26ec/1XcjqVcadetg e8UsT4u1hfmmU4Pzqc6b3JanUtK49m5n3SpZa7GSt6VxMj4AAOkUAOkUDk6nckHfrVs3V1fXBg0a eHh4qDdMSqRp1KiRr6/vjh075O6lS5fkyl6ezZo1a/r4+KivGrIxnXbv3v2JJ56Qv7q7u2svf5mF sdOnT0vekCjl5uYmsUS9LGZZDd2q6tbNlgdu2bKlWrVqslDi1qJFi2xJp7rbkR3JY+vVqxceHn77 9m3jI0pISPDy8qpUqVJERMTs2bOtpVPdg9Ldu6nLly+7uLhoQSssLEzOvPbX9PT0unXrmv5mTM+e PS3bgwT16Ohoa3WwvWK6p0V3Yb7p1OB8audNQq9s86mnnpL4aq1K1lpsSEhI48aNGR8AoFSkUz5Y D9gH34qE0ty0MjMzr1y5YrZQoohpmPnll1/Upb/ttJe2ZFPqxS4DEp90t29WDd2q6tYt3wdKpLHc VCHO1c37bDyinJwcG0+j7kHpHr4tJI8NGDCgoI/SrYONFdM9LdbOlS2stZACtWp6PYCSkJV27UHr wvyiDODc+EUZPIBNy+wlQTjQqFGjNm3axHmg1wMooV6540/Rl7/a/+B0YdIpwMUE6RRO1rRWrFgR Hx/PcwQwoQBlvldKWVO+9bpqgcmj5hu/lEo6ZYADuJggndK0ANDrAZRgOtXKmvKtDF5KJZ0ywAFc TJBOaVoA6PUA7JFOjV9KJZ0a4YP1gH3wrUgo0SmQQqFQKBSKkxbSKQCQTp04nRb6rwAAoKT/43hr k357e034qvELmxv2OjFnZZmcuEmnAEinIJ0CAFBK0+k6t46JYaMTu4/54tGgfX0mXtl5IC87p6xO 3KRTAKRTkE4BACiNU7Ppi6UF+qAp6RQASKekUwAAUGxTs+mLpQ/CxM23IgHOjW9FAukUABMKUCYV 5QdOSadcxwClLlGQTkE6BcCEAjBxk04Z4AAuJkinTHIAmFAAMHGTTgEGJtIpSKcAmFAAJm7SKQMc wMUE6ZRJDgATCgAmbsenUz5YD9gH34oEJjkATCgAEzfpFABIp0xyAACAiZt0CoB0CiY5AACYuEmn AEA6ZZIDAABM3KRTAKRTMMkBAMDETTrNDx+sB+yDb0UCkxwAJhSAiZt0+mvZOx1AGRuYSKcgnQJg QgGYuEmnDHAAFxOkUyY5AEwoAJi4SacAAxPpFKRTAEwoABM36ZQBDuBignTKJAeRl5d37949zgOY UAAwcTssnfLBesA++FYk2H+S27Bhw7L7du7ceffuXU6dsXXr1tWoUYPzACYUAKRTh6VTACCdltVJ rmXLlk899VRkZKSvr6+bm9vevXsNHvjzzz+fP3++FB5voStW0AeSTgEApFPSKQDSKUoqnU6YMEHd fvrpp/v27WvwwB49eowdO7YUHm+hK1bQB5JOAQCkU9IpANIpSjydSlTr2bOnun316tVevXpJEvP3 94+Pj5cls2bNqlKliizx8/PbuHGjLAkPD1+1apVaf+XKlc8++6y6HRUVtXDhwqFDh8rKN27ckLux sbEzZ8709fVt27btgQMHLKsk68TExIwePdrDw6Nhw4YbNmzQ3VR6eroskXU8PT2jo6MzMjJ0K2ZZ eSGPHTRokJeXV9WqVZs3b277A9PS0uTQatasKY8aN26cbjo1q6fudvbt2xcSEiIL5TykpqZqtbI8 ItvPreVBWTsKAADplHQKAKRTJ0inkmckC1WsWHH9+vVqeXBw8ODBgyX/LFmyJCAgQJZkZmZ26dJl 2LBhsnJWVpYsadKkyaJFi9T6CxYsaNasmbodGBjo7u4+d+7c06dP5+bmyt26deuOHDny+++/l9QU ERFhWSVZx9vbe/78+UePHpW4VatWrZycHMtNSQWCgoJO3Ne5c+ewsDDdillWXi1s0KDBli1b7t69 e/z4cdsf2LVr19DQ0PPnz1+8eFFCo246Naun7nYkmUuwzMvLO3funPYRX90jsv3cWh6UtaMAAJBO y0g65YP1gH3wrUhwSDqtVKmSi4uLPBE7duxQC8+ePSt34+LiJDIlJye7urqmpKT8avE+WIMENWTI ENPk1q9fP3V7+fLlPj4+uulu4sSJ6nZ6errsff/+/Wab+vHHH2W5epHz1/vf5yR3f/rpJ7OK6VZe LZRKmu033wdeuHBBFkr8U+tYe2evaT2tnb0OHTqolKs9yuCIbDm3ugdlbe9gQgFAOi0j6ZQvJQdK w8BEOkUJpdMxY8akpqbWq1dvxIgRamF8fLw8L23atGn3u6SkpAKlU3lmTZObdnfVqlXe3t666c70 IXXq1ImJiTFbrmp1+fJldffixYtyd8+ePWYV0628WnjkyBGDdKr7wN27d5vu1CCdmtXT8uxJLg0J CalQocL48ePv3LljfES2nFvdg7K2dzAIACCdkk4B0NdIp6U9narPnUoMK1++/ObNm+X2mTNn5HnZ vn27QZZTCWrhwoXq9pQpU4ornaalpcneJQeaLT958qQs//rrr9Xdbdu2yd0ffvjBrGK6lVcLly5d anBEug9MSUlxcXFRL+TamE6tnT1Fwqe7u/vixYuNj8iWc6t7UMZ7B4MAANIp6RQAfY10WtrTqRg1 apQEJ/VG0KCgoE6dOqm3od66devmzZtyY8yYMbJQe2zv3r379euXlZW1cuXK6tWrFzGdBgcHX7t2 LScnZ86cObVq1VJ7NH1sbm7uM888079/f/mTrBkZGdmiRYu8vDzLiulWXpYEBAQcPnxYbp86dUq2 ZuMDZadRUVEZGRmHDh1q2rRpvunU2nYSExOzs7Olwq1atYqNjTU+IhvPre5B6e5dQqycWLoGgwAA 0inpFAB9jXTqBOn09u3bfn5+Xbp0kYAkGbVbt26urq4NGjTw8PBQbzc9duxYo0aNfH191SdUExIS vLy8KlWqFBERMXv27CKm0+7duz/xxBPyV0nI2suJZps6ffq05DdJa25ubq1bt1YvM1pWTLfyly5d kq1Je6tZs6aPj4/6GiRbHrhly5Zq1arJQsmBixYtsiWd6m5HdiSPrVevXnh4uJxq4yOy8dzqHpTu 3kNCQho3bkzXYBAAQDp1+nTKB+sB++BbkeCQSS4r7Zq1NTMzM69cuWK2UBKReo1O5OTkXLt2regV VqFLUrFsXL14aCA9PV13p6YVs1b5X375xfKx+T4wOzvbclP5stzOzftsPCLbz63uQekePphQAJBO nT6dAgDptOxNctmZt49OXhLnHloa5jyzlwQBAGDiJp0CAOn0gZjkdrUfssa1jdxQxeEVXrFiRXx8 PE8cAICJm3QKAKTTsj/Jmb5YalY4YwAAkE5JpwBIp6TTEp/kUhMOm71YSjoFAIB06pTplA/WA/bB tyKhGCc5CoVCoVAoZaaQTp0+rANl7L/NSKcoStM6teDTLX7Px9UJ/dK7B6+dAkwoAOjCpFMA9DXS qSObVmpC8oEBM9ZWbr+5Ya+1j7QnnQJMKADowqRTAPQ10qnDmlZW2jWzl1I5RQATCgC6MOkUAOmU dOqwpqVeSmWQB5hQANCFnSad8q1IgH3wrUhwSNPKSrvGKQKYUADQhZ0jnQIA6RQAAACkUwCkUwAA AJBOAYB0CgAAANIpANIpAAAASKe/4YP1gH08gH0tOjpahq3AwMBpKEnDOvbgJAD0egB0YXvq2LGj XOYNGDCgmNMpX0oO2McD2NfUsAUAAIAyKTAwkHQKkE6dQ0xMjIxZAwYMmI6S1KecFycBoNcDoAvb k1zgyWWeXOyRTgHSKUDTAuj1AOjCpQvpFGAkAk2LpgXQ6wHQhctEOuVbkQD7oK+BpgWAXg+gDHdh flEGAAAAAEA6BQAAAACAdAoAAAAAIJ0CAAAAAFBM6ZQP1gP2QV8DTQsAvR4A34pkhC8lB+yDvgaa FgB6PQB+UYYBDmAkAk0LAL0eAF2YdAqAvgaaFgB6PQDSKQMcnK7HUpyr8FxTaMxgTqHQAUF/p2Py rUgomyNLXt4RirOUIqZTTiClbDRmMKdQ6ICgv9Mx+UUZMLJQSKcUChfHYJyhAwL0d9IpwMjCsEU6 pdCYwZxCoQOC/k7H1E2nn3322XfffafdvXDhwqeffkpjBSMLhXRKoXBxzJxCoQOC/k6xazqtX7/+ nDlztLtbtmx5/PHHaaxgZKGQTikULo6ZUyh0QNDfKaRTgJGFYYvnmsLFMZhTKHRA0N9Jp7+n0337 9oWEhNSoUcPX1zc1NVUtvHr1aq9evWShv79/fHy8WhgVFbVw4cKhQ4fK8hs3btDWwchCIZ1SaMxg TqHQAUF/p2MWWzpt27atZM68vLxz587dvXtXLQwODh48eLBE0CVLlgQEBKiFgYGB7u7uc+fOPX36 dG5uLm0djCwU0imFxgzmFAodEPR3OmaxpdMOHTqEhoaeP39e++vZs2fLlSsXFxd34sSJ5ORkV1fX lJQUlU6HDBlCEwcjC4V0SqExgzmFQgcE/Z2OWch06ufn9+abb2p3N23aJHlV3ZZcGhISUqFChfHj x9+5c0eWxMfHSzpt06ZNu98lJSWpdDpt2jSaOBhZKKRTSuHKvXuHcnIOc3GMsj2nOGM7pwOC/k6x azrt3LlzWFiYdnfFihWSOU1X2LNnj7u7++LFi+X2mTNnJJ1u377dbCOkU5TCkeXTT+d+++1n2t2f ftr6ySdzir0TXr688/33/5qSstPOnT83NzkmZrzciIubLxX48MPpcrCy0OGj0sqVMzIy9tg5naqT IGXHjqVZWQecaBCXp2zjxpjp04cOG/b83Lmj1q17+9q1RCedkFSblAZw5swmteTu3YPypPz442bt unzZsr/Jv7oPDwz807Rpr+Z7Zb9ly6LXX+83Z87r8fHLnLoxw3mvVosy7NvSzg3Kpk0xhw9/UsSG XSwbsX9/pAPCnv3dSa8rHN4riyedzp49283N7dChQ3I7JSWlU6dOkyZNUn9KTEzMzs7Oy8tr1apV bGysWhgUFCTrqLf73rp16+bNm6RTlM6RpX59r9mzR2p3N2+OffzxusXeCSdPfqVcuXJTpw4p9i1f uLD13Lkt1v46ceLAf/xjptxo2bLJU081CgtrV6NGtccec79xI8mxI+OJE+u7dm1rLYGUUDpVJyEy MsTX19PNrXJS0gqnmEXS0hKCglp6e3tMmjRo8eKJY8b0f/LJBrt2ve+k6VS1yQ4dnpbDUUv27Vsp vWPWrBHqbmLiCj+/x4ty1d69e/tWrZrMmzfm5ZfD+/QJdurGDOdNpwUa9s1G8iKm0759Q+fPH1fE 2aRwG3F4f6QDwp793UmvKxzeK4snnd6+fTsyMlLG2fr161eoUCE4ODgjI0P9qVGjRjVq1KhXr154 eLisphZKgu3WrZurq2uDBg08PDz27NlDOsUDm07lsrVu3dpywe3j41Hsb9bq0aPD2LEv6f5p7dp5 f/5zM20AnTBhgNy4eHH7ww9XVC+oOra88Ua0tZqXXDpVJ0HK00/7y7WXU8wiQ4b0qlfPKzV1l9kr kM4YTbU2KVfe8nSohXPnjipfvrxMlurulCmvjBzZt9Dp9PTpL2Vrly7tKBuNGU6aTgs67JuN5EVM p8U+mxS6OKQ/0gFhz3TqdNcVpaFXFk86VdLT05OTky9fvmy2/OZ9lutnZmZeuXKFNg0nTad7934U EtK6Ro1qvr6eV658rRZKSOjVq7Ms9Pf/g/b6VVRU9wULxg0d2keWX79u/rLk+vXv1KlT88CBVeXK lfvqq8Xa8pSUnc8+G1izZvXmzf2nTx/aosWTxruQSDljxnCpTNu2Tb/55mNZ+Pe/v1alyiOyplwD ffnlQrP9SgxYuXKG2QCakbHHza2yWtms2mlpCbLEw6OWp2et6Ogev/yyW9aJiOi0atXf1UaGD498 7rlO6vaePR+q/28r9FmS8VFqcuvWfoekU7kO69mzo0FtdY9L9xRJCQ9v//HH/3uWPvroTXladQ9Z Hj5o0LNeXnWqVq0iT7rB3rUiu5BZ5P33/2rtZVXd+ui2FmsHZVB52Yhkxccec3/mmcanTm2Q1Ro1 8v3jH+tv2hRTuO6gtUlpP66u5dVfpQLSlqQjqMgtE7x0Q2sbl6v2qVOHjB79ohx1w4Y+cXHzLV// cXFxWb58mtnyfKv60kvd3357rLb+a69FLlky2eGNGU6aTq0N+7rdzXIkV+nUsgsbdHnTBil3Y2Mn qJAs2zQtKvRK127fvnnt2o8GB7eyNptoGynEUOPY/kgHhEPSqbNcV5SGXlmc6RR4oNKpzLXSteSK +ccfN2sfJ5C5fPDgCOlp7747KSCgoXbF7O5eY86c1+UK3vK/ybt1+7MavCR/9u4dZPq/4506tZDr WhmkJPVJBzbeRd26tUeO7Hvs2FoZBSQ0ysKbN/d26dJm2LDnZWi4c+cb053euJEkV0Xam0xkAO3f v5sMRjIyypX93bsHLastmwoKann8+BdSOnduERbWTtaRmqtEKmegVq3qkijU0Ck7lSuSopwluWyS rW3b9q6d06mcKxnxK1Z86Isv3jGore5x6Z4iKU2aNNQu4+bPH9es2RO6hyw7atDAW9qYbPD779cZ 7F0r//rXx/I8fvfdGt0jslYf3dZi7aAMKi+T5ZtvDpOV27VrJlHwxRfDTp5cLxOS9rJngbqDaZuU vVeu/LBcBEtlJJcePLha/iRHIX3hkUcqqZhnbePe3h7vvPNf//735zIlS5vMzjbvcZMmDZKpd8CA nlevxmsL863q8uVT69XzUglZHijVUO9ydGxjhpOmU2vDvm53sxzJrXVhgy5v2iBNX3qVbaqydOkU GffUZ8zWrXv7228/k33JvPDCC12s1UHbSEGHGsf2Rzog7JxOneu6ojT0StIpUMh02qHD06GhbUw/ h3PmzCa5hl6//h0ZRA4f/kSuRy9f3qk64ZAhvXS3f/78V7KaRFC5/f77f33ooQrqP8xkiWxq48YY 7R2PKp0a7KJfv65q5Q8+mOrj42H8XiwZpGQ72hdyyADatKlf69YBMlh89NGbanAxrfbZs7/tV3sB Ni5uvtyVyickfFC1ahVJs1u3viuDpmxEqioDjeSWEyfWF/Esycm39qpgCaXTSpUqyoh8/2vblhjX 1vK4rJ0i41lEO2S1I7PPcVnbu1akhcgKFy5stTwcg/pYay2WB2Vc+eHDI7UPizZv7q8mGKmSzEmF 6A5mbVL9R4mEzD/+sb7c9fKqI1X9xz9mynLjjUtltP9ylnX27Vup+00V0kRlmyoM21JVuTqvUuUR afBy++23x3bt2rY0NGY4Yzq1NuwbdDfLd/ZadmHjLm/aIC3fGHzw4OrKlR9esWK6WVWXLJksl5vG 7y4uxFDj8P5IB4Td0qnTXVeUhl5p13SanXn78tb9J+etPjZtmfx7Ye0uWUKbRmkeWfz8Hp8+fahp GJCrTHVbRhC5UK5QwXX8+Ojbt3/7v+Rdu96//2tJT7Vr10yVxMQVxp8RkuWPPlp15Mi+UgYO7CkP f+ut0eqdjXJbe9+/lk5t2cXHH//d2zufdCrRUbbz88/bzN58IqOepE11yKbbVPvV6iMPlLu7dy+/ d+9Q9epu8tdhw55funTKG29Ev/pqb6n8k082KPpZ8vX1tHxvSYmm0zFj+stlolyNjRjxgumBW9bW 2nFZniLjWcTsDCcn/7/vwLS2d60cPfq5rGC20PgpM2gtlgdlY+UnT34lKKil9k2eKp0WtDuYtcnZ s0cGBDRcvHji0KF95O7zz4dIB3nxxbB588bYvvE6dWouXPiG7tP9yy+7u3dvL1WVCdXGrb38cnh0 dA+54e//h3Xr3i4NjRnOmE6tDfsFSqeWXdjGLm95V4Z9uQydMuUVbcmGDQtatWry9NP+Uv7wh8eM 61CIocbh/ZEOCLulU6e7rigNvdJO6TQr7dqxaUvWuXWQnZmWdW4dvxsXI3+lZaN0jiym76OQ8uGH 06Vrma4gw4S7e41FiybK7R9+2Cid0PL9e9Y6YXb2YZmtX3+937vvTlIlNLSNdGn503/+8y8ZEbT/ aVuyZLJKp7bswpZ0euvW/vLly6sxzuyjETKAqmxpuk2VHHbufE/d3br1Xbmr/u+/T5/gceNe9vHx kAFUVpD0PmrUi2bHW4izlJV1QGr49dfv2/9zpwkJH8iu1YcnrdXW8rgMTpHMIgsWjNO+1Ed3FlE7 Uh/S0Irx3qXcufNNrVrV//KXXtbCnm59jC8ZTQ/KxsrrptOCdgezNvnNNx+7uLjIZlevniV3pQ6N GvnWrv3osWNrbdz41au//bb22rXzDF7CUp/6s7GqMstWqfLI5s2xcimvvoPX4Y0ZTjenGAz7Bt3N lnRqY5c3u3v9epLs9IUXumhfpXbq1Aa5Plazz4oV0/NNp4UeahzVH+mAsGc6dbrritLQK+2RTlMT Dm/0DlNx9Cv/nskjxh+bNuO7cVO2Neu9pkJrWRhXu8vlrftp3CiFI8usWSPc3CofPLha/Txdp04t tB+62LPnQ+l7MqO3atVE+5JbuZiWddQbMzIz96mfZrHWCWWckqtt05/AUl+Sof5jSS4FZLhZterv U6cOkWFI1rRxF6YXAWPG9JeVrX0o8YMPppoOoHI4x49/0bhxPfWdqKbbzMk5/Mwzjfv37ya7y8jY ExkZ0qLFk+pqRhJ79epurVsHqLBUufLDcvfo0c+LeJakJjVrVrf2+2Al/a1IErBlelDvP9GtreVx GZyi3r2D+vXrKifno4/elJOjO4tIkb0EBDQ8dOifcvu//ztOvVFWd+9mb71zdS3/9ttj1Qcs5VEb N8aoh1urj7XWovtk2VJ53XRa0O5g1iblcKpVq6K9b1l99NT06tbaxoODW8nxysNnzx4p0d3sjEm7 kqsE9clqabpyFa5+WNWWqsqZefzxunXq1NQGAYc3ZjjdnGI87FvrbmYjuW4XtrHLm96V/i7ZuE2b p7T3SqivZpF+cfbsJhkAX3qpm/aVB9bqUIihxrH9kQ4I+6dTJ7quKA29ssTTqUTTdW7tZR+SRTOO fGm27+snvtrZ+gX565oKbS5tSqJ9o7SNLP/5z79kOLj/a0le0kXlwlf7wrRGjXxl2q5Xzys8vL2s pv3Aerduf5a00KCBt4dHLd13VWmlZ8+O48a9bLawaVM/9b4I2VRUVHdJfdLJly+f5uvraeMuTC8C JCVKPeWx2suwWtmxY2nz5v7qP7dkAC13X8OGPsOHR6p3V5pV+9SpDTIsyiAocV1qpf73TsqlSztc XFy0T+eGhbV74ok/aI8q9FkaPDhi5szXHPWLMlJVP7/HJSzJUKtbW93jsnaK4uOXeXnVqVSpYkRE p1mzRlibRS5e3C5L5FmQJOPj46G+ekR372ZFmofEMMmEcublqZcqySRkUB9rrUX3oGypvLV0WqDu YNYm1X/QaK/byMLKlR+WVqGtbG3jffuGqvMg1wHafzmbfpZGtlO1ahU5WHnG//nP2QWq6t/+9hdp 7WqqLg2NGU43pxgP+9a6m9lIbq0L29LlTe+qr1WTHvHoo1VVUdWQvT/8cMXHHnNftuxvMraoL0Yy qENBhxrH9kc6IBySTp3luqI09MqSTadZadc2eHaRHRwZPTH3ntVf9JK/qldQ76Sk08RRqkYW7etV Dh/+xPLXn27cSLJ8LUt9NFz7cpdiKS++GBYa2qbQu5DhSfcr0WJjJ7zzzn8VqCZyKjIy9hToIYU4 S/v3/6N//24l9At1xs+1tWJZW2vHpXuKsrMP23je0tN1Hm7L033hwtbjx7+w/KXTAj1lugdle+Vt PHUGpaBt0mzj168nZWUdkJMgbd7aj75KX/jhh426P+ZW6J7rqMYMJ51TDIpBd7M2khd9lNbdiNpX ZuY+KbbUoXD7tXN/pAOi9PT3Untd4fBeWbLp9OhfF6tXTbNvHzSuxI4/PS9rfjcuhiYO57qSKLky d+6o8eOjV6+e9corz1Wp8ojlq0DFUj7//K1S+GPQX3650OwncByeTil2K6WzTZbOxgzmFEoRCx0Q 9Pcy0DFtTafZmbfV1yBZvqHXslw/8dWaCm3WuXW8d+0mrRyMLOoz9DNmDB84sOekSYPMvnKNQjql 0JjBnEKhA4L+TscsQDq9tClJNr21SYSN9djxp0hZ/8LaXbRyMLJQSKcUGjOYUyh0QNDf6ZjFlk5P zlstm04eMd7Genw3boqsL4+ilYORhUI6pdCYwZxCoQOC/k7HLLZ0emzaMtn0sWkzbKyHrHl//WW0 cjCyUEinFBozmFModEDQ3+mYDnzt9G+8dgpGFgrplEJjBnMKhQ4I+jsds5jTacE/d9qPz52CkYVC OqXQmMGcQqEDgv5OxyzmdHr/O3s72vydvVv5zl4wslBIpxQaM5hTKHRA0N/pmMWfTn/97fdO31O/ d5p7L5/fj97Z+iV+7xSOHVkozlV4rik0ZjCnUOiAoL/TMQuQTrPSrm3wDJMdHBk90SCgHhk9VdaJ q93lTko6TRwAAAAAUMzpVKQmJKv3925r1tvyLb7XT2xVr5quqdDm0qYkTi4AAAAAoETSqQqocbW7 qFdptzbptbfP0F0dX/rXC6/t+FO/tQ//Wb1qSjQFAAAAAJRsOv31/lt8j/71PfUiqmmRJd+Ni+EN vQAAAAAAe6RTJTvz9qVNSQkhIyWX7u4y8sLaXXxDLwAAAADA3ulUOTZtmaTT76d/wKkEAAAAAJBO AQAAAACkU9IpAAAAAIB0CgAAAAAgnZJOAQAAAAAlk05TE5IleeZbdnUcKuk0PnCoLStf3Z3MGQcA AAAAFCCdqhdFi7fwEisAAAAAoGDp9OruZAmT+Zb4QPXa6TBbVua1UwAAAABAwdKpjfjcKQAAAACA dAoAAAAAIJ2STgEAAAAApFMAAAAAAOmUdAoAAAAAIJ0CAAAAAEinpFMAAAAAAOkUAAAAAEA6JZ0C AAAAAEinAAAAAADSKekUAAAAAEA6BQAAAACQTkmnAAAAAADSKQAAAACAdEo6BQAAAACQTgEAAAAA pFNzh4a/Jen08GvzOJUAAAAAAMek05zbWWsf6SDpVP6V25xNAAAAAIC902lebu7eiPESTT8r31r+ lduyhBMKAAAAALBrOv12zAIJpetrBF3aslf+lduyhBMKAAAAALBfOj296HOJo59XbHd1d7LclX/l tiyR5ZxTAAAAAIA90umljYlr7r+b9/zqrdrC86u+kiVrXFvLXzmtAAAAAICSTacZh0+uq9JRgujx mR+a/en7GctlufxV1uHMAgAAAABKKp3eOp+ywTNMIuiBgTN0VzgwYIb8Vdb5z08pnFwAAAAAQPGn 03vXM7c+2VfCZ0LwiNx72brryPKEoNdkHVlT1uf8AgAAAACKM53aHjv/L8QGvWYtxAIAAAAAUJh0 qt6y+2Xdbra8ZVfW+d83AA+YwSkGAAAAABRPOi3E1x1pX54kj+UsAwAAAACKmk7/76diNiUVaNO/ /fCM6/0fnln1FScaAAAAAFD4dJqakPx5xXaSME8vXluIrZ9e9Lk8VrZwdXcy5xoAAAAAUJh0euPk ufU1giRefjtmQaF3II+VLch2ZGucbgAAAABAwdLpndSMTfWek2C5t9eEvNzcQu9AHrs3YrxsR7Ym 2+SMAwAAAAAKkE73RU6WSLmz1cCc21lF3IdsYUfLgbI12SZnHAAAAABQgHR6JzVDwmRxvdpZvFsD AAAAADwo6RQAAAAAALv5Hx6MPqqhuJwpAAAAAElFTkSuQmCCUEsDBBQABgAIAAAAIQDY/Y2PrAAA ALYAAAATAAAAcHB0L3RhYmxlU3R5bGVzLnhtbAzMSQ6CMBhA4b2Jd2j+fS1DUSQUwiArd+oBKpQh 6UBooxLj3WX58pIvzT9KopdY7GQ0A//gARK6Nd2kBwaPe4NjQNZx3XFptGCwCgt5tt+lPHFPeXOr FFfr0KZom3AGo3NzQohtR6G4PZhZ6O31ZlHcbbkMpFv4e9OVJIHnHYnikwbUiZ7BN6qCIKK0wKfL 5YhpSANcejTGcVTW1bmp/SosfkCyPwAAAP//AwBQSwMEFAAGAAgAAAAhAHsXeNH5AAAAwgEAABEA AABwcHQvcHJlc1Byb3BzLnhtbIyQwU7DMBBE70j8Q+QjUuqUA0JW0woJVeLWA3yA42wSq17b2nUC /Xuc0CK45bg7mrezszt8oSsmILbB12K7qUQB3oTW+r4WH+/H8lkUnLRvtQseanEBFof9/d0uqkjA 4JNO2XqiIoM8K12LIaWopGQzAGrehAg+a10g1CmP1MuW9Gc+gE4+VtWTRG29uPppjT90nTXwGsyI OcAPhMAtSXiwkW80NGtwqOk8xtIEjBnRWGfTZYH+YqZajOTV9aUSraHAoUuzR6E2akInCjTqrfeB dONyUzgtm9PcEk3wkhLZZkzAs6Qebuy4JuHfqv+1JvffAAAA//8DAFBLAwQUAAYACAAAACEAA1nP cfoBAAAqBAAAEQAAAHBwdC92aWV3UHJvcHMueG1sjFNda9swFH0f7D8IPQ5S22nnZiJOGYyNQWGB eHtXZNnRpi8k2U3663clO+7a5SFvvl/nnnOuvH44KokG7rwwusLFTY4R18w0QncV/ll/Xaww8oHq hkqjeYVP3OOHzft3a0sGwZ+2DgGA9oRW+BCCJVnm2YEr6m+M5RpqrXGKBghdlzWOPgGwktkyz8tM UaHxNO+umTdtKxj/YlivuA4jiOOSBiDvD8L6M5pi18Ap6v70dsGMsgCxF1KEUwKdYYYK906TSdJC CeaMN22IM0RRRgYlMVKMfO+0cXQvwSE1pMzWcc/dwD+H4MS+D9zHEvlwxrbXMLQRRIck8LVrkvrw Cw5QYS+b+tCrvaZCxgzewG2AjaIp3LoYA04wjjePvA3IP8OlP5bLHGf/1mpjU+nTXVmmUvY/jpei 4XHLCMt2shkj5DW1tfnmRFNheERj+GP/m7MAyovEik29A3U7RqNZY97HYLOmxB9RfIXFEiOAKfJE A9KnC2lgN81ZYpzohEbHCi/KO9h+go+IAvqgbVobtXY98H/0Yf5GMAoOwzGMe8bIGiC7LEb9U/uU XK3OpryARPDZgrTrjUHawOFrfky3mjx7se+tbtB7Sffr9GXdo+gzw1kxNF+g0MGVdpYy+BcRA9Pu b+9v4TkABgPn5mh0bxiv/RcAAP//AwBQSwMEFAAGAAgAAAAhABVN+B9tAQAAsgIAABEACAFkb2NQ cm9wcy9jb3JlLnhtbCCiBAEooAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIySX2+CMBTF 35fsO5C+Q1udm2kAsz8xe5jZElm27K1pr9gMCmmr6LdfAWWa+bDHcs799dxT4tmuLIItGKsqnSAa ERSAFpVUOk/QezYPpyiwjmvJi0pDgvZg0Sy9vopFzURl4M1UNRinwAaepC0TdYLWztUMYyvWUHIb eYf24qoyJXf+aHJcc/HNc8AjQm5xCY5L7jhugWE9ENEBKcWArDem6ABSYCigBO0sphHFv14HprQX BzrlxFkqt6/9Toe4p2wpenFw76wajE3TRM24i+HzU/y5eFl2q4ZKt10JQGksBXPKFZC+3m/cOliC 2Bh/X4wHobUIA9xVJn3mWvsKM19ZtQKt8s53VNuyC27dwr/LSoF82F8a+Gtq5wxsVfu46STGp0d/ e9dHHwFk4DdkfR9H5WP8+JTNUToilISUhuQuI3eMjtnk5qvNdzbfbtx/KA8p/0OcZmTEKGFkekI8 AtIu8flflv4AAAD//wMAUEsDBBQABgAIAAAAIQDhYeX3zwMAABgjAAAoAAAAcHB0L3ByaW50ZXJT ZXR0aW5ncy9wcmludGVyU2V0dGluZ3MxLmJpbuQZTW/aMJTtBpddd2TciSmlg00pFYOiIdE2KnTS TpWbuCxtwFFi1rH/vfuekziYfJXtUJL0UCk1fs/v+/NtpVJ5A3/v3lcq6tmvpVX/SRzXpKvTxpHS atTJSqeGuVqcNm7m42avcdavqR9GV8P5d+28blumy+razZfpZFhvNBEa2LZFEBrNR3VtOpnN64AD ofPLRr3xgzH7M0JPT08K5rcUnS75RRdpDrWJwzZTQNYEAMVgRgOe8bHvkAOnhqmzfq2qPpJNH1AE yGzHXDFFwwsyps4Sw+fFV+qYv+mKYeuauCri9wEsAE+GZ6b+SJiiOwQz6giYquoyQL+Qnnugd/5d FQW/1aqZKE1GlgPHwZstUsz/BZIAUBCVguN5tjgSINrqd9sq8j443kyKXIYZGVt4EVIE90GIZEGc fktF4tMjEAkKVSTIVsXZ85q4ckwCemBgVeKxkOVE6CLoIYEpLnEhtqNdCeZFFTMdW2DK5VFDhKHQ EUD+ufODbxDlTFBAqeJRAlOhEnIZjQTBEcspfkRKYSzURk5cwl3fzf08a2PI+7fm6p7e+hE/OSxp F5o20vjdITXIJV4ScU/KnP+SR/ZN6JlBO57Rq6rIjVzkhl+nwKePJoMLfiUoIwYduaIQsNE6x5eW kpTCtxkoksOrYcKG18IsLp16EtQu5iZdYE/axZV0Cg+SnE2XNvGBZR3V6k6ZNzAe1i4jBj+8Jjor osn/H4NcS5IjwX+ipopadPZPfj3cO5YLAYDwjk9OPu0cSw7x8j63p5gg/pXcEKIcxi3BU17zqLej vECnKce9Nrj5thQMLaDb3TnOmQWAKCaQF6GNLXQojpt2FmO5j89b4m9WuJQBei8O43756iJ0spzg tDwhej8W47bw6mK0bRvljdNpzEmx+tA9SzTJBN3RQJtAR8xH2dvaOeiyWi2lDcXkfqNbtrGlhjOA ib7pZWmesedeayvhDtuurA41TqtoCKOkZmGRKRXwcULFiDxKqSBURd7gvV/jq4E/tRKsBUZUXy9h Au1zDL46sym1/EWBsI2wX88ScN4WA/swJjkq37vA/JHP4ZFt3EtGyi8lLVQCV0oaNKR1ZcKMAGM4 ZQjPEh/R+O5mRhiDwbQL2hlS2yz6xiaTJS5tUTHlaE8Qp3kzpJYFa6JCO0mCeUX54gphzpogbx2X I1cYm47L+AioVBqIcVUMh5jiEuoiypSsivZRp9vpHX/swKhExKtD75UjQcobj+JVyRwkxhXXijwT TU0f28SSrrwwLXOsB8v6QWnxgpWvbDrPFr9/AQAA//8DAFBLAwQUAAYACAAAACEAqVBwFB0DAAAO BwAAEAAIAWRvY1Byb3BzL2FwcC54bWwgogQBKKAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AACcVUtP20AQvlfqfxj5RA/GDiBEo40RSqAgNSTCLj0v9iRexdm1dicJ6a/vrE0CKaZS69PsvOeb h8Xl87KCNVqnjB4EveM4ANS5KZSeD4If2U14EYAjqQtZGY2DYIsuuEw+fxJTa2q0pNABu9BuEJRE dT+KXF7iUrpjFmuWzIxdSuKnnUdmNlM5jky+WqKm6CSOzyN8JtQFFmG9dxi0Hvtr+l+nhcl9fu4x 29accCIyQ7LK1BKTXu/0XESvb/HT2MIlF6exiFpSXNV1pXJJDEkyVrk1zswIxjJXmowrYWo2aKeG XyJ6q8uYoOPCGsubpu5kokOXW0QNaWk2cHTWP/0iog5FMZVWzq2sS5f04q+s8/oWaaUKZP6piF5I cW+IOZx0S4hbVRSoX6TMPniL8XhYqbrR35EizWWFQ4YpmcnKIbveM8QtSj8CU6msS8Sa+mvMyVhw 6hcPwVkAT9KhB3cQrKVVUhOD7NXaR0NXtSObjNCpuYYMl3UliaOwVitpyLcGb2l1lvQaBSb+qtj6 auqGTFGF7l9CMKCcz7sYntlWzMEPsWhjTGbcHuqApneATZNci0yb56TZAMh4RQ6g2IOSYr6yirZv i9gLvxlZAS8UUKkcjBGJe9SpefXE2Muc4FHhBoyGydWKSujUTXlgV64PhZUzChXSLDSStcP1SdiL 4Wij2NJihWupc2ziu5cseZT3yfn2t0VeP0tuNsKd9peDVLMPfYCf+AQpWr42cFOZTadt20je0L23 V787bBg+i3xTAI78GBa+vvu7NIN0ChdxHJ77Feuwb81grEjNm5w+tu9GaoSyYsShQSQzC97qB1z5 1emI9pEyHJ10p/exwQf1jP1Z5q3cAhlQHnJ/Vi87s7kqCi7baB6gPYxDox3fFdtg8X5tmo3n+f9j 4odmWUu9Te7NQklIlQ/q4B5pY+zCQQjDyQQesincXfMEEFqNBOnoWkQ7S/Fd6YX7UWdmxBdhd30O mSItpcWC/xU7+StD3PLhsdyJhRuWUs+x2Om8F/hj/tj+3pLeyXHMX3O0dzx/i3c/suQ3AAAA//8D AFBLAQItABQABgAIAAAAIQCBQrFzbAIAAJ4TAAATAAAAAAAAAAAAAAAAAAAAAABbQ29udGVudF9U eXBlc10ueG1sUEsBAi0AFAAGAAgAAAAhAKPsgiYNAQAA4gIAAAsAAAAAAAAAAAAAAAAApQQAAF9y ZWxzLy5yZWxzUEsBAi0AFAAGAAgAAAAhAGNcI7TBAAAANwEAACAAAAAAAAAAAAAAAAAA4wcAAHBw dC9zbGlkZXMvX3JlbHMvc2xpZGU1LnhtbC5yZWxzUEsBAi0AFAAGAAgAAAAhAEv1Pey/AAAANwEA ACAAAAAAAAAAAAAAAAAA4ggAAHBwdC9zbGlkZXMvX3JlbHMvc2xpZGU0LnhtbC5yZWxzUEsBAi0A FAAGAAgAAAAhAEv1Pey/AAAANwEAACAAAAAAAAAAAAAAAAAA3wkAAHBwdC9zbGlkZXMvX3JlbHMv c2xpZGUyLnhtbC5yZWxzUEsBAi0AFAAGAAgAAAAhAD39f+3ZAAAAvwEAACAAAAAAAAAAAAAAAAAA 3AoAAHBwdC9zbGlkZXMvX3JlbHMvc2xpZGU2LnhtbC5yZWxzUEsBAi0AFAAGAAgAAAAhAAQdRrrg AAAARQIAACAAAAAAAAAAAAAAAAAA8wsAAHBwdC9zbGlkZXMvX3JlbHMvc2xpZGUxLnhtbC5yZWxz UEsBAi0AFAAGAAgAAAAhAEv1Pey/AAAANwEAACAAAAAAAAAAAAAAAAAAEQ0AAHBwdC9zbGlkZXMv X3JlbHMvc2xpZGUzLnhtbC5yZWxzUEsBAi0AFAAGAAgAAAAhAEv1Pey/AAAANwEAACAAAAAAAAAA AAAAAAAADg4AAHBwdC9zbGlkZXMvX3JlbHMvc2xpZGU4LnhtbC5yZWxzUEsBAi0AFAAGAAgAAAAh ADk/U7aGAQAAvAoAAB8AAAAAAAAAAAAAAAAACw8AAHBwdC9fcmVscy9wcmVzZW50YXRpb24ueG1s LnJlbHNQSwECLQAUAAYACAAAACEAS/U97L8AAAA3AQAAIQAAAAAAAAAAAAAAAADWEQAAcHB0L3Ns aWRlcy9fcmVscy9zbGlkZTEzLnhtbC5yZWxzUEsBAi0AFAAGAAgAAAAhAEv1Pey/AAAANwEAACEA AAAAAAAAAAAAAAAA1BIAAHBwdC9zbGlkZXMvX3JlbHMvc2xpZGUxMi54bWwucmVsc1BLAQItABQA BgAIAAAAIQBL9T3svwAAADcBAAAhAAAAAAAAAAAAAAAAANITAABwcHQvc2xpZGVzL19yZWxzL3Ns aWRlMTEueG1sLnJlbHNQSwECLQAUAAYACAAAACEAS/U97L8AAAA3AQAAIQAAAAAAAAAAAAAAAADQ FAAAcHB0L3NsaWRlcy9fcmVscy9zbGlkZTEwLnhtbC5yZWxzUEsBAi0AFAAGAAgAAAAhAEv1Pey/ AAAANwEAACAAAAAAAAAAAAAAAAAAzhUAAHBwdC9zbGlkZXMvX3JlbHMvc2xpZGU5LnhtbC5yZWxz UEsBAi0AFAAGAAgAAAAhAEv1Pey/AAAANwEAACAAAAAAAAAAAAAAAAAAyxYAAHBwdC9zbGlkZXMv X3JlbHMvc2xpZGU3LnhtbC5yZWxzUEsBAi0AFAAGAAgAAAAhAJqCFVfvAgAA0Q4AABQAAAAAAAAA AAAAAAAAyBcAAHBwdC9wcmVzZW50YXRpb24ueG1sUEsBAi0AFAAGAAgAAAAhAAYL8zl+BAAArAwA ABUAAAAAAAAAAAAAAAAA6RoAAHBwdC9zbGlkZXMvc2xpZGUxLnhtbFBLAQItABQABgAIAAAAIQDF UhexWwcAAJMjAAAVAAAAAAAAAAAAAAAAAJofAABwcHQvc2xpZGVzL3NsaWRlOS54bWxQSwECLQAU AAYACAAAACEA+JubX8ACAADzBgAAFgAAAAAAAAAAAAAAAAAoJwAAcHB0L3NsaWRlcy9zbGlkZTEw LnhtbFBLAQItABQABgAIAAAAIQBEgtJWEQcAACwlAAAWAAAAAAAAAAAAAAAAABwqAABwcHQvc2xp ZGVzL3NsaWRlMTEueG1sUEsBAi0AFAAGAAgAAAAhAOCxa0+wAwAAfgkAABYAAAAAAAAAAAAAAAAA YTEAAHBwdC9zbGlkZXMvc2xpZGUxMy54bWxQSwECLQAUAAYACAAAACEA6dDaVXYDAADSCgAAFQAA AAAAAAAAAAAAAABFNQAAcHB0L3NsaWRlcy9zbGlkZTgueG1sUEsBAi0AFAAGAAgAAAAhAPSDMNvw AwAAWwsAABYAAAAAAAAAAAAAAAAA7jgAAHBwdC9zbGlkZXMvc2xpZGUxMi54bWxQSwECLQAUAAYA CAAAACEAFLgGmWgCAADpBAAAFQAAAAAAAAAAAAAAAAASPQAAcHB0L3NsaWRlcy9zbGlkZTYueG1s UEsBAi0AFAAGAAgAAAAhADGVLgKvAwAAaQoAABUAAAAAAAAAAAAAAAAArT8AAHBwdC9zbGlkZXMv c2xpZGUyLnhtbFBLAQItABQABgAIAAAAIQCAuj+ixwQAAJ8bAAAVAAAAAAAAAAAAAAAAAI9DAABw cHQvc2xpZGVzL3NsaWRlMy54bWxQSwECLQAUAAYACAAAACEADIreYjEEAAC7DgAAFQAAAAAAAAAA AAAAAACJSAAAcHB0L3NsaWRlcy9zbGlkZTcueG1sUEsBAi0AFAAGAAgAAAAhAK4JKNfJAgAA/QYA ABUAAAAAAAAAAAAAAAAA7UwAAHBwdC9zbGlkZXMvc2xpZGU1LnhtbFBLAQItABQABgAIAAAAIQBu 1V/JVwMAAKIJAAAVAAAAAAAAAAAAAAAAAOlPAABwcHQvc2xpZGVzL3NsaWRlNC54bWxQSwECLQAU AAYACAAAACEA1dGS8b4AAAA3AQAALAAAAAAAAAAAAAAAAABzUwAAcHB0L3NsaWRlTGF5b3V0cy9f cmVscy9zbGlkZUxheW91dDIueG1sLnJlbHNQSwECLQAUAAYACAAAACEA1dGS8b4AAAA3AQAALAAA AAAAAAAAAAAAAAB7VAAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlkZUxheW91dDYueG1sLnJl bHNQSwECLQAUAAYACAAAACEA1dGS8b4AAAA3AQAALAAAAAAAAAAAAAAAAACDVQAAcHB0L3NsaWRl TGF5b3V0cy9fcmVscy9zbGlkZUxheW91dDQueG1sLnJlbHNQSwECLQAUAAYACAAAACEA1dGS8b4A AAA3AQAALAAAAAAAAAAAAAAAAACLVgAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlkZUxheW91 dDMueG1sLnJlbHNQSwECLQAUAAYACAAAACEA1dGS8b4AAAA3AQAALAAAAAAAAAAAAAAAAACTVwAA cHB0L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlkZUxheW91dDUueG1sLnJlbHNQSwECLQAUAAYACAAA ACEA1dGS8b4AAAA3AQAALAAAAAAAAAAAAAAAAACbWAAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9z bGlkZUxheW91dDgueG1sLnJlbHNQSwECLQAUAAYACAAAACEA1dGS8b4AAAA3AQAALAAAAAAAAAAA AAAAAACjWQAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlkZUxheW91dDkueG1sLnJlbHNQSwEC LQAUAAYACAAAACEA1dGS8b4AAAA3AQAALQAAAAAAAAAAAAAAAACrWgAAcHB0L3NsaWRlTGF5b3V0 cy9fcmVscy9zbGlkZUxheW91dDEwLnhtbC5yZWxzUEsBAi0AFAAGAAgAAAAhANXRkvG+AAAANwEA AC0AAAAAAAAAAAAAAAAAtFsAAHBwdC9zbGlkZUxheW91dHMvX3JlbHMvc2xpZGVMYXlvdXQxMS54 bWwucmVsc1BLAQItABQABgAIAAAAIQDV0ZLxvgAAADcBAAAtAAAAAAAAAAAAAAAAAL1cAABwcHQv c2xpZGVMYXlvdXRzL19yZWxzL3NsaWRlTGF5b3V0MTIueG1sLnJlbHNQSwECLQAUAAYACAAAACEA 1dGS8b4AAAA3AQAALAAAAAAAAAAAAAAAAADGXQAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlk ZUxheW91dDcueG1sLnJlbHNQSwECLQAUAAYACAAAACEA1dGS8b4AAAA3AQAALAAAAAAAAAAAAAAA AADOXgAAcHB0L3NsaWRlTGF5b3V0cy9fcmVscy9zbGlkZUxheW91dDEueG1sLnJlbHNQSwECLQAU AAYACAAAACEA+18rCScBAABjCAAALAAAAAAAAAAAAAAAAADWXwAAcHB0L3NsaWRlTWFzdGVycy9f cmVscy9zbGlkZU1hc3RlcjEueG1sLnJlbHNQSwECLQAUAAYACAAAACEASuG8pN8HAADxLgAAIQAA AAAAAAAAAAAAAABHYQAAcHB0L3NsaWRlTWFzdGVycy9zbGlkZU1hc3RlcjEueG1sUEsBAi0AFAAG AAgAAAAhAGzctadFBQAAtRIAACEAAAAAAAAAAAAAAAAAZWkAAHBwdC9zbGlkZUxheW91dHMvc2xp ZGVMYXlvdXQ4LnhtbFBLAQItABQABgAIAAAAIQDRTYX37wIAAFMHAAAhAAAAAAAAAAAAAAAAAOlu AABwcHQvc2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0Ny54bWxQSwECLQAUAAYACAAAACEAEynvSS4D AACmCAAAIQAAAAAAAAAAAAAAAAAXcgAAcHB0L3NsaWRlTGF5b3V0cy9zbGlkZUxheW91dDYueG1s UEsBAi0AFAAGAAgAAAAhACRET6TEBQAAMBwAACEAAAAAAAAAAAAAAAAAhHUAAHBwdC9zbGlkZUxh eW91dHMvc2xpZGVMYXlvdXQ1LnhtbFBLAQItABQABgAIAAAAIQBnlfYTZAQAAF8SAAAhAAAAAAAA AAAAAAAAAId7AABwcHQvc2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0NC54bWxQSwECLQAUAAYACAAA ACEAIhGJYNoEAABHEQAAIQAAAAAAAAAAAAAAAAAqgAAAcHB0L3NsaWRlTGF5b3V0cy9zbGlkZUxh eW91dDMueG1sUEsBAi0AFAAGAAgAAAAhANxlIwOdAwAAiAsAACEAAAAAAAAAAAAAAAAAQ4UAAHBw dC9zbGlkZUxheW91dHMvc2xpZGVMYXlvdXQyLnhtbFBLAQItABQABgAIAAAAIQDU7EVljAQAAPMQ AAAhAAAAAAAAAAAAAAAAAB+JAABwcHQvc2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0MS54bWxQSwEC LQAUAAYACAAAACEAAqQhhrcDAAC/CwAAIgAAAAAAAAAAAAAAAADqjQAAcHB0L3NsaWRlTGF5b3V0 cy9zbGlkZUxheW91dDEwLnhtbFBLAQItABQABgAIAAAAIQB1nDmH9wQAAB8SAAAhAAAAAAAAAAAA AAAAAOGRAABwcHQvc2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0OS54bWxQSwECLQAUAAYACAAAACEA 6bn5L5gDAAAsCwAAIgAAAAAAAAAAAAAAAAAXlwAAcHB0L3NsaWRlTGF5b3V0cy9zbGlkZUxheW91 dDEyLnhtbFBLAQItABQABgAIAAAAIQAbXz56AQQAAJ8MAAAiAAAAAAAAAAAAAAAAAO+aAABwcHQv c2xpZGVMYXlvdXRzL3NsaWRlTGF5b3V0MTEueG1sUEsBAi0ACgAAAAAAAAAhADkZvYuiawAAomsA ABQAAAAAAAAAAAAAAAAAMJ8AAHBwdC9tZWRpYS9pbWFnZTIucG5nUEsBAi0AFAAGAAgAAAAhAMQT sGYBBwAAkx0AABQAAAAAAAAAAAAAAAAABAsBAHBwdC90aGVtZS90aGVtZTEueG1sUEsBAi0ACgAA AAAAAAAhABNpx8zWhwEA1ocBABQAAAAAAAAAAAAAAAAANxIBAHBwdC9tZWRpYS9pbWFnZTEucG5n UEsBAi0ACgAAAAAAAAAhAKwxus+ZcgAAmXIAABcAAAAAAAAAAAAAAAAAP5oCAGRvY1Byb3BzL3Ro dW1ibmFpbC5qcGVnUEsBAi0ACgAAAAAAAAAhADNFff8M0QAADNEAABQAAAAAAAAAAAAAAAAADQ0D AHBwdC9tZWRpYS9pbWFnZTMucG5nUEsBAi0AFAAGAAgAAAAhANj9jY+sAAAAtgAAABMAAAAAAAAA AAAAAAAAS94DAHBwdC90YWJsZVN0eWxlcy54bWxQSwECLQAUAAYACAAAACEAexd40fkAAADCAQAA EQAAAAAAAAAAAAAAAAAo3wMAcHB0L3ByZXNQcm9wcy54bWxQSwECLQAUAAYACAAAACEAA1nPcfoB AAAqBAAAEQAAAAAAAAAAAAAAAABQ4AMAcHB0L3ZpZXdQcm9wcy54bWxQSwECLQAUAAYACAAAACEA FU34H20BAACyAgAAEQAAAAAAAAAAAAAAAAB54gMAZG9jUHJvcHMvY29yZS54bWxQSwECLQAUAAYA CAAAACEA4WHl988DAAAYIwAAKAAAAAAAAAAAAAAAAAAd5QMAcHB0L3ByaW50ZXJTZXR0aW5ncy9w cmludGVyU2V0dGluZ3MxLmJpblBLAQItABQABgAIAAAAIQCpUHAUHQMAAA4HAAAQAAAAAAAAAAAA AAAAADLpAwBkb2NQcm9wcy9hcHAueG1sUEsFBgAAAABDAEMA6BMAAIXtAwAAAA== --Apple-Mail-4--499667378-- From leifj@mnt.se Sun Nov 7 21:16:14 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B71F23A6952 for ; Sun, 7 Nov 2010 21:16:14 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0 X-Spam-Level: X-Spam-Status: No, score=x tagged_above=-999 required=5 tests=[] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id I+3+uOQeon0Z for ; Sun, 7 Nov 2010 21:16:13 -0800 (PST) Received: from backup-server.nordu.net (backup-server.nordu.net [IPv6:2001:948:4:1::66]) by core3.amsl.com (Postfix) with ESMTP id 5DB003A68DA for ; Sun, 7 Nov 2010 21:16:03 -0800 (PST) Received: from [130.129.39.42] (dhcp-272a.meeting.ietf.org [130.129.39.42]) (authenticated bits=0) by backup-server.nordu.net (8.14.3/8.14.3) with ESMTP id oA85GCpO024401 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO) for ; Mon, 8 Nov 2010 06:16:18 +0100 (CET) Message-ID: <4CD7879B.5090404@mnt.se> Date: Mon, 08 Nov 2010 06:16:11 +0100 From: Leif Johansson User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Lightning/1.0b2 Thunderbird/3.1.6 MIME-Version: 1.0 To: oauth@ietf.org References: <55239381-F045-4C9E-9E06-A345B54A0B93@gmx.net> In-Reply-To: <55239381-F045-4C9E-9E06-A345B54A0B93@gmx.net> X-Enigmail-Version: 1.1.1 Content-Type: multipart/mixed; boundary="------------050604020608030804040903" Subject: Re: [OAUTH-WG] My slides for the security session X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 05:16:14 -0000 This is a multi-part message in MIME format. --------------050604020608030804040903 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 A pdf version I made using openoffice. Cheers Leif -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkzXh5sACgkQ8Jx8FtbMZnfwFACgmoGX/R+9J2ufx2kX1gfeXAbh WtsAn1KB9SpXBqJ6v5sxA7c7H8QiK5ur =5IuS -----END PGP SIGNATURE----- --------------050604020608030804040903 Content-Type: application/pdf; name="OAuth-Security.pdf" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="OAuth-Security.pdf" JVBERi0xLjQKJcOkw7zDtsOfCjIgMCBvYmoKPDwvTGVuZ3RoIDMgMCBSL0ZpbHRlci9GbGF0 ZURlY29kZT4+CnN0cmVhbQp4nJWSz0tDMQzH7/0rch6sS9KmP2A8cM6B3gYPPIgndYo4xV38 9036fKBvlyeFb0LbT5omQU/w5T4BYYnqZjaVaHp6gtsFvDsCW6dnh3YAR6eXmvdm18HsqMPu izssNGSQqlHsKLR4gZIvQBLUfzi61fUxwvYD9u11W/rEpnfoa+UsoAgjhZZXc8aDGKKPwKmq 9hpnRxDVO6yRuv51Bp8YOLPPE5rn0aUqnSZsmMUK2d85F18nfJzHax0LcGHPE17m8VIaH88q l+bxWbMvcpZ9Nvqqd/9upWDUNjBHTetvyPI7pBekms7s8AhHHaog1s5HWO0YghbncGfTsGTt qvbG7KCxqTRNHZPlToTjVmla8aLZzc/1Ab3swhq33X1/M+YVMPk0DDiKllQrI0CZtDvDfMsw 33v4BiQ+sfcKZW5kc3RyZWFtCmVuZG9iagoKMyAwIG9iagozMTUKZW5kb2JqCgo1IDAgb2Jq Cjw8L1R5cGUvWE9iamVjdC9TdWJ0eXBlL0ltYWdlL1dpZHRoIDUwNyAvSGVpZ2h0IDUwNSAv Qml0c1BlckNvbXBvbmVudCA4IC9MZW5ndGggNiAwIFIKL0ZpbHRlci9GbGF0ZURlY29kZS9D b2xvclNwYWNlL0RldmljZVJHQgo+PgpzdHJlYW0KeJztnet53jbTrZ8Okg7kDuwOpA6sDpwO 5A7kDuQO7A6kDpwO7A7kDpIOnj2fcIWbLw+DBWAwBMB1/0pkicPj4nAwh+uVEELIyFz+4+gd IYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBC CCGEEEIIIYQQQgghhBBCCCGEEEIIgfj7P15eXr78L/f393e5fP78eb6p79+/T4b+/fffow+a EEIG5Pfv36KxordBeIMaf/jw4dIA7969m78dwkvh169fR58zQghpnclL/+uvv0RFRU6PVvR8 /vzzTzkE+cSYXgT8LiCEnJbJb+9d25OQg5XXmRy1HL58vBx9EQghxB7xb0XiQly9kYBMC4QP gc+fP8u7j7EgQkinzBX+PA58OUH/X15e6P8TQlpGNEo81b/++os+vAnyopST+fXrVzr/hJAW EC0SRRI3/s8//zxaIEdGTq+cZIo/IcQZivyxBM9fPqaY+UMIqYFoSwjXMCDfFB8+fPjy5Qvd fkJIOaIkoieMybePvIjDau/RtwwhpDNEN8Zw5kPeYx5H73smcshy7aj8hBCFELS5v78/WrHi yBfHouPNvNdNjZMTOjzMO/aI6cbfC1R+QsiCZnU+qHovbWpk32QPv379OjVtO/r8/X9E+eU0 tnz2CCG1Ed+vEZ0PXchEKkUwR+o5EKrP5KDC58DhSU1ynmVnhjm9hJAo4unJl/6x4jP1E6gU gWmWEBo6vABZrDPUQ8jAiLcp3t1RIvPhw4eQOs7Awhy5KGFR4JAQkNwMYpoOPyEjIS6liK2/ noQojQga64NAjqpoE4tn+9QiZDzEo3Z26cWTZza4Cf7iL7cKq3cJ6Q55ZsW1dhOKkP4nWsHg QCXE/ZbXqE/5m1xNxnkI6QJ5Tt2iN6G0k6EAT0I/Up/cKrmRKPuEtImb1Iuf2VRqX0h9DIQ0 +EVh1B63/xH+Nwyimmh/ZHmohq79HScm+E4npB18pP5YnZ+PMp+U3Hllc/5eCAmljbz1HJRf DpyyT8ixOEi9v85PmepB2Nvv5xMqgqe3gNuJWhOUv96RUvYJOYTaUh/i8w4589MkRDmcptoR lDAVDosC+9cdhF4Z9U4mZZ8QN2pLfe12W+ecdTvpv/O3khitdJLl8jUS0SJkSEKyZY2H9/Jf l5VKC5Ti5XJ4yoScBOdhhfWaJjGTh5Aa1Murr5SGwTGICKFdv8/IquDwm1+OkLffbC4TIX1R qVq2hks/ZYlT5DOYxpTX9plrRPhl52WzVXebkLERx7vG0pts0/bZ9KwDPQlhTHnVNkQ1OizJ PcD1XEJSqbQyK9u0Ch1MM83pzNemqtsvm5WXte1FZGCfEBzzQGsYeGTyDDY7HusMhMZ0NaL9 5s2XZFPykjLfT0JGQj6HbcP1Vgtq1PmmqNTFKMi+4R3ICA8hm4j7bSunVlJfu3iTlFBpTLlt noC8m5jDQ8iE+dd0udTXCO2SetSojP769avVDSDb4YgEQuSD1zC5pVzqQ+imu3ybP/7443Yf +dfoFm5ubpQtOByCFbbKbxvbl29YuvrknMidLw+myXN0sZD6kBfUqUsvmqwcGqLYj4+PyhYc DsEcw653hrJPV5+cELnnDaW1MEZatdGWDxR8BfGrTcouDFOF6eqTkyD3ueHibEnCs+yJeIBj NLeh4EcJy7vloR7Zgol7QFefDI+hY1/Sona8BVld8N+/fx/dwvCCP2HSUsMqf5gJPGRIDB17 edCyXSPPibee6IKPbMFZ8B8eHm5ubsw3ixMc/sIIv0lgX+5n/5EBhNTDyrEPK7N5+yAu2cBl U30JvnxxhM3+/Pnz6ekJ+QCph3wqloRWxJMxcSFYlksGwNCxz543UakDW1P0Jfji3i+2//r6 +u3bt48fP9oawhE3u2Rh1yTCI3cpwzukX+QpMHHs5VHKC9f7S71IFpL0bk5fgi+OvWLr+fn5 06dPh5zGwuTe8giP/DlbMZAeMcmxz47hOMfqRefFQf3nn3+ub2EKf7HqSPBvbm7Aiyhn8pBQ f4nsy41X7mMwvEM64tevXyaVqvLgZMRwPKV+rvNzxEf12YGJjgRfvPfUa/r6+uof6i+R/e/f vxe6+kzUJ11g0n4kL0XZvMOtQlS15EXgsBsTHQm+vA1Tr+yEvFtDqN/tGypb9stXr8RrYvYO aRar9dm8zORynyoJcTijuyQvBbf96UXwRagTL+wuIdTvE/DJHl9YmJ/GsYmkTcQVKc9SyFuc tW2/BvLjxw9k39w0vyPBf3h40BdtUwmhfoeAT14BSLkjJC6Q4ekipBAT7zrDsTdvoY8DCv4/ //zjE3nuRfAnxDOXt2FJeGeNz6m+u7vLiLQUhjoZ0ictYFJ1kufYu4XrN8F9VNF8h7BDuVwf 2Fphb+07idfX16o7uUBu+wz/pORTVP6Wc3LJgRTewIEMx958DGIGSTvskKjZteBPgN9Nmzw9 Pfns5ETe1FpxVEoschmXHEJ5UVVGjYlVGXs5qadLpKzq/owh+Klndc5RVboZuTSFzw6XcYkz cssVPiYZMUnbFvol4KVDc6omag4g+KLYGWc18M8//zjsoULqh2rhSi4rs4gbhT52RqbZgYuz m+grpAoiqpV2aQDBlxeisgPykg2h/tfX1/W/Olc9bJKRwyO6nW1OHsMkW4SkIm5JYdl4xsKT 4SBpKxTBjy7mVkrUXLcjm4OsICiVBbXjUQFl0VbO6vw3379/L3s7P9WeJQ86qZ+uv379yr69 MxaOCQEpX6JN7YpT/n6phKKu4ohGs01qZA+WT7xSFkwdBH9qmLzJ3peRnO2Q1X9Ip7U9UuvE S+5zeSSp+cScEj/kkrU+207Efo0S/bgAAZ8ayfm6USSDRXlPOQi+Xrl8bMP8PFJd/exmg9R8 YkthXVVql2/bobc12BP8aekw2mnH3CnVWxZEc9T1Ha639DCxGZkHd75ZUv2c7AeNXXeIFYUJ OalhnBZy7KPs1YfOPWF9CfK6ikuXo2jmVRVteVnoYajaGY961lMLC7IlJCXwZLcoYYo+Kaek p31GGKekJsWTvXD3IvQRXcC1lbLoK0Z+Yf1ZcXt7G93P2hFyfcX5kAR7+eQxjCMleeDydshb LKPmkxJK0i9TwzgmYyPcAAVfdFL3uq+m9aFIsqh48vJ58vjGItFlD4fe/spuHJJgP60gG8ay Usty854+aj7Jo0TtU8M4La/PbrJ3IGuPXaQjmrRjmFIYfb9kgGT4lKCvPviPkrn87wtI/tvQ 1U9ayc3L0qfmkyRKksQywjgmkxCd2TuWtUMoWoF40VaiWlKsuolDfo6+XuyfYL+5Im/o6ieF d/KWcan5BCQ7fnhJL6pqNs1eR/FIJ1lQakI3MUzUNGw47NPbWd9h5wR7pRzA0NVPKjbPy4im 5pMoJWqfWuhd3nvtKJRQuWhXdptfeTuYiJtsxGq8iI93fWz+/4LoqTN8A+KPTN6QaGo+UShR +9TeOCUtRA4nu5FOFKvk/HLNFxH2yY3RY1APDw8O+zChdxO6VlhQwGum8h5Paj7ZxC0TrJ3+ xtlEi6pKMEzUjMrXHuJXu1W2Rhum+ezGJdbb4fr2EqwRX8KfoLyCRGo+WZCt9hlBe9vhs/IA ir/tXHefLaQghpovgvn09ISHmMSDrZ2Ts0BZ5jAvTNOJfhNV/eTBv5Ez/CVqPpnIFmHProBz wnro+vEUWRPXVNS4tv6XCL7sNrKoah48FxmX3RbTcorm+i/7Iz+Rl4JY9O8/pjvVnhOs/IM5 a/BJ5Xmaz/GIJFvtU5doywemJDmromP1FhyjBa1rRC5kf6YABRJgP2p+kyeNNEw7KpizBm93 nKH57LF2crLVPnXaTmHDBHnW8pzqSrFofO5q0Pm1VkQXVV9fXx36lR1OCwW2SDW058sXl+UM J4qaf1qy1T41IadwiVYUu7B61NzV1wU/9C6IRkg2K3DlSMXp7bEVcAaNNEzTvzKuKcEcueLy y+WX7927d2DIPU/zkS2TwXBY+ilforXKh7FVDyWslOQKTumd4ug+PDycROcnWmiYhkwuwIM5 0+pM+dcZ/qxlaD5nI54NB7XPKxWZY5v9aLgCqFhJ3ZQIjmfmYVPoH0oOO2AbzFkUFJiU5YJf 09R8ouCj9oUJOTVy3a1iO3vbP6SvY78o2Uo+DdNsgzmb333lrn49zU+NzZIeyShxTU22L++Z EM2ayEMeyXJ3WgkC+PcBGICQZLtQS4eWDmArabDUV3l5lbv6YO9Zaj5Z4LCsX55+ibcFCDnk i8RynXJNpuBXQlRRXO4QY6mdA4kEc+aXVfcToh1Ky0c0ghGY1KePBVkDI4536m3mr/YXoARG Hp91DozIBZgeX1hJSsGvjcOiRjSYs0Bx9aPTIctvuQCo+akp0CzIGpKMoHqq2pu0tY8+Pvra K5LDWRgfVt5HvY9ePQnZve82Xf1o3bRhtgCo+amLdEzOHwy5mrXV3qofmu7eIwFVJCJU4kOu 9zAkz5+hMHYAkoI5axauPhLMsQ1PVdL8+/v77HNCmiIjGf4otb+orbRwz1z0XP9MKFkTnKIB pyqSGobUYM4mwdV3C+YsqKT5eCcf0jKp/VQPVHs9OSfJLdezOkuiOt++faPOdwpSZgXe9vKb 0Q/Jes3fQM1P9fSYtNM7qXH11FV72872SullhkS303eXtABYZgXOII5iHsxZgGh+6tc9k3a6 pmqOVo05JkqaTUYBi165b7vnpH2SyqzKRx44jBWoofnv3r3jAm6PpKblpKq97RyTgFJrn/H4 6AEi850nLRMN5qwd8hJX362TP6L5qVJwd3eXd9TkKDLScv7++2984zXU/mIt+BfTpjcjMf+S EqEbfj0CCebs3WAZrn7tYM6CGpoP1vaSRqi6WJMxVRNEEfy8YdbKUZjvfF9MAniG2oFoMCda 3JHk6vu/QBHNT627fHl5wQ+ZHEjqQm3S27zq/HFF8DN0SWm3fvIuZ4u1EofGNceie+mgQw66 +keNrUE0P2lRjxW4XZC6UJvUJbWq2l/UosWMGXNKUcyZeyBMai86P/9vWyut9XxWvHQ8WhjV /GOzv5A5dEn6wFEpjVN1daa22l9iD1Sq76S8PrqYHigvuIeHB3k3GarxWuFraH7YZoOrA+sb DF9dRcqsDj9eJDab9CCzGqtZUtdSkwqsHNT+EkulSGpurKfoHP5ggtiq8d7WfKyIYMo3l+dq 5iZzVz9pdTXaM6cRLwKJvSc9zgzmt0nSRUxKwsxooZ+N7kTJo4o8oXo7nfJetTXYCyxYqbG+ HR8rofxZvlkO7zsUXH08mBPtmdNOKR/4aOPOoWyQmfmtkRq6x5MwTToe40RbHEfHSUSbp+Ul /FQijP/Qox/laoxswcfK1PLi8JVi3LfvIpgzB9H8pIAAM/ObIjV0jyzuBORrLuuOy0dJrZkI HQs3H1iREf3ZdM6R1gkKKTsclYsSNcb/1sdKO5oP0kswZw4SsP39+zeuG7hokNokhe7xtJzy ubR5gHNMRCflSXz8j/WYvE0ODyZM4Go///1rok6m/pWPlY40v6NgzgIkxybpGWebnRZIyrrH F2qT3v62RJsbZ+MzGhshVe3nf3VtTL3zrHSh+d0FcxYg3h3+Fc85KYeTVD2HL9TWa54Aojc3 zgNc8HUgT+3nf3ttJj5TYqV9ze8xmLMACcXgWRnM0jyQ1IY5eHpVveYJOCaDKiaSUjoLkdeK kv5RovbzLVwbWIEtt4JovlixLUYA6TeYs8A2URPP9yC2JMky/mo2GU1rAhjMjyIPppvaTyqh ZD+WqP18O7qVvX9tzYqu+fVqgXV6D+bMsU3UZP/kQ6hUIu2chBml3M+Xr3LnSI5e31Su9oiV 9c9btrKn+Uep/eVN8PV7r/1gzhwk/C6/IGKObI2BHWeSVlTxJkjiBuTfUtUQnzlvDXcxb9qT vQ4GVmqvW7maKqSPlbXmH6j2E7e3t5t9lXsJ5sxBxpTjSTsM7Hhyd3eHX2iw9XFGC303xN0S hypp3qj8/rFLtOseZbZqv2flWkEhfazMNb8FtQ9suvq9BHMWIH1xwW98BnbcSGp0gLzWA8em 5SCEZmJ6Fe3z8/NeTZY/8zWIGmq/tnKtppA+VhbZWYer/cTc1e8rmLMA8czBVTwGdhxICubg b+F2FmpB5AEUNZiqruS/HUaIZuCjEj7TTHysTDMRWpvMElz9HoM5c8AAL+j+MbBTm6TMHPBy tLZQOwwj+d4jWSmhkY/HEpAUDtCxFJcSURiSR1JnG/CD66j+CcMzj9v3Hl33t9J+TVbXIOIA qg2n31YiaVEVLII+vKJ2VNartP3mzxxlhZpfFcNgPnvs1CCp3T14CXzGmpyNvZycHjPkj7VC za8H2OUecQjZPNmcpJ45YDDHv/VxFxQGafUMzL5qYFuwYqX57eRutQMi1GBtDpj7TUDwwAuY mXNgM8yWEVkQrc7WFiTfvpcuN+1YKdf86bq0Nlr9cJDWal++fIluh1OxDEFO+ASYmZNUunUe yjtMnm2aSfszU9qp4WoTqzY7TMs3IckVB8950hvkbJT0kD/nNJOWZ6ZQ7aOAc1KQTXH1thw8 8R78qmqzYU5T5CnemaeZtDkzhWoPgqRWIl4iV28LSVqrBddNmIeJkBrT4DST1mamUO2TQJxz pJcmV29LMB8rz2AODr5qyWkmnlYQzafap4IEdhD/k03VsknqeID0x2AwJxUkL5HTTPyt6JpP tc8DCewgEWbW3maQVFcLnmEGczLQK484zeQoK3uaT7UvIRrYEccyuhF8AAeZwGMv4FotgznZ 7PUW4DSTY62sNZ9qXwgS2EGU5K+//opuh0wkpWIiqyQM5hSy7h7GaSYtWPnU5MyUromGC8Dg A518HLzFDbhWy2BOOfPOvZxm0o6VT63OTOkUJCCDzGBiiiYIEiWbQOpqkyZkEQVOM2nTSrMz UzoF0WokRZPjURDwpgfI+MKWJ9X2xUheMa0QnZeXF11YkBxCOvlRkiqtkChZ0oQsssc8bt97 3HtUK0h+PgFB0umRQHH0xXFycPceaZuT9PoYDMMRt+tV2n4zW8a2Qs03JLp6C9ZhRWXqtOD6 DKZiInG2IQlSYJhVzmkmvVix1fynp6dKq/NdEI0hIA4qmy3sgbv3SKXVmddqbetGOc2kLytW mj9d/dNOTokG4enkZ2Pr3nOt1qozDKeZ9GilXPOZ1R+IZtrQyc8Dd++RITUcVnux6P3IaSb9 WinRfKr9RNQ/p5OfAe7eI6cuKZN/bPKe3NRa2hIr+F/RSupf5Wk+1X5B1D9n2+RUcPceOW8c XzgnT4s4zWQMK6maT7VfE40hIzn5dPInbN37M6di7pEabeA0k5Gs4JpPtd8jmiVCJx/H1r1n 25xN8PVETjMZzwqi+VR7BTr5VuB9LJHTlTQz5WwgGYOcZjKqFV3zqfZR9EpPMC2Q3XXwdBok Oee0lVYgek0Qp5mMbWVP86n2IHodFqecR8HTaZDce7r3CHtV/5xmcgYra82n2uPoY01ANTuz ky9fSeCpRqYS0L0HmT/jNdR+z8q1gqrQSiqfODOlAN3JR+IVSI/fIcGLYRH3nhMMk5ie9Cun mZzPyifOTMlFd/LBFMFzDsPCe91EG2OykUIGnGZyZiucmZKNLtdIluA5J97iEZjoC5HufSoj +auTlZ8/f4qOVer0dXt7Kxuf1HiMM1bVyqjocg2uJCLNfkfi5eXF5PQG6N4nMY/b9x6Rfnh4 kC8Uw+b/UeSF8vHjx6enJ3Oj/isFeq4m2UNxQcFoA9LvdyTwYqvoojaTc5JYr9L2m3MyEkfl AlHzM9C9UGTp9lRFWHg2ptU04d4RJ9YwQ36MaSYjcWy2v63my+fP8P3z9TQSsJj0PJ0W8GzM 6Dk5g3t/e3t7tauBHWOayUi0UM9rpflhOz9//izZSBfoMRlk6fY8RVhgyB356jmDe3+x63Iz xjSTkWinY0+55p8qOqQ7+aAjKt8CUYnrHdwnj65r4Cu/A1Ci+fjftt/7McrNzc1tBWqEKXzO GP63JYp9KrUPKPEHeRcgWzhDfibezTKauXS2vvd5mp/6V3nakvpXtpovh/b4+DjllldCzuHz 8/PDw4O8U8r32eeMpf5Vnm6fUO0vsRAE2CVs7PxMvDdm9N13zr73eeo9xjSTTeRvf/78WeFW jSAvl5K0zJbfqqnqfU61Dyg5hGD8AekJ2S94b8xoNuZpp9amxmfGmGayRvR2KoM6CpH9que2 5G9LrOAafma1v8QWXpEVxoHzM/EGCNGTcPKptfgK7BjTTBb88ccfT09PFe7QTJJ6U/SyMo4o +cnVPqAUYYHpiKP2z8Sb50Q/c9hLAcmxHGOayQJR+0NiODpgS4e+cl91PafaB5ROX2AEe9Sl WzyFMrqQwV4Kl1gV1RjTTBa0qfYB2TFd83usbttTdar9hJ6fieSoIN2Au8Owec4Ziq1A9vok jDHNZEHLah9QNL/f/hVrbafaL1DyM8GwxnhVt/f39+DZi0a0OKZ8zroTWu/TTH78+LH5r7Wz Lk3Qd77SGbs6zkyh2q8RRdq7H8DVRmULPYKvsUaXa/HEzvMw73Y7wDSTzXTHx8dH+/uyDg8P D+v9l4Oqd8bm1itZ+cSZKSrK0i3ooI40FcVwlOFpszF1avdpX1hxnppxc3NT8e60Rt65JpVZ OD7XZXqzcGbKGmXpFozqRMc8dQS+xqq/5jjZapORPPzNGHgXwZw5npJID78FRJf2bgYwvjFM Qj6+xhoNZHG5ds1gMfy14Mux1Lo1a7J28uUnjOEPzMvLy97NAEZ1xkjIx9dYo0vVXK5dMFiW zvPzs2K9L56entbH8vPnT2bpjMr9/f3ezQBGdQZIyE9aY9WTUU9eXbtmvDz8zU3JgVS7PSvy +vq6PpaHh4cr8/DHZU/BQO1S4kK9gK+xKu/HAL7yewaGrLRdx3M+fvxY4a50Yn3yp9VnqzNW 9broqk7NX6PEKMDohBIX6gJ8jTUazznJrBOE8/TS6TSeE9iM6rCXzsAoq5BniOokrbHq8Zwh Z52IQ+swzaTrbpmdxnMCm1Gd2mfMxAqu5NT8BXt5hmBwu+uoDl5dG32vDZl+//j46DPNpNN+ +GGYb9fsnXb2w5df3lyj7x2l8SMYo+g0qpO0xqof46jp9yG93Ee9e5x41VQP5Dw2ozr1zlj5 X2Wrd56VSjUjB6JEdcBVyE6jOngz5OhXzKjp91M3MJ/4THczbQ+fb1LOXlSn0hkr/NuS+ExG FGjUit29qA44pK/TqA6eMx99o+Ghoe4ANd9qBRaxcm1jPbHTeqs1+iVrYWU8UB6NT1rnHVXt L2pUB4xUdBfVSYrn6Pk54Pz3folqvm2OpW7l2kzG4ADxnIAS1bE9YyVWrNZe9e2cQe0valQH XIvsLqqDx3MusfycUeM5cxTNr1FFtWfl2lJNUOOt73H0qI7hGcu2Yptps7e1k6h9YE/TQDXr LqqDB2Gi9VYDx3PmbGp+vT4JayvXlmZz9NUeMwpy+dz6Vyy2aav2e9s8ldpf9qMWeLyir746 5WcmMHw8Z85C82t3QptbuTY2myO0IBiGaFSn/IzhzLdcQ+0D8y2fTe0vqh8LLm521C05qUjq hPVWCospfr33Os62Mkw8J4BEdQrPWBI+ViadD5xH7S9qTObLly/IFjrqlow3vYn2Qx6y3kpH NH8qL630JAampMfHx0cHK/jzPlg8J4C/uH2mmUwjBqpamd4se5MfB2YvJoP3k+xlBhaekKnk LwWGrLfSmXtfPh5+a98RC89wDFKjOgEf37trK82ixGRAWYvKYwskRd3lZads6oTja6fo+u3t LV6TlWflOosVNzUz5fn5ucqteSipuTr1Yvjz6LqDFTFRb6WgZcqTM6MJLS2AR92jQaqz9UNe aG9SHW6qlesqG6SRmSly1PY3ZRukVmDVUOO19la1MsWLzqn5ezEZPNXc/CY0B1fpaHHBqeZb baquuebr+d4tzEwZMp4TyOirY6vGe6pbycpideCEmr+XgojXpbafnImrdLRhWuZZ7hBFbw01 H6noPHxmypDxnEBet2QrNdb11tzK5lrw2TRf8WnHSM5MUml9U2cosA1EldZE8/GeLW4zUzat dN0AP0reDKxyNUaU1tCKkvlzKs1XotZgJCSax3gsYDs44e7uTt/USRIyQY0t1PzUrow+VgYb aIiQPdm8RI1xjTWxEs3zPJXm74Xx8bVOvVLpWMCagguQcXSGgYZJ6pqt+alPcZ7mZ9TSKhsZ lc2ozvrFZ3KGA6nqWmgFzOo/j+YrnQTALbTcORPve6MnZCY12+yUDF3N0Py85zd136wiwGPH cwIlSySp5zlPV7OtJNVwnUTzlTD+3d0dsoWWw/hgQcFpJ55MZEdOMmamXAumZtS2MmeAgYYI YAVW+dkuUdQMKxkVu2fQfCWMD8ZDmg3j4255tKBg7AB+4dpo0syUa/HUjNpWJoZpgK+D99Up OeflWppkJbs/wxk0v3AA1qXVMD6+DHHmAL5J9iM4M+VqNDWjtpXAAAMNQcqLHfQzb6WioJXC bjzDa74ShC/fwoHgK7Z6NcFIAfzFepxhfVN0ZsrVdGpGbSvDDDREKIzq6OffVj+jVkx6r42t +UoQHgzji7RWuA1LAXf+cqYMfPFa600zUWamXCtMzahq5STxnEB5VCewvgo1lFOxYthpc73n 8h+3t7dW2z8QJQUdzMaPJrEfAhiHie78MC10QlZ51WkmmzNTrtWmZtSzMlgD/ChWt8H8WtTz kzetGKp9YL7/4b/NTRzF3m2Ah8HN78BC8Brb6OfJMC10fKaZLKxcO5yaMWQDfB2TqE6g3nVR rFSS4knzzc/Ssexlofc78RBfcY4uQGSe0ybxmWYyt+IzzcTWymADDRGsojoBn2kmk5Wq00ym N8tIM1OU8iswMNJab3zZH/DY9TEu+IujC+Z+0UjTTGytnC2eE7A6gQuvuJJfMZIVf5R1W7BY Ndpb2Bkw8B4tucJfHO0zxb19ppmIn9zjzJQTxnMCJvGKedy73grOPG7vY2WwvB1l4RJUvNbK r8AUnfP0TFuoos80kx5npiycuvNQHtVZq2INNV6v0vpYmX4yRq7O3m2AxzRsb79CwEjUSVZs Q5eAQ6aZdDczZeAG+FFKTt2eD2yrxns5OT5WRsrVUbqHgVtoat0W3OeTrNg+Pj4eOM2ko5kp Aw80RMiO6ugRDys11jMwfazIv9oucB+FIn2gl9vOui3+VXKSqeU/fvw4dppJLzNTThvPCeRJ GRLfLldjJN/ex4r8TqU8BE+U4EZ367ZWYahhamxbmGbSxcyUM8dzAqknDV/NLFFjvLrKx8oA KB0ju2ubCe5wdMUW78bTOz7TTBqfmXI5RwN8naSoTmruSp4ap+qwj5XeUeS6u3VbMCcz2hUZ 78YzAD7TTJqdmXI5wUBDBDyqk5epmHo183TYx0rv7N0DeLtIPSTuhlXPt4G7Im/iM82kwZkp C1snBzldJXnp+DUt0WEfK12j1JyCW2ikTzK4ynySFJ0kfKaZNDUzZYLxnEA0qlNehYRc2XId 9rHSL0peZV99ksuP9zpcUwUcn2kmjcxMmTjJQEMEPapTrvbz67K3HSsd9rHSKYpcgwWn0ai4 D+Dx6hvBO4WOh880k8Nnpsw5VQP8KHsnykrt59dlvTVbHfax0iOK4FvlvTgAeubRLjrnSdHZ xGeayYEzUxacZ6AhwmZUx1bt59dlvs0aOuxjpTsUue4oUQfc1fN00cnGZ5qJ/8yUxZzHy8kG GiJsRnVC1+hK1+VaeZqJj5W+UDIz8ZrTwweag93emJOJ4DPNxHNmyqaUMZ6zZv0pdHNzU++6 zE1X0mEfK32h3ADgFg7vqAOGYpiTCeIzzcRtZoq4qesfnrMBvo7zdCefaSY+VjpCuQFAAVRm qfgACn6080/JaRyJuV/U4zSThZVNx7XKjdg5ni3CPv1vC6NK3xE+VvpigMxMcD/1LxG81mxs Jh32mWZS24psdv3zEw40BPGJ6swj6vVWcHysdIcig+Ai5uEt1EwE/7RJ+HMWz8UAM1M2w7aM 5+yxGdWR02Wok+v10xpq7GOlR5RARy+ZmaDg6xs5cxJ+YPOJ6H1mynpWEeM5CptRncfHx+sQ 00yo+Rc1IANmv7x7967O3YcCHqm+kZMn4SvPwmAzUxZxXbJgffKnFNZCndRzI63U2MdKvyjT zHtJxUf2kFVXCtGnYKSZKWyAr7MZ1SnXSSQTvhcrXWNSe3VsKn7hYQbAmS+N0/s0k9pWTj7Q EGEvV6dEJ/G6p/at9D7QXFdCcCMHpuLLu6b8MK9DVF2JQg4wzaSqFcZzEPZOe55Opla5tm8F //0G0adWgRs5UPDBz5AzlNmG9o8DTDOpZ4XxHASlAiv1aub1NGjcyrpTR18ol7792itQ8KPF AiUnsBFGmmZSyQob4CPoFVj42S7pYDOSldZQLn37tVcU/DkjTTMxt8KBhjj6SzYpepatkCNZ aQrlulPwu2OkaSa2VhattIhCtK8OmPtaqJAjWWkHZS5t+8W2YMGUHnQarK/CSNNMDK0wnoOD 9NXZO/+2CjmSlUZQllzbL7YF9/BsfRVGmmZiYoUDDVO5ubmJntX1VaihkCNZaQEK/niCfxlr mkm5FTbAT2WzrfSa+bWop5AjWTkcCv6Qgn8Za5pJoRUONExFzjZ4bheLI5UUciQrx/Ly8rJ3 0cEI+YHtdCj4OiNNM8m2woGGeSBRncBI00yGn5miZLC0304HFHxlYfoKt4nrkbnHMsA0kzwr jOfkAUZ1FvXLNb7vBrNyLGcQfJONdMekkGNMM8m2wgb4eSBRnXmsu15fspGsHA4Ff0jBX9yx A0wzybPCBvgl6FGd9cpmDZ0cyUoLUPDHE/zNe7X3aSZ5VjjQsAQlqrOXx2KrkyNZaYQw0WYT vCLJ9C5LgIK/RrlLR5pmAlphPKeEvaiOnrVopZMjWWkHRfCvRvOk6kHBXxC9P0eaZhK1wnhO OeuoznRWlazFcp1EMuF7sdIUFPx6mYTOgHfmGNNMFlY2uwEski5IBptRHTnb0Rz1Ep3E657a t9IaemMxcCPWdxkKBX8i6Z4cYJrJwsrmM8sG+OVsRnXAwU95Opla5dqylQYxEfzfv39b32gQ FPzA1CsGvxt7n2aysLKWIA40tAKvwCq/mnk9DZyt4H/SICaCr1c21YMx/EAQ/FTfo+tpJlEY z7ECrMAqv6Z5OuxvJfWvmoIhnTEEP08hO51mgsB4jhV4X52SK1uiw85W8v6wESj4Awh+CT1O M0FgA3xDSqI6yPUt12FPK11DwT+54F86nGYShQMNbSmM6gT2rrKtDvtY6RcKPgX/0tU0E4Rp m8SE8qjO4rpM17qGDvtY6RQKPgU/0Ms0EwTGc8wpj+oE5le8ng77WOkRCj4Ff6KLaSZRONCw BiZRncDi+6uSDvtY6Y4zCL6eNUrBn9P4NBMENsCvgVVUJ8BpJkfRteCD/Tz1iVcU/Dlzv6jB aSYIHGhYCauozqJEolLtqo+V7qDgU/AnJh1udppJFA40rIdJVGceUa/Xr8DHSo8ogt9+e2QT wf/+/XvuyRuKxXPR4DQTBMZz6lEe1Vmvn9ZQYx8rnaIMMQfl9MAh5iaCP/AQc5zNJ6K1aSYI bIBflZKozl62jK0a+1jpF0UMQSW8u7urdXvFAPdQeanhGxkY5VloappJFDbAr012VEfPjbRS Yx8rXdO14F+xVQZ9nWIMwc92vaJPQSPTTBA40LA2eVEdJBO+XI19rPQOBX8MwX9+fh5mmkm2 5jOe40Cqa4HXPZWosZuVSnlrbiiC//Lygmyhd8EXeSk7hU3w48ePYaaZZFi5MJ7jRVJUJ7XK teVpJsEK/vttolxZMF9Rl9Pa/Pnnn9E9/Pz5s76R0pPYAKEb8BjTTPI0/xMb4LuAR3Xyeho4 TzNJtYKbaBPlynYh+PJ9Ed3D6DdI4TlsgZGmmeRpPhvgu4FEdUo62HhOM0my8vT0lGqlNZTL eh7BtyohPJaRppmkaj4HGnoSjeqU9ysbaWZKO+iPyf39PbKR79+/W99QCZgIPjiUuX1GmmaS pPmM53iiR3WsFNJnmomPlUbQ+woiWnqJlTXVxqRhJnikXTDSNBNc89kA35m9j2Jbhdy7l3q0 0gIU/MBff/1VcBabY6RpJqDmswG+M5tRnRoKub6j+rVyOPf398o1RRJghN+/f1vfTQl8/foV 2cl///1X2ch4/dNGmmYS1XwONPRnM6oTGhmZK+T8vqqnwz5WjqXrVpkBNszcY4xpJgsrmzrD eM4hrKM64aVvfvXXl7hrKwdCwU/aSHcMMM1kYWUzksB4ziEYzsBC4MyUcspbZR5bZhtA9vMM 3RXWzD2WTqeZLKxsepWV7iuis/m1Je/lGld/kYVVqROOj5UD6b2RTgDZT13w//3336Lz2CST Dvc7zWRhRYkbk0PYfP+a6+Q8ol6v+5mPlWNR1lvBxdBo1wIHPnz4EN1PfXn6OkSx7ZzFHdvp NJOFlY8fP67/lQMND2QzqiNXxFAn1+unNdTYx8rhKJeyizLbgEntFfLW6IXNe7XHaSZ7ViYY zzkW5ZvLRCf3smVs1djHyuH8+eefyqUEU9OPLbPFdzU6lmuY2ivlLu1rmoluJfD4+FjjjiI4 yqpKoU7quZFWagxa2fy67Avd6e2i6ipgUnv1+fPnkpPZCNGnoKNpJsgTzQb4h7MZ1SlXYyQT 3tOKc0pSDcQxVq6juMTIRo6tugqAU8h//fqlbGSMVPxwLPr938U0E8QKG+C3wF5fnRI1xuue 3Kz0PvfkMkQSfoCp+BPgelnj00xAKxxo2Ah7fXXy1Di1ytXHygAo4XdxhpEtfPjwodY9lAKY VPn161dlI+AhNw6uq81OM8GtMJ7TCEq4I/WeydNhHyu9M0YSfgDZ22hCUdHZ7JAGp5ngVtgA vx30bsn4NS3RYR8rXaNcwY5yMgMmmZngssVINDXNJMnKJzbAbwl9hBByZct12MdKp5jkZOpB Ek+QWS3nycxMopFpJqlWONCwKaJJLPr1tdJhHys9MkxOZsAkM3OMRJ0MDp9mkmqF8ZzWQCab 711lWx32sdIdeksEsBO+3mTek5eXF2SH9cxMML1zSPqamcJ4ToMgg6HX17qGDvtY6QslGoN3 Eqt166QD5tgo3UGvo2RmZtPRzBQ2wG8QsDRpfsXr6bCPlY4YKUUngOwzE3V0epmZwgb4DYJE dQKL93UlHfax0gvKhQP7ZOqFuv6Y9MwcqYVaHu3PTOFAw2ZBojoBTjPxRM9X6S5FJ2DSQm2w aeYZzP2iNmemMJ7TLGBU5xOnmfiiO7qgl9tOik7AJFEH/LoZlUlLW56ZwnhOsyBRnU+cZuKO SReddlJ0AuyoU8jiuWhzZgob4DeOHtVZr5/WUGMfKx2hiB6Y7hKNjfhj0lHnetZ1280nosGZ KRxo2DhKVGcvW8ZWjX2s9IXinIO56NHVz0NAeiNE15pPuG6rPAutzUzhQMPG2Yvq6LmRVmrs Y6Uv9BaX4ByQdrrozEEaLEQ7fJ5t3baRaSaIFcZzukCZgdXINJMSK92hu7idrtgGTNZtT1Vv 2840E8TKsQMNf/TDsY2jN6M6ck3bmWaSbaVH9Cm04EZaW7ENmKzbjtEYH6GpaSYLK09PT+t/ PVDHXl9f8UNugQNzmTajOuBM2JZnpnSKMpQQFMwGV2wnkP2PrtuCrYS6prVpJgsrt7e3i58f O9Bw8wXUMsdWK+AVWMqeg/dMXueEk2i+rtWd1tjOMam3RdYCuqa1aSZrK+sfHjvQEHRQ2+HY euTCkd+tzUzpF12rQaFrrcZ2DrLoHP1CGbtPcoPTTBAOjOfIkZocgjOtRXWSaGdmStfoAXww lKE3GT4WcMlViWtdhy6/anOaCWKx7n2j0mnfrX6jOov937yLrHpgjq35itDJP4EbqXqfFAIe hd4n+Tpo+VWb00wQPh3aAL9TKeg6qhM4dmZK7+ihDNA3bq0r8hqk/Eqf/3IdKIzf/jQThGMH Gm6uKWSwecaqdmvvOqoTcJ6ZYnWtW0AP4IMFR22WXM0xKb8apova09NT49NMECsVb5cY8q6x PZb5Gauq9pejozpW4uk2M6XT2N0eehwDcYwvrZZczQG1Wi8lGCYb//b2djqoGl+sDjNTjo3n mIQm5sw1P5iopzPHRnUM7wSfaSbl6w5NoUjcGAH8gMm4w+tA2fhBXtqcZoLQ++LjGjljU1Mg 2y+INQdGdWwP7QenmaSgx96HCeAHEK2OhvGHaaoTPOQ2p5kgDBCIXjD/Zql3XQJjRHU+cZpJ InryPLhG2X4AP4BodTSMP1JTnWanmUQ5NihR44NlHoWud10mBojqfOI0k3T0zHMwfNF+AD8A arUexgcb7HdBm9NMkkwcgrkOL9YcK12XBV1HddartNT8KLo3Cwa95aVQ+e4wA1yS0MvQrmP1 xm9wmgnCgWJl3jBtM8PEQfP7jers5eTYav5ga7WXWCgG7CTQ5tCTPUyGoQzWY6G1aSZRjm2A b9swTcknNDxjYmUtsJ1GdfQMTMOZKetOfb2jN0MA/diWW+isMWmqM0xy5kQ700wQjh1oaNgw LZo9bnLGgpXNV/BxZzEzqoPk25vMTBkv50eXNTxSra8CtMbLywtyUNG+QGB5Qkc0Ms0E4cCB hpsN0+SQM44FrBUqPGOTlc2F5r5KlfHqqvKZKVVTpA5Bj+eA65st98DfxGqmOTjzsS+cp5nk Kdix8ZxNqRFvMPVYkipDs89Y1EpHzYhSa2lLZqYMVlob0D1zMCEzmrXeIHd3d9HjiiZnjto5 03OaSZKViWMHGm4eY+qxZPQByDhjiJVeojp5nROyZ6aMt1wbFTQwITNal9ogJj0WrgOV3C5w m2aSp/nHDmbdjEIkHUt215dKVtqP6pT0ycmYmdLdFDMEPWQBBro7SsicY5WcOUzJ7RqfaSYZ mn/sQEPFIwWPpbDHVw0rjUd1yrui+cxMaRzdfQWlrK+EzDnIkmv06MDXYqf4TDNJ1fxjBxrq DdOix2KiKuZWWo7qWOmwz8yUZolKGZiCEvWBmwVcco1uZ9SoTsBnmkmS5k+dsg4hGtpVjsVQ VcyttBnVsdVhn5kpbaIH3vEk82iUu1nAJdfoCsWQuTpzfKaZbFrZFP/K94UG2DDNZ5qJrZVj ozqbdQ01dHh9355B7aOJlKCI9RvPCSDOebTkdrwKrDVu00wWVtZ54/Me/v7gDdN8ppkYWjk2 qrM+sdP+1JhmErb86Y1KVpoi2tly+HhOAFmnQFalx6vAWuMwzWRtZV3YfmwrgKRUIp9pJoZW DozqbIbxK52xi9fMlHbQ0+/PEM8JgEuu0ajOYH119qg9zWRtZS34B2bgZzRM85lmYmXlwKjO ZhODqp0NzjMzJRqHOUk8J2AS1cGHgnXN3C/y6d/YlOBn5Gb7TDOxsnJgVGdTda/VuhwvXm1j 91KONq4H0056j+cEwOzT6LcMUrrbNZMOV5pmsmmlKcFPbZg2jw/XO2O2Vo6K6uwJ/rXmHORv b1Sy0gjR5Vo8sbz3eE4APN7o222kGVhrFs+F28yUdQ7kUYK/2TBNYbEaWOmMmVs5KqqzKfg1 1Hi9ShuspF7fXrAqHR0jnhNAvmiixyuvv1ET8jefO5+ZKWuOytJJWtfbzP0wP2M1rBwV1dkL pNtq/l5OjvyvXk/XKVH3HletMeI5AfAdF20BPWSbhSkrZrOVusPMlAVH9VXABUfJ9LOdZlLJ yiF1bUoOgJXmnyQDc45VXEJeCmPEcwJgVCfaLXnUhHxRgL1nzWdmyoJDJhuCbdujqmI4zaSS lUM6V+jrI+Waf0K1R7rWgyuP0ayV7kAS6ZETONKgWxCfmSlz/BcWwVxHUFWspplUsnLIN1T0 fVqi+SdU+wvg3uO5hT32Q9YBM1GjCU5jL93u4TMzZcJ/YRHZvSRVqTfNxMSKc/dpsGFF4d1y KrVHgjCg6HU33woBjMYgnzajLt3q+MxMmfCM6oitqP+ZoSqVppmUW7m4v1LxGyD1njmn2l+w oVRgf4Ae51shgNGY6HvzJFW3a3xmpgQ8kzOjWpGtKg3OTJn+xO2VirxP5+B3zmnV/gJkmODp 933NK8cBZ2BFl25PUnW7ic/MlIujIkXlqFBVmpqZMsftlZrRowO5f86s9kjOPDi+9u7urtqV PxhwsjkS0RoyPxPEZ2bKxSuZRJcjE1VpZGbKmqk/Tz0y2hMF9LvozGp/AZYacad0pPT7NeBb L3o+Rx1uDuIzM+VSP2NcX0w0VJXDZ6ZsTnVxqHFbt87A2buXTq72iEcKhp07HV+LA8a1kC+m 4Vvr6LjNTKkX2NGDOeaqcuzMlL2DrRrYKS9uXd9RJ1f7C+aTg4kloy7XzgFXrqMLGefMz5zj MzNFtlxD8/fiHnJQXUwzybCyd10WreOtsDqo+X1FtUeyMXFpGnW5dg74sYPkZ55hKoqOz8wU c81XotxPT0+9TDMxtGKu+bYHtdi906r9BfPJwXTEgZdr54DLGbZv0oHxmZlyc3NjVSsk21HW NDuaZmJrxTC2U+M2OM80E52oT44vL45XXbsHmGMTHRN5PWsR1py591VvAsjlTcHE/S689LIF JG5f9ViatXJ7e1uYtyN/XrJKixzLddzO9lGQtUVQ3Iasrt0DfAkiTv5pi7ACk9pXnZkyRzae l7ojf6XvmO2ckU6tyNtQ/POMAJr8ifxhUoFVxrFUWifqBcNszGi10WCA4feokz9wk/woi6ev 0gSQTW5ubsRXR9xR2RnZz9Qq116mmVSyIn8iGwFjaPJr8ss1pH59LJc6M1O64MOHD9FrAbr3 gzVDRgDD74Ypr4Ox+dx5an5ArMjHhezMjzfEbviP5+dncTjB8EK/00xqW5EXq2xQ3q3hrIYt h/+WH8o/bab3W6FMM1nfe8MTzcbEnc/xmiFHMRwEc0InX3nibCeAOLw1ep9m4m/FBz0Dc7oD U8cQd4qt53mGbMw14Pmhk78g6l/ZTgA5xIecaH+aibMVnPdv5P0tkm8flicqhZJag+59OfgC ByP5E9EqnoDVBJCq3+xjTDPxtIITmjZUPZbL2+Hk7mBPIA0Q8BTx6MrvwBiucZzHyZfHENHh 8gkgLah9oPFpJj5WUglfglWP5SQYFoGepNhqDzr5VSmZANKO2geanWbiNjMlg1TNp9pvYjiG 78zufQDsgcbC2zzyJoC0pvaBBqeZeM5MyQPXfKr9JsgaIt17HLwSGSm8ZXedNakTQPLUPlj5 8ePH6+srYiVPVZqaZuJsJbthAqL5VPs9ohVSuJ85dut7HLzRMVto5oFPACnx7RuZM0Ira3TN p9orRAMLoJN5ql4KOriTj6yenLxP/h7IBJDySM7hc0ZoZY89zafaK0QFh+59HrhK//r1S9/U yYdhKegTQAxnphw4Z4RWFNaaT7XXiYYU6N7ngas0svBx5om3OqmzOWyt2KoKrWQw13yqvU60 N+bXr1/BTdG9X4M7+UjPOqZo7rGezVEjJ6fNOSO0cplpflUrA6DrDJ4HjnRdOyG4k89mC4XM Z3PUm5nS5pwRWrnMpplUtdI10UgCrjDMvd8Dd/KjuVLy/mWK5h7NTgChlWGs9I6Ve8/cewXc yUfqsF5eXvKv97hMz3vVmSmNzxmhlW9vVLLSO9HkHHyVkO69Du7kI9OEmaK5YLFK2+wEEFpx sHLJ7bczPHpyDt4Qhu59lKSkymiKJn5pzsBmTk7jE0BopaqVCzV/RdSTNCwUJdeUzyXkBcrV 24CSgdndBBBaMbRy+U/zxVaJiTGIxoptq0TJNdEtRxJcuXobzbfvaAIIrZhbESoNQO+OaDYI KCby4qB7jyNfVeAFQlZvWXsbdMNnZoqe100rbVohFyBhHq+0Qjo9komk5vbI6i3+BjkzjU8A oRVOM6mKviaIi5J8BUS9ULIAf5legNwnpuWDNDsBhFYcrJyZqN+Iry2ykUIeuEQjxcsM7IA0 OAGEVtysnJOoT27b7ItskiTRSNCMgR2QNieA0IqPlRMSDRGISwluKporThTu7+/B84wsizOw gzPSBBBaIQrRYA4eXkbWE4lCUt9L5GOKgR2ckSaA0ArZJBrMwSUIyRgkUZIqp6JptFcGdlIY aQIIrZA10WAOHmTgWq0VeBwGrHfAI3JkpAkgtELmRBf+8AaMXKs1JCkOg5z5X79+cUIKzkgT QGiFBKKpfUnVQKyrtSVpaiES2EnK8ycjTQChlUI+fvz49PQ0TVGZkJ/Iz+VffXajBCQUgAdz WFdrTtLbFgzs4BeUjDSbg1byuLm5kS+I6WtCQX5HflN+v97OFPLy8qIfAh7M4QTDSiQNNEEC O8zSBBl1Ash4VsTBtjURkO8I2XLGM1tvgGYJ0eTJJPeSiff1SPLJkcCOXKysW+ZchI/3b8NN ABnMyu3trdXG58hmEa9+Dzn2plx9xCFnMKcRktLyL9jLl8F8hLlSjTQBZCQrNXh4eCh/bNuZ rmI7GpXBHAeS9Bm8IkkrwuQy1gSQkazY8u1tMIoJjWg+0mWRwZzWSArsIMXOcpWZmZ/KSBNA urPy+vqqTzcoJy9oryBHfeyMFSTGi48vZDDHjaS38AVYkb8yMz+LkSaA9GLFQeovb4mX1k/t /+GWOLoGGTiIRw8YzHEmKWMH7HGRtM1mERnxHFcnhr5lTcFucAJI41Zubm58UtzFEL5Km7qe 6/C2WoPoc1L+BoM5/iQF3sHC5wEWcENGjfiBnvUvImLylhEdAxWs2QkgzVrxRPxw/TEJXxlz pyK4GYj4y986Hw7i7yUFdZHQEDEnNYsejLl1vYA7L8O5vlU+OmfEIZmBjU8AadCKJ3IF9QdE Sa0H0/U9nXxRe8Qbx5969sw5kNQseiSY3+8Crjxumy6WZ4QnShcTQJqy4ozu3iNavfA61shR OxxIAOlgKb8Dbg0s4Sf1SGqeDF6vTitwFefKOcKzR0cTQBqx4ozsj/Jc4GWz0ex9nw9P5KM+ KVsD8RhJbfBMqgu8vN5d0o7IhX5EByZILPawlwkgblbk0sjLugXBV5zz1Nj7urXaHAf3A0nL SfqcRzZIHEjN0gQvXF+zsfTnSySrhfJ2ETerJ51zRmqgxHPEaU/alL4WULvHDhhpxyt65L3A aVbtkCrO4GwaPLh3LNEv6DZ7WBXCOSPmhCPdJMNhULZW9XsTFGc8JQ9c+SWeJAXzL3Ambepm /dlbq53wT4Rzg3NGbFHuooytiZuxtzX5IDXf+QBYdJPkInJ2YZsktVzAJw43nqgZbXhSqYli Iww8Z8Qf5S7K2JpSrltJ8EFXPGmFjqH7ZknNrsHjcs1qfjRremB1Cow3Z+RAlBspY2vKzVlD 8EG1T1qoZei+cVKza/DXd1IukBtKmPSaslYbOiS0sLCbxEjTTFpAuZcyvhOVnJ8aMTEwZxKP AzB03wWpK61IO81rkwVZhmu1IYdfdKyv5V1RIdnhkEBSKaf948ePP94IZ6benJEWUO6lDIlW CkPMbzMwzJ70qc7QfS+krrSCV7YpzTdcq13k8Msf9q5p3X2qNIKS3JvR3Hha9Vhje4PVSLoD /UDSCKkDyqOTEQLtaL7hWu3mY/78/EzZPBt6J5yk9SDl81PeHYb7DKp9Ui9cdj/ujlRlxuN1 LWh+dK0W/wBXAq3dRXiIXM2S9dBoG3yw75l8Myqfn4YBfFDtk5b28Pw90hSpA3DxC3245utr tdc3rUZKI5G4UDuN18geIrCiotOlLNlUtMVx9L7S1V6wWmEB2xSnJnJwobZfUq81noV1oObj c6XlvaAHdqLNbHsP5o/Nzc2NfIItQuWFdXZKtdSE0nZbbk5d7a0SMsH8utRUbS7U9k5q0k7j mh/1ydeI77fppTOHv19Eb/cWWAsVFb/BxJ2Qt8PtG58+fRLnAflDk4UhXO2TnlAu1I5Bqubf 39+DW/bX/Oha7SabER6rHH7iT9WaJvwTMhWTJSEwkpP6bOJPPWmf1FJZvCDLU/OjPrnOPMJz zn5rw1C7iFVvvpqHyQcjHnJJeipZUTseVTXfpw43ulaLIJ/e0SnVA/dbG4Pagj9VsVkhWytf /cfVPulh5xyrUUmV5aS+SbX77SCraVZwrbZxHNrURJNtcBpXe6bljEpG+KURzY/65CFcY+KV ca22fRTBly84Kyty15XfUSZZ95XUPmnLpEdqa36l/vn6aOnrzCeP5sXp1F6rFU+Pa8EL/ngj 6U8UwbddfAld9bLvpfIBZ+KBg1XwV6o92aK25pvPyUqtqy15SFMn2aUSAlOvr6+yh6IGJ6/q kjMQXuV40GNRY7Wmxmq73IFKY5w1snvyoVF+cZPiLfUW6UjvpBbhpt4eLy8vhjPQ9Wdtr6tV RoRHft9qn/dY75L8RMThVKsGItrrrHU99r5ZY7VJvfQquUZRR0KupvgMJu/xd+/eUe2JFalF uKk3Scb2N4mu1eo+eVKEp7bqig4o1g2Dz20ioi2XQxHtdbhbzlhojwNewatLPq3cJ3IgYkh2 ODSOFmy/15LqH1PVnr3RzkltzS9P0UfWaqMbASM8DnNa9d5c5fHelgETHaerENzpjOWY2kE5 B+7v7+tVuzPl/sw4aH5h6o7uouM+eV5cyBb9vTN8PD/6+g6Iz5wUMF/Qe3Csas0j1Z7U1vxr cerOnouOx0CidbU+bqGiYw7LBy1gmNy+R9eCj6fNZKg9+x6TQIbmp7oKcicXhvQXmRK4Tx5t h+UjtuLfKvtwSCeHjx8/it09j1p+Lq9U80BTbc3vVPDl6QCH0l7fHtgMtWeBFZlw0HwxkdSp dRMRqCAX4CiKS0oOf1X0rwxPmZJXT1J43CrJcKJc802ifO2QlJCT8ahS7cma379/Z4QEk24k k647IUMP/GXD2ViFKO8d25l3OtERAMpO4i/ZKHl98ORLRC59uAH2fqc7wZcnAnec/v77b6o9 sSIvMJh6O1Wqxt2khbXagOKU+jRzMGkIZpg7qgyXXF8meS/PlVwR/L4KmZNa0GeUNFLtiU6e 5qfWaNtWZu1RmMNviO7QOuyGYftHw71FNH+zCFe5slb7VpvUpybDTaLaE4S8/HlwLsNERgQp CZMcfiv0V4+DU2rb4N0wbIJo/jrs1rvgp8ZCM3KbqfYkiYx7LKNeWz5pU62ANLJWG1D01qH3 Ph48AbF9VyITphafFV0LPl5Xdc31vqj2JIMMzc+o7KgR3mlnrfYS66jgsCcldUx7GC7gXrDJ lXOL/Qp+0odwXmIb1Z5kI/dn6v2WlGMWsJ2ZJQLbzlrt5eiOCmCcXCRUfjN0iUHk13yhGTE6 fZT1KPipYZw8R4hqTwrJyw3IaLWd8XLZQ1RU0Xxb7zSKnglZ+9Wjh7Y2x7tf3lLlo4u85nse 1XzZW9mxy77gW427Mkc+lpO+fPMy2aj2xIS81pdJKWeTIauVXJGjTVnw14RjOyroK9fK90W0 QrnGtwmi+UoefoOCn1RCe3372r2/v88wJA8OR9MSK/LCiUlFJROGK7kiDosF0+AiunFsRwXd ejQso4eDKu189MsiTBDY/KfWBF/u/yQRznZ42BWNmJOdMIDPaJuQPynvwzAxRXj8e87rmlk7 U0hfvI666Ppyc6V6sZKSgaYEPzVROTt7gWpP6pHX7vjLly+phuQeNnT1Q4THvwWxHkKvbV1f L0by/5WE0nrqmq35jQh+6vrsteCrlrOrSG3yVlfzwju2rr4/x3ZU0Au+kC0oL6yq6pqn+T5N KnRSfZuSCkSqPfEho4nTJTe8c/Vtv5PE7e2t4ie/f/9eOSiHjgrlgl++hWyiq8ZrDukyPSEu TapjX1KEkhoyIqSE7AWmjOydYM4wV9+KoEivr6+hdfwiZKSrpcPysV7EimzhQMG/pDdSPkrw RbRT5bdkGFxe2jMhhZSkkOUlDJcPUjFk04EPRUxhNfbYjgqX2KItEsM/VvAviZp/iODLI5Ca D1mSfsxke3Is2QVTed+k5XNyrdD9Z12mfHo76IKP5AgdLviXFM13Fvx3794l5dgHSuKTTLYn LZAX0r+kJypPtBDhKWlB6VPtO4bgX2KrIROegi+6nZqEUNghNqnrGiFVye6HkxH/nPj+/fuB OTwlp6t2C51AueDrW/BMc0WaAvm8RvO8FLnJS6KReStfhFQl+3M129WXF40Y9Q/s6ynuIM/P zw8PD/VWb2sLvvM8wT3Nn0Yf1t4B8S4y0szkxi75GuUSLWmZ7PDOJas+K+Af2M8eDruJSNa3 b99E0Gx9Zr21QneCf/lfzV+PPqxH9ndooTeS0XuWEGdK2h1/+PAhL1f/+uZK5WUNZSDKYzU0 cIFt/wfFEFII0JrgX97WyuXLyLPlaUa4/mrRCZBBe9IRJdkIqe1k58j7wm09Vxzyjx8/ip9p OGTEtiBLMYQscTYo+J7IfZgRaTTpCpL9tUvIUeT12AwUhi49ZT9wc3Mjbqc4n6n1oQtsQ/qK IUTwy4NCnZKRXR94eXkpTCTILkgn5HAKvR0R7ZKb31/2AyLaIqcZeZvmBVmKLTCJUdmC8ygZ H7JvucLF2ck6wzikdwoH15ZEeK7Hyf7lv5jP09MTGPMxL8hSbJUL/rG9a8zJlnqrzq4M45Bh yO7DEJD3ReHjIM+y25LuJkjMx9xnVlaWKfgT4lFkf0iatPvIS/gkpHEKXX15LgpzkuW7u4XO DO/fv394eFjHfMxLmcob2isncwDBz1uWDVj17mY2DhmYkqTNQEnq5rQPh5RrbRJiPj/fMN84 BX+T8MGYLfVWnT1YVEVOQvmHcOF67rQbVmPTy6nRqaBc8MuDQk0hPvnXr1+zPWrDL8Ts6nJC eqQwqm/41MiLo4U4Tw3KBf+QKYc1kFslo7nlhKHUl/SPIqRrCqP6gZJI7IS8gOQx7Hqi4pry GYVPT08/Zsj/Pv5HF2mZcnd9/vy55PawXfehY09OjlVWmzyVJo1HRnL4RZMnrf727dvjjC7k ugSR1qaW+OnYEzJhlfNgEtu/vr2GmorwExC5i0oWZAPm2VzZpbuEDIxV8kxhwHaOPKeyV4OF esZDbpuSdPoJ8++7vMFYhJwEkxL16VkzTHv79evX58+fqfytIfpsoqiyEfOKbLlhmGNPSJTy JlQThUnXa6j8hxP8eXmbl8tpiN2ZX015d7CVPSE4oTzK8Bk0+eSfI0+07CHj/G4EnTcM1smL 27z+juVUhGRjPtZE9NnEM1zspGxT9rOR6t3BkEsmL1ZDh1kuVqV+ennTUgghc6xyeCaCr1jj o1t2VfxGuv2FyOW2CtpMVHLpA8zDIcSWr1+/mj+toswltfYKss2XlxeKP46IvMimXA5b5QxR +notsq0ygQkhC8wD+xMiNfXS5ybxP6ozf7PI2zB48jXcYznnsvF6cTamXBLiQL155Vbp3Dqy ffFjxdAJnf/gxstbW05CpXC3QxqVbcYvISRK1VFW8kSLaPhk1gX9D/7/eMu+clDyapMDrKfw AZ90WUo9IQdimLG/94CLjHgGaeX7Zf4K6CjhX3ZVdlh2OzjwPouYYZXc4SyF1soOR0QI0alR O7NgSgI/JO8uvAXkMEVLZTfu3qh6vArBehB22SU3bZ8IayJV4/Nz6NUT0iBuc6xqJJNkI+o3 tcT8MmN6L6QifzhtZN4e+egD/b+gjZx2zzcdpZ6QlnEeXxjSxY9y+89ASKqUk+wc2jLsv0cI qcohU2s/fPjgHO0flWNLGCpV5BFCqlKpLxZCEH96/jihPcWBdWomjfQJIYdz7CiTEPYJeYlH n4m2kBMiGnt/f39sJlL5bCxCSGs0Mrsw1JaeU/+bqjgrH3dLCGmcMMGqnfqmkLs+5TcefXos +fXr18vLSws+/IKqbTQIIQ0SGhofrT0byMtoyo0UXapdoGqCaHuIz7RcLFavUR4hpAs6Glkr ejVPkg/vArePglD5FWIyk7B30Qsu1EozdEMImRAf1a1ysxIhOrRZP4UjXz3zjRx9TPl4dkMi hHSKZ80+Mcd8PBYh5AxQ+TuiqWYXhJB+cevHSJJgXwtCSD3EgRQ3ss3cnpMgH1x05gkhznBY uRuTyDMyTwg5Fs6rrcHUj4IiTwhplqk/DFd7kwjlZqG+gDF5Qkh3/P79O/QWaLb49ECmnhJy ihiQJ4QMhjiuU/ews8V/pnG3DtPMCSGkQaZXQPgKGOMtELR93gvo6NNMCCHtErrWLHodHC3k /0No7BNiMpOwMzJDCCGGhI+C+RthsweOgKeMTuo9IVubb3yySEknhBBCCCGEEEIIIYQQQggh hBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQghZ8/8AWgmOAwpl bmRzdHJlYW0KZW5kb2JqCgo2IDAgb2JqCjE5NzMyCmVuZG9iagoKNCAwIG9iago8PC9UeXBl L1hPYmplY3QvU3VidHlwZS9JbWFnZS9XaWR0aCAzNTkgL0hlaWdodCAzNDAgL0JpdHNQZXJD b21wb25lbnQgOCAvQ29sb3JTcGFjZS9EZXZpY2VSR0IvRmlsdGVyL0RDVERlY29kZS9MZW5n dGggMTMxMzIgL1NNYXNrIDcgMCBSID4+CnN0cmVhbQr/2P/gABBKRklGAAEBAAABAAEAAP/b AEMAAwICAwICAwMDAwQDAwQFCAUFBAQFCgcHBggMCgwMCwoLCw0OEhANDhEOCwsQFhARExQV FRUMDxcYFhQYEhQVFP/bAEMBAwQEBQQFCQUFCRQNCw0UFBQUFBQUFBQUFBQUFBQUFBQUFBQU FBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFP/CABEIAVQBZwMBIgACEQEDEQH/xAAdAAEA AQUBAQEAAAAAAAAAAAAABgECBAUHAwgJ/8QAGAEBAQEBAQAAAAAAAAAAAAAAAAECAwT/2gAM AwEAAhADEAAAAfqkAAAAAAAAAAoVeXnGStrVQAAAAAAAAAAAAAAAAACwv1UDx+WttfstZHvr N5sY5tCvpGE1reofA+36T7mRyRWVFAAAAAAAAAAAAAACh5/PvvOedhmHJukc9RjaxrT9c7HD 9NRjWwyMPcnrw3u2ls+Sfuz5VjW598XavZ6lQAAAAAAAAAAAAAOX9I+b83oOp6n8cyfSGl9s xfGF4lc3V7Ceb3pnmu6kUVxqQ7GJevLe3+Rfsvnu8+/0D+fP3f1xvlK0AAAAAAAAAAAALTkm 05R3LF5lxzNz+WuvRaSxjc9un+8t65x8r0GPppDYcj0nUIFx3t8zR7bOvlv6hiON0x3/ANcP M6ZAAAAAAAAAAAAYmXG44J0/nUm4dPlr6b+W/s7eYVLYl1jckOXbdqAAYHMuq80xrX7XT7fj ukOnEO3OybXQb/tzAAAAAAAAAAAAQacQXN+XOvb+G+XryL6T5T0/vzwOu8w6z0zmCgAPPnnR Oc41HN1qdhx6bSITCJ6z0eTxOWd+dQAAAAAAAAAAAUgc7gmbrOF9/wBdw6eODLOe6kn6jzfp Xfn7AAAt570HnuLFt1EJVw67OLyKO7z0KVxaU9+dQAAAAAAAAAAAWwWdQfNwvO/y49M7lvT+ R6nU+jc86H25+q3FjMafEJGh+HLOeW5XDsWUzKFSvjvb6bK5hufRUn5NL+uJW8fbcAAAAAAA AAGmjc042xrrnPtHyeO5+GBG+W57w3s3yj0x9P8Arr/XG7/OiKqWHo8swxuN9lhGp7Qjqt0m LyL6A9ukwMv18c2zoEV2G5PbsLN6ZAAAAAAAAReTxPN4zIeKV4de2cynm9sxuZ9b8pNhxPr7 c1uFN8+WGWzK0gubLKWRq+RVNVuLBdSlFKBbWg1Wz1NnRdtqtr1wAAAAAAABSJy2KZvyfH9/ oePTd/S/zL9NVkqLLqKhQVW1gC1WgrZcVooFApWhbqdvqNTpG01uy64AAAAAAAARWUxfN+Td BINBx6bb6a+ZvpismtlqepZS/wAfWKXeHsVUFaKFFaFaKCtBWihTU7XV6nS9hgZ/XAAAAAAA ACLSmMS/JsfkUd4dNx9L/NX0nWT4+xL6WhbWh6CqFIqoCgUUC2q1UJTW7PW7nTM3DzOmAAAA AAAAEZk0Zj5SjUij/Drt/pP5t+kqya0qlLb6FLqVFaBRQqC2tKlKVtUIrSlLLtdn4W89Mysb J6ZAAAAAAAARqSxuPkyP7/QefruvpL5u+kayVLtRS6yLfSy8oIoqqilpctQooKKFaUDF9/Pp npWR4e/TIAAAAAAACOSOOx8kRqSR3z9d79KfM/0rqZd3neXKedX2EVpdSKUuVaCi24WqQpWh aUq2/wAvbeeje3l69MgAAAAAAAI3JI/HyDHu1cj8/XY/R3zb9H1n3+V1l9LVVpbdFChdSlpc stPWmDrLN8hmtrolvL8Szp+sgubZvpjE+m6km9bbqAAAAAAAAara+RxiN9j5ri8i75EZhy3m 3eOFqbKkZ1dTi3m+DZ1LXc3yLJXrPHa1oMLoW2s5Lndh2dcf2nWsk5fs+iehCdnJbjVbD2AA AAAAAAAAHloJJYcXjPeIrHGbuv7KuO7Tr+cco2/Sfcgm0ldxoczZjE9fYW1qAAAAAAAAAAAA AAAKWeg87rhSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf/xAA1EAAABgADBAcIAgMB AAAAAAAAAQIDBAUGERIhMjNABxATIDE0NRQVFiIjJTBBJFAmQ2BC/9oACAEBAAEFAv8AgzdS ke0NGCUR/wBRNso8BJ3suwMqWfKB4YikT1RXNh2KzHErpIOjfo+kOsuQhxLif6JSiSVritTj 1dToNcu8g1TLdnOsgipW4G6ptAQwlBX+CKnEKMU4DscKPYU6SJVQupuo9vG/oHHEtIxBity6 sIUdVe37ysLabT4Ri1qrS2rqBpWKLKeD99vj2OeG3L2MPiXQ3jXo9adawviqThqZSXTNxDI+ fxfiGTaz6LDMfDsCVIdu51bWx6iHOxG/YuRKeLAdesmWzO9jBi0jyDSYS5kF1647mMsPt2hY AxWuisYsgnkc7jrEqaGrwJhg6aD0kYw+HYHR9TnT4bsZ7+KpT8litjzpzrgSagh2WgIsXCEd 9CktyiMyULGvKenFVQcGZ0a4jOyrG1ai5t50mW6hleNcaz7FEJMhr4x6Qbmcu4mPONw48iUr tYtep5USl2FSlk/SB+tXGXp9parJ5rcIxjfD/veswLaHV38F7Unm+ke7900WEawsN4VxPae7 anCcpdLUVlcijrrGWa1V1ZrODWEgm45JLQQU0RiVBJZSInszzzJIeSeZNHkMfUJUNth2d7TE QeZcyZjFH+R9IF09mfSdYG45gCL7xsrF7ZCjnKeroJIShGnuGWYsY2pKkEl+vV/GQe3GlaVp T4HdUmpjqzTzMhfZt4DT70x9NkdrLxtLN7E2FK33PhicvtBTQ9jKNKe7JRqTOTofhcUvGYnX Go0ezuQ1Zo5m7e7Gv6JTJuCSvpMMHiHFs5ekko1vVjOlBd5wtlu3/Ii7JxeLhZtRS0Sq9WaO ZxQf26gkWNDay3OyjdF0T2rE1mr6cFGuVDRkjvL8Ln5XWfWM8jUX0stMirP5C5gxiHa1MjIX X3znZVfRLA7KvsjFQjN2OWSe8rwvs9bey18TPhucSq3C5gxe7RJL7djF5508P1xVNLYK+rSJ DW73leF1xW1/exn9J3fqtwuYMXe8fBKM2RFuWrmVrRlsb8O8rwuj+s0v76M/pOb9XuFzB+Fz v/6wW7dq+/UhfKjw7yvDFEpMNlhz7jrGf01Fmqs3C5g/C43/APWQ/wDN25/ktJuo8DURBUtl AVbxUhV9GILxCggrELgVeyVjpEtnnob5G3KjupeKfLRDgYWxK5frjTnYojXrSwh1LhcrmFvt pK6sI6HM/p5jMWsjtcbNynGSOe8oG6ahqGoZn15kMdRmtcjtikyFK+KcVnIaw/0fQUrWn5wU SQokTfYV1dqU5JHyVq+piEuzltjtzdIY9luMR3JCkUkvEDVSywpbrcWwcavWlmtGYzGR9WtB AlEsJiSVk8nsClxquxkPtx1qgRVRHZkWdYEzCmoT7rW4Ph6uMo8GLECJJoeYXqTyN2r+IWIG Ez+xCXdvSH6a7HTDobtlyyUURHstBhGzYsXpLMc27WA8pDjK0vlJMyiXTgbq7Ue4lOAsM1gZ pq6MCPSWoxn3D6nT/mQtzkbry1+X3qtvJNYcC0i3LMGBHQ69HtJIRW2OXuJCyThuqSpmFFjj WYM8/wAuXU556HucjdeWv/Wv1QnpuWOHyp7Z0Tc5G68tfetCl9XY4XKl5+JucjdeVvvWf1T+ rM8LrI9pKH71bfzN+fi7nI3Plb71j9U3qrPCGsiUR7cslIzGwJ+dX5mPPxtzkbnyt96yKX1d jhhCMlgz2glavx592NtnR9zkbjyt/wCrik9WY4fV4dW6SdhfnhbZjG7yNx5XEZEVyKX1Zjh9 X6I9v75Cv8yxu8jceVxB6wKT1dnh9f7Lkazjs7vI3Hlb/wBXFJ6uxw+v9pPMvzn4VXFa3eRt /K4iPTbik9XY4fWZ5Gjd72Yz/Ardpy+drd5G38riL1fwOiVnbM8LuZjMEYNQ26f1kMvwq3ag vmb8ORt/K4g9XFAWVuzwus/HTkMtmWQPaMwahn+JR/LUbze7yNx5TEPy3Lm7Rerx+D168hns z2fvT8vXn3MxqGrILmMoDt1GbB3aXhSp2N+HI2adbFvTs2ZS4rsByjP7vH4JfgzGY1DUFyW2 w7cRmw5iJogvEDygq0mOAzkOgobqw3VKMQ6gyOvidkSeSlo1IsmlNrmRmbCLGq3q27jcDrzG oagp1KA5aR2w5iCOkOYjUYXczHApyU8ChOLDdSow3SmG6MN0YbpCDdOkg3WJIIhpSEo08mtO ZToBOFLgrjrayUqOelnVkFzmWw5exkBzEaQu9krCpsx4ezvOBFYow3TmYbpDDVGG6Qg3TpII rEkEwUkCjJIEyRDQQ0jLllJzEuCThT6w21PyZaAopDxpr1rDdSow3SmYbow3RhumIgiqSQRX pIJiJIEwRAmyGkZc6ZZiREJwnqclGilIN1CSCK1JBMJJAo6SBNENIy/pdBDQQy/7j//EACIR AAIBBAEEAwAAAAAAAAAAAAERABAgMEAxAiFBYRJQYP/aAAgBAwEBPwH6BUc+T1D1ROKKLS9w COj0vUPMNnTQ5+meYbBzQ8ZhBxBaOdATxcOaHMLlEu8FFkUSobTH2VO+MV8LEcQynEMpxDKd c651zqOOPIDY44/yP//EACYRAAIBAwQCAQUBAAAAAAAAAAABEQIwMRASICEDQUAiMlBRYHH/ 2gAIAQIBAT8B/AOv9Eo2t+hUNfDZT457Olg3G4n4LJX2jYlOSEOhMmOmL4EwpKV1Iu+HkXsQ nf8AI+kjFJTjhVgR7vPBX2yrjXjT3eeCPqkfGrGizeqxxlG5Daq6PZjsVSdzcbp6J7gRPBLu RUvdOkIVp4IFk29zpGs8abTxdpzaeBXKc2ngVym08CuU2ngWLlNpixcptMVmDabSItumT/dI IZtI/kf/xABJEAABAwEDBwYMBAMFCQAAAAABAAIDBBEhMQUSEyJAUXEQI0FhcoEgMDIzQlJi c5GhscEUUFPRFSSiNEOSsuElYGNkcIKT8PH/2gAIAQEABj8C/wBw73AcSvON+Kx/KLZZAOpZ tBTHN/UfgramvLfZiVsksruMhXlH/wAhWdDVzRdYehGapteLbwBeEBpNFJuKtabQekfkdpNg RpMmN0svpSeixaasl/Ey42vw7grXvawYC3pVsUJpofXluJ7lnSyvkPtGxYN/wrqR09OI5uia O5yMrLZ6XonjxHFNiqnGWDemywPDgfyEucbGjEr+GZPz8wecfGLbFmMpnhoxuTqHJMQMjfO1 Mnm4f3PUtPO51fXnGpmxHZHorS1tQ2K3yWm9zuAX+z8laGLonyg7R2/9gvQ02WWw+zS0w+rr Vdl6uB7Mf7Lm8p09YPUqoM35tRZlegdTMNxmj52H49HejlPImbJERnOhjNo4tQIJMNusxMnh cHNcPyCPImStaeXF3Q0dLihFHe83ySnF53qTJmT5NE2P+01Lf7v2W+19EympYxFEz59ZUlNk bNzWHNlr3i2Nh3NHpFGc51XWu8qqqNZ54bu5a8rbeKu0jutrCtWSw7nXcpqMmyClmxdEfMy8 R0cQp6+jpzS18N9XQ9PbbvCbBI7+VlNnAoEG0HbnZt88lzWhGrrBnZTq9eUn0B0NQgpz/Pzj U9gesoNL5+bnpCcbTvWgpZXQZEjJbNMy51SfVafV3lMja0RRt1WRMH0XOu0beiJmPeubYGd1 queVZNGHBcy7M6uj4fss11zuRr2P0FXF5qcej1He07k+YQ/h2ufmvh/Tf1dRxC0EjrZoLj1j bXPdcALU+tkvyfk82jc5/QF60nQ1BnlRtfzrupuP7L+C0jiyljFtdMw4N6Ix1lNZGwMjYM1k bcOCJB0k5xf0N6grTeSsFgsFnMuKtGq8J1PJ5xvI+eFttRE28euz9wobTzcuo7bXtaedl1Qo GvFkrm6WTtFVNW485Zq9o4KaujZpMpV7/wAPSs+6bTh2kk8uaU4vecSrG4nDqCFyF3gYK0YF fiGecZj1hA8jKymGbBK7PsHouUEnrMB2zJeS/KhjdpJB1C/7KOAdoqkyfHgecd9An1rh/K5P ZoKftb//AHes3vPBF56ULvCKPX0IM/Tc6P4H9rOSRhxF4VMx3lMGadrc7cFliudfoWZgPE2f Yqok6Ac0KpI/u7GD4KjhIske3SycXf6WJ3tHN7gh4juVU3c8H4tHI4J7BhnWobVMfZWWawm9 8xPwFv3TAfSN6bGNbT1PytTrMAFE3cEPER96rR7s/wBP+nIU9DantHpXI5Me3NpajOOGPWnO 9WNx/pKM5F0ETn95u+6f8EUPER96n64WH5nlKG1MHtLPLAXsva6y8Krdup3/AEVbWEXyvEbT 1D/6gN7gievxMVmNqk9w36lDkKG1R8U4BQU9Ox0gla9pze5UtKMWMv49KiG93iouKmH/AAGf U8pQ2qLirE3UGrhyUbN+cfoh4mLvVS72Ix8igjyDao+PgZOHU5DxJnd5MbXORccS2K3/AA8h VyG1R8fAoG+zb8yhyXlXysHevPA8FdnO7lqwuPErViaOJXot4BMh0uLxngKbq0Q/oVoN/S3c pp3+SxucpWyRsiMY6D5S1XXbnKyTmz8la0gjq2e97R3qnBlba9+Y3rPgNaL9E2Nv1K1DmcFf M/4q8k+HDIG2PcQCd+5TBxjkOczWszfQCoQ7P0puDI3XOv6VVOe2COHMsN5tU1W9pAbdGThb 0rVDn8ArqaTvFi/ttLTHc6ob9E4ZzHlvpR4HY3uY7NdhbuXOTPez129HEK3PLxvtt5KYx2sl Y8SseN4UFQDbI/Ntu3hB1ZnZhNge0Wprww2EWjOuVdVSAzTafVaPTNpuCDiwtt6CsOTFeUr3 BagL+y21Wiml722K2WWlgA6ZahoTJK7K0E7YzqQUrHPFvXZin6OHKVS+20mKmzbTxdYjLTZB m0zsZ6yqY133TRLTZMsF4E5fNZ3XBAGthhs6KWkYyz42rnsqZQm6hNmf5QFzkDqj38rn/Uoa Ckhh7EYCA37GeIU9LNzDmPzWvd5Lv2WdGcwno9ErNkGjd8j3qFjb5HSXN6VS5rNE85oI7r7l FTULBU1GcCQRa1o3la7nykNvDXONp6rE6qqKM00Zkzm6RwtsvXP1tHB26hv2Wayu0p/5enkk +ytEWUpezS5tvxQ/CZIkePWrKoR/IWq3Q5JperXlPzWvlhkXVTUTG/M2r+ZyvlOo6tPox/TY tendP1zzPf8AUrmqCmZwiCsbqjq8QzghsTlV9r7BZoOlg/Sd9tyLW42a0T8U58dEz8RE0BtR NfbdvxQLpqBjum2B0lnxcrHZYMbd1NSxs/dc/lDKNQeupLR8GoONEyR2+Ul/1K5qmhi7EYGw t4IbE5Vfa+w5KSz10NmHBDYnqr7X25KT3gQ2buQ2J6q+39hyUnvQh4Fivu5LPHlDYnqr7X25 KT3gQ5A228q75op+GKwvWd0ej492xvVV2vtyUnvAhyPd6R+nJ0ch3YbA/jsb1U8R9OSk94EN mfx2N/BVFhtw+g5KT3gQ8CzdsT+OxycFUcR9OSk94hszuOxycFU8R9OSk94ENmPHY5OCqO76 clJ7xDwL9hKPHY5OCn7vpyUnvENlKPHY5eyqju/yoWqkt/UTfDx8A+KKPHY5eCqAbvJ+nJSd tN8A+Bh4u+RvxXlF3ci1jDehsb27wrJObnb5Mg6OO8Iwztsd0O6HDeFS9tN8A34odXiNaRo7 15y3gtRjnLUjAXlWK9xKvtWCFyGxlW2XLRSNzm/NvBUgNssRfqytF2HTuTPD1nBvEq+Udyuz nLUi+Ku1eC1pHFX2lYLBYLBYLBYLDZTcs5q3Hcm8l8rfivKLuC1IieK1Whq84e5XkrBYLBYL BYLBYbZgs5txWaHWBaz3FX2lYLBYLBYLBYLD8jwWCwWCw/6R/wD/xAArEAEAAgECBAYDAQEB AQEAAAABABEhMUEQUWFxQIGRobHBINHwMFDhYPH/2gAIAQEAAT8h/wDgrnxdEGYXyzQQ9pf/ AB1LnXnltBaYPU/VzUn7dV5v6lgfu5kvSn+OcIaTmynvMf6vXNhFPceCC5wlj/w0ZgLVlHzw uOov8wC5W2gf41hrdoZXI5+UyBWg+U1+tSh3UwfQgOD7WlKC+R0nJJhqfvzjBnbKnZ7TTLK+ p3hZ2tByQb/4ADy2m0WOtzQ/bBOUiLW813ZoSL6caiGBjf8AQ0B2gDQZNrkeWFXcbGHMsftH YCdSQ7IvabnVDHpKQkOpef8AUtmcgs7gvyJjfUpDofExW6fbnj6mW6AHSWeOWiZy9R/pAggu NHXqYuLM7P1n/Lh/C01Vum67rEbaOdi/8WTWPd972HpD8FuMoR0HMiVQOSr95S6+sTdHJdpv I33nc7g1nvbOljqGveILyAutDvAsecM+NNVQ3huU+MavqD2369oZLbKdlXwde0H991E5R0u5 qvXXA0DXNQZVYVg2EtbX1OZ1R7htnJ6sz3ZpOrhIS7WTNC/Pt9EuAVXV2PUdyVTM4CS1bh5i LMYCbK7Tm1jl2hjdKc7DK3xjcWyek0eTnP0zXy6xPZcWP3yiJd2TYdthKTOUxYz/AFeRDDTN oBoJSxgUQMn8xWWi+EoU1GRQR7gBejzmEfT6nCfGiHqGfsPM3mFFP1f3WU+YaeLwprj1z/e0 PRlTVz18HlEwWZbfB7mBSBoZW68l5lr0XnTP9dCHnaf2O7EYxeEFsToQXSJYRA2GEisdHnnp 9SjGxBHnAVuZhKkLBt12YBzZ7RKjxVRHtj7DUD6jzlrNf/P7jwZO46Pz7TRkAbLM99W+SCNO Eey1/UKvLvtwwCPwrQ3VGXcZ5orrG55mD3cGGARt3GYl/QEofFCpojM6A3VQAW12DoYl4BrX T9rnnc5a3tREVG8KvM95UlQS/IFhaedEYV6jNVIt5shYIB4sLM9ZEyBgLyaDCuQX55mK5U+u +wwtMwJ3M3u6zTENH5XOJ0mj7RdWR9kaEPsZ5F+zgI8QxXIKi7BBdlND5VFB/VpK1m0va/zl PMiLXya/xoI6h+kuBe2dhmBMnnUyOmPuWy0eI0R9S+sLokRuM0ynmv1H3MKaA3G339kt6C95 1KfzKX/CpTe6wWZzdbS48+0x/rfgtHiNEzHr+I6Ra18wVguHOKneE0Asd3lesCw//izQesND 89Se9fUBsaBXmyyzG8bKfG+SCWjxGmZd5KPahkCZYaQ1GWsCrrwMMf8ACrF3cvSVu0SRMkHp pmvL5OG0eJs+6jkw0imnYfLwHT/wnVyXyI3IVd3+4ZAQg5kyfMxho8Te4S8Y9pcEWNLvP9HA rGA4Duz46M1vsCz4lfvPZACPvzQZeZKIpsFxt7Biiaq7tf7g4zXUzFqFtBvUsHA5x6do8ZO+ JXm83WCLVur8NQ3jLz0TF0MG7DB7TQqGczA6QMXNnVfslBqdBNSMs+qMQbSzocG+dSwdSMLX iqdmpOkx+uQkpVjJpMbgFIDmcvKabhFlnQwR3X6I1qObUV6UOey+Vedf3lHe83noWYpRzLfu XpvLPBLqxgmbM8zp15D5IntzImGCO0KksTRPneBLHc4ajEnJ7iF5kEHMh0RRcsDIAewR7QLd Y6MQmzvOgmCE5w79d5rxdT4S1Mc/uy3OFok75YEeDyKrC+zEHlmyCM2jSitoJ2dVB5YuHQlh B5JIBDgo8mGCJCOQMF4JOVWYD4VopHnVx2MV3gWYH+Lmsk0bBv3bwpz+dXk/ZKTbdLfQhLjw qynoTAGtL+JGsLnE5dCFrVTDBoIpeIiANDLjX2i8SNkPpaOgnyD1KRtVv/KvOeiAx66PUDzB vPCX7ttaf2gFOR2VvIxRzvVPeJCDpTqfUmjHIFEU1V4L4XFLj0xl4GZ7w+YJ28j2UZXB3Qkw rk3y37kzao5bye55awuv1eRRV8T+C2GSKvnK/egQUD3/AO9P4e/kSow12i6m5cuXLgy/zQy8 1M4D6XgWfB+SZdjBIVSpwa5InDbf4VKicDiy+F8HDc9CeCzpPhfJNR0/CbMFRPYw058D874O kGX+bpMvI8EHSD2fknsEHyZipf5vhbhLgPQL0l11x13lii3GyQ1WHbrwvi543L/FmXl+CDPj /JPafhNZN8PpFW1SHSCoQJq6oHPu89I1fN0G4QEDjXLczGCGl8vC/wDG+LBfdmh4F0ntz5J7 F8Jt58LLhkxa+r6A6S9ORtAdpeWLhWtazakDq3/wqM04L4XxhpeBdIb7Z8kP92yOkHHBV6zZ yjmKK8iWEda/B4XGaRYyvxzEafgXTgwGJt2c9KM2fAJwTQyxa+aVv8vxvjv/AI5tGj4F04ZQ /mxiTDtOFzCXAjd1/B/0vEFvGj4F0gn0f9Vm3Ag4Jw+kuk0vHC/zY/kspmvVNLwb2mlz8cvE 9m++CGzlDgGRRU0fbt+DNJZzlYdEc8GMuXLnsJ6gmh4L3eFx65+2GLN7VLvVYY9eF3hwuo4S ss1xKO05/rcdQm8ubS0SdY8HjpPYyrvIMfBKm6pn/HRLsWqtYnTHwxwHhcH1l7FUHOZ2wNmG AGq+hKst06yhic/MfSl4htTneXFl8GM2lXbjvvJoeD3HDax1KwZ3pzmX8tGP0JfC40C3nUa2 lrXqQce16xVmmXnALb5VHU6Qo0I/wiy5cpGEjkS1rPLJm4DkU+ZyBy2OXTR8Czr4EIg3QWVy gqo+S88bz+dyY7XpFL4ZMaUqc2+iXarldXgvAzSMW3aUy3u02E90TE+DObzHTHxE/WszVT7s 33FKdJQUeD4ryRh6mxNTmtoXKbYFvMhuRwXHBThvXyKn7rpYZvQmgZ1zmogdE0cOVzX3eeAU ynCxfhSKR6PCtMcDXSe78eUokWoHNl9Q7WmldonuoUvO9BNaEdsIItfnN3cGurhZvwjtDbJs 0C2gDw4TGsJBo5Qa2XKa8DmxL3HBFdDyRxths7graoDaAPHDEYYjeBs0HAbYU2wgNoElJX/D S4ttAtoElf8A2/8A/9oADAMBAAIAAwAAABDzzzzzzzzzzz7TTzzzzzzzzzzzzzzzzzxLEo6B LzzzzzzzzzzzzzzziNrBJVnTzzzzzzzzzzzzzzxrPG+1RJubzzzzzzzzzzzzyjWctASwM5LT zzzzzzzzzzzzd3+SzyzjoyjzzzzzzzzzzzxpRspzzyzBJjzzzzzzzzzzzx0kZTzzxuSozzzz zzzzzzzzwEJDTbH0PHc/jzzzzzzzzz98X69QUWOq9SIrjzzzzzzzxrKZfZK62tGCw2IDzzzz zzzzYwJZohqqrra/YGjzzzzzzzxriAejpb4+RWwP4jzzzzzzzxBWScf4Cb723y3jzzzzzzzz wGJTHM4TUGkRpctTzzzzzzzwVMoGbgNE1O/9vjzzzzzzzzwGoV6Cg/yHlHKDjTzzzzzzzwHx qOCo7ZIGwxN3Tzzzzzzzxw3sWlVHI/gQDhRzzzzzzzzyzz9ziiCDxxzzzzzzzzzzzzzzywyz zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz//EAB8RAQACAgIDAQEAAAAAAAAAAAEAETAx IUEQIEBRUP/aAAgBAwEBPxD+Ad2c9FQrtlOFRK+Io3KCiCVsDKThqJXwH7AdpZzEGpbBm5xV xLK+ALSHdPyKivRdRh7zHLBysObRW+1yWbYnBQ+86c207EOPaNTRzbR1HXmmWguaWq4o8RZj OZedkGy4jRKPzzrcQlR0IXYy1EduLYl9RLKl9ko7ly3xUr00xbHhx64tiOTXFsRya4jZl1xG yO44XJNx3638M3Gdel+biPIq46OGcVxGXUR4Wlvwin9//8QAIxEAAgICAgIDAAMAAAAAAAAA AAERMRAhMEEgUUBxgVBhsf/aAAgBAgEBPxDjn4qloPsc/R04fozmRN/f+ic7XwXbWhDSobTo P3YpUyb+xOd/A20OSH6QqEN2CRSNwtMTMDQ0xa1zuQXbuxZy+vChBp2Ta5m4UkCI9CEhPKLS 81xoyeovC0WhU5rhzQbeN5OzZOawVitYk/sGjsSR7E0mTEm0OuQG4UjXo2KA4ewRku2foy6H LQKSjpqbErs1cLiuFJShmkk2UJRRASXokl78bcVwqF6xeJyoJjFcZcUQiSSxeDxqOOuNFIvK 8M7xbisG0h+M40LNuKwoERlZdE4k3l8VHi+hYe8QQQRJBEnfiSU0aaKfhGIEn0TYmEiElONW ysUyESYu7CJC+DCf8/8A/8QAKhABAAIBAwQCAgICAwEAAAAAAQARITFBUWFxgZGhsUDB0fAQ IFDh8WD/2gAIAQEAAT8Q/wDgkBCr7KRQFOD+aDWTyrlZd/8AC3UDEigRfjY6tEVYeC85gfDu mH1rpvb+BKefozyBD4l+oNEBh2KaCx7FTVuBseRw9rGBFSsFT1NT5OsJZlAByJrBH/gl0OTo A1VhEcpaD4HQpWxvNTHw99qh3s9ZYjoAGxDVOwFnLa/Hs/3hLYU2E8O13WFhe7xL25mlJU5/ TQjpXWr6khR6W0j1YiRvAGX1Mdo2oolUeR+zMMIEK289OsMXf/AIAQzQDdj0wtDj8YNIFoy5 Ze0xIl1VlXVyyzfAVDe6oyHPOJnagox19Om+Vi6DNm1BL3jAxY+vnA2wHe2SNA5bCcKB1RF1 2xyPw48xCJGpjfW33miaMMjvVfZC9YKLzVClrD19c4iGZYHfkL5/aHPA2V00/vWARG/zjZWg 1WKaKq4OoND05a3qb8xTUyNa2C8EVhSWMeCLVcFtuhGjkQtrlnLsqtWUs4iRjCAdG7VZiqgb bXSTL0IDEIStgjvWjMycu8eoSpcNN99iXFCkKXWp69onhF4xGykUPTevwmWEBoqKJe7k6vTG cBIoILFEYTgX5rrCitO4CYYqfmLRMxsUzYABm1x2GKFGNk9iAiN+xL2Zei6bbI2LrZ0hKLHy YTKggrwxtJP01FZIwWQTDL/PgDBdjde6yo+tQW74wdIOouoP6nARMpjYp9Qa3yh7rqNjL/UW ddxf7JdGHVanCOy9Al5CMh+YmvOYD4aNhGykGJGqiBt2yeUk1cuNkb/yJXtgsKcfmHfWLYFs MqtH10K8afRBhmAa7K2fLA6brKjCN6FDQb5VirOvfwLoRmZV0gkWQFKKaGPtmqMAsHDsHPfe 5RlrUle8BPxQ2l6j/rZRNW8aPRmvarwKdjs9d7ziMnXu+EsOP7uSutZilONqNQ3VemyXeMEN Der3ZBFo1vHf5RaJjoo1uVYfPlCik2yAe9g+ZHWqS7dA9rOgTSg0grK8Gp3TMVLys2fi8WcB L+rHJcPR8BUbA3yRKHHSAASoVVSJBGekxebOJRAxlev71mJ6GmhleXUdSDpfh0CWJ4fmWop1 mkYMBBjhMnGZl6lXez+JavyrtlzrTGqt6AkGoEtQcFh+3iYGpEaEVBuGfmGAFf6yDODu54os ccB0zDy15MUi4JMDY8H1FVBg1IdACAH+SQa8wsC6UYqqpq8NWuzXgiBVI5EP+jErAldZeRhT B0f71mCFidkB/Ms97flKjSm3YL/UcUybIEw7ieWCQsmbKdPkfbG4K/VhUKcFoqGeJ4BH/oEY eWD84+SvEFPjtDAKxDH+jmAaaktaMtuMo/qGpWy91S+x9MzN0QvaqIkJZADvf8k8UIafkOJW dhYeuP3CPvUBB7fqGKe5Cz+4bzlVszLfAyKQEkGgBg9EalumrnuCfhiUJ/vZjB8YtfuHfgkr 2Vev6xFiMww11ZmkgsJLX94IrPyMCYthob4X9SiO0YJJwKsHTMVXqO5HyEdYdBpRT1tMUDf8 hD9zB9gHwVCxtiBR/sLcYXCIXt/CbEO9P2X1G8uu8rVu2VzR+T+k1fsTQ/IVKby0Y8v5hzqw ZQbgEYoVgVapQc+kXnR4JR0xPZKH95P6l2l2I8D/ANxn2gBRGEYSiMIV0OrGmjUeGI370hs7 0Z8J8Umn+Rrxbnm9f9pWUWJpVbewZ8RCDyhmAgmQ42FllPTXlA1VOekaMtUOzQ1o1tKX0/3+ NBZdX4gThW+p+kQCoFRznDB5Iqu3NP8AIdOYLq/BEFBTWmN4CkOe6dZUnTaNfDr4KHxfuZHf tKu1/us+0A47MXUGg80qj4x8xtPN5h0F39orvXRAV25ofka0HQ/pI0V7EJU7SjLhi8+L64fr 4lSdoK/3HS7RNAudhDy0eSVbBJjdH38ICI0Y1zKdYxrvEwDYHYwU0RAKYsPyNaG/6OCbgtqK qszAZwjAHnWOhSIAdohEL4DyBLnGbN3q42iRt9SQB+PH0lp0h+huG9B/oahwNpbPluE9MUJG hGzQ1vRFEEtSnDArKHsWNa6wR93oBoVutHmChmF87ZaVsL3ZfwXbujqeGabKM7vJk8kyc2CB 8wR/EsiC0Byw87dn5Y5scmlnB3fEG2sQC8TjHK+1RIgKsl6HwPcqWDFXjykOQqtBB6Klibd3 Yrrb6RFnqFGQuLa+yZyadbexVwN8+0XPIPLDSmkpmFlIBSgsFDqXMz2R3zBU6M5YI2m2Q5AI gq1i+ZkpakhQLxKrbC3edOdfWk9W6DvWiJlcylPCwvSpbRxTmMUBVgRNhMJANmn4TADVzQCg iXV6kp7tqlCu0PByEFH9ADZG8zMOXWYu8wAcDojFOHvCTYgJbENLv7iwwbHVAs1jU9SxycCo ss1GnSDiSyqdg40tCoBLtVeltG5p4iVzcCCdA6hFdEvjEELDzpB9M2RXqOtW1M14Q4puKg6u NeY3FaEToQy1puQ6PBvZs+9u4sqg25cKlRAAABRHLYqXVgjJbGjG6DCOnXBk5qVg2HRwlh4J eUqgGcV9yXRp2NjbZ4h4l9aZ9kaXYN7wf+yzXeIafgKiWp0uSHeawblLRqulYYG4Lq0yHcIx nkHvMkuqiv6ns09IuVYXowbi3xAoK604tZOQ5WsLBmH2BG0xilW5zRG5XUEqPNOCq2iBoNgC /Oa3nANWakmgHzL4iQ8yYt0cCTHWULsEOrUD2AX+b6r7IQftfLoG+KgEP9igleUiqKTC7D7K UJQqUXVYH1D9CtSBEFRSwcuoMrQBgMXFBiCfKRbNDHP/AHGk3LQ1qBP+oYi6vsibHBDT8DRN PwvwlghTgqACwypDnWXbHSMF8Uwd3gzxdmWB6ytHktjIQL1LiGnQDG6kS963xELhwtcWyUQN 9swLxNIrr/1aL5IyL+yl7GFM44VEsbO6NNCoo1Wpa7Y0/iWTsmuuf8OmsvvDTm4uYSCRJoDx vFV4H6lXYQ0/A0Q7MyriKDK5d8xredKraD0TboR1u2aS7FmO8HtO2kf7c4i40nyTHqOWkbPb mUdoXWWq2mUur/cvjXmYO09vMumiOEVhsw7x8qBrsQ0/A1IKapgIMc0w2t9WXMw12/3r8xVR rylii2N9JekVzfmN3LsZbe8ZeZo1IvvrFXJ6zLKLhl43SLiDB+IxYb5Q4uIGu1DT8DUlna0S 4vBJUqwjjqn6R12Yf0xY8RpnAcxWlKLFjiu8wly9hBrs9sylAaWBS9NIDWXttoOR/U7TJjcf 7U5rlUaQK/wbf4DrLi4eY4cTYENdiGn4GiHW0qbLSgpY1vBFr/NMugSwQKgNDbSra4yF8pK5 5lql5KrBGcvIqVGXS5e4taAEoFd1F03JcI4Mk7VVRDQLpKryOOx1l11jhTFvNsdb/wAVjNe4 kuXQS8xHTMuOSK2XV2B8w12yGn4GpDsXCFLp++aBV32Q3Ybn3MBnTfvKuv3F5BjtjwhlrlVg 6LlLEY6wktFRQwW6QJQB3BS9/n3AJGG2FzVOl4vemAY46R6zZ3JaS3/uXFLju1Zs/cWMNfmN tGL2jbmJnEzNQa7P4OpOIwKK8Ld3m2+N7zGbnTY7zHfjr1lAgEeY2jd2pvXpmAQpaXvWp/fR HCNaRleDvADUMu+8uuZrEp/wGmvqZEwf8MkV5qOX6gVW0RZ0xMf+Q/0u0Ndv8HUni0fkiKlW EBM5bjjwzJ5zvHW4+PNxWTMpmnaAqzPuJnmC64t2etZ8kFqWUJTAmr3zGqldYS40vFzWOJfh 1jpHOsW94tOku6xUuzHqXXM7+4f7nSCuz+DqQfz+5Eju5Oscm/NwaPX6WWavmFiW9QTrjvNG YKtOtw4Vtq6dtqjrHWGcwV0gw1i/0l1nmPX5i4uXbLx3jHH8Radoq36nWxw12fwdSWFnVL66 rIovPMF8v6GXSA6keC4FkrTGW13atQ37SypS94PSWrrib9OZvUu7l5xFptPh1/xZp/i3UuLn pKE6P1D177oa7Z+C6T5iEZZTBva+j6hpXdlzS68PaEDucbQjabbOpBi5eIiQTW6dZa1KG0Zs tZfipZv8xL8wE8xN4LuVRvPfEqXDGscwWPQir5RUibTZ9RVFLoRtH1jbcXfHiWPz90Fdj8F0 hWnm+IkUVqvfFXzCWkgMloVenc+ZYiwra6fp9x15YRog1KoVDzAu7Wlul8R2lV1xof1lBRQB t4zEV5WOKpsL9QbEXjaHOaDXerqK0lZZyVcqCWxffTHxNRoO+GLhsE6XAp1XUTyRekVNdYtx a5g2jxdf1P6O1ZV2vwXSdAPpjvlWVuNAAEUsDZT/AHrAqggiaIVM0rhiFdYLy+IU7wm1WtaL 5iK0jTCvGu8tkJs1KxdevkhhwarANc5/UNnrajcJSdpYBdhoZ0ijabKoad5rjhV7wVnNnIHx KrYdWVxoUMy8zLWO+vmWireLuxCvVd8+IDDI1e38KukVd5t1ImmTa3hE6WJ4ZS4CoULqtq4i FaFHXJKs3ouGAbQcEz1qBQwFi0PGN2Vg1aoeZdorLDmJVdDis27+v3NRFEUC5150+olEVgEW 8wZNMtsMAUFXaObgcBegKm7a94nSVvaJOagh+o4VA3cEQHDg9BbGkqf6lIUhpR8edIkhtywU XT8HQx7MEx4ax8wLbWdnUG5x5GX0pkX0E5NTeEU6UxLgiFddocPcG8bEsrGQrbDv50mBRdZC lNVfyxuh1Ble8uv4gf8AkQOYDZcehfEy424JnRGtoeNZSQ1TrfdRFMDqtXav3DEy+FS/KnxL stNv+hLhe9722zECuyVFy/IR6LCbShYVUpz8F0iAC8MBaJyVkOn8RZlpNVO8F/pKifxnVBaJ omt4dnaKPcKuEMWV1g1Mov3EG5fPSIb5+Yh0y9YIIO4H5hKp8vkY+ZSiDSgHyX9RNOMR+ifU wLLYT5AfmE0s3J+4prHIyjtepW2vUdV/CCVfwlHY9SpsepTtcdJWUPUGAVXECj8IGEuOGSjG VUc7GNSWtbdvaCJGzROf5JQeZmHGoSPBcUpXj+dPqZoi4/hUfcRArpZT3f3EXfxUetJfXPUf UZFR3UiRa9TMl6mAteSVdj1Kix6hhZa6QMw9TC1m1YbgTZoAlB+Ilx0ITEpe0dhkDGkZF3H3 ECzuRfcBNrqWU+fkmQPyRlWvUrr9iV9j1Kez6lB9UKKHqU1GB4E2YgDQlB+Y6EuDiW+kcA+o SseoBhx0lZj6h36J/CU0MzZoFtAEqv8AghGkQyGaAJshAm0o/wDtv//ZCmVuZHN0cmVhbQpl bmRvYmoKCjcgMCBvYmoKPDwvVHlwZS9YT2JqZWN0L1N1YnR5cGUvSW1hZ2UvV2lkdGggMzU5 IC9IZWlnaHQgMzQwIC9CaXRzUGVyQ29tcG9uZW50IDggL0xlbmd0aCA4IDAgUgovRmlsdGVy L0ZsYXRlRGVjb2RlL0NvbG9yU3BhY2UvRGV2aWNlR3JheQovRGVjb2RlIFsgMSAwIF0KPj4K c3RyZWFtCnic7cGBAAAAAMOg+VOf4AZVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAM3NsAAQplbmRzdHJlYW0KZW5k b2JqCgo4IDAgb2JqCjE0MQplbmRvYmoKCjEwIDAgb2JqCjw8L0xlbmd0aCAxMSAwIFIvRmls dGVyL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnicnVZLj9MwEL7nV/iMlOAZvxIpsrRt2gO3lSpx QNxgQQiQ2At/n3nYqdvNFooqOX6N/c33zYxrBzC/u1/Gmt5SNyG3wXP7/Nm8f2N+dmD49/yl s7xgfnS0SXrfebvhb2119mv39EaO5B/Z7U4d4DR445MdRnP6ZN4ewXhvTk8fZjvZh9zjbHe5 h9nu7SKjQ6ZGF4K0i032aCP3wdoFIPdutki/ZCOgzLv88fSuO5y6R75+sJMH4O8YMckXXSiA vCMP3YTDpHjQjIMjQHzz6dt6RuNCmGg/DLHih5FtyQPwGQiT4qGuQhVvUCYXhicjSDOE7Geb ck/tksMMUfdQl40ie01jLxaBWzpaDxUbWV0g6VWpXBEyTDOMhZ/1Ot45MZMKZydXr0cd220N fsfbGgB6KhmOMlouWL5iKI6V0YYhPZGRM7RYPFKsxZHQABRwcQ2A4s6iVuqvU08UWD1YWBJ+ DkLSlpsPGe0MOx6oh1UqprQBcWBCbYI9DZQbWHi+oFCbqhSJts/iy2JdCyfpYY0qcLg3Rt00 4D0x6tKGAnBcBWW/qPVKSQUqTO2FzpEgo23oc+dAvpbgRpRcir5mSMxFdA3bJixfivkiKGto 3FJ9U0eEYqX3JpqPMCMVEQoHtdb6cxEUtH4j1CGwGldEo/oaM1uj44/X9C2lSwcCA8YcZwzF q5E04fi4yq+/RwiOoValf4oQHP0W8JhTrbhFHkxCKJZU1JQqfoznUqc2UsCUw5KcvqggZZ2P qOHVl7qUriJHaFiPrdVS9WjLH5S0+n/Ggr+PseBqDraMjefKel3oERvouQ9NCVReSPZ9CcgX AaxRr8ttutTgEefPKVxm1lxo3wAlTZO+UOcbjV5Lp1SfGbcmzFY1vZEd6OzWU5naNHCKRQbN k7BVAlJ1+uyUVK90n/qRIx8tx0BRPxX1j6+onxK5Qf8yVlfiENSVHfJLjqFUQGSG7U6JLTVT JAtMlPggO9eli9kH2oY1GXyRRzbgVNKIn00ypGc+lWeYqdJ/PjKgPKXtIhwwsvpa93ViV7by qXsuPV4aqnJkvHCfquKFrI/mDz4nKhoKZW5kc3RyZWFtCmVuZG9iagoKMTEgMCBvYmoKODA4 CmVuZG9iagoKMTMgMCBvYmoKPDwvTGVuZ3RoIDE0IDAgUi9GaWx0ZXIvRmxhdGVEZWNvZGU+ PgpzdHJlYW0KeJzdWU2P2yAQvftX+LxSXGYw/pAiS+tNfOhtpUg9VL11t1XVVupe+vfLQAwO Buy4bJtWkQjO2M8zj4F5EFZA/jP7kbN8x2S3RmpFSe3LU/7uLv+eQU6fl08ZI0P+LZM3qd5X uj2n77HVv37Onu8UJH3kc/0pa0ECljUrmvz0MX8zyIsyPz2/30OPbbeDPTBWM8F66jMu+wcc OmR7VjHsdriHlh3YveohO6jv+w5K+Twr6YrVnXxwUN1D9+H0NjueskfHC+BQiLzEumi1GzwH KFA5wqBDT7Or1v64YFlCC7iMbRt2GQmAU1MuhMwI5XZCDgaLMkECzgp6tDIgqlfHw+Yq7W4n 7BUjHXC5IYCWmnsHv6fmoVNpTz8eFyipsahvjpJYUnBWSS99fhMZpy+RWEVZ8A2xhgismzDo YKYiV1B8cr3W4vjkPAMs+gxMG2mB2Y9zi/Q6nixcbFop4wT6QQcTCCqoA10f6VoFX1IjrOW6 tASzbkD9m6l8abFeN+o9NEWBpqju9WZewnmKjuaFGsWh3rRgx5n3g9oYjsrTs384HYNWWcRo 0cMx6GgCXEnO55aR/pTMD2RBNl4jGNcflNd0J6IJRZgxkfboINCKvKV8RAchADpsoOBKi3kF ckObGmw2y831gxAnsGGbik2cQD/onyQw5foRJ7DC9BUsAPp/Eljy9BUsAJqWQCX2XNlgVUZr ntGzuTXrm1ruymQEoiiq5AT6QYMEolqzy6sIVHJp5EYLY0vOqKbAFG29Br5GBrKa4ktMoB/U IRBJ9SBVXF20lSQp7bLvvF7nDFmwmTAUIGNCIFoCTSVhWktYsaAqS7+BQGia8dQgHYEBUJdA xZjorGrAs6iYpItKS3dXFp7CtplMYaMYdZbSe7BPlYFQs6JMTqAf1CXwwUw6IyjPinFKW8p1 8xWmMIjkE9gLuVBAzoz9HYq2k8d5+gISAPUSOEu0f41AEOkLSADUbqq4KQa3QtNmAttqff0I AVVCbtr8QHaV954BtasC2sLERrTWqUVDyGG0imnhnFWm1OoCE2XYC6SVHLmllZtzFKTNbhRb zt+uuD1gHoUTlb4pexcDYoXVqDyj5FYsCbUemAuFN0+cBQGoGq7usbsNPUx02KJEDAc7TOZY 6SxBxUiAPWviGH2ZJnaNw/YMSO+EsO8cHRr/uwTWl6wo6X6gqS5Ms2LYeDnXAzDSroQqHOzt 7TLa0ooRdPhCx47yHxfIRr6pvG1eNl1z6O+YGuXYeZ2bbwvMjsBsC3By9jiVvuZtj/kvy4BM bAplbmRzdHJlYW0KZW5kb2JqCgoxNCAwIG9iago5NjQKZW5kb2JqCgoxNiAwIG9iago8PC9M ZW5ndGggMTcgMCBSL0ZpbHRlci9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nLVWS4vbMBC++1fo vBB3ZvSywRjiXefQ20Kgh9Jbd1tKW+he+vc7DzlREqdNDiVgK6OR9H3fPGRo0f1ufjlwG+Bh JnnGIM+3F/fhwf1s0Mnv7UsDMuF+NOyko+/i7uS9PM36tXl90C3lx+umfYMU2+xCR23n9p/d ux06T27/+nEAhDxucIBJ3mGAMNKAICayiSd5YoZobuPGDzCP2A28gJ1w3NAACWj0Q9lqHmPU CcwDbKtlsnc5ZsdDdqE0EMkOmPRIlC29DsP4af++mffN8zkZ75lGCKENZ2TwEXvegNEYkJ2B Z+gEAxA8yvlkB8KEBF5hKXTznAveWFFXMczJ/EOZXo7p8OkEawt9QJR3lyjrm3ws6IPn2Poe WjLw5BDanuGLbvtva4STb5PzXeKFhS+F1itj6kZMqajsYfRCUFGTyEwZ7oCWgRX18ZAk5Po2 KrLdFWRdZgcfekFTkGGNrBdkUYFJABhUEFVp8KgWmWQxOU+wk9hMY5IEIXMy961E9GgDirJI YhckBLP84/TDfC9RTMLuHqJ4L03caYIIBTMqD6rGxtOE+A8kqasS7SaSlBO3iguaE9PUQsJD RLICtEGqOAoD81HYT1b0xSYaBZXAJgKv0GUVZ0gymO3FnHG+s7wo4NIbbi0v8rlK4qW8PFdR 1BhneXLbYCE0SNwHvOceAtb+hK1feoYfcFJz0FaXdbzTcalNsaWTZVNxU9P2WMG2HwQ5KC3r c7HOJbusYx2c03hYbZuSefAhdtjVo650XFMIuiWVKoW44Wor1B3lQihEDckF9WKfVqTZirBR UfmgZKfRH7FuyFxqWYr6hR5RadT2D/SkS78KBz7yXcNb3tu+MdOSLLfmF6Y19SiV6FlCrWab t6t04NtrQX/CVM3XZa0y7qDjTSk3W8me5dY/jlhP6pK1JSB/SzL0/cott1zgesnF8ilxPBlK 8m3oEFf+nJC41uGnWC77jeFboCrPdNDWYHLLuQR7Q2KAv/de79cIW/S9osIqj6lUyrGIzd6p XerFXIrWi/6ltLqqApeJo0UVPamUyzxY5JWD9INtkbisSCOuFX0c+3CU9EzYZ/cHVtNZIApl bmRzdHJlYW0KZW5kb2JqCgoxNyAwIG9iago4MjEKZW5kb2JqCgoxOSAwIG9iago8PC9MZW5n dGggMjAgMCBSL0ZpbHRlci9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nF1OTQvCMAy991fkPFhN snbdoAw2pwdvg4IH8abTgwru4t93aSfCCLy8vHw91AQf9QaEHGfqWNAawekKxwxeikBiuimU BjzVPBTZQ8ZB8g+TeldjFk9KzHtdUIRGGyjYaAfhAps9gTEQxpMvHNkmJ4+dIFWcqi1yk7PH nltiQnRLP6kOy1RH1oqWOuzSVnMOB7ULalj7cHb2wY50vfZRNbb06SvX2CPF+4w2KiwM+4IW d+ln/f8zwBeJpEWHCmVuZHN0cmVhbQplbmRvYmoKCjIwIDAgb2JqCjE5MAplbmRvYmoKCjIy IDAgb2JqCjw8L0xlbmd0aCAyMyAwIFIvRmlsdGVyL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnic M9AzVCjnKlQwUNA1ADLNjUCkqQmILEpVCNdSyOMyVADBonQuA5CEQi4XUBGYlQNSrgCiYSRE NIMrTQtoJEQSKGhgpGcCpA0t9MwUknO59D1zjUwUXPIVArkCFQB9JRoICmVuZHN0cmVhbQpl bmRvYmoKCjIzIDAgb2JqCjk4CmVuZG9iagoKMjQgMCBvYmoKPDwvVHlwZS9YT2JqZWN0L1N1 YnR5cGUvSW1hZ2UvV2lkdGggMTI0NyAvSGVpZ2h0IDg3MCAvQml0c1BlckNvbXBvbmVudCA4 IC9MZW5ndGggMjUgMCBSCi9GaWx0ZXIvRmxhdGVEZWNvZGUvQ29sb3JTcGFjZS9EZXZpY2VS R0IKPj4Kc3RyZWFtCnic7N0JeBRVuvDxQKIoBDRAQJYEkkDEEVBQQHBAlpDIqoBGMsCgDHJB RY3DBUEvjHBZnuvCOsBEBhnjqIxAEIIIaCBsF5AoVxZlFUEIgZgI4UIgJPnemxrrq+mNTqer OlX1/z3n4ak+XX3qVOW8J+eluyulpQAAAAAAmFVRwZWz63d+9+YH+6ekyL+nPvlSagLdKQAA AACAXRReyN8/ZeGK0C4fB7XXlhWhj+wbN1eeDXQHAQAAAAAWl7N575rGvZRs9LMW/bNeGL9/ ytR94177/P5By0Meksq0uvFn1+8MdDcBAAAAAJYlmemK0M6SgUoqmvf1pyUlX2vLL4c+2/TQ U/Ls8pCOZ9ZuC3RnAQAAAAAWVHghf/Vd8ZJ7fv3yq8XX9zpkpmqRZ5X3T69m5wa6ywAAAAAA q/n29QXKe6ZFV/a4y0yVsvHBJ2XPfePmBrrLAAAAAABLKSq4otwByfnTvM7ll0OfLQ/puCL0 kev5lwLdcQAAAACAdZxZu00y0/UtB9w0M/31zdNE2f/UJ18GuuMAAAAAAOv47s0PJNnMemG8 l8npvnGvyf7yqkB3HAAAAABgHfunpEiyuX/KVC+TU9mzbP+UQHccAAAAAGAd5X/n9D945xQA AAAA4F/l/85pEt85BQAAAAD4V9ndeh/x+m6967lbLwAAAABAD9++vlj5O6fF1/d6Tk43PTSU v3MKAAAAANBD4YX81Xf1kqzz65df9ZCffv3yZNknrW781ezcQHcZAAAAAGBBOZuzlA/3fn7/ IOfP9/5yaL3ynunykI5n1m4LdGcBAAAAAJYl+Wla3XjJQMvujzRw+xOjv3xk6H8/9fzGB5M+ ue23ynumZKYAAAAAAL0VXsj/9vXFyluo2iI1+8bN5dO8AAAAAADDFBVcObN22+aeYyUt3RI/ 9tQnX3JvXgAAAABAQOyfkiLJ6YE/vRvojgAAAAAA7IvkFAAAAAAQcCSnAAAAAICAIzkFAAAA AAQcySkAAAAAQD85m7Mk8bxp+fKR0ZKcZnQd7c3O57dkBfq0AAAAAABmorwl6t/CG6wAAAAA gHI5vyVLcsmbloyuyjunY7zZmXdOAQAAAAB64DunAAAAAICAIzkFAAAAAAQcySkAAAAAIOBI TgEAAAAAAUdyCgAAAAAIOJJTAAAAAEDAkZwCAAAAAAKO5BQAAAAAEHAkpwAAAACAgCM5BQAA AAAEHMkpAAAAACDgSE4BAAAAAAFHcgoAAAAACDiSUwAAAABAwJGcAgAAAAACjuQUAAAAABBw Xz33X5Kc7n3+zUB3BAAAAABgUzeuFH5yexdJTuVf2Q50dwAAAAAAtlNSXLx9wHjJTD+u+pD8 K9tSE+hOAQAAAADs5Zvk2ZKTrgrrcWbddvlXtqUm0J0CAAAAANjIkfn/kGz0H7c+fH5LljyU f2VbaqQ+0F0DSv/vDX2KqQo/a4plih+nMlQSAR9UFO9LoAcLTC/gY9iSRe+f2pk1W5eXfZT3 5Afr1cqTqZ9JzfLgh+RZvTsAeCZDsaTka4pZSkVmLX7WlEpVWBtbEvOMWQoBiIoj3k0XmHl7 v1tR4xE5ysFpf3V46sDUJVIvz8o+uvYB8IyJxVyF5JRimcLa2JKYZ8xSCEBUHPFursC8fDJ7 9V295BC7n5nqcofdT0+VZ2Wf//0xW79uAJ4xsZirkJxSLFNYG1sS84xZCgGIiiPeTRSY138p WH/vYGl/c9wLxdeLXO4j9Zt7PC/7yJ6yv049ATxjYjFXITmlWKawNrYk5hmzFAIQFUe8myUw vc86/38O2+N5dzksoCsmFnMVklOKZQprY0tinjFLIQBRccS7WQJT+bzupw16e/N5Xdnnn5/+ fdr1p38BXTGxmKuQnFIsU1gbWxLzjFkKAYiKI95NEZg+3OlIvW+SvNbv/QE8Y2IxVyE5pVim sDa2JOYZsxQCEBVHvFf+wPz/fyNm7bZyvfD//uJMcNlfnEn9zL9dAjxjYjFXITmlWKawNrYk 5hmzFAIQFUe8V/LAzNmc9Y9bH5Y2jyz4xIeXH5n/D3mttHB+S5YfewV4xsRirkJySnFZrl// 6saNvQHvRrkKa2NL0nWeMeM4r7SFAETFsa6ozIF58bsfVoX1kAa/SZ7tcyPyWmlB2pHW/NUx wDN3E8tHH8365puP1Yc//rj+ww9n+j0Gz57d9Je/vJ6dvcng2C8uzpo7d7xspKW9Ix3461// JCcrlQGflJYtm5qXl6nTrOXuZ61cBCkbNy4qLNwd8ItQrp/jmjVz//Sn0WPGPDlr1ksrVryV n7814L3y+VxkTMoAOHZsrVJz7doe+aGcOJGuPJRleUrKf8i/Ll/eteuDU6b8m+dDyGvXrZv/ 4otJM2e+mJGRovcZ6TqYUWnddLFakWnfm3HuoaxdO3fv3g8rOLD90kiJ4fFIAEIPFltXBDwq /RiYV3Py1kY9Lq1tHzihpLjY53bktdsHjJd2pDVp0y99AzxzN7FERzeaMWOs+jA9fV6TJg38 HoOTJv0hKCho8uRRfm/51Kn1P/ywzt2zr776zN/+Nk022rdv2bp18169Hg4Lq9WwYfjFi9sC Mhep5dChVY8+2sldAlLBWcvdz1q5CImJPSMj7woNrb5t29LAXgQvy4ULm3v0aN+4cf2JE0cs WPBqcvKQe++N+fLLvwS8Y74VZUx26dJWTkep2bFjmUTH9OkvKA+3bl0aG9vE3cu9WbT36dO5 Q4eWb76Z/Pvf933iiTi9z0jXwYxK66bJabmmfYeZvILJ6eDBCe+8M668r3Log2+NBDweCUDo wWLrioBHpR8Dc0fiJGlqU4dnblwprGBT0sLG9s9Ia9KmX/oGeBbA5FRWrQ0a1JX1dkREfb9/ Uqtfvy6vvDLU5VOffPLmb397v7It8+eECU/Lxk8/bbjttluVt1MDW/7934e763kFZy0Pv0SU iyClbdsWsvQK+EXwpowaNTAqqlFOzpfaysrw9rcPRR2TsvCWH4dSOWvWS1WrVpXflcrD1177 w9ixg921cNNF+5Ejn0prZ85sNPK89BvMqLQ8J6flnfYdZvIKJqe+FQ+/TXwuAYlHAhB+Z6V1 RWWISj8G5tWcPMkl/fVep39bAzzzITndvv29nj0fCgurFRl517lzXyiVkiMMHNhdKlu0aKq+ ezVsWJ/Zs8eNHv2E1P/yi+ObkqtWvV2vXu3du1ODgoI++2yBWp+dvemxx7rWrn1HmzYt/vSn 0e3a3ev5EJJRTp36nHSmU6f7du16Xyr/8z+fr1HjdtlTlkCffjrH4biSBSxbNrXkX+fPvLzM 0NDqys4O3b5wYbPU1K9f56676gwf3u/nn7fIPgMGdEtN/U+lkeeeS3z88W7KdmbmX5X/bfP5 Ksn0KD25fHmn32ctb36JyDKsf/9HPPTW5Xm5vERS+vbt/P77/7xK7733hvxYXZ6yvHzEiMca NapXs2YN+aF7OLpa5BDyS+Qvf3nd5Rm564/L0eLupDx0XhqRVLFhw/AHHrjn8OHVslvz5pG/ +U302rVzfQsHdUzK+AkOrqo8Kx2QsSSBoGTc8vtdwtBd47Jonzx51Msv/07OulmziLS0dxyu yalT66tUqbJkyRSH+pt2dejQPm+99Yq6//PPJy5cOCnggxmVlufk1N207zLcnGdyJTl1DmEP Ia8dkPJw3rwJJWU5srSpLUrOK6HduXObunXvjIvr4O63idqID1NNYOORAITfWWldURmiksAE Sn1KTuVXrUSWLJhPnEhXv0ogv8pHjhwggfbnP09s1apZya8L5vDwsJkzX5QFvPN/kvfu/Vtl 7pL0c9CgHmq9vKpbt3ayrJU5SpI+iV/Ph2jQoO7YsYP37/9EJgHJGaXy0qXt8fEdx4x5UmaG q1d3aQ968eI2WRSpnzCR+XPIkN4yF8nEKAv7a9f2OHdbmurRo/3BgyuldO/erlevh2Uf6bmS kMoVqFPnDkkolJlTDioLkopcJVk1SWuff/5nlz8X/ZJTuVYy4d966y0rV77tobcuz8vlJZLS smUzdRX3zjvj7r//bpenLAeKiWksY0waPHBghYejq+W///t9+Tnu27fc5Rm564/L0eLupDx0 Xn5XvvHGGNn54Yfvl0zwd7/r9d13q+T3kfqmZ7nCQTsm5ejVq98ma2DpjKSle/Z8IE/JWUgs 3H57NSXLc9d448b13377j//zP/+Q38gyJouKHCNu4sQR8pv36af7nz+foVbetKtLlkyOimqk JMjyQumG8hHHwA5mVFqek1N3077LcHOeyd2FsIeQ1w5I7Ruv0qZSFi16TeY95ftlK1a89c03 H8ux5PfCU0/Fu+uD2kh5p5rAxiMBCL+z0rqiMkQlgQmU+pScdunSNiGho/Y7OMeOrZUl9KpV b8scsnfvh7IcPXt2kxKDo0YNdNn+yZOfyW6Sgcr2X/7y+i23hCj/XSY10tSaNf98B+qTT95U klMPh0hKelTZ+d13J0dE1Fe23X0QS+YoaUe9F4fMn/fdF/vQQ61krnjvvTeUuUXb7ePH/++4 6tuvaWnvyEPp/ObN79asWUOS2fXr/yxzpjQiXZV5RtKWQ4dWVfAqycV3956gTslptWq3yoQs 3duwYaHn3jqfl7tL5PmXiHrKyoEcvsPl7uhqkREiO5w6td75dDz0x91ocT4pz51/7rlEZfvV V59p06aF8vtFuiS/knwIB4cxqfw/ieSYv/lNtDxs1KiedPVvf5sm9Z4bl84oLVy4sFn22bFj mfOx5GrIEJU2lVzYm67K4rxGjdtlwMv2W2+98uijnSrDYEal5SE5dTftewg354/1Ooew55DX DkjnTwXv2fNB9eq3LV36J4euLlw4SVab7vqgNOLDVBPweCQA4V9WWldUhqgkMIFS9xNLbGyT P/1ptPpQFt6yyFS2ZQKRdXJISPD48cOvXPm//0n+8su/SAx27Nj64YfvV8rWrUtdrgTUIvV3 3llz7NjBUp55pr+8/L/+6+WSso81yrb6mX81OfXmEO+//5+NG98kOZXMUdo5ffpzdf5U/htf Jj1JNpVT1rapHFftj7xQHm7ZsuT69a/uuCNUnh0z5slFi177938f/m//Nkg6f++9MRW/SpGR dzl/sKTis5aHXyLJyUNklSiLsRdeeEp74s69dXdezpfI8y8RhyuclfUvd790d3S1fPvtP2QH h0rPPzIPo8X5pLzs/KRJf+jR459Xde3afyan5Q0HhzE5Y8bYVq2aLVjw6ujRT8jDJ5/sKQHy u9/1evPNZO8br1ev9pw5/+7yx/3zz1v69OksXZXfp1629vvf9x0+vJ9stGjRdMWKtyrDYEal 5SE5dTftewg3D985VUPYy5B3fijTvqxCX3vtD2rN6tWzO3Ro2bZtCylNmzb03AcfppqAxyMB CP+y0rqiMkSlXwLz448/3rdvn/rw1KlTH330UQXbBIzkbmLRfohCyl//+ieJLO0OMkuEh4fN n/+qbB89ukZi0PnDe+5isKhor/yyfvHFpD//eaJSEhI6SkTLU//7v/8tE4L6/2wLF05SklNv DuFNcnr58s6qVasqU1zJv34tQuZPJbXUtqkkDps2LVYerl//Z3mo/M//E0/EjRv3+4iI+jJ/ yg6SvL/00u8czteHq1RYuFt6+MUXru86q+t3TjdvflcOrXxx0l1vnc/LwyWSXyKzZ//zvy5l Bejyl4hyIOULGmrxfHQpV6/uqlPnjmefdfHfjx7643nFqD0pLzvvMjktbzg4jMldu96vUqWK NPvBB9PlofShefPIunXv3L//Ey8bP38+Q/b55JM33V09WZMr3/jzsqvyS7ZGjdvT0+fJSl65 +27ABzMqLXfzjIdp30O4eZOcehnyDg9/+WWbHPSpp+LVu6gdPrxalsfKb5+lS/900+TU56km UPFIAMLvrLSuqAxR6ZfAjI6Onjlzpvpw3bp1TZo0qWCbgJHcTSzTp78QGlp9z54PSsr+LF23 bu3Uv3CRmflXCT35hd6hQ0v19raylpZ9lE9lFBTsUP4mi7sYlGlKFtvaP32l3B9D+W8lWQnI bJOa+p+TJ4+SWUj29PIQ2jVAcvIQ2dnlqcXHd3z33cna+VNO5+DBlffcE6XcDVXb5o0bex94 4J4hQ3rL4fLyMhMTe7Zrd6+ymJGE/Y47Qh96qFVJWa5Uvfpt8vDbb/9RwaskPald+w53fxdM 7xsiSX4tvx2UD5+47K3zeXm4RIMG9UhKelQuznvvvSEXx+UvESlylFatmn311d9l+/vv05RP ybo8urbI753g4KpvvfWK8uVKedWaNXOVl7vrj7vR4vKH5U3nXSan5Q0HhzEpp1OrVg31Q8vK 1061i1t3jcfFdZDzlZfPmDFWMneHKybjShYJyreqZejKIlz5g6redFWuTJMmDerVq61OAgEf zKi03M0znqd9d+HmMJO7DGEvQ177UOJdUuOOHVurn5QoKbsri8TF8eNrZQIcOrS3ersDd33w YaoJbDwSgPA7K60rKkNU+iUwSU5hdu4mlv/93/+W2UBWDtHRjSRCZd2r3iqtefNI+a0dFdWo b9/OsptSKdNO796/lWQhJqZx/fp1XH6kSi39+z8ybtzvHSrvuy9W+VCENDVsWB9J+iTGlyyZ Ehl5l5eH0K4BJEmUfspr1Tdh1bJx46I2bVoo/7Ul82dQmWbNIp57LlH5aKVDtw8fXi2zosyB kq1Lr5T/u5Ny5szGKlWqqN/M7dXr4bvvbqq+yuerNHLkgGnTntdj1vLml4h0NTa2ieRKMtO6 7K3L83J3iTIyUho1qlet2q0DBnSbPv0Fd79Efvppg9TIT0ESmYiI+spdR1we3aHI8JAsTFJC ufLyo5cuye8gD/1xN1pcnpQ3nXeXnJYrHBzGZEnZ/8+o79pIZfXqt8moUHd21/jgwQnKdZBl gPofzmpJS3tH2qlZs4acrPzE//73GeXq6n/8x7My2pXf1JVhMKPScjfPeJ723YWbw0zuLoS9 CXntQ+WOahIRd95ZUylKN+Tot912a8OG4Skp/yFzi3JPJA99KO9UE9h4JADhd1ZaV1SGqPRL YHpITnfs2NGzZ8+wsDCZ0XJycpTK8+fPDxw4UCpbtGiRkZGhVA4bNmzOnDmjR4+W+osXL1aw S0C5eL6z4oULm/fu/dD5rz5dvLjN+Z2skrJvhav3dfFL+d3veiUkdPT5EDI7ubwZ2rx5E95+ +4/l6olciry8zHK9xIertHPn34YM6a3TrOX5Z+2uOPfW3Xm5vERFRXu9vG65uS5e7s2P+9Sp 9QcPrnT+C6fl+pG5PCnvO+/lpfNQyjsmHRr/5ZdthYW75SLImHf3x14lFo4eXePyj7j5HLmB GsyotHybZzyHm7uZ3KH4MEu7bEQ5VkHBDine9MG34xocjwQg9GCxdUXAo9IvgekhOe3UqZOk nCUlJT/88MO1a9eUyri4uJEjR0oGunDhwlatWimVXbt2DQ8PnzVr1pEjR4qLiyvYJaBcfF5I 6FdmzXpp/PjhH3ww/Q9/eLxGjdud3wPyS/nHP/4r4GfqXD79dI7D375xKMYnpxTDSuUckz4X XQczKi3mGbMUAhAVR7xXwsD0kJx26dIlISHh5MmT6rPHjx8PCgpKS0s7dOhQVlZWcHBwdnZ2 aVlyOmrUqAr2BPBNJZxYNm9+d+rU5555pv/EiSMcbrZGITmlWKawNrYk5hmzFAIQFUe8V8LA jI2NfeONN9SHa9eulXRV2Za0tGfPniEhIePHj7969arUZGRklN1VuOPDv9q2bVtpWXI6ZcqU CvYE8A0Ti7kKySnFMoW1sSUxz5ilEICoOOK9EgZm9+7de/XqpT5cunSppJzaHTIzM8PDwxcs WCDbx44dK/tbtBscGiE5RQAxsZirkJxSLFNYG1sS84xZCgGIiiPeK2FgzpgxIzQ09KuvvpLt 7Ozsbt26TZw4UXlq69atRUVFJSUlHTp0mDdvnlLZo0cP2Uf5rO/ly5cvXbpUSnKKgGJiMVch OaVYprA2tiTmGbMUAhAVR7xXwsC8cuVKYmJi2Z/biA4JCYmLi8vLy1Oeat68eVhYWFRUVN++ fWU3pVIS2N69ewcHB8fExNSvXz8zM7OU5BQBxcRirkJySrFMYW1sScwzZikEICqOeK+0gZmb m5uVlXX27FmH+ktlnPcvKCg4d+6cXw4NVBATi7kKySnFMoW1sSUxz5ilEICoOOKdwAT8jonF XIXklGKZwq9gS2KeMUshAFFxxLsFAnP/lBSDjwh4JlFAMVfhZ02xTPHjVIZKIuCDiuJ9CfRg gekFfAxbshj/QzT4iIA9EWvQCUMLsBuiHjA1QtgDLg5gDGINOmFoAXZD1AOmRgh7wMUBjEGs QScMLcBuiHrA1AhhD7g4gDGINeiEoQXYDVEPmBoh7AE3RAKMQaxBJwwtwG6IesDUCGEAAAAA AAAAAAAAAAAAAAAAAAAAAADAA76QCxiDWINOGFqA3RD1gKkRwh5wK2PAGMQadMLQAuyGqAdM jRD2gIsDGINYg04YWoDdEPWAqRHCHnBxAGMQa9AJQwuwG6IeMDVC2AMuDmAMYg06YWgBdkPU A6ZGCHvAF3IBYxBr0AlDC7Aboh4wNUIYAAAAAAAAAAAAAAAAAAAAgAWsXr06ReN//ud/DO7A xx9/vG/fPvXhqVOnPvroI4e+bdq06dq1a9o+79q1y+B+AgAAAAB84OUXctu3b9+yZcsRv1q/ fr2HnU+fPn3y5Ek/dfCfoqOjZ86cqT5ct25dkyZN1L61bt06MTExMjIyNDR0+/btav24ceP8 2w3AZ3z5HTphaAF2Q9QDpkYIe+DlrYzLlej169fvlVdeqUCnXPCcnE6YMEHZbtu27eDBg9V6 klNUHtw2HDphaAF2Q9QDpkYIe1CR5HTYsGHz5s2bNm1aZGRkp06ddu/eLZXTp0+vUaNGWFhY bGzsmjVrpOb8+fMDBw6UmhYtWmRkZKivnTNnzujRo6X+4sWLO3bs6Nmzp2xLUzk5Oc4d8DI5 lby4f//+HvoMBAoTEXTC0ALshqgHTI0Q9sD75LRPnz4flvnss8+Uyq5duzZo0GDs2LEHDhyQ 9HPAgAFSWVBQEB8fP2bMGMlJCwsLpSYuLm7kyJGSgS5cuLBVq1bqa8PDw2fNmnXkyJHi4mLJ bSVXLSkp+eGHH7TfG1XdNDmVw6Wmpt56662rVq1S60lOUXkwEUEnDC3Aboh6wNQIYQ+8T07v vffe4WUmTZqkVEqCmZSUpGwvWbIkIiJC2dZ+rPf48eNBQUFpaWmHDh3KysoKDg7Ozs5WXjtq 1Ci1/S5duiQkJHj4pqrn5LRatWpVqlSRA23cuFHbZ5JTVB5MRNAJQwuwG6IeMDVC2APvb4jk nOhJgjllyhRlOzU1tXHjxsq2NjnNyMiQnLFjx44P/2rbtm0OrxWSlvbs2TMkJGT8+PFXr151 7kBsbOwbb7yhPly7dq2kq2rfkpOTc3JyoqKiXnjhBc99BgKFL79DJwwtwG6IesDUCOGK8zk5 PXbsmCSnGzZs8PBaVWZmZnh4+IIFC5w70L179169eqkPly5dKnmu2jflO6dbtmypWrVqenq6 hz4DAAAAAMyrXMlpcnJyt27d1N169OghD5WP7F6+fPnSpUulTsnp1q1bi4qKSkpKOnToMG/e POcOzJgxIzQ09KuvvpLt7OxsaXDixIlq39QbIr300kuS3iqfHCY5BQAAAACLkUQvKCioyq96 9uxZ6j453b9/f/PmzSMjI5VvgEqq2Lt37+Dg4JiYmPr162dmZpY6Jaeyf1hYWFRUVN++fa9c ueLcAalMTEyUPkRHR4eEhMTFxeXl5al9U5NT2S02NjY+Pl7yXIc+q++0AgAAAADs48yZM8XF xerDgoKCc+fOedj/UhnPbebm5mZlZZ09e9Y/XQQAAAAAVA58IRfwl8IL+R6eJdagE4YWYDdE PWBqhLAH3MoY8BeJpo0PDj/72U53zxrcH9gEQwuwG6IeMDVC2AMuDuAvEk1Slld9aEWtrlkv vePwRiqxBp0wtAC7IeoBUyOEPeDiAP6iJKdqWV61g/aNVGINOmFoAXZD1AOmRgh7wMUB/MUh OXV4I5VYg04YWoDdEPWAqRHCWi7XzxQKxYBy6pMvAz0BwIK4rwJgN0Q9YGqEsNbHHlN1z88C 8MAhFV3fMmn7wAmf3fNUerOBh2Yu83wvXwAAAMBuSE4BnSg56YrQR7b2enlrn+SVd/bY8cSr 5zbtLim6EeiuAQAAAJUOySmgEwkf3ioFAAAAvERyCuhEwoe3SgEAAAAvkZwCOvH8VilffodO GFqA3RD1gKkRwlokp0BAEFzQCUMLsBuiHjA1QliL5BQICIILOmFoAXZD1AOmRghrkZwCAUFw QScMLcBuiHrA1AhhLZJTICAILuiEoQXYDVEPmBohrEVyCgQEX36HThhagN0Q9YCpEcJaJKcA AAAAgIAjOQUAAAAABBzJKQAAAAAg4EhOAQAAAAABR3IKBARffodOGFqA3RD1gKkRwlokp0BA EFzQCUMLsBuiHjA1QliL5BQICIILOmFoAXZD1AOmRghrkZwCAUFwQScMLcBuiHrA1AhhLZJT ICAILuiEoQXYDVEPmBohrEVyCgSE919+LykpWbVq1cSJE8eNG/fhhx9ev35d1445+/jjj/ft 26c+PHXq1EcffaRsr169OqXMpk2brl27pu4j9bt27TK4n1BwXwXAboh6wNQIYS2SU6Ayy8vL i4uLi42NnTp16syZM9u0afPggw+ePn3ayD5ER0fLodWH69ata9KkibLdvn371q1bJyYmRkZG hoaGbt++Xa2XVNrITgIAAMDsSE6Byuz5559v2rTpL7/8ojy8evWqJKePP/64kX3wnJxOmDBB 2W7btu3gwYPVepJTAAAAlAvJKVBp5efnh4SEjB07Vls5a9asoKCg77//XraHDRs2d+7cl19+ uX79+s2aNVu9erWyz/nz5wcOHBgWFtaiRYuMjAylUnaeN2/etGnTIiMjO3XqtHv3bqV+x44d PXv2lJ2lPicnx7kbXian/fr169+/v1pPcgoAAIByITkFKq1du3ZJHrp27Vpt5TfffCOVK1eu lO2uXbs2btz4nXfe+fbbb0eMGFGnTp0bN25IfVxc3MiRIy9evLhw4cJWrVopL5SdGzRoIKnu gQMHJHUdMGCAUi+J6pw5c0pKSn744Qft90ZVN01OJRdOTU299dZbV61apdaTnAIAAKBcSE6B gPDmy++SlqpvkqqKioqqVKmyePHi0rJ889VXX1Xqc3NzZeedO3ceP35cNtLS0g4dOpSVlRUc HJydna3snJSUpOy8ZMmSiIgIZbtLly4JCQknT5501w3PyWm1atWkP3LEjRs3qvuQnAYQ91UA 7IaoB0yNENYiOQUCwpvgOnjwoCR9KSn/MmWdPn1azQQl35wyZYr6VL169ebOnZuRkSE7dOzY 8eFfbdu2zWHn1NTUxo0bK9uSlvbs2TMkJGT8+PFXr1517kZsbOwbb7yhPpSUWdJVZVuS0OTk 5JycnKioqBdeeEHdh+Q0gJi3Absh6gFTI4S1SE6BgPAmuK5fv96wYcMnn3xSW7lgwYLQ0NDc 3NzSf803L1y4IDnpihUrjh07JhsbNmxwaM1dcqrIzMwMDw+Xxp270b179169eqkPly5dKgmv sq1+53TLli1Vq1ZNT09X60lOA4V5G7Aboh4wNUJYi+QUCAgvg+v999+vXr36559/rjzctWuX pJAzZsxQHkq+GRcXl5+ff+PGjZkzZ9apU+fSpUtS36NHj27duimf1L18+bJS6S453bp1a1FR UUlJSYcOHebNm+fcBzmcpMNfffWVbGdnZ0vLEydOVJ7S3hDppZdekr4pHyEmOQ0g5m3Aboh6 wNQIYS2SUyAgvA8uSSRr164dFRXVrFmzWrVqzZ07VxJJ5SnJN/v06XP33XdLpimJ4RdffKHU S4bYu3fv4ODgmJiY+vXrZ2ZmlrpPTps3bx4WFibt9+3b98qVK84dkMrExMSgoKDo6OiQkBBJ h/Py8pSntMmp7BYbGxsfHy/dk3rZv8qv1HdaYQDmbcBuiHrA1AhhLZJTICDK9eV3SfeOHTt2 9OjR4uJibb2Sb8qzZ86cUTNWVUFBwblz57xp/1IZz/vk5uZmZWWdPXvW+27DXwov5Hu/M/dV AOyGqAdMjRDWIjkFzMvhhkiwKpmKNz44/OxnOwPdEQAAAB2RnALmtXTp0oyMjED3ArqTqVjK 8qoPrajVNeuld8r1RioAAIBZkJwCQCWnJKdqWV61A2+kAgAA6yE5BYBKziE55Y1UAABgSSSn gDFc5hcUigEl0GMfgL64mwpgaoSwlud1C6sawF+INfjMIdlc3zJp+8AJn93zVHqzgYdmLmNo ATZHmAOmRghrsaoBjEGswWdKTroi9JGtvV7e2id55Z09djzx6rlNu0uKbpQytADbI8wBUyOE tVjVAMYg1uAzGR7at0odvmTK0AJsjjAHTI0Q1mJVAxiDWIPPZHho3yp1ftbza3XrF4BKgTAH TI0Q1mJVAxiDWIPPPN+Pl6EF2Bx3UwFMjRDWYlUDGINYg04YWgAAwBpY1QDGINagE4YWAACw BlY1gDGINeiEoQUAAKyBVQ1gDGINOmFoAQAAa2BVAxiDWINOGFqAzXE3FcDUCGEtVjWAMYg1 6IShBdgcYQ6YGiGsxaoGMAaxBp0wtACbI8wBUyOEtVjVAMYg1qAThhZgc4Q5YGqEsBarGsAY xBp0wtACbI4wB0yNENZiVQMYg1iDThhagM1xNxXA1AhhLVY1gDGINeiEoQUAAKyBVQ1gDGIN OmFoAQAAa2BVAxiDWINOGFoAAMAaWNUAxiDWoBOGlqqoqKi4uDjQvQAAAD5iVQMYg1iDTvw1 tCSz++yzz1588cVZs2Zt3rzZDz1zpaSkZNWqVRMnThw3btyHH354/fp1hx2ys7NTUlLOnTvn Q+Ndu3adMmWK531Wr14t7b/77rsrV648ceKED0cBKhvupgKYGiGsxYIZMAaxBp34a2j16dOn Q4cOb7311u9///snnnhCqTx9+vTJkyfL1R8PL8nLy4uLi4uNjZ06derMmTPbtGnz4IMPyv7a fSZNmhQUFDR58mQfjuVNctq+ffvWrVsnJiZGR0dXrVo1LS3NmwMBlRm/QQBTI4S1WDADxiDW oBO/DK2jR49Kpnb27FmH+n79+r3yyivl6o+Hlzz//PNNmzb95ZdflIdXr16V5PTxxx9Xdygq KmrQoIFkrxEREd58QNfhWF4mpxMmTFC2u3fvnpCQcNOjAJUcv0EAUyOEtVgwA8Yg1qATvwyt 06dPV6lS5a9//au2cvr06TVq1AgLC5Nscc2aNVIzb968zp07161bNy4ubvfu3cpuw4YNmzNn zujRo2XPyZMnO7xElZ+fHxISMnbsWG3lrFmzgoKCvv/+e+VhWlpavXr19uzZI5Xr169Xd+vb t29qaqqyvWzZsscee8xl95TkdNq0aZGRkZ06dVJ7qKVNTp977jnZ0+EULl68mJubKzX169e/ 6667hg8fnpeXp+wv9SNGjGjUqFHNmjXbtGmjVJ4/f37gwIHywhYtWmRkZCiVO3bs6Nmzp1RK +zk5OR4qgYrjNwhgaoSwFgtmwBjEGnTir6E1ceJEyU+ffvrpCxcuKDUFBQXx8fFjxoyR/Kuw sFBqVq5cuW/fPtkeMmTIU089pewmKWF4eLikmUeOHJHMzuElql27dknKuXbtWm3lN998I5XS rPKwd+/eSubYrl27QYMGqbu1bNly/vz5yvbs2bPvv/9+l92TnjRo0EDy3wMHDkjCOGDAAOfT VJPTo0eP1qpV69lnn3U4heLiYmm2R48eh8p07969V69eymslJY+JiVm3bt21a9cOHjyoVo4c OVJOfOHCha1atVIqJTWWbLekpOSHH36QnT1UAhXHbxDA1AhhLRbMgDGINejEj0Nr9erVd911 V6NGjbZv367UuPuM7qJFi6KiopRtyexGjRqlPuXuJZKWat8kVRQVFUlGvHjxYtn+8ccfg4OD JWeU7ZSUlFtuuUV9e9Flcup8LOlJUlKSsr1kyZKIiAjnbkhyGh0dfc8998hxJf+9dOmSwymc OHFC+qm+7SvXRB5K344fPy4bcnRta0plWlqapLFZWVnS/+zsbKnv0qVLQkKCw3dvXVYCFcfd VABTI4S1WDADxiDWoBP/Dq28vLw+ffrcfvvtBQUFpU7Z36efftqhQ4e2ZZo2bapUOnzT011y evDgQcnjJOvUVp4+fVoqN27cKNvSyJ133jm2zDPPPCP1b775prKb98mp2pPU1NTGjRs7d0OS 0yeeeGLr1q3aL9hqX5iRkSGHVp/96aef5GFmZqZS//XXX2tbUyo7duz48K+2bdsm9ZKB9uzZ MyQkZPz48VevXlV2dlkJAABULJgBYxBr0Infh9aPP/6ofuVTm/0dOXJEEislkXzvvffKm5xe v369YcOGTz75pLZywYIFoaGhubm5N27ckFzyxRdfXPirhISEFi1aKLtJcjpnzhxl+7XXXqtg cqp+59TlC7/77js5/S+++EJ5+Pnnn8vDo0ePHjt2TDYWLVqkfaFSuWHDBucDCUlpw8PD5Rxv WgkAAEpZMANGIdagE78MrUOHDm3ZskX5q6NLly6VJPT48eOynZyc3K1bN2WfHTt2SP2JEyey s7OHDh0aFham1Dskp9qXOHj//ferV68u6Z7ycNeuXZKmzZgxQ7bT09Pr1q2r/Samclsk5Y3I QYMGJSUlFRYWLlu27I477lCTU4dj+SU5LS4ufuCBB4YMGXLp0qX8/PzExMR27dqVlJTIU3Ks Vq1a7d27V7YPHz6s3E+4R48eUq98WPfy5cvK54S3bt1aVFQkr+rQocO8efOUll1WAgAAFQtm wBjEGnTil6G1evVqSRtr1qzZvHlzSd8+/PBDpX7//v1SExkZqbxhOmDAgNtuu61hw4bvvvtu nTp1lHsiOSSnDi9xIDlj7dq1o6KimjVrVqtWrblz5yp5X//+/ceNG+ew83333Td8+HDZ2Lx5 c6NGjapVqyYdkGRWTU4djuWX5LS07D1iSUglCw4NDX3ooYeUr8GKM2fOyJ6SMsspREREKHdh klS9d+/ewcHBMTEx9evXz8zMlErplSTvcpp9+/a9cuWK8nKXlQAAQMWCGTAGsQad+GtoFRcX Hzt2zPlPnZaWJWXqXx3Nzc1Vti+Xcdea9iUOJBuVA0nG581fMlXduHEjPz+/vMeqCDlTl0f8 +eefnesLCgrOnTunrblUxmE3l5VABXE3FcDUCGEtFsyAMYg16IShBdgcYQ6YGiGsxaoGMAax Bp0wtACbI8wBUyOEtVjVAMYg1qAThhZgc4Q5YGqEsBarGsAYxBp0wtACbI4wB0yNENZiVQMY g1iDThwGjzz0XALVTwA64W4qgKkRwlosmAFjEGvQiXNy6nnnSlJ0vioAAMB8WDADxiDWoJPy Jqc6d8crlaQbAACgUjHFMgawAGINOiE5BQAA1mCKZQxgAcQadEJyCgAArMEUyxjAAog16ITk FLA57qYCmBohrGWKZQxgAcQadEJyCtgcAQWYGiGsZYplDGABxBp0QnIK2BwBBZgaIaxlimUM YAHEGnRCcgrYHAEFmBohrGWKZQxgAcQadOLH5LTwQr5/+nQzDHjAjwgowNQIYS0WzIAxiDXo pOLJaVHBlW8nLUwLTzBsHDLgAT/ibiqAqRHCWiyYAWMQa9BJRZLTnM17v+w8anlwR6lXii5d vFk3AAAASlkwA0Yh1qATH5JT7VulDkXfvnrXSQAAYE8smAFjEGvQSXmTU4e3SklOAQBAJcGC GTAGsQadeJ+cnl2/011OanzR/8IAAACTYcEMGINYg07K+87p4dkfrYt9Mq1ewqeN+5EzAhbA 3VQAUyOEtVgwA8Yg1qAT326IlLM5a/fTUz+p3jm92cBPbu9McgqYF5ELmBohrMWCGTAGsQad VORuvYUX8h3eSNWliwD0ROQCpkYIa7FgBoxBrEEnFUlOVcobqYxDwIyIXMDUCGEtFsyAMYg1 6MQvyami8EK+f/oEwED8BgFMjRDWYsEMGINYg078mJwCMCPupgKYGiGsxTIGMAaxBp2QnAIA AGtgGQMYg1iDTkhOAQCANbCMAYxBrEEnJKcAAMAaWMYAxiDWoBOSUwAAYA0sYwBjEGvQCckp YHPcTQUwNUJYi2UMYAxiDTohOQVsjrgGTI0Q1mIZAxiDWINOSE4BmyOuAVMjhLVYxgDGINag E5JTwOaIa8DUCGEtljGAMYg16ITkFLA54howNUJYi2UMYAxiDTohOQVsjrupAKZGCGuxjAGM QaxBJySnAADAGljGAMYwONZKSkquX7/u3zYrlaKiouLi4kD3olIgOQUAANbAMgYwhm+xtnr1 6pQymzZtunbtmveHW7FiRVhYmLKdnp6elZXl/WsNk52dLad27tw5H17btWvXKVOmOFRevXo1 xcnZs2f90NdKjOQUAABYA8sYwBi+xVr79u1bt26dmJgYGRkZGhq6fft2Lw+nTU4HDx48e/bs cvXW2enTp0+ePFnepzybNGlSUFDQ5MmTfeiAy+T00qVLIzTatm0r7VfOxNyPSE4BAIA1sIwB jOFzcjphwgRlW1ItSTO9PJw2OfWLfv36vfLKK+V9yoOioqIGDRrExsZGRER48wFdh6O4TE61 8vLyGjVqNHTo0PJ2zHRITgGb424qgKkRwlosYwBjVDw5leysf//+yvb58+cHDhwo6WeLFi0y MjKUygsXLjz22GO1a9du06bNuHHj1OR02LBh8+fPV7fnzJkzevRoefbixYsu28nNzR0xYoRk djVr1pSmpGb69Ok1atSQ3SSXXLNmjbaHzk/Jy+Uo9evXv+uuu4YPHy5JostTS0tLq1ev3p49 e4KCgtavX6/W9+3bNzU1VdletmyZnJHLoyjJ6bRp0yIjIzt16rR7926H9pOSkiTtzc/P93DZ rYHkFLA54howNUJYi2UMYIyKJKeSQkq+duutt65atUqpj4uLGzlypGSXCxcubNWqlVL56KOP JiQknDx58qeffpIUT01OtW8yynZ4ePisWbOOHDlSXFzssh2pjImJWbdu3bVr1w4ePCg1BQUF 8fHxY8aMkZ4UFhZqe+j8lDzs0aPHoTLdu3fv1auXy1Pr3bu3kne3a9du0KBBan3Lli3VVHr2 7Nn333+/y6PIiTRo0GDs2LEHDhyQ/HrAgAHaxpcvX16lSpVNmzZ5uOaWQXIK2BxxDZgaIazF MgYwhs/JabVq1STPCgoK2rhxo1J5/PhxeZiWlibZX1ZWVnBwcHZ29qlTp6RSMkplH+3Heh2S 01GjRnloR6l0/o6qlx/rPXHihLxcfXd19erV8vDHH390eInUyOGOHj0q2ykpKbfccktOTo7y lMvk1LkDciJJSUnK9pIlSyIiItSnzp49W7t2bclbXfbWekhOAZsjrgFTI4S1WMYAxvA5OU1O TpbELSoq6oUXXlAqMzIyJOPr2LHjw7/atm3bli1bpFK9M62H5FTddtmOUvn111879MTL5FR5 udqNn376SR5mZmY6vET6cOedd44t88wzz8g+b775pvKU98mpeiKpqamNGzdWn+rVq9fdd999 5coVl721HpJTwOaIa8DUCGEtljGAMSr4nVPJPatWrZqeni7bx44dk2xuw4YN2j2zs7OrVKmy c+dO5aE3yanLdpTKRYsWOfTEy+T0u+++k5d/8cUXysPPP/9cHirvkKpu3LghueSLL7648FcJ CQktWrRQnpXkdM6cOcr2a6+9Vt7kdPHixSEhIXv27HHZVUsiOQVsjrupAKZGCGuxjAGMUfEb Ir300kvh4eGShMp2jx49unXrpvxplcuXL1+6dEk2HnjggWHDhuXl5X311Vf33XffTZNTd+1I TatWrfbu3Svbhw8fVm6lm5ycLPUuO6l9SnaWbgwZMkSays/PT0xMbNeuXUlJiXZ/SbHr1q2r /bOtym2Rtm3bJtuDBg1KSkoqLCxctmzZHXfcoSanDh1wmZxKZl2jRg3Z8xcNyYXdXndLIDkF AADWwDIGMEbFk9MrV67ExsbGx8dLricpau/evYODg2NiYurXr698bnbdunW1atWSSkkt58+f 701y6rKdM2fOyG6SLdauXTsiIkK5AdH+/fubN28eGRmpfvVV5fDUkSNHJCGVvDI0NPShhx5y eNtU9O/ff9y4cQ6Vkk0PHz5cNjZv3tyoUaNq1aoNGDBgxowZanLqcBSXyWlKSkqQky1btni4 8hZAcgoAAKyBZQxgDD1iraCg4Ny5c9qaoqIihxrf2hE///yz899hkbzV3d8kdXgqNzfX5z/j cuPGDXev9dAB2yI5BQAA1sAyBjBGRWKt8IL1/1gnfEZyCgAArIFlDGAMH2KtqODKt5MWpoUn EInwgOQUsDnupgKYGiGsxTIGMEa5Yi1n894vO49aHtxR6pWic+9gYiSngM0R14CpEcJaLGMA Y3gTa9q3Sh2KUd2E+ZCcAjZHXAOmRghrsYwBjHHTWHN4q5TkFF4iOQVsjrgGTI0Q1mIZAxjD QzSdXb/TXU5KoXhTHEaa9zsDsADiGjA1QljL89XgWgH+ctNYOzz7o3WxT6bVS/i0cT8SCniP aRywOe6mApgaIazFqgYwhpexlrM5a/fTUz+p3jm92cBPbu9McoqbYhoHAADWwKoGMEa5Yq3w Qr7DG6k69w4mxjQOAACsgVUNYAzfYk15I5VIhAdM4wAAwBpY1QDGqEisFV7I93d3YB1M4wAA wBpY1QDGINagE4YWYHPcTQUwNUJYi1UNYAxiDTphaAE2R5gDpkYIa7GqAYxBrEEnDC3A5ghz wNQIYS1WNYAxiDXohKEF2BxhDpgaIazFqgYwBrEGnTC0AJsjzAFTI4S1WNUAxiDWoBOGFmBz 3E0FMDVCWItVDWAMYg06YWgBAABrYFUDGINYg04YWgAAwBpY1QDGINagE4YWAACwBlY1gDGI NeiEoQUAAKyBVQ1gDGINOmFoATbH3VQAUyOEtVjVAMYg1qAThhZgc4Q5YGqEsBarGsAYxBp0 wtACbI4wB0yNENZiVQMYw5KxVlJScv369UD3wu4sObQAeI8wB0yNENZiVQMYw+dYkwRw1apV EydOHDdu3IcfflipksEVK1aEhYUp2+np6VlZWfod6+OPP963b5/68NSpUx999JGyvXr16pQy mzZtunbtmrqP1O/atUu/LlUSTOOAzRHmgKkRwlqsagBj+BZreXl5cXFxsbGxU6dOnTlzZps2 bR588MHTp0/r08dy0yangwcPnj17dgUblFM7efKky6eio6PlCqgP161b16RJE2W7ffv2rVu3 TkxMjIyMDA0N3b59u1ovGX0Fu1T5MY0DNsfdVABTI4S1WNUAxvAt1p5//vmmTZv+8ssvysOr V69Kcvr444/7v38+0SanftGvX79XXnnF5VOek9MJEyYo223btpU0Wa0nOWUaBwAAZsGqBjCG D7GWn58fEhIyduxYbeWsWbOCgoK+//572R42bNjcuXNffvnl+vXrN2vWbPXq1co+58+fHzhw oKSNLVq0yMjIUCpl53nz5k2bNi0yMrJTp067d+92PqLsM2fOnNGjR8trL1686LKdCxcuPPbY Y7Vr127Tpo2kfmpyKq+dP3++9+3k5uaOGDGiUaNGNWvWlKakZvr06TVq1JDdYmNj16xZ49A3 L5NTSW/79++v1pOcMo0DAACzYFUDGMOHWNu1a5fkoWvXrtVWfvPNN1K5cuVK2e7atWvjxo3f eeedb7/9VhK9OnXq3LhxQ+rj4uJGjhwpWeHChQtbtWqlvFB2btCggaS6Bw4ckFRxwIABzkeU fcLDwyX/PXLkSHFxsct2Hn300YSEhJMnT/700099+/ZVk1N57ZQpU7xvRypjYmIkx7x27drB gwelpqCgID4+fsyYMZLMFhYWOvTtpsmpvCo1NfXWW29dtWqVWk9yyjQOAADMglUNYAwfYk3S UvVNUlVRUVGVKlUWL15cWpYDvvrqq0p9bm6u7Lxz587jx4/LRlpa2qFDh7KysoKDg7Ozs5Wd k5KSlJ2XLFkSERHhfETZZ9SoUcq2y3ZOnTollZIYKvtoP9brkJx6bkepdP6Oqs8f661WrZpc Fmlz48aN6j4kpzd9FgAAoPJgVQMYw4dYO3jwoGRbKSn/8jX506dPqymYNh8U9erVmzt3bkZG huzQsWPHh3+1bds2h51TU1MbN27sfETtPi7b2bJli1SePXtW2cdDcuq5HaXy66+/duiAh+Q0 Njb2jTfeUB9K5i7pqrItSWhycnJOTk5UVNQLL7yg7kNyetNnAVgAd1MBTI0Q1mJVAxjDh1i7 fv16w4YNn3zySW3lggULQkNDc3NzS/81B7xw4YKke5ItHjt2TDY2bNjg0Fp5k1OX7WRnZ1ep UmXnzp3KQ2+SU5ftKJWLFi1y6ICH5LR79+69evVSHy5dulTyXGVb/c6p5M5Vq1ZNT09X60lO mcYByyPMAVMjhLVY1QDG8C3W3n///erVq3/++efKw127doWHh8+YMUN5KDlgXFxcfn7+jRs3 Zs6cWadOnUuXLkl9jx49unXrpvxNlsuXLyuV5U1O3bXzwAMPDBs2LC8v76uvvrrvvvtumpy6 a0dqWrVqtXfvXtk+fPhwcXGxbCQnJ0u9y0shZy1ZuRy0tCxHlt0mTpyoPKW9IdJLL70kl0j5 JDPJ6U2fBWABhDlgaoSwFqsawBg+x5okkrVr146KimrWrFmtWrXmzp1bUlKiPCU5YJ8+fe6+ +27JNCUj++KLL5R6Sc169+4dHBwcExNTv379zMzMUp+SU5ftrFu3TrohlZJazp8/35vk1GU7 Z86ckd2CgoLk7CIiIpQ7IO3fv7958+aRkZHar44qrly5kpiYKPtHR0eHhIRIVi4JsvKUNjmV 3WJjY+Pj4+UqSb3sX+VX6jutFsM0DtgcYQ6YGiGsxaoGMEZFYk3yrGPHjh09elR5e1Gl5IDy rCR6asaqKigoOHfunM8d9tBOUVGRDy277M/PP/+cn5/vUCmn43Cmqtzc3KysLPVLryhlGges qPCC48ToAWEOmBohrMWqBjCGHrHm8AYl7IlpHLAeidyNDw4/+9lOb3bmbiqAqRHCWqxqAGPo EWtLly7NyMjwtUewCKZxwHokcqUsr/rQilpds156p1xvpAKAebGqAYxBrEEnDC3AepTkVC3L q3bw/o1UADAvVjWAMYg16IShBViPQ3LKG6kAbIJVDWCMm8YahUKhUCh+KYb9agMA//I8gzG/ Af5CrEEnDC3AehySzfUtk7YPnPDZPU+lNxt4aOYyoh6wEm6IpMX8BhiDWINOGFqA9Sg56YrQ R7b2enlrn+SVd/bY8cSr5zbtLim6UUrUA9ZCzGoxvwHGINagE4YWYD0Sudq3Sh2+ZErUA1ZC zGoxvwHGINagE4YWYD0Sudq3Sp2f9fxa3foFwP+IWS3mN8AYxBp0wtACrMfz/XiJesBKiFkt 5jfAGMQadMLQAuyGqAeshBsiaTG/AcYg1qAThhZgN0Q9AKtifgOMQaxBJwwtwG6IegBWxfwG GINYg04YWoDdEPUArIr5DTAGsQadMLQAuyHqAVgV8xtgDGINOmFoAXZD1ANWwg2RtJjfAGMQ a9AJQwuwG6IesBJiVov5DTAGsQadMLQAuyHqASshZrWY3wBjEGvQCUMLsBuiHrASYlaL+Q0w BrEGnTC0ALsh6gErIWa1mN8AYxBr0AlDC7Aboh6wEm6IpMX8BhiDWINOGFqA3RD1AKyK+Q0w BrEGnTC0ALsh6gFYFfMbYAxiTauoqKi4uDjQvSi3nJycvLy8QPfCEUMLsBuiHoBVMb8BxvAt 1lavXp2SkvLuu++uXLnyxIkT+nTNR9nZ2dK3c+fO+fDarl27TpkyxblezjcjI0Nbk56e/v33 38vG1atXU5ycPXvWoQXZPysry4cueXbt2rX4+PiYmJjGjRt/9913fm+/IpjGAbsh6gFYFfMb YAzfYq19+/atW7dOTEyMjo6uWrVqWlqaPr1z4fTp0ydPnvSww6RJk4KCgiZPnuxDa+6SUznf 22+//dixY2rNI488Irm5bFy6dGmERtu2beXoznno4MGDZ8+eXa7OeGPjxo1NmjQp10sMwzQO 2A1RD1gJN0TSYn4DjOFzcjphwgRlu3v37gkJCf7vmRv9+vV75ZVX3D1bVFTUoEGD2NjYiIgI bz6g69Cah+Q0ODhYni0pKVFq1ORUKy8vr1GjRkOHDvXmRG7aGW9Ib7t16+bb4fTGNA7YDVEP WAkxq8X8Bhij4snpc889FxkZKRvDhg2bM2fO6NGjw8LCLl68eP78+YEDB8p2ixYt1M/E7tix o2fPnlIpL8nJyVEqXe4prc2bN2/atGmyZ6dOnXbv3i2V06dPr1Gjhuwp6eeaNWucO5aWllav Xr09e/YEBQWtX79ere/bt29qaqqyvWzZsscee8xla0py6nBQ5Xz/+Mc/hoSELF68WKlxmZwm JSVJUpyfn+/cMTmd+fPnl+vU3F0W9SK//fbbtWvXrl69urxE6Yw027lz57p168bFxamdz83N HTFihGTNNWvWbNOmjYdr7l9M44DdEPWAlRCzWsxvgDEqmJwePXq0Vq1azz77bGlZZhceHj5r 1qwjR44UFxdLfjRy5EjJUhcuXNiqVSvlhZKLSW5VUlLyww8/XLt2Tal0uae01qBBg7Fjxx44 cEDSqAEDBkhlQUFBfHz8mDFjJLcqLCx07ljv3r2VjrVr127QoEFqfcuWLdXccPbs2ffff7/L 1lweVDnfv//975MmTZKTPX36dKmr5HT58uVVqlTZtGmTyyumfU/Wy1Nzd1nUiywvSU5O/u1v fysvuXLlijy7cuXKffv2ycuHDBny1FNPqZc3JiZm3bp1csEPHjzo4Zr7F9M4YDdEPWAlxKwW 8xtgDJ+T0+jo6HvuuUfSMckBL126VFqWN40aNUrZ4fjx40FBQWlpaYcOHcrKygoODs7Ozpb6 Ll26JCQkaL9Z6W5PaS0pKUnZZ8mSJREREcq2h8++/vjjj/JyyZdlOyUl5ZZbblHfnHWZnDq3 5u6gSnIqSd9vfvObPn36lDolp2fPnq1du7bkm+6upENyetNT83BZ1IssXn/99e7duzsfbtGi RVFRUWo7Dl93dde4fzGNA3ZD1ANWQsxqMb8BxvA5OX3iiSe2bt2qvS2tNv/KyMiQ9Kdjx44P /2rbtm1SL2lpz549Q0JCxo8ff/XqVQ97altLTU1t3Lixsu0hOZX977zzzrFlnnnmGWn2zTff VJ7yPjl1eVAlOZWNXbt2Va1a9YMPPnBITnv16nX33Xcrb1+65JCc3vTUvLkspU7J6aefftqh Q4e2ZZo2baq28/XXX2s7465x/2IaB+yGqAeshBsiaTG/Acao+HdOVdq86dixY5L+bNiwweXL MzMzw8PDFyxY4GHP8ianN27ckH1efPHFhb9KSEho0aKF8qwkp3PmzFG2X3vtNZ+TUyH7161b 995771WT08WLF0u6vWfPHpcn69yyN6fmzWUp/dfk9MiRI9KNjRs3yvZ7772nJKdKO4sWLdI2 4vmn4y9M44DdEPUArIr5DTCGTsmp6NGjR7du3ZRP8F6+fFn56O/WrVuLiopKSko6dOgwb948 D3u6y+CSk5Nd3p82PT1dckb1e6xCuS2S8p7goEGDkpKSCgsLly1bdscdd6jJqUNr3iSnV65c adasmbSsJKeS6NWoUUPa+UVDMmUPF8fLU7vpZSn91+R0x44dkpyeOHEiOzt76NChYWFhSr00 0qpVq71798r24cOHlZsYu2zcv5jGAbsh6gFYFfMbYAz9klNJkXr37h0cHBwTE1O/fv3MzEyp bN68uSRNUVFRffv2VT8E63JPdxnc/v37pZHIyEjlLUJV//79x40b59Cl++67b/jw4bKxefPm Ro0aVatWbcCAATNmzFCTU4fWvElOS8ve+a1SpYqSnKakpAQ52bJli4eL4+Wp3fSylDp9rFfO 7rbbbmvYsKH0rU6dOso9kc6cOSOvkl7Vrl07IiJCuduSy8b9i2kcsBuiHoBVMb8BxqhIrBVe cPE3UxwUFBScO3dOW3OpjDd7eiAJlzd/xlTrxo0bLv/Ii2+t6cehM+W6LKVlfzhGefnlMmr9 zz//7Hz65W28XJjGAbsh6gFYFfMbYAwfYq2o4Mq3kxamhScQifCAaRywG6IesBJuiKTF/AYY o1yxlrN575edRy0P7ij1StG5dzAxpnHAboh6wEqIWS3mN8AY3sSa9q1Sh2JUN2E+TOOA3RD1 gJUQs1rMb4AxbhprDm+VkpzCS0zjgN0Q9YCVELNazG+AMTxE09n1O93lpBQKhUKhOBffft0A qISIWS3mN8AYN421w7M/Whf7ZFq9hE8b9yvXOgQ2xzQO2A1RD1gJN0TSYn4DjOFlrOVsztr9 9NRPqndObzbwk9s7k5zippjGAbsh6gFYFfMbYIxyxVrhhXyHN1J17h1MjGkcsBuiHoBVMb8B xvAt1pQ3UolEeMA0DtgNUQ/AqpjfAGNUJNYKL+T7uzuwDqZxwG6IegBWxfwGGINYg04YWoDd EPWAlXBDJC3mN8AYxBp0wtAC7IaoB6yEmNVifgOMQaxBJwwtwG6IesBKiFkt5jfAGMQadMLQ AuyGqAeshJjVYn4DjEGsQScMLcBuiHrASohZLeY3wBjEGnTC0ALshqgHrIQbImkxvwHGINag E4YWYDdEPQCrYn4DjEGsQScMLcBuiHoAVsX8BhiDWINOGFqA3RD1AKyK+Q0wBrEGnTC0ALsh 6gFYFfMbYAxiDTphaAF2Q9QDVsINkbSY3wBjEGvQCUMLsBuiHrASYlaL+Q0wBrEGnTC0ALsh 6gErIWa1mN+0ioqKiouLA92LcsvJycnLywt0L3ATxBp0wtAC7IaoB6yEmNXybX5bvXp1SkrK u+++u3LlyhMnTujTNR9lZ2dL386dO+fDa7t27TplyhTnejnfjIwMbU16evr3338vG1evXk1x cvbsWYcWZP+srCwfuuTZtWvX4uPjY2JiGjdu/N133/m9ffgRawnohKEF2A1RD1gJMavl2/zW vn371q1bJyYmRkdHV61aNS0tTZ/euXD69OmTJ0962GHSpElBQUGTJ0/2oTV3yamc7+23337s 2DG15pFHHpHcXDYuXbo0QqNt27ZydOc8dPDgwbNnzy5XZ7yxcePGJk2alOslCBTWEtAJQwuw G6IesBJuiKTlc3I6YcIEZbt79+4JCQn+75kb/fr1e+WVV9w9W1RU1KBBg9jY2IiICG8+oOvQ mofkNDg4WJ4tKSlRatTkVCsvL69Ro0ZDhw715kRu2hlvSG+7devm2+FgMNYS0AlDC7Aboh6A VVU8OX3uueciIyNlY9iwYXPmzBk9enRYWNjFixfPnz8/cOBA2W7RooX6mdgdO3b07NlTKuUl OTk5SqXLPaW1efPmTZs2Tfbs1KnT7t27pXL69Ok1atSQPSX9XLNmjXPH0tLS6tWrt2fPnqCg oPXr16v1ffv2TU1NVbaXLVv22GOPuWxNSU4dDqqc7x//+MeQkJDFixcrNS6T06SkJEmK8/Pz nTsmpzN//vxynZq7y6Je5Lfffrt27drVq1eXlyidkWY7d+5ct27duLg4tfO5ubkjRoyQrLlm zZpt2rTxcM2hK9YS0AlDC7Aboh6AVVUwOT169GitWrWeffbZ0rLMLjw8fNasWUeOHCkuLpb8 aOTIkZKlLly4sFWrVsoLJReT3KqkpOSHH364du2aUulyT2mtQYMGY8eOPXDggKRRAwYMkMqC goL4+PgxY8ZIblVYWOjcsd69eysda9eu3aBBg9T6li1bqrnh7Nmz77//fpetuTyocr5///vf J02aJCd7+vTpUlfJ6fLly6tUqbJp0yaXV0z7nqyXp+busqgXWV6SnJz829/+Vl5y5coVeXbl ypX79u2Tlw8ZMuSpp55SL29MTMy6devkgh88eNDDNYeuWEtAJwwtwG6IegBW5XNyGh0dfc89 90g6JjngpUuXSsvyplGjRik7HD9+PCgoKC0t7dChQ1lZWcHBwdnZ2VLfpUuXhIQE7Tcr3e0p rSUlJSn7LFmyJCIiQtn28NnXH3/8UV4u+bJsp6Sk3HLLLeqbsy6TU+fW3B1USU4l6fvNb37T p0+fUqfk9OzZs7Vr15Z8092VdEhOb3pqHi6LepHF66+/3r17d+fDLVq0KCoqSm3H4euu7hqH rlhLQCcMLcBuiHoAVuVzcvrEE09s3bpVe1tabf6VkZEh6U/Hjh0f/tW2bdukXtLSnj17hoSE jB8//urVqx721LaWmprauHFjZdtDcir733nnnWPLPPPMM9Lsm2++qTzlfXLq8qBKciobu3bt qlq16gcffOCQnPbq1evuu+9W3r50ySE5vempeXNZSp2S008//bRDhw5tyzRt2lRt5+uvv9Z2 xl3j0BVrCeiEoQXYDVEPWAk3RNKq+HdOVdq86dixY5L+bNiwweXLMzMzw8PDFyxY4GHP8ian N27ckH1efPHFhb9KSEho0aKF8qwkp3PmzFG2X3vtNZ+TUyH7161b995771WT08WLF0u6vWfP Hpcn69yyN6fmzWUp/dfk9MiRI9KNjRs3yvZ7772nJKdKO4sWLdI24vmnA52wloBOGFqA3RD1 gJUQs1o6JaeiR48e3bp1Uz7Be/nyZeWjv1u3bi0qKiopKenQocO8efM87Okug0tOTnZ5f9r0 9HTJGdXvsQrltkjKe4KDBg1KSkoqLCxctmzZHXfcoSanDq15k5xeuXKlWbNm0rKSnEqiV6NG DWnnFw3JlD1cHC9P7aaXpfRfk9MdO3ZIcnrixIns7OyhQ4eGhYUp9dJIq1at9u7dK9uHDx9W bmLssnHoirUEdMLQAuyGqAeshJjV0i85lRSpd+/ewcHBMTEx9evXz8zMlMrmzZtL0hQVFdW3 b1/1Q7Au93SXwe3fv18aiYyMVN4iVPXv33/cuHEOXbrvvvuGDx8uG5s3b27UqFG1atUGDBgw Y8YMNTl1aM2b5LS07J3fKlWqKMlpSkpKkJMtW7Z4uDhentpNL0up08d65exuu+22hg0bSt/q 1Kmj3BPpzJkz8irpVe3atSMiIpS7LblsHLpiLQGdMLQAuyHqASshZrX0nt8KCgrOnTunrblU xps9PZCEy5s/Y6p148YNl3/kxbfW9OPQmXJdltKyPxyjvPxyGbX+559/dj798jaOimAtAZ0w tAC7IeoBKyFmtSoyvxVecJ3rAXDGWgI6YWgBdkPUA1bCDZG0fJjfigqufDtpYVp4ArMf4D3W EtAJQwuwG6IegFWVa37L2bz3y86jlgd3lHql6Nw7wDpYS0AnDC3Aboh6AFblzfymfavUoRjV TcD0WEtAJwwtwG6IegBWddP5zeGtUpJTwDesJaAThhZgN0Q9AKvyMIOdXb/TXU5KoVB8KL5F IuAZQwuwG6IesBJuiKR10/nt8OyP1sU+mVYv4dPG/cq12AagxVoCOmFoAXZD1ANWQsxqeTm/ 5WzO2v301E+qd05vNvCT2zuTnALlxVoCOmFoAXZD1ANWQsxqlWt+K7yQ7/BGqs69A6yDtQR0 wtAC7IaoB6yEmNXybX5T3kjlSgLeYy0BnTC0ALsh6gErIWa1KjK/FV7I93d3AMtiLQGdMLQA uyHqASvhhkhazG+AMYg16IShBdgNUQ/AqpjfAGMQa9AJQwuwG6IegFUxvwHGINagE4YWYDdE PQCrYn4DjEGsQScMLcBuiHoAVsX8BhiDWINOGFqA3RD1gJVwQyQt5jfAGMQadMLQAuyGqAes hJjVYn4DjEGsQScMLcBuiHrASohZLeY3wBjEGnTC0ALshqgHrISY1WJ+A4xBrEEnDC3Aboh6 wEqIWS3mN8AYxBp0wtAC7IaoB6yEGyJpMb8BxiDWoBOGFmA3RD0Aq2J+A4xBrEEnDC3Aboh6 AFbF/OagpKTk+vXrBhyoqKiouLhY76PocTrG9NwYhv24S4k16IahBdgNUQ/Aqnyb31avXp2S kvLuu++uXLnyxIkT+nQtMFasWBEWFlbxdtLT07Oysjzs0LVr1ylTplT8QJ7563S0Ktjzm14Z b0hSOW/evAo2UurX6/O3v/0tPz/fww6sJaAThhZgN0Q9AKvybX5r375969atExMTo6Ojq1at mpaWpk/vXDh9+vTJkyf1a9/nbMWhY4MHD549e7aH/U2UnDqcWgV7ftMr441XX331/fffr2Aj pX5NTr/77rtHH320qKjI3Q6sJaAThhZgN0Q9YCXcEOn/sXfn0VGU+f7HE4KyCkgIYUkyhE1Q FpFh1ThAgAiyyDIshhyUiwiMDoYfguAMjnIVuJwxSBS8oIAD3hmPxAQII6AGCIYrYryMKGiA yB4gGQIEIdBJ+vc9qWOdspdKp9NVhqr36/Qf1U9XVz1V/Xwf62N1Gi2/w+m8efOU5QEDBsTF xQW+Z14MHz589uzZxm3f77RS2Y7dRuHU5dDM6bkOOaiHHnooUJsK4J3l559/XmcMcC0BgzC0 ALuh6gEroWa1qh5OZ86cGRUVJQsJCQnLly+fPn26XO1fuXLl4sWLo0ePluUOHTpkZGQoK2dl ZQ0aNEga5S0XLlxQGj2uKVtbsWLFokWLZM2+ffvu379fGl999dV69erJmu3bt9+yZYtLrwoK CqZMmdKyZcu77rqrW7du6nYq7FV+fv7IkSMbN24s75ozZ46aVqrSMVktOTlZeYusHxMT06RJ k4EDByrrO38Z8TyeFi2PW/DYE53DqXCDw4YN27Bhg7K8fv162YjHQ1N67r5fOf/SpfDw8GbN mk2ePPnSpUsePwL1zDgcjva/9Je//MXbadeSZPree+9Vaqfat1f9437iiScWLFigblAy6dKl S2Xh6NGj9evX/+mnn9z77ORaAoZhaAF2Q9UDVkLNalUxnMrVeIMGDZ566ilneWYJCwtbsmRJ Tk5OaWmppJ6pU6dKLli5cmXnzp2VN8rlvUSGsrKyH3/88ebNm0qjxzVla82bN3/22We//fZb iQyjRo2SxqKiosGDB8+YMUNyRHFxsUuvZDtt2rTZtm2bbPm7775Tt1Nhrx555JG4uLgTJ06c OXNGApqaVqrSMW32TElJOXjwoLTHx8ePHz9e3Y66gsfTouVtC+490TmcCjfYqVMnNVAnJSXd f//93g7N435ltdjY2MPlBgwYMGTIEI8fgfbAL/7s7bffvvPOO3ft2uXttKuuXr0aFBT0+eef V2qn2i1U/eOW5N6oUaMbN27I8uXLlyW8Hzp0yFket0NCQnbs2OF+wp1cS8AwDC3Abqh6wEqo WS2/w2nr1q07duwYHBw8ZswYyQvO8sv4adOmKSscP35cEkRqaqpEhuzsbLliz8vLk/aHH35Y yQXqprytKVubOHGiss4777wTGRmpLHv79qyyHfc/ZqywV6dOnZJGibTKOur3PKvYMY/ffV21 alV0dLT7Cu6nxRuXLbj3xNvh+LJBj+HU46G57zc3N1f2q97OTktLk6cnT550/vIj8HhmDhw4 ULdu3XXr1jm9n3bVd999JyucP3++UjtVBeTj/umnnxo0aPD+++/Lspyxvn37qtuXuli92vMf DnAtAYMwtAC7oeoBK6FmtfwOp2PHjs3MzDx37pzaqA0dGRkZcqnfp0+fB3+2d+9eaZf8NWjQ oJo1a86dO1e58eRtTe3WNmzYEBERoSx7C6fKdr7++muX9gp7tXv3bmlUD0RNK1XsmHa1zZs3 9+rV64FyrVq1cl/B/bS4qHALak+8HY4vG/Q9nLrvVzld6n7PnDkjT/fs2eN0S6MuTyVLNmvW 7MUXX1SeejvtqiNHjsgKsv1K7VQVqI/76aefjo2NlYV7771X/Y6xiIqKevfdd9336+RaAoZh aAF2Q9UDVsIPImlV/W9OVdrL+GPHjsmlvrfvN0p8CAsLe/PNN3XWrGw4VbazatWqyvYqLy8v ODh43759ylM1rVSxY+pqOTk5kjp37twpy+vWrfMYLd1Pi5YvW1B74u1wfNmghNPly5cry5IW KxVOlcz46aefKu3bt2+Xp0ePHnU/Uu3TK1euyE7Hjx9fVlamtOiPHGf5XcsaNWooCdT3naoC 9XEfOHBAtiOxVN6u/v+EmzdvSt8+++wzjz3nWgIGYWgBdkPVA7Aqg8KpiI2N7d+/v/JV1WvX rilf/c3MzHQ4HJJEevXqpf47lR7X9BYKEhMTZWWPvZL2zp07f/XVV7L8ww8/KH9p6Euvunfv npCQcOnSJUkcXbt2VdNcVTqmrpaVlSVJMDc3V2LRpEmT1I1rt+PxtKh82YK2J94Op8INjhkz ZuLEicXFxevXr2/YsKEaTr0dmna/crZlv/Hx8XKWCgsLx40b16NHDyVyeguncshxcXF9+vRx uVns8bRrDR48+J133qnUTrUC8nGLLl261KlTZ9asWWrL4cOHGzdu7PGvhp1cS8AwDC3Abqh6 AFZlXDiV4DN06NCQkJA2bdqEh4crt7ratWsnWSA6OnrYsGHXr1/XWdNbKDh06JBsJCoqSrnx p3X27Fl5V1BQkASEyMhI9x8m8ravbdu2NWjQQBol2yYnJ6tppSod0642atSo2rVrt2jRYs2a NaGhocoPEGlX8HhatCrcgrYn3g6nwg3u2rWrZcuWtWrVkldfe+01NZzqHJp2vzk5OZINJdXW r1+/d+/eyh1M949AffrFF1/Ih1W3bt1GP5s8ebK30671ySefdOvWTfkXRX3cqVZAPm5n+S8e S/8lkKotU6dO/c///E+PO3VyLQHDMLQAu6HqAViV0fNbUVGR8ts1qqvlfFlTh+RQl59gVf37 3/8uLCysbK8k6Xjbe0A6VlBQoLRfK+e+grfT4vsWtHQOR3+DJSUl3s6ezjl32WyF598X+qdd QuXrr7/u904D8nEvW7YsJiZGffq///u/8fHxOutzLQGDMLQAu6HqAVgV8xtuUx9++OGvuHeJ t5GRkRs3blRbtmzZcuWsXqql1mAQhhZgN1Q9YCX8IJIW8xvgh5MnTy5cuNDlH9uVetn528nn /rnP41uoNRiEoQXYDVUPWAk1q8X8BgSK1Is8PqjRe1ODftmzXi/OL3R5Vf+9BvcOlsXQAuyG qgeshJrVYn4DAkUJp+rjgxq9tDdSqTUYhKEF2A1VD1gJNavF/AYEiks4dbmRSq3BIAwtwG6o esBKqFmtCuc3Hjx4BOpx6sPP/KtEQIf+4GFoAdZD1QNWwg8iaTG/AYHiEkU/7jTx89Hz/tlx fHrb0YcXr6fWYBCGFmA3VD0Aq2J+AwJFyaSb6v8uc8hzmY8mpjSKzRr7wvlP9pc5SpzUGgzD 0ALshqoHYFXMb0CgSL1ob5Xya70wB0MLsBuqHoBVMb8BgSL1or1V6v6q/nsN6xcsjqEF2A1V D8CqmN+AQHG5VeqCWoNBGFqA3VD1gJXwg0hazG+AOag1GIShBdgNVQ9YCTWrxfwGmINag0EY WoDdUPWAlVCzWsxvgDmoNRiEoQXYDVUPWAk1q8X8BpiDWoNBGFqA3VD1gJVQs1rMb4A5qDUY hKEF2A1VD1gJP4ikxfwGmINag0EYWoDdUPUArIr5DTAHtQaDMLQAu6HqAVgV8xtgDmoNBmFo AXZD1QOwKuY3wBzUGgzC0ALshqoHYFXMb4A5qDUYhKEF2A1VD1gJP4ikxfwGmINag0EYWoDd UPWAlVCzWsxvgDmoNRiEoQXYDVUPWAk1q8X8BpiDWoNBGFqA3VD1gJVQs1rMb4A5bFtrDoej tLT01+6Fs6ys7NatW95evXDhwqVLl6pDT/ygDB5vh2DhoQXYlm3/gwJYEjWrxfwGmMO/WktL S1u9evWaNWtSUlJyc3ON6Zqx+vXr99JLL/n33vT09Ozs7IB0Y9OmTXfffbd7+82bNwcPHtym TZuIiIgjR44EZF/+9cRvG4N66BxCoKbxf/zjHwcPHlSfnjp16u9//3tAtgygsrh4A6yEH0TS Yn4DzOFfrfXs2bNLly7jxo1r3bp1jRo1UlNTjemdB6dPnz5x4kTVt1OVcDphwoSkpCSP/als 97xFwp07d/7mN7/xr3v+qTCcVvbQXgy6R+cQAjWNywhcvHix+nTbtm0mnzcAKi7eAFgV8xtg Dr/D6bx585TlAQMGxMXFBb5nXgwfPnz27NlV305VwqmWS38q2z1vkVD61r9//6p3r+o9UVX2 0MYGtdQ5BMIpYD1cvAGwKuY3wBxVD6czZ86MioqShYSEhOXLl0+fPl0yzpUrVy5evDh69GhZ 7tChQ0ZGhrJyVlbWoEGDpFHecuHCBaXR45qytRUrVixatEjW7Nu37/79+6Xx1VdfrVevnqzZ vn37LVu2uPTK48aHDRu2YcMGZXn9+vUjR45UliWcLly48LnnngsPD2/btm1aWpp2vy+++GKL Fi26d++ek5Mjb2/Xrt29996bnp6urpOcnOzeH/fueTy0/Px86Ubjxo27des2Z84c90j41ltv yat169aV7axZs0ZaCgoKZKfS1WbNmk2ePFn9K06Xc+5L57W89UQ2EhMT06RJk4EDB3o78+7r uBxC/aCa2kNw6eqaoAe8HVGlDkEnnFZqsGn75r4XAL7g4g2AVTG/AeaoYjg9evRogwYNnnrq KWd53AsLC1uyZIkEitLSUsksU6dOlUv9lStXdu7cWXmjxExJAWVlZT/++OPNmzeVRo9rytaa N2/+7LPPfvvtt5ImRo0aJY1FRUWDBw+eMWOGRIzi4mKXXnnceKdOnZQgKZKSku6//351+xER Ea+//vo333wzZcqU0NDQkpISpV3i0iuvvCIbefDBByW3Pv74499///0f/vAHOWr1vcpdV5f+ uHfP46E98sgjcXFxJ06cOHPmjGRn93D6008/JSYmPvTQQ7Kd69evS4tsNjY29nC5AQMGDBky RO2J9pz70nktbz1JSUk5ePCgHEJ8fPz48eM9nnn3dVwOYWhQM+0huHS1S1BDb0dUqUPQCaeV GmzavrnvBYAvuHgDYFXMb4A5/A6nEgo6duwYHBw8ZsyYq1evOsuv8KdNm6ascPz48aCgoNTU VIke2dnZISEheXl50v7www8raUjdlLc1ZWsTJ05U1nnnnXciIyOVZZ0vl7pv3KkbTl944QVl uaCgQPqwb98+pX3mzJlKu6zQrVs3Ja1s3bq1Tp066nvVrwTrfK3X46GdOnVKGiVDKet4+zLt n/70J4lsynJubq68Rb1TnJaWJk9Pnjzpcs597LzKl56sWrUqOjra45F6XEdrdFAL9RBcuqp/ RL4fglM3nFZqsGlPIwD/cPEGWAk/iKTF/AaYw+9wOnbs2MzMzHPnzqmN2siWkZEhKaBPnz4P /mzv3r3SLklh0KBBNWvWnDt37o0bN3TW1G5tw4YNERERyrJOOHXfuFM3nGr/5rRp06ZvvPGG S/uCBQtiY2OV5fT09MqGU4+Htnv3bmlUz5sv4VTZjvqWM2fOyNM9e/a4H4UvnVfp9GTz5s29 evV6oFyrVq08HqnHdbTcw6nL8KjwiCo8BNG+ffuXX35ZfSoZVuKqsuzfYAPgNy7eACuhZrWY 3wBzVP1vTlXaK/xjx45JCtixY4fHt0sMCQsLe/PNN3XW9COcum/cWR5Oly9friy/+OKLHsNp fn6+9EHSmTOg4dTjoeXl5QUHByt3aZ2+hdMjR47Idj799FPl6fbt2+Xp0aNHnVULp956kpOT I4Fu586dsrxu3TqP4dTbOlo64dTHI/IlnGq/EizWrl0rkVO7QmUHGwC/cfEGWAk1q8X8BpjD oHAqJFb0799f+VLltWvXlK/+ZmZmOhyOsrKyXr16rVixQmdNb+E0MTHR22/Aetz4mDFjJk6c WFxcvH79+oYNG2rD6cCBAwsLC0tKShYvXhwaGuq+X1/CqUt/XJ56PLTu3bsnJCRcunTpwIED Xbt2rTCclpaWylvi4+Pl7dLhcePG9ejRQw7T/ZxXNtl57ElWVpYEz9zcXEmvkyZNUrunPTRv 62jphFM5otZB9So8Il8O4bXXXqtfv77031ket6WH8+fPV17yb7AB8BsXb4CVULNazG+AOYwL p5IUhg4dGhIS0qZNm/DwcOVLm+3atZMgEx0dPWzYMOV3cryt6S2cHjp0SDYSFRWl3LbT8rjx Xbt2tWzZslatWqNGjZIgow2nEyZMuOeee2TLYWFh6l28yoZTl/64PPV4aNu2bWvQoIE0du7c OTk5ucJw6iy/UynxTcK1BLHevXsrNxndz3llk523nsi5ql27dosWLdasWSOxXfm9I5dD87iO lk44FcuDulR4RL4cgnzQkm2DgoJat24teXngwIHqD//6N9gA+I2LN8BKqFkt5jfAHEbXWlFR 0fnz57UtV8v5sqaOs2fPevxVVY8bLykpKSwsdGm8cuXKzZs3y8rKZFPKPbuqcOmPy1P3Q3M4 HL4frKqgoMD9QKrIW09kX8ohXCuntmsPzds6Cl+GVqCOSLaTnZ2t/QtoRUAGGwBVcb5ewXLx BlgJP4ikxfwGmINag0EYWoD1SOXu/O3kc//c5+1V/fca0ykAMBzzG2AOag0GYWgB1iOVK48P avTe1KBf9qzXXW6kUvUArIr5DTAHtQaDMLQA61HCqfr4oEYv7Y1Uqh6AVTG/Aeag1mAQhhZg PS7h1OVGKlUPwKqY3wBzVFhrPHjw4MGDh4+PUx9+5t9/bgBUN/wgkpb+DMb8BgQKtQaDMLQA 63GJoh93mvj56Hn/7Dg+ve3ow4vXU/WAlVCzWsxvgDmoNRiEoQVYj5JJN9X/XeaQ5zIfTUxp FJs19oXzn+wvc5Q4qXrAWqhZLeY3wBzUGgzC0AKsRypXe6uUX+sFLIya1WJ+A8xBrcEgDC3A eqRytbdK3V/Vf69h/QIQeNSsFvMbYA5qDQZhaAHW43Kr1AVVD1gJP4ikxfwGmINag0EYWoDd UPUArIr5DTAHtQaDMLQAu6HqAVgV8xtgDmoNBmFoAXZD1QOwKuY3wBzUGgzC0ALshqoHYFXM b4A5qDUYhKEF2A1VD1gJP4ikxfwGmINag0EYWoDdUPWAlVCzWsxvgDmoNRiEoQXYDVUPWAk1 q8X8BpiDWoNBGFqA3VD1gJVQs1rMb4A5qDUYhKEF2A1VD1gJNavF/AaYg1qDQRhagN1Q9YCV 8INIWsxvgDmoNRiEoQXYDVUPwKqY3wBzUGswCEMLsBuqHoBVMb8B5qDWYBCGFmA3VD0Aq2J+ A8xBrcEgDC3AbqpJ1V+4cOHSpUuG7qKsrOzWrVuG7sIEDoejtLT01+5FBQLVSYM+MhMGG6qJ ajK/AZZHrcEgDC3Abvyr+h07duzatculMTU1NScnx5edpqenZ2dnK8s3b94cPHhwmzZtIiIi jhw54svb/bNp06a7777buO37Li8vb/Xq1efPn/fjvf369XvppZfc29PS0jIyMrQtcpK///57 nU198803X375pWmdvHHjxmo3586d09lOwD8ycwbbP/7xj4MHD6pPT5069fe//92gfbnjB5G0 uKoBzEGtwSAMLcBu/Kv65cuXy+W99u5YQUFBrVq1Tpw44ctOJ0yYkJSUpCzv3LnzN7/5ja/d rYJKJZ3Tp0/7eCx+WLBgQVBQ0MKFC/3oibdw2rNnzzp16hw7dkxt+d3vfrdmzRqdLY8bNy4l JcW0Tl69enWKxgMPPCDbV/8fhUcVfmSV/ZjMGWytW7devHix+nTbtm3mjHAF/6XW4qoGMAe1 BoMwtAC78a/q8/Pz77jjjh07dqgtb7311sMPP+xHByTF9O/f3483Vlalwunw4cNnz55tRDcc Dkfz5s3bt28fGRnpy3dfXXqiE05DQkLk1bKyMqVFP5zeunWradOmRUVFZnZSdenSpZYtW06a NEl/sxV+ZJX9mMwZbITT6oOrGsAc1BoMwtAC7Mbvqh89evSECRPUp71791ai0MWLF+UlyRQd OnRQv2iakJCwfPny6dOnS/uVK1fkaXJysrM80jZu3Lhu3bqSg+TtTzzxxIIFC9RtPv/880uX LnXZ74oVK2JiYpo0aTJw4MD9+/er25f2RYsWRUVF9e3bV22XED1y5EjZRbdu3ebMmeMx6WRl ZQ0aNEhekvdeuHBBWl599dV69epJi/Rqy5YtzvL7wrKL8PDwZs2aTZ48Wf2LRZfj8njsLlJT UyUVfvnll0FBQR9//LHaPmzYsA0bNijL69evl2577ImS+9yPVMLp//t//69mzZpvv/220qIf Tj/77LPBgwd7e9WgTqomTpwosbewsNB9194+MvfP3X2/HseGymWwOd0+Pp1PWbb84osvtmjR onv37jk5OXIS2rVrd++996anp7sfgk44dR9sTt9Kxtsn5Y7/UmtxVQOYg1qDQRhagN34XfVb t26tXbu2ki/kcl2WL1++LMuSC6ZOnSqX0ytXruzcubOysqSVsLCwJUuWyJqlpaXqnbWffvop MTHxoYcekuvz69evS95p1KjRjRs35CXZmkSPQ4cOuew3JSXl4MGDxcXF8fHx48ePV7ffvHnz Z5999ttvv5Xr/FGjRintjzzySFxc3IkTJ86cOSPBymM4lfQkKaCsrOzHH3+8efOmtBQVFUlw mzFjhvRKdiQt8jQ2NvZwuQEDBgwZMsTjcXk8dhdDhw6dN2+eLPTo0WPMmDFqe6dOnZTALpKS ku6//36PPfF2pBJO33//fYn2DRo0OH36tLOicPrcc8+puzOtk4oPPvggODj4k08+8bhrbx+Z ++fuvl+PY0PlMticbh+fzqcscfWVV16REfLggw+2bdv28ccf//777//whz/IaXc/BJ1w6j7Y nL6VjLdPyh3/pdbiqgYwB7UGgzC0ALvxu+odDkd4ePiqVatk+c9//vPvf/97WTh+/HhQUFBq aqpc3mdnZ4eEhOTl5TnLr7SnTZumvlf7tc8//elPEgSUZYkPkq0kZMmyhCC5ktfpm+w6Ojpa 3eDEiROV5XfeeScyMtJZ/kM00hmJBkq7t++IPvzww0oa0jZqvy+am5sr21HuzTnLf3pInp48 edLluLwdu5a8S9qPHj0qy6tXr77jjjvU22cec5/T0zdm3Y/U+XM4lVx27733Pvroo86Kwqkk LG9/rWlcJ8W5c+caN24sudXjrn35yLSfu7ev9WrX0dIONucvPz79T3nmzJlK+wsvvNCtWzcl LW7durVOnTrue9EJp+6DzceS8R0/iKTFVQ1gDmoNBmFoAXZTlaqfM2eOZKKysjIJAspVfUZG hlxp9+nT58Gf7d271+n2R4jewql4+umnY2NjZUFC1nvvvee+082bN/fq1euBcq1atXLf4IYN GyIiImRh9+7d0hn192C9hVNJCoMGDapZs+bcuXOVm7bOX6Ye5aDU7Zw5c0ae7tmzx2W/3o5d S1Zu1KjRs+WefPJJWX/ZsmXKS77nPvcjdf4cTmXhiy++qFGjxsaNG3XCqeQgbzd2De2kGDJk yD333KPcuHSn85F5/Nxd9utxHS33cOry8VX4KS9YsEAZn87y30P2GE7bt2//8ssvq08lw0pc VZbdB5uPJQP/cFUDmINag0EYWoDdVKXqv/32W7mu/u///u8mTZoo/x7lsWPHpEX7Q0kK38Pp gQMHgoODJZZKKlGjoionJ0cu7Hfu3CnL69at0w+neXl5sql9+/Yp7fq/riMxJCws7M0331Se alPPkSNH5KA+/fRT5en27dvlqXJjUbtfb8euKikpkY798Y9/XPmzuLi4Dh06KK9K7lu+fLmy /OKLL/odToWsL5/Ifffd5y2c/td//Zf2b3tN6+Tbb78tH5/+v1/j8SPz9rlr9+ttHS2dcOrj p+xLONV+JVisXbtWIqd2Be1g87Fk4B+uagBzUGswCEMLsJsqVn2PHj3k+vyZZ55RW+TSvX// /soXF69du3b16lVnZcKp6NKli2xz1qxZ7rvLysqSAJKbmyspZtKkSWrY9JaGunfvnpCQcOnS Jcm8Xbt29RhOMzMzHQ5HWVlZr169VqxYoTQmJiaqP+taWloq24mPj5djKSwsHDdunBy18qO4 Lsfl8dhVkmUkM6p/aSiUXxxS7pSNGTNm4sSJxcXF69evb9iwoZr7tD3ROVJtOL1+/Xrbtm1l y97CaUxMjBoAXRjXSUlh9erVkzUva0gWdumAx4/M2+eu3a+3dbR0wqmPn7Iv4fS1116rX7++ 9N9ZHrelh/Pnz1de8jjYfCmZVatWab8qDB9xVQOYg1qDQRhagN1UsepXrlwpyeWLL75QW+Rq fOjQoSEhIW3atAkPD3f/YqSzonAqF+2yzcOHD3vc46hRo2rXrt2iRQtJXqGhocrv3niLbNu2 bWvQoIF0pnPnzsnJyR4DS7t27aQ9Ojp62LBh6tdNDx06JO1RUVHKnbicnByJKhLHJHT07t1b uaHmflwej101YsSIOXPmuOxd8tfkyZNlYdeuXS1btqxVq5YcoKQbNfe59MSXcOosvzcXHBzs MZwWFBQ0b97c22/sGNfJ1atXB7nZvXu3y768fWQeP3eX/XpcR0snnDp9+5R9CacyiiTbytG1 bt1a8vLAgQPVH/71ONh8KZlBgwZ17NjRfV/Qx1UNYA5qDQZhaAF2Y1DVFxUVnT9/3r/3Llu2 LCYmRmcFiVdKtrpWTn9rDoejwp5cLefefvbsWW2Ik/16/NdPXPh97CUlJd6279KTqpC0+MQT T/j9dhM66e0j8/a5a/dbqbHhkY+fsi/byc7OVv+IVeVtsFWlZLT4QSQtrmoAc1BrMAhDC7Cb 6lb1EkwiIyM3btxo8n7tY9asWVu3bv21ewGj8F9qreo2vwFWRa3BIAwtwG6qW9WfPHly4cKF yj9bCaCy+C+1VnWb3wCrotZgEIYWYDdUPWAl1KwW8xtgDmoNBmFoAXZD1QNWQs1qMb8B5qDW YBCGFmA3VD1gJfwgkhbzG2AOag0GYWgBdlNh1VeTh2knBIBlcFUDmINag0EYWoDd3BZVX026 AeD2clvMb4AFUGswCEMLsJvbouqrSTcA3F5ui/kNsABqDQZhaAF2c1tUfTXpBoDby20xvwEW QK3BIAwtwG5ui6qvJt0Aqj9+EEnrtpjfAAug1mAQhhZgN7dF1VeTbgDVH8WidVvMb4AFUGsw CEMLsJvbouqrSTeA6o9i0bot5jfAAqg1GIShBdjNbVH11aQbQPVHsWjdFvMbYAHUGgzC0ALs pipVX5xfGOju+NMNACqKRYurGsAc1BoMwtAC7MaPqncUXf9mwcrUsDjT5gQmH8BH/CCSFlc1 gDmoNRiEoQXYTaWq/sKurz6LmfZBSB9pVx4G985zNwDAF1zVAOag1mAQhhZgN75UvfZWqcuj OnQSADziqgYwB7UGgzC0ALupsOpdbpUSTgHcLriqAcxBrcEgDC3AbnTq+tzH+7xlUvMfZp4T ANbAVQ1gDmoNBmFoAXZTYdX/kPT3be1/n9o0bnPEcDIjUM3xg0haXNUA5qDWYBCGFmA3Plb9 hV3Z+5945cO6MeltR39YJ4ZwClRPVKUWVzWAOag1GIShBdhNpaq+OL/Q5Uaqwb0DUDlUpRZX NYA5qDUYhKEF2I1/Va/cSGVOAKobqlKLqxrAHNQaDMLQAuymKlVfnF8Y6O4AqBL+S63FVQ1g DmoNBmFoAXZD1QNWwg8iaTG/Aeag1mAQhhZgN1Q9AKtifgPMQa3BIAwtwG6oegBWxfwGmINa g0EYWoDdUPUArIr5DTAHtQaDMLQAu6HqAVgV8xtgDmoNBmFoAXZD1QNWwg8iaTG/Aeag1mAQ hhZgN1Q9YCXUrBbzG2AOag0GYWgBdkPVA1ZCzWoxvwHmoNZgEIYWYDdUPWAl1KwW8xtgDmoN BmFoAXZD1QNWQs1qMb8B5qDWYBCGFmA3VD1gJfwgkhbzG2AOag0GYWgBdkPVA7Aq5jfAHCbX WllZ2a1btwK7TQtwOBylpaXW2IuqOk/jjEPACNW56gGgKpjfAHP4V2tpaWmry33yySc3b970 fXebNm26++67leX09PTs7Gzf32sCneOSOLN169aXX355xowZS5cuTUlJuXz5cqU2rnO8/fr1 e+mll3zZSF5ennTv/Pnzldp1ZffiUWU/L4+DR91I1afxqnwi2nEIIFC4eANgVcxvgDn8q7We PXt26dJl3LhxUVFR9evX//zzz33cnTYUTJgwISkpqVK9dXf69OkTJ05U9iVvvB1XQUFBbGxs RETE/Pnz33rrrcTExPvuuy8jI6NSG9cer0vffI+NCxYsCAoKWrhwoS8r+70Xjyr7eSmDx6UP 6kaqOI1X8RMhnAJG4OINgFUxvwHm8Duczps3T1l+4IEHJHH4uLuAh4Lhw4fPnj27si954+24 pk2bFh0dffHiRe3KZWVlle+v5775GBsdDkfz5s3bt28fGRnpyxd0/dtLoCiDx9unUMVpvIqf COEUMAIXb4CV8INIWsxvgDmqHk4lfYwYMUJZlrAwevRouezv0KGDehsrPz9/5MiRjRs37tat 25w5c9RQkJCQkJycrC4vX758+vTp8uqVK1c8bqegoGDKlCktW7a86667ZFPS8uqrr9arV09W k7y2ZcsWbQ/dX5K3y17Cw8ObNWs2efLkS5cu+XhcsmaNGjVWr65gih41atTGjRuV5ZkzZz72 2GPKcmZm5tixY7XH6943JTYuWrQoKiqqb9+++/fv97iL1NTUpk2bfvnll0FBQR9//LHaPmzY sA0bNijL69evl7Ndqb14OzMuH4raf8nI7X/pL3/5i7SvWLEiJiamSZMmAwcOlI3L4HHvg7oR eVVnv7IpnbOh/4l426y3cehxsAHwAxdvgJVQs1rMb4A5qhJO5apeMtGdd9750UcfKe2SSqZO nSpBZuXKlZ07d1YaH3nkkbi4uBMnTpw5c0ZilBoKtDfyZDksLGzJkiU5OTmlpaUetyONbdq0 2bZt282bN7/77jtpKSoqGjx48IwZM6QnxcXF2h66vyRPY2NjD5cbMGDAkCFDfDyuL774QsLg v/71L/0zKW9UAql0LzQ0NCQkRIlF0gfJWdrjde+bvNS8efNnn33222+/laAkOdfjLoYOHapk 5x49eowZM0Zt79Spkxrzk5KS7r///krtxduZcflQtJ/XxZ+9/fbbcqJ27doljSkpKQcPHpR9 xcfHjx8/XgaPxz4oG5FXdfarfzb0PxFvm/U2Dj0ONgB+4OINsBJqVov5DTCH3+G0Vq1awcHB khF27typNB4/flyepqamSijIzs6WdJaXl3fq1ClplESprKP9OqVLOJ02bZrOdpRG97959PFr vbm5ufJ29e5qWlqaPD158qQvx7V161Z5evr0aZ0TJXbv3n3XXXfdunVr+/btEoi6du0qByuZ rlmzZkeOHHE5Xvcv3E6cOFFZfueddyIjI923L72VU3H06FFZXr169R133HHhwgXlJY/h1Me9 6JwZ7Yfi9PSt4AMHDtStW3fdunUuXV21alV0dLTHr/WqG1kR1FVnv/pnQ+cT8XY43sahx8Hm vlkAvuDiDbASalaL+Q0wh9/hNDExUcKRZJBnnnlGaczIyJDr/D59+jz4s71790pkk8Zz584p 6+iEU3XZ43aUxq+//tqlJz6GU+XtajfOnDkjT/fs2ePLcR06dEhWlj7onChn+ZddGzZsKDua MWPG22+//fzzzz/99NOZmZn33Xef+zHq/DXohg0bIiIi3LcvKzRq1OjZck8++aR0admyZcpL vodT973onBmXNOryVBKf5O4XX3xRbdm8eXOvXr0eKNeqVSv9cPrnoA6+7Nfj2dD5RLwdjrdx 6HGwuW8WgC+4eAOshJrVYn4DzFHFvzmVa/4aNWqkp6fL8rFjx+Q6f8eOHdo18/LygoOD9+3b pzz1JZx63I7SuGrVKpee+BhOjxw5Im//9NNPlafbt2+Xp8pdyAqPq7i4ODQ09KmnnvK4F62x Y8fOmTMnMjJSQpDsq3Xr1rNmzfJ4jJUNpyUlJdL4xz/+ceXP4uLiOnTooLwq4XT58uXKsqTF SoVTnTOjE06vXLkiOx0/frz6G0Q5OTk1a9ZUbjevW7euwnD6elAXX/br8WzofCLeDsfbOPQ4 2AD4h4s3wEr4QSQt5jfAHFX/QSTJX2FhYcqXIWNjY/v376/80yHXrl27evWqLHTv3j0hIeHS pUsHDhzo2rVrheHU23akpXPnzl999ZUs//DDD8rP1SYmJkq7x05qX5KVpRvx8fGyqcLCwnHj xvXo0cP9x129HZeE4pCQkL/+9a8SEpWtbd26Vfrg8va1a9c2bNiwd+/ezvIAVbduXXl66NAh 92N06XaFcUxicpMmTbT/9Krys0jKbb4xY8ZMnDhR9rh+/XrZoxpOfdmLzpnxFk4dDodE4z59 +ty4cUN9NSsrS8Jpbm6unLFJkybJp6wMHm99+HtQT1/26+0+srdPROdwvI1Dj4MNgB+4eANg VcxvgDmqHk6vX7/evn37wYMHSwSQYDJ06FBJDW3atAkPD1e+pblt27YGDRpIo0TL5ORkX8Kp x+2cPXtWVpNE1rhx48jISOUHdiT6tWvXLioqSv0TUZXLSzk5OZJTJLvVr19f8qP7bVOd45Kn 7777bmhoaJ06de655x6JS8OGDXMPp+fOnQsODl68eLHydMiQIbKy+qr2GF36VmEcGzFixJw5 c1waJWFNnjxZFnbt2tWyZctatWqNGjXqtddeU8Opj3vxdma8hVPl94gkejf6mdIN2Xvt2rVb tGixZs0aOVd9ghrr9EGGli/79RZOdT4Rb5v1Ng49DjYAfuDiDYBVMb8B5jCi1oqKis6fP69t cTgcLi3+bUf8+9//LiwsdGmU3Ort3/10eamgoMD97b47ffr04cOHq/IvnGrpdLuySkpKvB2X j3up4plRN6Ls69q1a+8F/VanD+rQMugT8bhZnXHocbABqBQu3gBYFfMbYI6q1FpxflWzDCyM aRywG6oegFUxvwHm8KPWHEXXv1mwMjUsjkqEDqZxwG6oesBK+EEkLeY3wByVqrULu776LGba ByF9pF15GNw73MaYxgG7oeoBK6FmtZjfAHP4UmvaW6UuD7O6idsP0zhgN1Q9YCXUrBbzG2CO CmvN5VYp4RQ+YhoH7IaqB6yEmtVifgPMoVNN5z7e5y2T8uDBgwcPHu4P//5zA6Aaoma1mN8A c1RYaz8k/X1b+9+nNo3bHDG8UtchsDmmccBuqHrASvhBJC3mN8AcPtbahV3Z+5945cO6Melt R39YJ4ZwigoxjQN2Q9UDsCrmN8Aclaq14vxClxupBvcOtzGmccBuqHoAVsX8BpjDv1pTbqRS idDBNA7YDVUPwKqY3wBzVKXWivMLA90dWAfTOGA3VD0Aq2J+A8xBrcEgDC3Abqh6wEr4QSQt 5jfAHNQaDMLQAuyGqgeshJrVYn4DzEGtwSAMLcBuqHrASqhZLeY3wBzUGgzC0ALshqoHrISa 1WJ+A8xBrcEgDC3Abqh6wEqoWS3mN8Ac1BoMwtAC7IaqB6yEH0TSYn4DzEGtwSAMLcBuqHoA VsX8BpiDWoNBGFqA3VD1AKyK+Q0wB7UGgzC0ALuh6gFYFfMbYA5qDQZhaAF2Q9UDsCrmN8Ac 1BoMwtAC7IaqB6yEH0TSYn4DzEGtwSAMLcBuqHrASqhZLeY3wBzUGgzC0ALshqoHrISa1WJ+ A8xhQq05HI7S0lL35V9RWVnZrVu3fu1eWBzTOGA3VD1gJdSsFvMbYA7/ai0tLW21xr/+9S+d jfTr1++ll15yX646tRuffPLJzZs3fX/jpk2b7r77bmU5PT09Ozs7UF0KCJ3jkli9devWl19+ ecaMGUuXLk1JSbl8+fKv1U99TOOA3VD1gJVQs1rMb4A5/Ku1nj17durUacrPPv74Y52NGBdO pRtdunQZN25cVFRU/fr1P//8cx/fqA2nEyZMSEpKqmJPTp8+feLEicq+5I234yooKIiNjY2I iJg/f/5bb72VmJh43333ZWRkVLHzBmEaB+yGqgeshB9E0mJ+A8zhdzidM2eOj7swNJzOmzdP WX7ggQckZvr4Rm04DYjhw4fPnj27si954+24pk2bFh0dffHiRe3KZWVlle+vGZjGAbuh6gFY FfMbYI4AhtOCgoKEhITw8PBmzZpNnjz50qVLSru3cOpx/VGjRm3cuFFZYebMmY899piynJmZ OXbsWPduqCFOMuCIESOUZYlvo0ePlvjZoUMH9cZifn7+yJEjGzdu3K1bN+m8Gk6lD8nJyery 8uXLp0+fLq9euXLF43ak21OmTGnZsuVdd90lm5KWV199tV69erJa+/btt2zZou2h+0vezlKF xyVr1qhRY/Xq2+Z/YzKNA3ZD1QOwKuY3wBx+h9P4+Pgvyql/cDp48ODY2NjD5QYMGDBkyBCl 3Vs49bi+hDIlkN68eTM0NDQkJESJbzNmzFi0aJF7N2R9iZAbNmy48847P/roI6V94MCBU6dO lXS5cuXKzp07K42PPPJIXFzciRMnzpw5M2zYMDWcunQvLCxsyZIlOTk5paWlHrcjjW3atNm2 bZv08LvvvpOWoqIiORbpofSkuLhY20P3l7ydpQqPS051UFCQ/p/3VitM44DdUPUArIr5DTCH 3+G0ZcuWMeUSEhKkJTc3V6KTet8wLS1Nnp48edLpJZx6W3/37t133XXXrVu3tm/fLsGta9eu mzZtkpzYrFmzI0eOuHejVq1awcHB8t6dO3cqjcePH5enqampkv6ys7Ml3ubl5Z06dUoaJVEq 62i/1uvSvWnTpulsR2l0/xtVH7/Wq3OWKjyurVu3ytPTp0973Es1xDQO2A1VD8CqmN8AcwTq a70ZGRkSnc6dO6c8PXPmjDzds2eP00s49ba+w+Fo2LChvDpjxoy33377+eeff/rppzMzM++7 7z6P3UhMTLxw4UJ0dPQzzzyj7UmfPn0e/NnevXsl82p3pxNO1WWP21Eav/76a5ee+BhOdc5S hcd16NAhWVn64HEv1RDTOGA3VD1gJfwgkhbzG2COQIXTI0eOSHT69NNPlafbt2+Xp0ePHnV6 SX86648dO1Y2HhkZKSFOVmjduvWsWbM8/oyS+reZkj1r1KiRnp4uy8eOHZNN7dixQ7tmXl5e cHDwvn37lKe+hFOP21EaV61a5dITH8OpzlFXeFzFxcWhoaFPPfWUx71UQ0zjgN1Q9YCVULNa zG+AOQIVTktLS7t37x4fH3/16tXCwsJx48b16NFD+SFZj+lPZ/21a9c2bNiwd+/ezvJEVrdu XXl66NAhj91QfzhIAmxYWJiEUFmOjY3t37+/8g+4XLt2TXYhC7K7hISES5cuHThwoGvXrhWG U2/bkZbOnTt/9dVXsvzDDz/IgchCYmKitHs8V9qXdI7al+OSUBwSEvLXv/61pKRE2drWrVul Dx73+6tjGgfshqoHrISa1WJ+A8wRwF/rzcnJkaglQbJ+/foSLdUbgt7Sn7f1z507FxwcvHjx YuXpkCFD7rnnHm/dUEPc9evX27dvP3jwYMl6EuWGDh0qOa5Nmzbh4eHK92a3bdvWoEEDaZRo mZyc7Es49bids2fPympBQUGNGzeOjIxUfuZIsnO7du2ioqLUPxFVubzk7ah9OS55+u6774aG htapU0fOSURExLBhwwinAKoJqh6wEmpWi/kNMEfAa62goKCwsNC49X1XVFR0/vx5bYvD4XBp 8W874t///rd7tyW3KjdS3bm8VMWjPn369OHDh3/1f+G0OF/vEJjGAbuh6gEroWa1mN8Ac1Br 8JsMj52/nXzun/u8var/XmM6BeBXQ9UDVsIPImkxvwHmoNbgNxke8vigRu9NDfplz3rd5UYq QwuwG6oegFUxvwHmoNbgNyWcqo8PavTS3khlaAF2Q9UDsCrmN8Ac1Br85hJOXW6kMrQAu6Hq AVgV8xtgjgprjQcPvx+nPvzMv4EH4HakX9dUPYDbF/MbYA5qDX5ziaIfd5r4+eh5/+w4Pr3t 6MOL1zO0ALuh6gEr4QeRtJjfAHNQa/Cbkkk31f9d5pDnMh9NTGkUmzX2hfOf7C9zlDgZWoD9 UPWAlVCzWsxvgDmoNfhNhof2Vim/1gvYHFUPWAk1q8X8BpiDWoPfZHhob5W6v6r/XsP6BeDX QdUDVkLNajG/Aeag1uA3l1ulLhhagN1Q9YCVULNazG+AOag1GIShBdgNVQ9YCT+IpMX8BpiD WoNBGFqA3VD1AKyK+Q0wB7UGgzC0ALuh6gFYFfMbYA5qDQZhaAF2Q9UDsCrmN8Ac1BoMwtAC 7IaqB2BVzG+AOag1GIShBdgNVQ9YCT+IpMX8BpiDWoNBGFqA3VD1gJVQs1rMb4A5qDUYhKEF 2A1VD1gJNavF/AaYg1qDQRhagN1Q9YCVULNazG+AOag1GIShBdgNVQ9YCTWrxfwGmINag0EY WoDdUPWAlfCDSFrMb4A5qDUYhKEF2A1VD8CqmN8Ac1BrMAhDC7Abqh6AVTG/AeaoVrXmcDhK S0vN3COMU62GFgATUPUArIr5DTCHf7WWlpa2utzf/va3zz//PD8/X/tqenp6dna2H53p16/f Sy+95McbXTq2Zs2alJSU3NzcqmwKVcQ0DtgNVQ/AqpjfAHP4V2s9e/bs1KnTk08++eijj3bs 2LFWrVorVqxQX50wYUJSUpIfnal6OJWOdenSZdy4ca1bt65Ro0ZqampVtoaqYBoH7IaqB6yE H0TSYn4DzOF3OJ0zZ476dNWqVUFBQe+//34VOxOQcDpv3jxlecCAAXFxcVXsEvzGNA7YDVUP WAk1q8X8BpgjIOFUjBgxokuXLspyQkJCcnKyspyVlTVo0KC77747KirqwoUL6gpvvPHGc889 Fx4e3rZt27S0NKVdG05XrFgRExPTpEmTgQMH7t+/X1qeeOKJBQsWqHt8/vnnly5d6t4xNZzO nDlTdqrsbvny5dOnT5duXLlypaCgQFpk182aNZs8efKlS5eU9c+fPz9y5MjGjRt369bt5Zdf 7tGjh9pb7dsvXrw4evRoWe7QoUNGRobOYXpstA+mccBuqHrASqhZLeY3wByBCqdJSUl33nln SUmJ85cZs2/fvpLsysrKfvzxx5s3byqNskJERMTrr7/+zTffTJkyJTQ01P2NKSkpBw8eLC4u jo+PHz9+vLSsX7++UaNGN27ckOXLly/Xq1fv0KFD7h1TwunRo0cbNGjw1FNPKZsNCwtbsmRJ Tk5OaWnp4MGDY2NjD5cbMGDAkCFD1F71799f3ihB8rHHHpNQqbZr3y5heerUqZJSV65c2blz Z53D9NhoH0zjgN1Q9YCVULNazG+AOQIVTteuXVujRg3Jks5fZsyHH344Li7uxIkT2pVlhRde eEFZLigoCAoK2rdvn9PL13pXrVoVHR0tCz/99JPkTeXLw8nJyRL9PHasdevWHTt2DA4OHjNm zNWrV5XNTps2TVkhNzdXdrdlyxblaVpamjw9efKkZFJZ2Lp1q9K+adMmbThV3378+HFZLTU1 VYJtdnZ2SEhIXl6et8P02GgfTOOA3VD1gJVQs1rMb4A5AhVO//znPysR0vnLjCnRbNCgQTVr 1pw7d65y09PpFkKbNm36xhtvuLRv3ry5V69eD5Rr1aqV0vj000/HxsbKwr333vvee+957NjY sWMzMzPPnTunNmo3m5GRIelSffXMmTPydM+ePfIWbbtLOHV5e58+fR782d69e70dpsdG+2Aa B+yGqgeshB9E0mJ+A8wRkHB669YtSaazZs1SnrrfAJX0FxYW9uabb7qvkJ+fL3FPwqC2PScn RzLdzp07ZXndunVqOD1w4EBwcLDEUkmOHuOe9m9OVdrdHTlyRHb36aefKk+3b98uT48ePXr9 +vU6deooe3SW3671GE6PHTsm6+/YscPjaXE5TJ1GO2AaB+yGqgdgVcxvgDmqGE4l02VnZ8fF xUk4vXz5svKqNs1lZmY6HI6ysrJevXqp/9yMrDBw4MDCwsKSkpLFixeHhoaq379V3piVlSXh NDc3Ny8vb9KkSWpOFF26dJEUqQZh947ph9PS0tLu3bvHx8fLHqUD48aN69Gjh3RPXho+fPj9 99+/cePGhQsXdurUqUmTJu5vF7Gxsf3791e+rHvt2jWl5x4P02OjfTCNA3ZD1QOwKuY3wBx+ h9OgoKDg4GDJiV27dp09e7aS0RTaNNeuXTuJlhJdhw0bJklWXeHRRx+95557IiIiwsLC1PuY 2jeOGjWqdu3aLVq0WLNmjaRX5TeRnOW/4iu7Pnz4sLeO6YdTZ/ltWQmkDRs2rF+/fu/evY8e Paq0SxBOSEiQlvnz57/77rvKL/26v11WGzp0aEhISJs2bcLDw/fs2ePtMD022gfTOGA3VD0A q2J+A8xhQq1dLadtUeJeWVnZ2bNnlbuWHhUUFJSWljrLb1AKpXHZsmUxMTFV75VsvLCw0Nur jz/+uP6/kVpUVHT+/Hlti/themu0CaZxwG6oegBWxfwGmKMqtVac7zXc6fP4q7y+cDgckZGR Gzdu9G+/+pYuXTp37tz333//P/7jP+rVq6fez4V/mMYBu6HqASvhB5G0mN8Ac/hRa46i698s WJkaFud3Ja5duzYjI8OPN548eXLhwoXKP1gTcLt37160aNGTTz45f/78r7/+2ohd2ArTOGA3 VD1gJdSsFvMbYI5K1dqFXV99FjPtg5A+0q48DO4dbmNM44DdUPWAlVCzWsxvgDl8qTXtrVKX h1ndxO2HaRywG6oesBJqVov5DTBHhbXmcquUcAofMY0DdkPVA1ZCzWoxvwHm0Kmmcx/v85ZJ efDw5eHfwANwm6LqASvhB5G0mN8Ac1RYaz8k/X1b+9+nNo3bHDG8UukDNsc0DtgNVQ/Aqpjf AHP4WGsXdmXvf+KVD+vGpLcd/WGdGMIpKsQ0DtgNVQ/AqpjfAHNUqtaK8wtdbqQa3DvcxpjG Abuh6gFYFfMbYA7/ak25kUolQgfTOGA3VD0Aq2J+A8xRlVorzi8MdHdgHUzjgN1Q9YCV8INI WsxvgDmoNRiEoQXYDVUPWAk1q8X8BpiDWoNBGFqA3VD1gJVQs1rMb4A5qDUYhKEF2A1VD1gJ NavF/AaYg1qDQRhagN1Q9YCVULNazG+AOag1GIShBdgNVQ9YCT+IpMX8BpiDWoNBGFqA3VD1 AKyK+Q0wB7UGgzC0ALuh6gFYFfMbYA5qDQZhaAF2Q9UDsCrmN8Ac1BoMwtAC7IaqB2BVzG+A Oag1GIShBdgNVQ9YCT+IpMX8BpiDWoNBGFqA3VD1gJVQs1rMb4A5qDUYhKEF2A1VD1gJNav1 685vDoejtLTU0F0A1QTXEjAIQwuwG6oesBJqVsvH+S0tLW11ub/97W+ff/55fn6+drX09PTs 7Gw/9t6vX7+XXnrJjzeqlI6tWbMmJSUlNze3KpsCDMW1BAzC0ALshqoHrISa1fJxfuvZs2en Tp2efPLJRx99tGPHjrVq1VqxYoW62oQJE5KSkvzYe9XDqXSsS5cu48aNa926dY0aNVJTU6uy NcA4XEvAIAwtwG6oesBK+EEkLd/D6Zw5c9T2VatWBQUFvf/++1Xce0DC6bx585TlAQMGxMXF VbFLgEG4loBBGFqA3VD1AKzKv3AqRowY0aVLF2U5ISEhOTlZWc7Kyho0aNDdd98dFRV14cIF dYU33njjueeeCw8Pb9u2bVpamtKuDacrVqyIiYlp0qTJwIED9+/fLy1PPPHEggUL1D0+//zz S5cudemhNpzOnDlTdqrsbvny5dOnT5duXLlypaCgQFpk182aNZs8efKlS5eU9c+fPz9y5MjG jRt369bt5Zdf7tGjh9pb7dsvXrw4evRoWe7QoUNGRobOYXpsBBRcS8AgDC3Abqh6AFbldzhN Skq68847S0pKnL/MmH379pVkV1ZW9uOPP968eVNplBUiIiJef/31b775ZsqUKaGhoe5vTElJ OXjwYHFxcXx8/Pjx46Vl/fr1jRo1unHjhixfvny5Xr16hw4dcumhGk6PHj3aoEGDp556Stls WFjYkiVLcnJySktLBw8eHBsbe7jcgAEDhgwZovaqf//+8kYJko899piESrVd+3YJy1OnTpWU unLlys6dO+scpsdGQMG1BAzC0ALshqoHYFV+h9O1a9fWqFFDsqTzlxnz4YcfjouLO3HihHZl WeGFF15QlgsKCoKCgvbt2+f08rXeVatWRUdHy8JPP/0keVP58nBycrJEP/ceSsdat27dsWPH 4ODgMWPGXL16VdnstGnTlBVyc3Nld1u2bFGepqWlydOTJ09KJpWFrVu3Ku2bNm3ShlP17ceP H5fVUlNTJdhmZ2eHhITk5eV5O0yPjYCCawkYhKEF2A1VD8Cq/A6nf/7zn5UI6fxlxpRoNmjQ oJo1a86dO1e56el0C6FNmzZ94403XNo3b97cq1evB8q1atVKaXz66adjY2Nl4d57733vvffc eygdGzt2bGZm5rlz59RG7WYzMjIkXaqvnjlzRp7u2bNH3qJtdwmnLm/v06fPgz/bu3evt8P0 2AgouJaAQRhagN1Q9YCV8INIWv6F01u3bkkynTVrlvLU/QaopL+wsLA333zTfYX8/HyJexIG te05OTmS6Xbu3CnL69atU8PpgQMHgoODJZZKcvQY97R/c6rS7u7IkSOyu08//VR5un37dnl6 9OjR69ev16lTR9mjs/x2rcdweuzYMVl/x44dHs+Py2HqNAJcS8AgDC3Abqh6wEqoWa3KhlPJ dNnZ2XFxcRJOL1++rLyqTXOZmZkOh6OsrKxXr17qPzcjKwwcOLCwsLCkpGTx4sWhoaHq92+V N2ZlZUk4zc3NzcvLmzRpkpoTRZcuXSRFqkHYRYXhtLS0tHv37vHx8bJH6cC4ceN69Ogh3ZOX hg8ffv/992/cuHHhwoWdOnVq0qSJ+9tFbGxs//79lS/rXrt2Tem5x8P02AgouJaAQRhagN1Q 9YCVULNavofToKCg4OBgyYldu3adPXu2ktEU2jTXrl07iZYSXYcNGyZJVl3h0UcfveeeeyIi IsLCwtT7mNo3jho1qnbt2i1atFizZo2kV+U3kZzlv+Iruz58+LDHHlYYTp3lt2UlkDZs2LB+ /fq9e/c+evSo0i5BOCEhQVrmz5//7rvvKr/06/52WW3o0KEhISFt2rQJDw/fs2ePt8P02Ago uJaAQRhagN1Q9YCVULNaRsxvV8tpW5S4V1ZWdvbsWeWupUcFBQWlpaXO8huUQmlctmxZTEyM H91w33hhYaG3Vx9//HH9fyO1qKjo/Pnz2hb3w/TWCDi5loBhGFqA3VD1gJVQs1qVmt+K872G O30ef5XXFw6HIzIycuPGjf7tV9/SpUvnzp37/vvv/8d//Ee9evXU+7mAEbiWgEEYWoDdUPWA lfCDSFq+zG+OouvfLFiZGhbn93S3du3ajIwMP9548uTJhQsXKv9gTcDt3r170aJFTz755Pz5 87/++msjdgGouJaAQRhagN1Q9QCsqsL57bOYaR+E9JEF5WFaxwCL4VoCBmFoAXZD1QOwKo8z mPZWqcvD/B4C1sC1BAzC0ALshqoHYFUuM9iFXV+53ColnAIBwbUEDMLQAuyGqgdgVd5CKA8e PEx+/NqTAW5X+oOHoQVYD1UPWAk/iKRDJrQfkv6+rf3vU5vGbY4YzvUzYBCqCYHCZSpgN1Q9 YCXUrA715FzYlb3/iVc+rBuT3nb0h3ViCKdAYFFNCBQuUwG7oeoBK6FmdbicnOL8Qpcbqb9W xwCLoZoQKFymAnZD1QNWQs3q8HZylBupnDogUKgmBAqXqYDdUPWAlVCzOvT/ILc4v9C0ngDW xh+/I1C4TAXshqoHrIRrQgCAZXCZCtgNVQ8AAIBqiMtUwG6oegAAAFRDXKYCdkPVAwAAoBri MhWwG6oegE3wB7mAOag1BAqXqYDdUPWAlXBNqIMJDTAHtYZA4TIVsBuqHrASalYHJwcwB7WG QOEyFbAbqh6wEmpWBycHMAe1hkDhMhWwG6oesBJqVgcnBzAHtYZA4TIVsBuqHrASalYHf5AL mINaQ6BwmQrYDVUPWAnXhAAAy+AyFbAbqh4AAADVEJepgN1Q9QAAAKiGuEwF7IaqBwAAQDXE Zao+h8NRWlr6a/eiWigrK7t169av3QsEAFUPwCb4g1zAHNQaAiVQl6lpaWmrV69es2ZNSkpK bm5uILoWMHl5edK38+fP+/Hefv36vfTSS37vOj09PTs72++3B3AjCgmYW7duffnll2fMmLF0 6VL5sC5fvuzjezdt2nT33XcHpBv4dRFOASvhmlAHExpgDmoNgRKoy9SePXt26dJl3LhxrVu3 rlGjRmpqaiB655PTp0+fOHFCZ4UFCxYEBQUtXLjQj61VMZxOmDAhKSmpsu9y6YN/G3FXUFAQ GxsbERExf/78t956KzEx8b777svIyPDx7YRTyyCcAlZCzerg5ADmoNYQKAEMp/PmzVOWBwwY EBcXV9We+Wz48OGzZ8/29qrD4WjevHn79u0jIyN9+YKuy9aqGE79o39Efps2bVp0dPTFixe1 jWVlZT6+nXBqGYRTwEqoWR2cHMAc1BoCxYhwOnPmzKioKFlISEhYvnz59OnTJdRcuXJFYtHo 0aNluUOHDuoNu6ysrEGDBkmjvOXChQtKo8c1ZWsrVqxYtGiRrNm3b9/9+/dL46uvvlqvXj1Z U+Lnli1b3DuWmpratGnTL7/8Migo6OOPP1bbhw0btmHDBmV5/fr1I0eO9Lg1JZy67NRZfhdS +hMeHt6sWbPJkydfunRJ7aT2kOVpcnKyszwjt/+lv/zlL9IuRxQTE9OkSZOBAwd6OyJ1I/r7 dT85WrJmjRo1Vq/2/O0vb5vNz8+XM9O4ceNu3brNmTNHDacePyDcLgingJVQszo4OYA5qDUE SsDD6dGjRxs0aPDUU085y5NdWFjYkiVLcnJySktLJX9NnTpVItvKlSs7d+6svFGSlKS5srKy H3/88ebNm0qjxzVla82bN3/22We//fZbSUajRo2SxqKiosGDB8+YMUPiUnFxsXvHhg4dqnSs R48eY8aMUds7deqkJr6kpKT777/f49Y87lTIarGxsYfLDRgwYMiQIWontYesvfF68Wdvv/32 nXfeuWvXLmlMSUk5ePCg7Cs+Pn78+PHe+qBuRGe/Hvup+uKLLySe/+tf//L48Xnb7COPPBIX F3fixIkzZ85InFfDqccPCLcLwilgJdSsDv4gFzAHtYZACWA4bd26dceOHYODgyUDXr161Vme mKZNm6ascPz4cQlHqampEn+ys7NDQkLy8vKk/eGHH1bij7opb2vK1iZOnKis884770RGRirL Ol+CPXnypLxd8rIsr169+o477lBvznoMp+5b87jT3Nxc6aF6ozYtLU2eyr5cDtnp6VvBBw4c qFu37rp161y6umrVqujoaG99UDaiv1+PJ0e1detWWfn06dPuZ8nbZk+dOiUL27ZtU9rVr/V6 +4BwuyCcAlbCNSEAwDICGE7Hjh2bmZl57tw5tVEbzTIyMiTR9OnT58Gf7d27V9ollg4aNKhm zZpz5869ceOGzprarW3YsCEiIkJZ1gmnsn6jRo2eLffkk0/KZpctW6a85Hs4dd+p0kP1SM+c OSNP9+zZ43RLoy5PJfE1a9bsxRdfVFs2b97cq1evB8q1atVKvw8+7ld7clSHDh2SlZUz6cLb Znfv3q1tV8Optw8ItwvCKQAAAKohI/7mVKVNTMeOHZNEs2PHDo9vlygUFhb25ptv6qxZ2XBa UlIi6/zxj39c+bO4uLgOHToor0o4Xb58ubIsabFS4fTIkSPSw08//VRp3759uzxV7s/qhNMr V67ITsePH6/+BlFOTo6k8p07d8ryunXrKgynPu7XYzgtLi4ODQ1Vvm7twttm8/LygoOD9+3b p7Sr4VT/o0T1RzgFAABANWRaOBWxsbH9+/dXvsF77do15au/mZmZDodD8lqvXr1WrFihs6a3 /JWYmCgru3cpPT29SZMm6t+xCuVnkZTbfGPGjJk4caJEtvXr1zds2FANpy5b87jT0tLS7t27 x8fHS8cKCwvHjRvXo0cPJXJ6C6dyjBKN+/Tpo9wdVmRlZUk4zc3NlRg4adIk9S86vfXBx/16 DKfO8m8Oh4SE/PWvf5XYrmxt69atP/zwg85mpT0hIeHSpUsHDhzo2rWr2kOPHxBuF4RTAAAA VENmhlOJYEOHDpV81KZNm/DwcOX7qO3atZPIEx0dPWzYsOvXr+us6S1/HTp0SDYSFRWl3IJU jRgxYs6cOS5dkoQ1efJkWdi1a1fLli1r1ao1atSo1157TQ2nLlvzttOcnBxJcJJq69ev37t3 b+X2pfshq0+V3yOqW7duo58p3ZC9165du0WLFmvWrAkNDVV+E0mnD77s11s4Fe+++67spU6d Ovfcc4+sI+dcwqnOZrdt29agQQP5IDp37pycnKyGU48fEG4XhFMANsEf5ALmoNYQKOZfphYV FZ0/f17bcrWcL2vqOHv2rC//jKlWSUlJYWFhVbZWUFDgbQu+k40o+7pWzpc+VHG/p0+fPnz4 sPu/cOpxsw6Hw9unUKkPCGYqztcbHoRTwEq4JtTBhAaYg1pDoHCZCliPVO7O304+98993l7V f68xnQJgCGpWBycHMAe1hkDhMhWwHqlceXxQo/emBv2yZ73uciOVqgeshJrVwckBzEGtIVC4 TAWsRwmn6uODGr20N1KpesBKqFkdnBzAHNQaAoXLVMB6XMKpy41Uqh6wEmpWB3+QC5iDWkOg uPxHzeM1LQ8ePCz2OPXhZ75XvenTEoBK4JoQAGAZ/3ALp76vDKB6ckmXH3ea+Pnoef/sOD69 7ejDi9dT9QAAAKiGuEwFrEfJpJvq/y5zyHOZjyamNIrNGvvC+U/2lzlKnFQ9AAAAqiUuUwHr kVLV3irV/7Veqh4AAADVAZepgPVIqWpvlbq/qvNUf2UAuI3wB7mAOag1BAqXqYD1uNwqdUHV A1bCNaEOZjDAHNQaAoXLVMBuqHrASihSHZwcwBzUGgKFy1TAbqh6wEooUh2cHMAc1BoChctU wG6oesBKKFIdnBzAHNQaAoXLVMBuqHrASihSHfxBLmAOag2BwmUqYDdUPWAlXBMCACyDy1TA bqh6AAAAVENcpgJ2Q9UDAACgGuIyFbAbqh4AAADVEJepgN1Q9QBsgj/IBcxBrSFQuEwF7Iaq B6yEa0IdzGCAOag1BAqXqYDdUPWAlVCkOjg5gDmoNQQKl6mA3VD1gJVQpDo4OYA5qDUECpep gN1Q9YCVUKQ6ODmAOag1BAqXqSZzOBylpaW/di+quwCepQsXLly6dKmadMbQbfqOqgeshCLV wR/kAuag1hAovl+mpqWlPRUUvXr16k8++eTmzZvGd01PXl6e9OT8+fO/bjf+53/+Z7Un165d 8/aWfv36vfTSS4HtRllZ2YoVK3xf/5tvvvnyyy+1b//oo4/mz58/Z84cOaJbt25VtgPp6enZ 2dmVfZcOb2dJBqFyhn0ZhLLC4MGD27RpExERceTIkYB3RvWrDIP33nuvsLDQv/cSTgEr4ZoQ AGAZvl+m9uzZMyqo7rhx46KiourXr//555/rbPb06dMnTpwIWC/dLFiwICgoaOHChcbtwheS 5qaU69SpU1hY2JSf6dyqMyKcvvDCC3/72998X18+xJSUFGVZujpw4MD27du/8sorixcv7tat 229/+1v5+PS34PL5TpgwISkpyY+ee+PtLMkg7NKli4+DcOfOnb/5zW+M64zqVxkGErcfeeQR h8Phx3sJpwAAAKiGKhVORwQ1V5YfeOABySM6mx0+fPjs2bMD0kN3ckHevHlzyVORkZHV5Cuy crC9e/f2Zc2Ah9NNmzY99NBDvq9/69atpk2bFhUVKU//8Ic/tGrV6vLly8rTGzduSDh97LHH 9Ddi6Ofr1A2n8+bNU5YrHISyhf79+xvXGXcmD4Pnn3/ev0+BcAoAAIBqyL9wKtlkxIgRyvLF ixdHjx599913d+jQISMjQ1peffXVevXqSYvkxy1btkjLsGHDNmzYoKy/fv36kSNHKssJCQnL ly+fPn26rHzlyhV5umLFikWLFkVFRfXt23f//v0ee5Kamirx6ssvvwwKCvr444/V9oKCgilT prRs2fKuu+7q1q2bTqN7n0VWVtagQYOkUfZ+4cIFnUZ37qlE9iuHEx4e3qxZs8mTJ6s30dRU InlQlj/44AOdLvlyQiSZvvfee7IwatSojRs3Ko0zZ85UA2ZmZubYsWPV9T/77LPBgwcry4WF hTVr1nz22We1G1yyZImc2O+//17pwBtvvPHcc8/JgbRt2zYtLc3p6fOV1ZKTk/UP3NuxSGNM TEyTJk0GDhyoNvoSTvUH4VtvvdW4ceO6detKJ9esWeN0G2y+jwGlMxUOS6fpw+Do0aP169f/ 6aefvPXHG8IpAAAAqqHKhlO5eJaYeeedd3700UdKu2SKqVOnytX+ypUrO3fuLC1FRUUSf2bM mCErFxcXS0unTp3U8JKUlHT//fcry3JZHhYWJmkoJyentLRUnjZv3lyy0rfffiuX6JK2PPZk 6NChSkLp0aPHmDFj1HbpSZs2bbZt23bz5s3vvvtOv9Glz0Iu+yW8lJWV/fjjj+rfM3psdOee SuQMxMbGHi43YMCAIUOGqIcsqUQ2JY1yirSdd+9ShSfk6tWrEiSVb7fKOVECqWw8NDQ0JCRE iUKyF8k16lskaaqfxRdffCFv37p1q3ab//d//yeNyvd+pQMRERGvv/76N998IxlfNltSUuL+ +WqzpM6BezwW2dHBgwdlO/Hx8ePHj9eeJffzrIRTXwahRLbExERJ7rLy9evXnW6Dzfcx4OOw dJo+DBwOh3zKO3bs8NYfbwinAGyCP8gFzEGtIVAqFU7vCAoWklx27typNB4/flyepqamyrV3 dna2XCrn5eU53b72qRNOp02bpq4mTydOnKgsv/POO5GRke7dOHnypOzl6NGjsrx69eo77rhD ucOl9MTlLx91Gt37/PDDD8fFxbn8qazHRncuqSQ3N1d2odxVdJb/jI88lZ4rx7hw4cJJkyY9 +uijEvT0u1ThCZG4LW9Ufhhq9+7dd911161bt7Zv3y4hqGvXrps2bZIU1qxZM+3PAbVt21Y9 HIml6k1SlUQe+ZTffvttpQMvvPCC0l5QUCAr79u3z+n2+apZUv/A9Y9l1apV0dHRLht0IYOw Vq1aPg7CP/3pTxL9tJ1UB1ulxoAvw1Jh/jBo3bq1VIG3/nhDOAWshGtCHcxggDmoNQRKpcLp 0KBmkgQlQTzzzDNKY0ZGhlxO9+nT58Gf7d2711mZcKrNINqnGzZsiIiIcO+GrNCoUaNnyz35 5JOy92XLlqk9+frrr7Ur6zS691kiyaBBg2rWrDl37twbN24oK3tsdOeSSpRdnDt3Tnl65swZ ebpnzx7lGGVNeZqVlVVhlyo8IZI65Y2yfWd5qGzYsKFsasaMGRItn3/++aeffjozM/O+++5T 15fUo96Pc/6cbV3SzenTp9Xo5/IBNW3a9I033nB6D6f6B+7xWDZv3tyrV68HyrVq1cplgy5k ECYmJvo4CN3DqbrNSo0BX4alwvxhEBUV9e7/b+9+4Gyq88ePxyjFIH/G0Pwpf9NGqBWy/jXG f1p/UpIdtdaihH5C7KJ/eFSLwbJJsvFttyjyJyIz/qQiWkuxJCQMZhAjhhnj9/7OZ/d+7957 zpkzd+69555zXs/H5+Fx7pnz53PO/bw/5/N27j33rbf06qOH5BRwEoLUACcHCA9iDcESwHdO N27cWLJkyVWrVsn0wYMHZTjt/8FC/+R0xowZanr8+PEBJ6d5eXky85lnnpnzHx06dKhXr56n JnPnzvVe3mCm3ochJXeIiYmZPXt2oTO9+WQlKmf89NNP1cu1a9fKS3W3Vx3j8OHDq1WrJjUx rlKhJ+Tnn3+W90LlO6J3796jRo1KSEiQhEj2XrNmTdmR9xl+9dVXx40b53l59erV22677eGH H/bephxmdHR0VlaWTwUyMzOlkkuXLr2un5wWeuA+x3LgwAHJBFUi/Pbbb5tJTtUnus00QoPk tEhtIODkNNTN4MqVK3ISNmzYoFcfPSSngJMQpAY4OUB4EGsIlsAeiCSDahm9q88cJiUltW3b Vn0S8uLFixcuXJCJkSNHej8otVevXn379s3JyVm4cGGFChUCTk4lGalSpYr3dz/VY5HUDSbZ Y4MGDXbs2CHT+/fvVw/y1ZypWefNmzfn5ubm5+c3bdrU87OhmjP9+WQlspf77ruvX79+suVz 58716dOnSZMmshHPMcp0//79JXlU51CvSmbSovbt28+fP19NL1iwQE6vqomc7TJlysjLPXv2 eBZu2bKl+lyuxzvvvCOLSd6kXn755Zfyzk6ePNnzjrRr104OIS8vb8qUKZUrV9Z8fz31LPTA fY5l69atkpweOnRIzsPjjz9esWJFnw368H4gUqGN0CA51VtF8+0OODkNdTPYu3dvpUqVAvjR YZJTwEkIUgOcHCA8iDUES2DJ6aVLl+rWrStpkYyuZVzduXPnqKioWrVqxcbGqrt4khDVqVMn MTFR3RRLT0+Pi4srXbp0jx49JPEJODnt3r37qFGjfGY2bNgwJSVFJo4fPy5bkFxVRuwJCQnq WT2aMzXrLBWW5KhGjRpdu3ZVj9DRm+nP/0k4Bw4ckExEcsPo6Gj5k7pf5n2MkgTJNu+55x5J W/SqZCYtWr9+fePGjdXvXZ44caJEiRKSRao/derU6c477/QsmZWVVb16df8f35Ety8mRY6xd u3b58uVTU1NVAqUq0KVLF9mI7FoyQc9NQJ/317uehR64z7FIk7j55ptvu+22N998U5Jf9Uwk M8lpoY3QODk13wYCTk7NnI3iNIOBAwe+/PLLepUxQHIKOAlBaoAv5ALhQawhWII1TM3OzlaP 5fEmiaEnFcrLy1PD71A7c+aM/440Z/rX+UIBn8U0Z5ok+WCRjlrzNBZq1qxZ06ZNK3QxyWsG DBig+SfJ7w4ePCipk0/q6rnBJ2+lJ2P18H5/fRTpwGVhtZ2LBUyu5S+As2eyDRRTKJrBF198 0a9fv8DqQ3IKOAljQgCAY5gZpuZmX9o9bs6ymA4MUyPWkiVLCl1m+PDhPr8aUyi9O5iw3IoV K9THAAJAcgoAAIAIZDxMPZW+Y0PLQe9FNZf5qoS3drDYggUL0tLSrK4FgozkFAAAABFIc5jq favUp1hUTQBBQ3IKAACACOQ/TPW5VUpyCjgMySkAl+ALuUB4EGsIFr0klEKhUFSxupcCYIQx oQF6MCA8iDWEiDSt/dP/trruw8uqdvgovhvDVMDxiGvA1ghhA5wcIDyINYSIp2mdSt+5bcCL S8q0XFW755JbWpKcAk5FXAO2Rggb4OQA4UGsIUR8mlZO5jmfG6lWVQxAiBDXgK0RwgY4OUB4 EGsIEb2mpW6k0vAA5yGuAVsjhA3whVwgPIg1hIhx08rJPBe2mgAIDy4ogK0RwgAAAAAAAAAA AAAAAAAAAAAAAAAAAIABvpALhAexhhChaQFuQ9QDtkYIG+BRxkB4EGsIEZoW4DZEPWBrhLAB Tg4QHsQaQoSmBbgNUQ/YGiFsgJMDhAexhhChaQFuQ9QDtkYIG+DkAOFBrCFEaFqA2xD1gK0R wgb4Qi4QHsQaQoSmBbgNUQ/YGiEMAOE3ffr01k6XkpIyEQAAwGVkCCQDodTUVKvHmwBgSsOG DW8AAACAQzVq1Mjq8SYAmCL9leq4fuVE6tDatGkzCQAAwGXuuOMOklMANtK6dWuVmZ51ojFj xsjRTZw40erTDAAAEG5qmNemTZvgbpYv5ALh4cJYIzkNDxc2LcDliHrA1pwRwiFKTnmUMRAe Loy1AJLToUOHdu/e/cSJE6FLKoMlcpJTFzYtwOWIesDWnBHCJKeArbkw1gJITu+66y5Z5ejR o6FLKoOF5BSAVYh6wNacEcIkp4CtuTDWnJ2cDhkyhOQUgCWIesDWnBHCJKeArbkw1oqZnP7r X/965JFHqlWrVr58+RYtWnzyySdqGb35HTt2rF279tq1a5s0aSJ/6tat26FDh4Kekyq7du1S T+slOQUQfkQ9YGvOCGEeiATYmgtjrTjJ6enTp+vXr1+yZMnRo0e/8cYbsbGxpUuX3rZtm958 z7p33333008/XbNmTZkeP358KDLTb7755vbbb5ftx8fHHz582OrT7MamBbgcUQ/YmjNCOETJ KQCESHGS0w8++EAmGjZsqOZLKiovf/e73+nN96y7detWmU5PT5fp+++/P9iJ6f9lpnfccUck ZKYAAADhR3IKwF6Kk5y+/vrrMtG/f381f/HixfIyOTlZb/7Z//5IcEZGhkzfeOONZ86cCWJm umvXLk9m+t1331l9ggEAAKxBcgrAXoqTnL777rsy0bRpUzX/hRdekJcpKSl6832SU3XnND4+ PriZaa1atchMAQAASE4B2EtxktNjx44lJCTcdNNNc+fOTUtL+8UvflGiRIm1a9fqzfesO3Dg wE2bNnXs2FGmhw8fHvTMNEK+ZwoAAGAhHogE2JoLY62YT+vdunVr48aN1UNxq1at+uabb6pl 9OardR9++OESBbp06fLjjz8GJTONtCcg+XBh0wJcjqgHbM0ZIcxPyQC25sJYCyA59XfkyJH9 +/ebme9JbIWkkMXZqbfIfwKSC5sW4HJEPWBrzghhklPA1lwYa0FJTs3zvusaLLZ4ApILmxbg ckQ9YGvOCGGSU8DWXBhrDRs2VB++HRMWycnJLVq0GDVqVLA2OGTIEFX/SM5Mr7uyaQEuR9QD tuaMECY5BWzNhbGm7jnaXWR+z9SbC5sW4HJEPWBrzghhHogE2JoLY03dOb3jjjsm2lmEZ6bX Xdm0AJcj6gFbc0YI81MyAOyFXgsAAMCRGOYBsBd6LQAAAEdimAfAXui1AAAAHIlhHgB7odcC AABwJB6IBNiaC2ON5DQ8XNi0AJcj6gFbc0YI81MygK25MNZITsPDhU0LcDmiHrA1Z4QwySlg ay6MNZLT8HBh0wJcjqgHbM0ZIUxyCtiaC2ON5DQ8XNi0AJcj6gFbc0YIk5wCtubCWCM5DQ8X Ni3A5Yh6wNacEcI8EAmwNRfGGslpeLiwaQEuR9QDtuaMEGaYB8Be6LUAAAAciWEeAHsZMGCA 9Fryr9UVAQAAQDAxzANgLxMnTpRea9KkSVZXBAAAAMHEMA+AvdBrOVtubu61a9esrkVw5Ofn X7161epaoMic1AgBwF5CNMxzxhdygcjnwlgjOQ0P801r+fLl87z885//LM5+27RpI29xcbYQ OZYuXVqxYkWraxEmu3fv3r59u/ecjIwMaQ8nT560qkrKu+++O0/LxYsX9VZxUiMsEhdeUAAn cUYIh2iY54xHGQORz4WxRnIaHuab1v3331+/fv0n/2PNmjV6S/74449Hjhwx3loY8gIz1QjK iq5KTvv06fPBBx94zxk3bpyE6oQJE6yqkjJq1CjVMqWVxsTEeBrq2bNn9VZxbXLqwgsK4CTO CGGSU8DWXBhrJKfhUaTkVMb/Zpbs1q3bs88+a7xMGPICM9UIyoruSU6vXr1atWrV7Oxsz5zc 3Nzq1avXrVs3ISEhQj4iK+9ds2bNzCxJcgrAjpwRwiSngK25MNZITsOjmMnp6dOne/bsKalZ vXr10tLSZM4rr7xStmxZmSMJy4oVK2ROVlbWk08+GRcXV65cucaNG6sVVV7w0ksvJSYmPvDA A9u2bfPfY//+/VNTU0eMGBEbG1u7du3ly5d75s+YMWPw4MGyl/Pnz8v2ZY4sU61atZSUFHWn zL8a/lXVrJvJFTMzMx966KFKlSrJWnJaNJNTn3pqbmfr1q3JyckyU87DqVOnPLXyPyLRtWvX RYsWqemFCxdKBfROiP8J19y7R48ePRYvXqymhw4d+utf/1pNb968uXfv3p7FNmzY0L59e+8V ly1bJunq9u3bJVq9b6Zr1sF8xTRPi+ZMf/7Jqd759CSnP/30k0y/9957BlWSLcycOdO4xdqF Cy8ogJM4I4RJTgFbc2GskZyGR5GS0379+n1ZwPOF03bt2g0cOFASojlz5jRo0EDmZGdnS/4y ZMgQGeHn5OSoZWrVqrV69eorV658++23akXJBapXrz5s2LBvvvlGEgFJjvz3KMvEx8dPmzZt 9+7dktRUrlw5Ly9PzY+JiZk6deqBAweuXbsmu0tKStpb4MEHH+zUqZNeNXyqqlk3kyt27Nix Q4cOR44cOXbsmOSMmsmpTz01tyNpjuSV+fn5hw8fljqomZpHJOrXrz9r1iw1PX369EaNGunt yP+Ea+7dY8yYMSohlVXkPEdFRakMTs6DpGOexUaMGOGpgNK5c2dZVyaaNGnSq1cvz3y9Opis mOZp0Zzpzz851TufKjmVTclMOVLvyvtXyUyLtQsXXlAAJ3FGCPNAJMDWXBhrJKfhYb5pSXIa FxfXskD//v1lzvfffy/v0bJly2TMv3PnTsloMjIyrv/3x2LVMpJJ+WxNhvp9+/ZV0/Pnz09I SPDfoywzduxYNZ2VlSXb+fzzz9X8QYMGqfmHDh2S+eoW5/WCpzbJyx9++EGzGj5V1atboSse PXpUZkqSpZbR+1ivdz31zlWrVq1UkutZy+CIDJJTnx35HJTe3j02btxYrly5q1evrl27VnK3 hg0bykFJnlutWrV9+/Z5Fqtdu7Z3VaVWsqnvvvtOpufNm3fjjTeqG5oGdTBZMf/TojfTn09y anA+5bxNmDDh8ccf79Kli/p/D4MqmWmxduHCCwrgJM4IYYZ5AOyFXivS+H+sNy0tTd6j5s2b t/iPLVu2XP/v5E4t8/XXX/tszfvrfosWLYqPj/ffo89XAqtWrZqamuozX23/xIkT6uWxY8fk 5aZNmzSr4VNVvboVuqKkct47NUhOferpf64k1UpOTi5VqtTo0aMvX75sfEQGyanPjnwOSm/v Hrm5uRUqVJDFhgwZ8pe//OW55577/e9/v3nz5rvvvtuzjCRrPrdcZae33nrrsAJPPPGE7OK1 114zroPJivmfFr2Z/nySU4PzKedNlpSXW7duLbRKZlosAMAkhnkA7IVeK9L4J6cHDx6U9+iT Tz7xWdI7uVPLzJ0712eZoianmZmZsh1JA33m79u3T+Z/+umn6uXatWvlpbqX518Nn6rq1a3Q FTMyMkqUKKFu4143l5zqnStFcqWYmJjZs2cbH5EkpzNmzFDzx48fr5mcah6U8d6V3r17y/ub kJAgeZzsvWbNmsOHD/f+z4FXX3113Lhxnpd5eXnyrj3zzDNz/qNDhw716tUzrkORKuZ9Woxn evNJTg3OpzpvcpjVqlWTmhhXieQUAIKIYR4Ae6HXijSaD0RKSkpq27at+qTlxYsXL1y4IBMj R46UmZ5lZLpBgwY7duyQ6f3796tnuppMTtu1a3fu3DnJg6ZMmVK5cmW1fe91ZWv33Xdfv379 5E+yZJ8+fZo0aZKfn+9fDc2qatbNzIqy0/79+589e/arr75q2LBhocmp3nY2b96cm5srFW7a tOnMmTONj6hXr159+/bNyclZuHBhhQoVNJNTvYPS3Lu3BQsWyDZVWie7KFOmjLzcs2ePZ4GW LVt68nGxatWqKlWqeH/3Uz0WSd1n1KyD+Yr5nxa9mf58klOD86nOm0zLWynJuOejzppV0mux km5L49SrDABAE8M8APZCrxVpNJNTGc937tw5KiqqVq1asbGx6tOSktHUqVMnMTFx3bp18vL4 8eMysJd3s1KlSgkJCeopQyaT0y5dutx5553y15iYGM/NL59c7MCBA5JuSCYVHR0tWYm6KeZf Dc2qatbNzIqrV68uX768zJRsa9asWWaSU83tyI5k3Ro1anTt2vXSpUvGR5Senh4XF1e6dOke PXpMnjxZLznVPCjNvXs7ceJEiRIlPHlWp06d5Mx7/pqVlVW9enXvH4vp3r27f3uQPD0lJUWv DuYrpnlaNGf6838gkt759Jw3yXllm/fcc49kr3pV0muxycnJd911l15lAACaeCASYGsujDWS 0/AIStPKzs4+efKkz0zJRLxzmTNnzqiRv3meG1uyKXWry4BkT5rb96mGZlU161boipLR+G+q UP7buVDAf0nNI8rLyzN5GjUPSvPwzZB0bMCAAUVdS7MOJiumeVr0zpUZei1ET8DnKvK58IIC RLiczCL0Ts4IYX5KBrA1F8YayWl4RHLT8rkhCAsNHz585cqVVtcCwRHJUQ+4k0Tlul+mnPj4 88IXdUoIk5wCtubCWCM5DY9IbloLFixIS0uzuhaA00Ry1APuJFEp5b2SzZaWb7Nz+DTjG6nO CGGSU8DWXBhrJKfh4cKmBbgcUQ9EGpWcesp7JZsa3Eh1RgiTnAK25sJYIzkNDxc2LcDliHog 0vgkp8Y3Up0RwjwQCbA1F8YayWmIaF4BKRQKhUKh2LRYPbIIBMM8APZCrxUixlcxm17jAACw L59kc039vp/1HPPxXY+sqt1z75SFjrxwM8wDYC/0WiHiyGscAAD2pXLSpdGtN3casbnLyA9u Tdrae+zJ9dvyc/OuO/TCzTAPgL3Qa4WII69xAADYl1x8vW+VFulLpja9cDPMA2Av9Foh4shr HAAA9iUXX+9bpf5/NV43ZPUKIR6IBNiaC2ON5DREHHmNA2CeCy8oQIQrzg+b2vTCzU/JALbm wlgjOQ0RR17jAJhHmAP24sgLN8kpYGsujDWS0xBx5DUOgHmEOWAvjrxwk5wCtubCWCM5DRFH XuMAmEeYA/biyAs3ySlgay6MNZLTEHHkNQ6AeYQ5YC+OvHDzQCTA1lwYaySnIeLIaxwA81x4 QQFszZEXboZ5AOyFXitEHHmNAwDAqRx54WaYB8Be6LVCxJHXOAAAnMqRF26GeQDshV4rRBx5 jQMAwKkceeFmmAfAXui1QsSR1zgAAJzKkRduHogE2JoLY43kNEQceY0DYJ4LLyiArTnyws1P yQC25sJYIzkNEUde4wCYR5gD9uLICzfJKWBrLow1ktMQceQ1DoB5hDlgL468cJOcArbmwlgj OQ0RR17jAJhHmAP24sgLN8kpYGsujDWS0xBx5DUuEuTn51+9etXqWgCFI8wBe3HkhZsHIgG2 5sJYIzkNEfPXuOXLl88rsH79+itXroS+ava2dOnSihUrWl0LoHAuvKAAtkZyCgCWo9cKEfPX uPvvv/+ee+7p06dPYmJidHT0Z599ZrDijz/+eOTIkaDVMngCrlhRVyQ5BQCEAskpAFiOXitE ipScjhkzRk3fe++9jz76qMGK3bp1e/bZZ4NSw+AKuGJFXZHkFAAQCiSnAGA5eq0QCSw5lUyt e/fuavr06dM9e/aURKxevXppaWky55VXXilbtqzMqVu37ooVK2RO165dFy1apJZfuHDhQw89 pKb79+8/Y8aMwYMHy8Lnz5+XlzNnznzppZcSExMfeOCBbdu2+VdJlklNTR0xYkRsbGzt2rWX L1+uuamsrCyZI8tUq1YtJSXl7NmzmhXzr7yQdZ988sm4uLhy5co1btzY/IqZmZlyaJUqVZK1 Ro0apZmc+tRTcztbt25NTk6WmXIeTp065amV/xGZP7f+B6V3FACASEZyCgCWo9cKkaImp5LO SCp00003ffjhh2p+u3btBg4cKOnPnDlzGjRoIHOys7Pbt28/ZMgQWTgnJ0fm1K9ff9asWWr5 6dOnN2rUSE23adMmJiZm6tSpBw4cuHbtmrysXr36sGHDvvnmG0maevTo4V8lWSY+Pn7atGm7 d++WbKty5cp5eXn+m5IKJCUl7S3w4IMPdurUSbNi/pVXM2vVqrV69eorV658++235lfs2LFj hw4djhw5cuzYMckZNZNTn3pqbkcSc8kr8/PzDx8+7Pl6r+YRmT+3/geldxQAgEhGcmoe36kH wsOFsUZyGiJFSk5Lly5dokQJeSPWrVunZn7//ffyctmyZZIx7dy5MyoqKiMj47rfh2ANEqhB gwZ5FpOXffv2VdPz589PSEjwr5IsM3bsWDWdlZUle//88899NnXo0CGZr25xXi94lJO8/OGH H3wqpll5NVMq6bPfQlc8evSozJTsTy2j97Fe73rqnb1WrVqpJNezlsERmTm3mgelt3e4jQsv KICtkZyaZ9OzAdiOC2ON5DREipScjhw58tSpUzVq1Hj66afVzLS0NHlfmjdv3uI/tmzZcr0o yam8s57FvF8uWrQoPj7ev0o+q1StWjU1NdVnvqrViRMn1Mtjx47Jy02bNvlUTLPyaubXX3/t s99CV9y4caP3Tg2SU596+p89SUuTk5NLlSo1evToy5cvGx+RmXOreVB6e4fbuPCCAtgayal5 Nj0bgO24MNZITkMkgO+cShZWsmTJVatWyfTBgwflffnkk098VvRPTmfMmKGmx48fH6zkNDMz U/YuaaDP/H379sn8Tz/9VL1cu3atvPzuu+98KqZZeTVz7ty5BkekuWJGRkaJEiXUbdzr5pJT vbOnSO4ZExMze/Zs4yMyc241D8p473APF15QAFsjOTXPpmcDsB0XxhrJaYgE9kCk4cOHS96k PgWalJTUtm1b9RnUixcvXrhwQSZGjhwpMz3r9urVq2/fvjk5OQsXLqxQoUIxk9N27dqdO3cu Ly9vypQplStXVnv0XvfatWv33Xdfv3795E+yZJ8+fZo0aZKfn+9fMc3Ky5wGDRrs2LFDpvfv 3y9bM7mi7LR///5nz5796quvGjZsWGhyqredzZs35+bmSoWbNm06c+ZM4yMyeW41D0pz75LD yon1rzmcyoUXFMDWSE7Ns+nZAGzHhbFGchoigSWnly5dqlu3bvv27SU/khS1c+fOUVFRtWrV io2NVZ813bNnT506dRITE9W3U9PT0+Pi4kqXLt2jR4/JkycXMznt0qXLnXfeKX+VBNlzM9Fn UwcOHJD0TZK16OjoZs2aqZuM/hXTrPzx48dla9LeKlWqlJCQoJ6AZGbF1atXly9fXmZKGjhr 1iwzyanmdmRHsm6NGjW6du0qp9r4iEyeW82D0tx7cnLyXXfd5V9zOJULLyiArZGcmsd36oHw cGGskZyGSJGucTmZ5/SWzM7OPnnypM9MSYjUHTqRl5d37pzu6uapnEuSYtm4unVoICsrS3On 3hW7rlP5M2fO+K9b6Iq5ubn+myqU/3YuFPBfUvOIzJ9bzYPSPHy4hwsvKICtkZwCgOXotULE zDUuN/vS7nFzlsV0iIRLns8NQQAAXIXkFAAsR68VIoVe4za0HPReVHOZUCVsFdOzYMGCtLQ0 q2sBAIA1SE4BwHL0WiGieRXzvlXqU8JfQwAA4EFyCgCWo9cKEZ+r2Kn0HT63SklOAQCIHCSn 5vGdeiA8XBhrJKchopeEUigUCoVCsWOxemQRCH5KBrA1F8YayWl4SNPaP/1vq+s+vKxqh4/i uznjkgfAAHEN2JozQpjkFLA1F8YayWl4eJrWqfSd2wa8uKRMy1W1ey65pSXJKeBUxDVga84I YZJTwNZcGGskp+Hh07RyMs/53Ei1qmIAQoS4BmzNGSFMcgrYmgtjjeQ0PPSalrqR6sKGBzge cQ3YmjNCmAciAbbmwlgjOQ0P46aVk3kubDUBEB4uvKAATuKMEGaYB8Be6LUAAAAciWEeAHuh 1wIAAHAkhnkA7IVeCwAAwJEY5gGwF3otAAAAR+KBSICtuTDWUlJSpNdq06bNRITSkNbdrK4C gLAi6gFbc0YIt27dWoZ5AwYMCO7o0RmPMgYinwtjTfVaAAAAcKQ2bdoEd/TowgEzYAkXxlpq aqp0WQMGDJiEUOp9Q5zVVQAQVkQ9YGvOCGEZ4MkwTwZ7wR09unDADFiCWEOI0LQAtyHqAVsj hA1wcoDwINYQIjQtwG2IesDWCGEDLnxIC2AJYg0hQtMC3IaoB2yNEAYAAAAAAAAAAAAAAAAA AAAAAAAAAAAM8IVcIDyINYQITQtwG6IesDVC2ACPMgbCg1hDiNC0ALch6gFbI4QNcHKA8CDW ECI0LcBtiHrA1ghhA5wcIDyINYQITQtwG6IesDVC2AAnB5FG2iTFXoX3muKYEsSuDBHC8kZF MV+sbiywPcvbsCNLmN9EvpCLSCNRkJ//NcUupTi9Fu81JaIKY2NHop+xSyEAUXzEO4EJBB0d i70KySnFMYVLsCPRz9ilEIAoPuKdwASCjo7FXoXklOKYwiXYkehn7FIIQBQf8R6Bgfn3v/99 165dnpdHjx7929/+VsxtAuFEx2KvQnJKcUxhbOxI9DN2KQQgio94j8DArFmz5pQpUzwvV69e ffvttxdzm0A40bHYq5CcUhxTGBs7Ev2MXQoBiOIj3iMwMElOYXd0LPYqJKcUxxTGxo5EP2OX QgCi+Ij3CAxMg+R069atycnJFStWTExMPHXqlJp5+vTpnj17ysx69eqlpaWpmf37958xY8bg wYNl/vnz54tZJaBI6FjsVUhOKY4pjI0diX7GLoUARPER7xEYmAbJ6QMPPCApZ35+/uHDh69c uaJmtmvXbuDAgZKBzpkzp0GDBmpmmzZtYmJipk6deuDAgWvXrhWzSkCR0LHYq5CcUhxTGBs7 Ev2MXQoBiOIj3iMwMA2S01atWnXo0OHIkSOev37//fc33HDDsmXL9u7du3PnzqioqIyMjOsF yemgQYOKWRMgMHQs9iokpxTHFMbGjkQ/Y5dCAKL4iPcIDMy6deu+8MILnpcrV66UdFVNS1qa nJxcqlSp0aNHX758WeakpaVJctq8efMW/7Fly5brBcnpxIkTi1kTIDB0LPYqJKcUzXL16ld5 eTssr0aRCmNjRwppP2PHdh6xhQBE8TGuiMDAfPDBBzt16uR5uWDBAkk5vRfYtGlTTEzM7Nmz ZfrgwYOSnH7yySc+GyE5hYX0Opa//W3qP/7xd8/LH35Y8+67U4IegydOrH/jjT9kZKwPc+xf u7YzNXW0TCxbNk0q8NZbk+RgZablndLChS+ePbspRL2W3nutToKUdevm5uRss/wkFOl9XLEi ddKkwUOGPDx16vClS18/d26z5bUK+FikTUoDOHhwpZpz5cp2eVMOHVqlXsqwfN68P8q/mqu3 afPLiRN/b7wLWXf16lnPPNN3ypRn0tLmhfqIQtqYEbEKHawWp9s3084NysqVqTt2vFvMhh2U jeSHPR4JQISCw8YVlkdlUAJz8uTJ0dHRX331lUxnZGS0bdv2+eefV3/avHlzbm5ufn5+06ZN Z86cqWYmJSXJMuqzvhcvXrxw4cJ1klNYSq9jqVkzbvLkYZ6Xq1bNvP326kGPwXHjfnvDDTdM mDAo6Fs+enTN4cOr9f46duwTf/3rSzJx//3177mnTqdOLSpWLH/bbTHnz2+xpC/ylL17P+zY 8QG9BKSYvZbee61OQp8+yYmJ1aKjy2zZssDak2CyZGamJyXdHx8f+/zzT86ePXbkyH53311r w4Y3LK9YYEW1yVat7pXDUXO2bl0o0fHKK0+rl5s3L6hb93a91c0M2rt0adm0af3XXhv5m990 7d27XaiPKKSNGRGr0OS0SN2+T09ezOT00Uc7TJs2qqhr+dQhsI1YHo8EIELBYeMKy6MyKIF5 6dKlPn36SDdbs2bNUqVKtWvX7uzZs+pPderUqVixYo0aNbp27SqLqZmSwHbu3DkqKqpWrVqx sbGbNm26TnIKS1mYnMqotXr1KjLeTkiIDfontbp1a/Xss49r/mnJktd+9atGalr6zzFjBsjE sWOf3HzzTep2qrXluedS9GpezF7L4CKiToKUe++tJ0Mvy0+CmTJoUM8aNeJOndrgPTMSbn8H UDxtUgbe8naomVOnDi9ZsqRcK9XL8eN/O2zYo3pbKHTQfuDAR7K148fXhfO4QteYEbGMk9Oi dvs+PXkxk9PAisHVJOBiSTwSgAg6J40rIiEqgxiYWVlZO3fuPHHihM/8CwX8l8/Ozj558mRQ dg0UUwDJ6WefvZ2c3KxixfKJidVOnvxUzZQcoWfPB2VmvXp3eO5e9e/fZfr0UYMH95b5P/3k e1Pyww//VLVqpW3bFt1www0ffzzbMz8jY/1DD7WpVKlC48b1Jk0a3KTJ3ca7kIzyxReHSmUe eKDhl1++IzNffvmpsmVvkSVlCPTRRzN89itZwMKFL+b/d/959uym6OgyamGfamdmpsuc2NjK 1apVTknpdubMRlmmR4+2ixa9rDYydGifX/+6rZretOkt9b9tAZ8l6R6lJhcvfh70XsvMRUSG Yd27tzaoreZxaZ4iKV27tnznnX+fpbfffkHeVs1DltWffPKhuLiq5cqVlTfdYO+eIruQi8gb b/xB84j06qPZWvQOyqDyshFJFW+7Lea+++7av3+5LFanTuIvflFz5crUwMLB0yal/URFlVR/ lQpIW5JAUBm3XN8lDPU2LoP2CRMGjRjxmBx17doJy5ZN8zknR4+uKVGixPz5E33mF1rVxx/v 8vrrz3qWf+qpPnPmjLO8MSNiGSenet2+Zrj59+QqOfUPYYOQ926Q8nLmzDH5BTmybNO7qJxX Qrtly8ZVqtzarl1TvauJZyMBdDXWxiMBiKBz0rgiEqKSwASuB5ScyqVWIksGzIcOrfJ8lUAu 5QMH9pBA+/Ofn2/QoHb+fwbMMTEVp0x5Rgbw/v9J3rnzr1TfJelnr15JnvmyVtu2TWRYK32U JH0Sv8a7qF69yrBhj+7Zs0Q6AckZZeaFC5+1b998yJCHpWe4fPlL752eP79FBkWeT5hI/9mv X2fpi6RjlIH9lSvb/astm0pKuv/bbz+Q8uCDTTp1aiHLSM1VQipnoHLlCpJQqJ5TdioDkuKc JRk1ydbWrv2z5vsSuuRUzpV0+DfddOMHH/zJoLaax6V5iqTUr1/bM4qbNm1Uo0Z3ah6y7KhW rXhpY7LBb75ZarB3T/nii3fkfdy16z3NI9Krj2Zr0Tsog8rLtfKFF4bIwi1aNJJM8LHHOu3b 96Fcjzw3PYsUDt5tUvZepszNMgaWykhaun37YvmTHIXEwi23lFZZnt7G4+Nj//Sn//fPf74v V2Rpk7m5vhH3/PNPypV3wIDup0+neWYWWtX58yfUqBGnEmRZUaqhPuJobWNGxDJOTvW6fc1w 8+/J9ULYIOS9G6T3jVfZpipz546Xfk99v2zp0tf/8Y+/y77kuvDII+316uDZSFG7GmvjkQBE 0DlpXBEJUUlgAtcDSk5btbq3Q4fm3t/BOXhwpQyhP/zwT9KH7NjxrgxHT5xYr2Jw0KCemts/ cuRjWUwyUJl+440/3HhjKfXfZTJHNrVixb/vQC1Z8ppKTg120bdvR7Xwm29OSEiIVdN6H8SS Pkq243kWh/SfDRvWbdasgfQVb7/9gupbvKv9/ff/u1/P7ddly6bJS6l8evqb5cqVlWR2zZo/ S58pG5GqSj8jacvevR8W8yzJyde7Jxii5LR06ZukQy54Ytsc49r6H5feKTK+iHgOWe3I5ztc env3FGkhssDRo2v8D8egPnqtxf+gjCs/dGgfNT127BONG9dT1xepklySAggHnzap/p9Ecsxf /KKmvIyLqypV/etfX5L5xhuXyqgtZGamyzJbty7035ecDWmisk2VC5upqgzOy5a9RRq8TL/+ +rMdOz4QCY0ZEcsgOdXr9g3Czf9jvf4hbBzy3g3S/1PB27cvLlPm5gULJvlUdc6ccTLa1KuD 2kgAXY3l8UgAIricNK6IhKgMZ2DmZl86sebzfa8t3jNxnvx7dMkGmROeXQPG9DqWunVvnzRp sOelDLxlkKmmpQORcXKpUlGjR6dcuvS//5O8YcMbBT+TdE+LFo1U2bx5geZIwFNk/q23lhs2 7FEpTzzRXVZ/9dUR+QUfa5Rpz2f+PcmpmV28887L8fGFJKeSOcp2fvxxraf/VP+NL52eJJvq kL23qfbrqY+sKC83bpx/9epXFSpEy1+HDHl47tzxzz2X8vvf95LK3313reKfpcTEav4fLCl+ r2VwERk5sp+MEmUw9vTTj3gfuH9t9Y7L/xQZX0R8zvDOnf/19Eu9vXvK7t3vywI+M43fMoPW 4n9QJis/btxvk5L+fVZXrvx3clrUcPBpk5MnD2vQoPbs2WMHD+4tLx9+OFkC5LHHOr322kjz G69atdKMGc9pvt1nzmzs0qWlVFWupya39pvfdE1J6SYT9erdsXTp65HQmBGxDJJTvW7fINwM vnPqCWGTIe//Urp9GYWOH/9bz5zly6c3bVr/3nvrSbnjjtuM6xBAV2N5PBKACC4njSsiISrD E5g5mef2TJyzNLqV7Mu7LI1uvWtUqvw11BUAjOl1LN4fopDy1luTJLK8F5BeIiam4qxZY2X6 u+9WSAz6f3hPLwZzc3fIxfqZZ/r++c/Pq9KhQ3OJaPnTzz9/IR2C5//Z5swZp5JTM7swk5xe vPh5yZIlVReX/99fi5D+U6WW3ttUicP69X9RL9es+bO8VP/z37t3u1GjfpOQECv9pywgyfvw 4Y/5HG8AZyknZ5vU8NNPtZ86G9LvnKanvym7Vl+c1Kut/3EZnCK5iEyf/u//upQRoOZFRO1I fUHDU4z3LuXy5S8rV67wu99p/PejQX2MR4zeB2Wy8prJaVHDwadNfvnlOyVKlJDNLl78iryU OtSpk1ilyq179iwxufHTp//3N7WXLHlN7+zJmFx9489kVeUiW7bsLatWzZSRvHr6ruWNGRFL r58x6PYNws1Mcmoy5H1e/vTTFtnpI4+09zxFbf/+5TI8VlefBQsmFZqcBtzVWBWPBCCCzknj ikiIyjAE5qn0HSviO6ls9ON63Xc+PXrPxBd3jRq/tlGv90o1k5nLqrQ/sebzkNYBMKbXsbzy ytPR0WW2b1+cX/CzdG3bNvH8wsWmTW9J6MkFvWnT+p7H28pYWpZRn8rIzt6qfpNFLwalm5LB tvdPX6nnY6j/VpKRgPQ2ixa9PGHCIOmFZEmTu/AeA4wc2U8W1jy09u2bv/nmBO/+Uw7n228/ uOuuGuppqN7bzMvbcd99d/Xr11l2d/bspj59kps0uVsNZiRhr1AhulmzBvkFuVKZMjfLy927 3y/mWZKaVKpUQe93wUL9QCTJr+XqoD58ollb/+MyOEW9eiX17dtRTs7bb78gJ0fzIiJF9tKg Qe2vvvofmf7Xv5apT8lq7t27yHUnKqrk668/q75cKWutWJGqVterj15r0XyzzFReMzktajj4 tEk5nPLly3o+tKy+duo9uNXbeLt2TeV4ZfXJk4dJ5u5zxqRdySBBfatamq4MwtUPqpqpqpyZ 22+vXrVqJU8nYHljRsTS62eMu329cPPpyTVD2GTIe7+UeJfUuHnzezyflMgveCqLxMX336+U DvDxxzt7HnegV4cAuhpr45EARNA5aVwRCVEZ6sCUzHRpdEvZhaSiZ7/+yGfXP+39eH2zR+Sv 75VqfnzlltBVAzCm17H8/PMX0hsU/ExSnESojHs9j0qrUydRrto1asR17dpSFlMzpdvp3PlX kizUqhUfG1tZ8yNVntK9e+tRo37jM7Nhw7rqQxGyqf79u0jSJzE+f/7ExMRqJnfhPQaQJFHq Ket6bsJ6yrp1cxs3rqf+a0v6zxsK1K6dMHRoH/XRSp9q79+/XHpF6QMlW5daqf+7k3L8+LoS JUp4vpnbqVOLO++8w7NWwGdp4MAeL730VCh6LTMXEalq3bq3S64kPa1mbTWPS+8UpaXNi4ur Wrr0TT16tH3llaf1LiLHjn0ic+RdkEQmISFWPXVEc+8+RZqHZGGSEsqZl7deqiTXIIP66LUW zYMyU3m95LRI4eDTJvML/n/Gc9dGZpYpc7O0Cs/Ceht/9NEO6jzIMMDzH86esmzZNNlOuXJl 5WDlHf+f/5lcpKr+8Y+/k9aurtSR0JgRsfT6GeNuXy/cfHpyvRA2E/LeL9UT1SQibr21nCqq GrL3m2++6bbbYubN+6P0LeqZSAZ1KGpXY208EoAIOieNKyIhKkMamDmZ55ZXay/b/3rE2GtX dX/JS/6q7p9ezsgKUU0AY8ZPVszMTN+x413/X306f36L/52s/IJvhXue6xKU8thjnTp0aB7w LqR30nwY2syZY/70p/9XpJrIqTh7dlORVgngLH3++V/79escol7L+L3WK/611TsuzVOUm7vD 5HnLytJY3czbffTomm+//cD/F06L9JZpHpT5yps8dQalqG3SZ+M//bQlJ2ebnARp83o/9iqx 8N13KzR/xC3gyLWqMSNiBdbPGIebXk/uUwLopTU3ovaVnb1Vipk6BLbfMMcjAYhQcNi4wvKo DGlg7v7DbHXPNPfSduM6rPvlw7LkrlGpIaoJYCzggUToytSpw0ePTlm8+JXf/vbXZcve4n8P KCjl/fdftfxI/ctHH83w+e0bnxL+5JQSthKZbTLgEtLGjIhFP2OXQgCi+Ih3uwRmbvYl9QQk /0/z+pef9n78XqnmS6NbXz13IRSVAYxFYMeSnv7miy8OfeKJ7s8//6TPw9YoJKcUxxTGxo5E P2OXQgCi+Ih3uwTm8ZVbZMtr6vcwWY11v+wjyx9dsiEUlQGM0bHYq5CcUhxTGBs7Ev2MXQoB iOIj3u0SmPteWyxb3vn0aJPV2DVqvCwva4WiMoAxOhZ7FZJTimMKY2NHop+xSyEAUXzEu10C c8/EebLlPRNfNFkNWbJg+XmhqAxgjI7FXoXklOKYwtjYkehn7FIIQBQf8W6XwCz6ndM/cucU VqFjsVchOaU4pjA2diT6GbsUAhDFR7zbJTCL/p3TvnznFFahY7FXITmlOKYwNnYk+hm7FAIQ xUe82yUwC57W29r003rX8LReWIiOxV6F5JTimMLY2JHoZ+xSCEAUH/Fuo8Dc/Ye/qN85vXa1 kJ+NXt/scX7nFBaS5kexV+G9pjimBLErQ4SwvFFRzBerGwtsz/I27MgSojcrJ/Pc8mqdZPtf jxhrkJ9+PWKCLLOsSvvLGVkhqgkAAAAAwM1Ope9UH+5d26iX/+d7f9q7Rt0zfa9U8+Mrt1hd WQAAAACAY0l+uqxKe3WLdk39np/1Hryh9eNfPPLUul/2XXLzr9Q9UzJTAAAAAECo5WSe2/2H v6hbqN5F5uwalcqneQEAAAAAYZObfen4yi3pycMkLd3YftjRJRt4Ni8AAAAAwBJ7Js6T5PSb SW9aXREAAAAAgHuRnAIAAAAALEdyCgAAAACwHMkpAAAAAMByJKcAAAAAgNA5lb5TEs9Cy4bW gyU5TWsz2MzCpzfutPqwAAAAAAB2om6JBrdwgxUAAAAAUCSnN+6UXLLQktZG3TkdYmZh7pwC AAAAAEKB75wCAAAAACxHcgoAAAAAsBzJKQAAAADAciSnAAAAAADLkZwCAAAAACxHcgoAAAAA sBzJKQAAAADAciSnAAAAAADLkZwCAAAAACxHcgoAAAAAsBzJKQAAAADAciSnAAAAAADLkZwC AAAAACxHcgoAAAAAsBzJKQAAAADAciSnAAAAAADLfTX0VUlOdzz1mtUVAQAAAAC4VN6lnCW3 tJLkVP6VaaurAwAAAABwnfxr1z7rMVoy07+XbCb/yrTMsbpSAAAAAAB3+cfI6ZKTflgx6fjq z+RfmZY5VlcKAAAAAOAiB2a9L9no+ze1OL1xp7yUf2Va5sh8q6sGAAAAAHCF4ys2v1fwUd4j i9d4Zh5Z9LHMeS+qmfzVwroBAAAAANzg7I59S8u2ljz025fe8vnTNy/Ol/nyV1nGkroBAAAA ANzg4pGM5dU6SQa67YkXNRfYNuBF+ass8/MPGWGuGwAAAADADa7+lL3m7kcl90xv9/S1q7ma y8j89KSnZBlZUpYPcw0BAAAAAM5mPuv8vxw26Sm9HBYAAAAAgACoz+t+VL2zmc/ryjL//vTv AO1P/wIAAAAAUFQBPOnI89wkWTekdQMAAAAAuMH//UbMyi1FWvF/f3EmquAXZxZ9HKK6AQAA AADc4FT6zvdvaiEJ5oHZSwJY/cCs92Vd2cLpjTuDXjcAAAAAgBuc33f4w4pJkl3+Y+T0gDci 68oWZDuyteBVDQAAAADgCpdPnV1Z49eSV37Wc0z+tWsBb0fW/azHaNmObE22GcQaAgAAAAAc b2ufcZJRrm/6RN6lnGJuSraw7v4nZGuyzaDUDQAAAADgEpdPnZVcMlj3OoO7NQAAAAAAAAAA AAAIrv8Pv6k+qgplbmRzdHJlYW0KZW5kb2JqCgoyNSAwIG9iago1NzEyOQplbmRvYmoKCjI3 IDAgb2JqCjw8L0xlbmd0aCAyOCAwIFIvRmlsdGVyL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCnic rVZNr9M6EN33V2SN1OAZfySRokg3Tbtgh1SJBWL3Ho8FIMGGv8982XXSe3OpeKrkuLFnfOb4 zExcC82vw4/GNUdH0w55jIHHn/82H9403w/Q8O/nfwfHC823A22S2Vfe3vAzj/r2y+HzG3HJ P7KbrwdE38Ym9Nj2zfWf5u0FGo/N9fPH0YFD511wcTrC6JLr5NlPRxzdwnPsJ3pxoQ3oRto8 6xZwsnGZPl3fHc7Xw/vNkRBi2zUhhDZsjoTT5Ecc3DwdfXaD0NFLPjCM7mnCEdBOTzI+CR5Q LLJAf2bbcpIxVCPQNtTFs4Bdw2zdEAD42Sfs5Ik+GvDgiXw/OEUdmsF4mhLBrN1AFW0aahO6 xahWfgJPWMNEYRGBSRg2dgcZnzgiYjSOxOyJ/zxpjLR2Zo5o4TLRkJgboitkS3YKQLQBMpNi bFOxFj9nsUKeBjrmhcti+CnebqoEALM4dQsjQQYqA09nnnpm17vJe5ZGFOTQy/2ogV4YeLlY JCD8kD+yufJ6O2ShcHEwKbBG1DoUycWMQZb5+F6ckwd5swaiPjrxkYgQiBmWHnzho/eYoXQc 7phR2wLAGwDG5qtj0YLLk4zwrAAkYGVlIV4IGgj2ZLFqmAnQOHg5dnTkwXMSKYmZrcrWy7LY Gb1LFUW5pdvFKDDFvUcQpNbfE0QnqxuM7FdHywIFEW/npSKFY9FC1peNqBFlFaygVzcpkqVk 4MRJxfT8YAFAqpXdugQQPa+UgJXRHxUByt9jzloIkrckAA4p0N+ZIko7xGPsW7wjnotkBxtt km4AM3XPZOhzop2z+EpmhsKz+MvyNOMqmZPQb95U3aYoS8RNQcEsA7YzcQYVn+lhjwbv23Rf unIG4bjWlkWfU3Ktp0uNa5HgNbgT3YhCZ425SRM+J1lmAqXS4i1XJSByci6VneJM4+oGMotG F5zdo+2Kkn+j1fSqVt2D7epiHajqOPTKGtXO7UAX2f3/0Fi047m6GKxr+H1t9KXpbHvQuv+o MDpyZxd16yLrzNCbD3p/VsA29+cW+rjprQ/v8BKfayuv1ejVUp2lpjMhQV/t1M4NU8Wq02nm eB06k2/J64cpRN6gZbYvqau7rN/gPIUuo4lTTkba7bvx4YoM0OUuU1TevabyldFDOnczFeC9 4juUWv+3st5WQikfG4Vt61SWQ7BSdPt42vkwUSAXjroW/lK9KqfohhPTA9o/VCDQFW2XSo12 xMtkpeca1Tqfc1+omoZpl3J3uIk8J/z95wxJKq5y7n3zGwxF2/sKZW5kc3RyZWFtCmVuZG9i agoKMjggMCBvYmoKOTU4CmVuZG9iagoKMzAgMCBvYmoKPDwvTGVuZ3RoIDMxIDAgUi9GaWx0 ZXIvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJyVlcuq2zAQhvd+Cq0PxNWMZMsGI4gTZ9HdAUMX pbs2LaUt9Gz6+p2LZCu3NiYgK/Zo9M/Mp5GtwfypfhtrdpamAXlsPI9vX8yHF/OrAsO/t6+V 5Q/mZ0VGMvvB5oafedS336rzi7jkH60b5wrRkUffYd2Z+bN5dwLj0MznjwN2cYeDPdkmoh0s RjfYMe5oDHEHgz3yCGDb9L8FZ0eee5pHWrkXA4yf5vfVNFevVzsDxdIa733tr3aGA+2Fve4G VrwjBBZwFPd7cg+oCrCVcS9igURnafRnTCYHGX0xApmhfpxE5pFMS6G17T0AP7sWgzzRNUm6 55y53taNKkcDMj8Pdorz93vRtrKka9c0U+JDTjQE0rt3NrpGM63R0bOLHC8Fzxkm78gPTTTn mT4h5no8rb/taWvXeJKU9Pc1ivzTA/kk3NMKW8i3Wf4YoRuYkkZq3jIgXDEenEgLgs0xzYG3 2fXJQt+qnRSRiOEa6xo2WV5QseyKXtqrSf88G2VYVsdjsUAlopAyqVFme9nFXTtoo0rqs/M1 OPFNpdl1g9tvpAdDqN02ejAIMRvo4fBcepUIaiL06TC7SOYB07naBg/6beigC4X2jA6cihpp KfQcH5hzbTCdVLmsbklTrs5SuYOsV/MVoYU9fnES84sSM3apriWB+Vta2C2qkszp3371tZhy cS5xfsB9ilED0NgV1AX9B+1U0wxY9zdpdi51TdoFe2kr00ZcwS+On8UVnJCxpdlpxikFnBl7 oOZmUzn9UJBLyG6jlS6ptVU/xStYl49n2epOMTQLr4mNMV1zCzLKLYGYTeHI83zQqKRuTPfj QjnmCrWlk0TmJd83eK9e1u53AZPcxmrNU9QlNwdAt5mSLkp3kwkc18anMWdgt5UhQAbiySq0 4Q7Nm4uQkL8sAn3cp3jzVXD/SPZsIm2myDcRm/O57K6lud8vsMnt+PqOZGv33/S+mr8AySSv CmVuZHN0cmVhbQplbmRvYmoKCjMxIDAgb2JqCjczMgplbmRvYmoKCjMzIDAgb2JqCjw8L0xl bmd0aCAzNCAwIFIvRmlsdGVyL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCniczL1LrzU7kh02P79i jwX08eabBC4u4O7qNqBZWwV4IHhUtiwI1Qakif6+k/Eg1+LOPN+V4GpJDdU9GV/slS8Gk0Gu WHx/h9d//frPr/fr797Xny3O/y15/u9/+b9f/8e/ef2/X+E1/++//D9f7/kPr3/5upzkr79O 99f8r/+vWv/j13/4NwI5/+/63d//+av17/TK7f3dX3/+v17/yz+FV86vP/+Hf/9b+vvf/y7+ 9o7v67/ht/c/vOs8DjEkOf5TGGp5t9+vw3+SP/8U+++htt/e/+s8TO/fU74QQtR/TOP3LIg5 vBX79//zz//26x///PXP86K+3yOHMP/ba2zy35iKXWZO132nEa//lcuMr3Fd5W/vf/z9z/9p IcBt1fd1W2m8/aaup1fktsJ1O+m3WH7/u3z977v8HoNcbvrtrTest/dPv+d5xf8wD2L6Pf4W 2/zFddv/9HuRH/TrWUynf5y3fz2J8lto1x1dTmpvglYN9R+mw3Wk1j5/86f497+H/tu8hOqX 0H6XB6TX4AjyTyG+/3SdOf3p/afrLPH9Wyi/Lx/5U0/0p+vHCS8w6IVXhLN/Sv9ILwAenzzu Uf3phfpdtVH8Y2zXdVxXdz3HNG+rTsg0zx/lpuzp1d+03cw3naZ5PpHr1MlcQp8WcZnNpK2f Z/9JnhjXjQ1CnrdRHUPvTECny/XD6P8Uf6/2L205z5+rT9MnVuOY/8nvts9+/f1PdDRB4BLl PRw3Y/8wT9mupqD/OS/Jr0aejZyg6Fl+egWteoOHl+Agf7/vVM6QkpzjuqkF+c+v//wKo18/ vBrVFeKz97AeJIzyHcXcXvV7bHO+Imea66tfDsucDKS8xvX/1fwVrogcYs6v8EaUaCjpFSLC BPOPr5AWjtiz2K/7zMv/wp+he2GA51suZJ43FLsls0exd31Sbu/jskx7e4V2ncSRL3sWe718 4Ar7EGu5ELetG8Z1l+O7oV0x5r1e/7Ow+3cQ+7wieCq9Gc71rwHu/rKXaX/FCC/oss7fyxOL 66wXepVnGCZWWmd9TXsVe5v2gfYk9utfM55Vva8zl3XWC73INcr7KHivRa4xTKyKV1kMPU57 QXsQe5j2sfGzXv0rNrz2PK/6PR/WZW9oL2K/rqnjWbWVvuevOrTHyx7EXqcdnkGSs86vQBx4 3mTnzdPe0K7nvb4ib3w6yc4bp72gv543TDucV+Pj/UphtT2xXq1xjOvfUsA3q+1utthELUFb 3rzAFBknir1Oe0N7EHt5JWiVsyVNa76siBLsatK0N7RXsV/3St56LdedZoynoNcyrR29g/RA lx2e1luuZEZVKngl8z1Pe5t2eC5vuZLZj6WK3lms111WRkliz9Pe0K7Xct0nYovtukdsj23Y FYZpL2ifz6pPa0frvL4273K30q9pz2Lv057RP4m9TXtDexR7nfYBdrFe9zmgb2z9W+152uEa uzzFJiMgRO92lfF1jQbBWsR6jfywD5OB4WWf1ore8wpnQGds563Ls63XmXOAltuaXON8DTlA a2lNrnH2WDngNTZ5vrMjyQHxm1z7fM05Mn4Re5r2hPhZ7HHaC/rr9Ydp72iX63/JZ3db5TM5 phWwq9zT7CczfsNalXuaDTdjHLX6rTiCPtBexX7da8ZWU+WeZmDkjG2yyj3N/jZnPm+yz3nO fN4o9jmmhx64yVlfucBXrxW5p+mWC2IXuacZ0hm/Bq3IPc3T5YLYRe4pz3vFr0Qrck/zsnPF eypyT7MjyZXPm2wskiv0BK3IPc0hQsZRSyvy/uZjzI3OK0OXMa3zrFGtWe52johyg69Hy3K3 8+Vl/Aq1LHc7h0C54Vmz3O1sBBm/Ti1/63nztCfEz2JP017QP4k9TjudN4o9TDudd97thTKw 3WQZd/VphXtNcq/z85Cpl0hyr3P8k6mXSHKvM2jywDeb5F7n56fgMLIludcZfOWNb1bGhGN+ ocqbzzvvVazNrlLQo40OC/UrMiIcc6xTqF9JYq3TCvcqo8IxxzQl4HuVUaGMMQv1Nvodnl+u or3NwqlivzJu6m30+yzWhOhZxp992guiJLG3aaezRhvHloj3ql/t+VUr2gvZs1HvNK3wfPVr Pp0K9UJB7vU9rW1fi3zj+3yhJeFblW+8jJFLxjudj2/a67QnxMkvHTuXjPc6X8O0p2lviB/F Pucu8AnLuKDPRl3Kutdpt9F2KXivMl7o8/tVyjrrV5BpCx2Fl4J3+5a7nd+qUvCsMo6Q0Xmh 3uktdztDu9R1t4Kfxd6mvSBOEnud9oY4Uex52um8wcbzpeGbfU/rtO0nXGXk0ee3pDQ4Zx1y r/ObURrca5URSZ/fhtLWOb+mvYr9OmeHJ1yH3GudVjprfunYv3Q+q9rbtNf1XquMYCQnKJ2v JlpOUDo8gTrkCcxXXQZdzUszgjLguVcZ2UhOUAZejYxsJCcoA8/a5RnM3rJon5XcXm3sX7XP So5fbOxf3/gUutzt7Lmq9lkLJ9kYv2qvtezRxvj1jc/e7f1VdyurMkbqs2+pAZ9BF2ua1rSx ZeTU47SWfeUybupBkPEJyLipT9ca8AnIuElG4VV7suz2IiPiNu3J7IKfbQRdtS9b/knscdr3 eFDtMlquEZ+MjLPabLN1j7O+tr1MO11nsHFxTXhXar2uPuETazbKrUnGMP5sxNqmdfcdVUZr bb7ZqllPYvs8I/SfVUZxMj6tSe60KLrbBb+hf7NxZdUploL2eZaa8E5l1Cdjv5r3tbv1ulPt hxdKsdFZ1XmRyPY07fNuq9uzjQ+qDEK8RcoYUb5UVQYz1/83/2j9ZZVB0bYnic7TO7+0DZ7o 2dpg3TmhX6W8c7tKvCt5A3ZX+GzkX+0pZHg6VZ/ObpPyhGvRN0VPWO3p4410sUd8g/5m6xzL 2Ruv0ELkAq3l5NX6BNhaX4a2KsB15xBf2561ZWN8SEOtOAZwu0fN8p5vI2o07VHTslePyhU3 WewrihPbJYoznnW+j6BRnCCizC7njehfxV68V1n4TezxoxeaTzhgn/VlPZx0qNDHaX9Y52Pl /lB6z/pWbOw9zR52X+s9sHwMoGf2nrzMb+PZk2exp4+ev4g94Jfiy74sRfqgNz4B+RLJJ/T8 EnWxp48v1xB7wC/dl3wX5XNecCyvX1H5/B9fUbnbpl9j+uomsSf8Sn9te8Svun/tS/sYA8xn UHVsQFdTxV5xhPFlI5JyjEh8BFOqjoJozDDvtvJ4Z46NStFREI3IgtgrjqR85FXKzcgriT19 jNSy2AOO7L5sJChDVRgJ+sixzPzwHDk2sdePkWYXO41Mv2wkW7KOTHH8LNZwjHtllCwD9mOU LHc7+xoYVX/ZKLwkHbU3xMli/xy1F7HHj1F+FXvArODLsoiSMIfwjKPM3unMOYbY25GhRLFW zGe+LPspkbMfz5Yk4TqzpST2+JFdzXuNmIt9WeYmSR7kbp7plaC5G2V6Tez1IzPsYi+YSX5Z 5lksw8RsV6zxyFMlq5WE9shq5V4D5sBfljEXyS/f+HwlwxbTmWEXsdePjLyKvWAG/2UZf5kR ARm/zxAIxDlDMMQejxkFuRqcffiymQqBhbkKn9nIs0c4ZzaS2NvHTEgWe8WZky+baZHLgJkW n5nJQ2dg6LxN7OljJqeLPeLMz5fNFMmlZ5oHnmftH/NKMguVu84r0exXFHvDWasvm+XKXWfL aHYti718zIrpefPHLFoVe8JZty+bpcvzWwizdD6rJw/mnNWbd9uPOcAqd9V0bhDmn2XsmOe3 HeYXfT5SHuM5H5nFXj/mL4vYC853ftn8aG46DxrQv4k9fcyndrHHj/nXIfaA87VfMrubG87t +jywvKRjJljuSea3j3njLPaG88xfNi+dZX47Mn4Ve/mYx25izx/z3l3sCefJ5+y8WCPOqr9s Fl6aAM/Cy2go1485+3ntRefyK2DLtcv8NvUfMraRBsPrB12s9WO1YYi94OrEl2Zz055xNeNl ax95RsSx9iFPfja8c61ErzLg2sqXrcXkgisxlokGaabnys0Qe+d1nrkqJI0XVoW+NP+d9rpX kHy9SZr0ud5UxJ4/1qea2NNezfqyta88+8VE665BrOFYKZORQc7TGtA6r2QGRcJZOJkXmPaO a3a+wifBkjLjdLHXY0UwinWuKuJTkS93TrquSKuWejXpY3Uyiz1+rGbq1QRc/fzSeZTLjmul NusSctQ1VECRb6gEaQpozWJtc30Wnrp8E/M8c3pDa+zy7ZOQjgPXMxVFVovhnNnOmS77xs52 zjjXoit66znDtEe0yznnCjiccb65oOvisNqqXxThANAafRZrm2vuFe1V7HXaI9q72Auu9X/p rGHIxgGAp6g9tXAAmElgOPFgHmhvKhwAajHaawbkNdg8a5AuinkQXaz94ExIJpeFAYCjJZkl DllZItB7de2nJCZppX8YTibGx7BrScgO+Zrz7UHsc9YEWsDQWJd/xSc/ZLyf3wdXReI0ad6z sWV0nbSn+j44M0E6V+bMSFwk6e+IYyPjP+l0Az4ZWTWb9vzCYZss7k1zYsJPMe/I9CB5vMnH coYtdMTroeQUZC5x9Pf8b59cppikr0rj9S9fOoejP//ri4+2nxEV/8gPG/7wurLzp5cJf9z2 j+Xdrh/LG7Ufz/to7/mAynsuCfN9iOfCNBQ/CoQ4ALG8R0fEdxqRUeE2c0BMuS33myEAqHkI aOn9DnQ6A6gA+VGUG3bPKM91wfYeBXcobLu6PYCdzhtWgfbRINgOsDW2/CNsJ9gBsElu2z1n Zw6w1/+bsCG1edU9zBVuwJ3eG1eR/CjTU8j0FK42IK/sgst3uJkeQ6bHkOXGt2dD3FwIttTO sI1gO8AWuXH3LNL2FmzPMsMa51TKDe703riK5EcVIzBXQBUO7kTVptZn8wVQCC8D2UcNIb8J VAm+j6DfDItR2yhqG0XteEsPXuLIs2eal07h0ChyG0VuJ1SMXGMl/4CKkYtvq1Pkdopc6yFL SsLQ6tIqALVT6HYK3UHPYOAzSNa/lCsWyh3uoGcw6BkMit2BsZusi1m4V0ffGLcTLgSvzDgs XJlnAFztFq9n3G5gxXnBGpAfBYxdmUfZsNYXlHx1NoJ7vT7EDRi7hrSPOuE2xNWg/QG3ES40 B5na2rgRgzdZ0F7x8JZGdnXkAXEjBq8h+VHC4C2Eat+H2XbvUBEzYfTKPB5gYvQmC4SFKh99 RMXwNSQ/yvQMMj0DC4Vy9Vv1DjfTM8j0DAqhDkTVBlvq9bkR1PlpJ1QI34Ltq9AzKBi+ydrr I2rB8DUkP6oYvjIdDrjarkrNEg7yqQTYitFrQPtoECxGrzWrZ9hOsBi8jYK3UfBaC5gvTL68 s7kBbKPgbRS8nYK3U/BaAyjXm8s3sJ1it1PsdordTrFr72rDzlEO4TbCxdgd9BQGPQV9qKX5 wz1gBz2FgU9Blo4WbH0jqD7SMsd0E1XGThu1vjemoeyjjpgUunbrz6gYuobkRwFDV5bmANee wYxZwZ1DMsANGLqG5EeRUDF07SrnA033qBC6NSImhq4sgQKqXuNClWEeoEYMXUPyo4ShK8u/ gKt45epjyx1uwtg1pH00CBdj1/A2Ln3QxRlhIXZlSXvDZnoM4woHgdX/nrCZnkLG8YesoG/Y grErrWtc/08g54gUMAsGrqHso0GYELhZ0pofcRvh4iOoGLjCUwDcmYBcTd7wu9eboffGrRS5 jSIXr1bShImq6B+oeK2NIrdR5DaM3CyjeUSdQ2hEpchtFLmdIrdj5GYdLla76A/YToHbKXAH gULgZhkiT1S96C4Dc0LFwMXXRRl9HfQILHF6RKVkv1Ky3yjZb5TsZxlzTlzNzGW8v2Eb5fuN 8v0WCLQjaJGZwGqP4gYVwrYFxMSgbZTvZxnAIerMIgCVEv5GCX+jhL9Rwp9t3qbaI/7ApYy/ UcbfKONvkSLX5lEcd7w50xNvxIWm0Cjlb5TyZ5tCqPbqPnAp5W+U8reMkdsIVUbL1V7dkJQH QBEyY+A2yvYbZfvZ5lKeUekRULrfKN1vlO5nm0yp1iQGD+kaZfuNsv1G2X4rFLo2mVKtRXzC QuQ2yvgbZfyNMv5scykLVvIzwKWUv1HK3yjlb5TyZ+sSrJ19wFLG3yjjb51AMXZtJqVaKxuS 9BEqxi6+MMr4G2X82WZSHlEp42+U8bdBsTsodm0ypWrrHZJJAuyg0B0Uujvhd7LmhrXJlGrt l3DdG3EhdPtO+KOVaQGuTqdsXBjdu/fC7ZTx953xR1kYA1SdTqkWFR+o8Aw6Zft9Z/vRSuEW qk/WbtSZ+SIqxm6nbL/vbD/aUhjg6mRKtWD7wKVsv1O233e279RjwNVe0YJtSEJNsBC8nRL+ vhP++NJVsQ1rkymPuJTwd0r4e17BG22dDHB1MqXax0EydYDNGLwG5EeFQPEZ2ExKtSC+QcWH gK2rrOCNRm0HVPs2OKrk/4BK+b4h+VGlR0D5vk8qVuscPnAp4e+U8PeK0dsp4fdpxWqdw5B5 BcLthIvR2yh6KeP36b9HXEr5O6X8vVP0Usrv83/Vep0hExaASzl/p5y/d4pgyvl9nu4H3Ea4 GMGDInhQBNuESrXebMhMCOAOiuCBETzeGMEDkn6fUavWm52oA5L+QUm/FBkBJoWvTads1HmM qBi+huRHAZ/BoKTf576a9ZIfuJT0D0r6RyRUjF+dSWjWRQ45CYFC+I6IkBi+g3J+n6B6RKWc 35D8KGH4Dsr5fSqp2Sd9XjugUsY/KOMfCYN3UMbvM0nN+t1P2E6wELsjY+yOTLFr0ykbdj4U wM0Yu4bkRwVjd1DK75M+zbrzD1xK+wel/VJEi7gYuzah0qxHH/KwCbcRrsdutALijUtpv0+k POLutH8j+VGj2MWrtXmUZl+K0Y631gBzp/16hLFLab9PeTyjrtjdSH7UKXYp7fcpj2bfnyFt A3B33r+R/GgQ6kBUnZxo9vW5QR2AOhCTgndg8PrcxEad7Q1QxwrejaRHKuDguCrbALg6j9Ds m3bgqrfjOtI+GoTbEVe6w2aftCHNmGA7wQ6ADfAYVJtjw1rO/4gb4DE4kh/t3D+a/gjg6vCr 2adySHgA7s79N9I+6oQLAeG5ebNP5Q1uI9wOuAnCV9VlAFcT6Y07Aw9wE4SvI/lRhvC9jhx1 yuT8oLO1l5Y9e9G2+L//b6Jb1dI1LP6vF8C/fYXXf/raejuzscfQ7O/rrC+twJW/ZHbmL/q3 MPCnp/JtNskmvv7irEP9F23k4m9/G44dda0efdu9jxdezV++/uPXv/v658f7uR7i3f2sJzno uWrg/zsT7zp+JLeVNPfcf/sP5vMuSSVc5qvYTKLLLJw20Y0BslMRVZUpGwNkpMtoEQQUrSL6 LhpmQHMqUZ+DcC+BBXvZTS8GOVQlNvMuyLn6mvZgejHI0SqxfjfrJEJBq6vFIP/ryia+h6nF AFvsa9pFdYa4ZSWqtoG+WTynqhIIX2ygVTVkGvLcvqY9WPeIvLgSVQdgyJnxuSTDycS7m3bt ZhOy9C58rb2frRRZfdOuKjLEARR7ko8AMgYvq30mgF94YatCjagwAR+xyIWpXgxqFU27RxHy HS/7S/ViIj11V53JwKWc1mofwkhvw1VnmKdZpN9QxZgImg8lmJLMtG70oO9nckcisKCnXdVY +rRXtC/FmDdiBxsEpDdcY3BlmDLtHe161jw5swntelbh2O4nE0wD5nsyddHbBzEpEooMc1LE 63adlwFKRNOqKi8dmcTirWoubdoJJb1ULSZltAYboKESUQnNBnHAgb68q11JAiWiElSDZTYS 5FdPu15JICWiaZcrAR2iadMB6CCe92W3YSmywktQpZUJmqAWZNpdJSY1bBGqqCI8emCoT7ur xKTG+KoGM3n0iB5t8J06PvFi1y4sekBXhRRh0Xe0qhrMeCVQHpn2ZkTSNBBd+yLh0VNrVh2U rDUDA+3JUo/8ZvxgCUqmdq4o6ZXf+AT0uycaMdijhWRXKdUR+4MRVNlEKi8Kei/tmMDo2ZIw rNSYdtVwaVjZIeiapkklCFy7eksdCKBrLyrKMRHRVcEkac0LoKuCiSjHUCRpryvKMfgZDapg kqhCZlpFk2Xea0ZszY076RBNu2bJjep4LrvlzpniTnVKolb3QHtXnZL5SDL26UH7+nlFueBZ ta+f1yTFJmBXnZlASkTTrjozqEM0rT6LgBVU066TFJ0qri77S3nZqEJUguqXBa3PWtWB0+46 M1j/Ne2qM5O8XmzZVWcmkg7RtIvOzHcgHaJpn/caqHZtWlVnZlCt27Tr9E7z2rjo6DrRQ7V0 0/+lPHasvLuSgm/VmclUqTftojPzzSpE095eqkuTsS94q0baPMSqwWkvNm7NUBk97ao000mH aNqT8fNRh2jadfzLVY/TruPuQlWSM9kxvRrQISpvVR6ZWKhDNO39ZTo2Ac+qyiOiYwMVntNe bUIRlYimvdi0IyoRTXsWe6F602lPL1O4iXzeaDUQqEU07cGmS1GL6LJLHQVWypa3KoxIlTn2 NW/VGJEqc9Ahmvb2MtUb7GveqjEi1efY17xVY0SqzxO+WdUYkerzhG9WNUZm4KAW0bRHm6TG KuVp18nrRlXNl/1lOjlQA1XeUgWoOjkZn7CMC1QnB2qsp11xuCZ72qtM8Q/SIpr28jKlnIJ3 K1WPqpRT+LzJKnawonzadUEhkhbRtOuCBSoRXVZb0sDq9vKWMYbq52D/9JZ6H9XPafhmZewh SyyoRTTtih+oNn/aVT9nUCX/tGdbAUItomlX/ZxCWkTTrutHiZQFpt1XqFCJYNlJi+iyvrRG DJWIyltGMFJThpoI095tUQ01FKa9vVRRE7WIpn0+g0hKRNNabMmvDD5rfmm9Heo/THuypUdU Ipp2XZ5EHaIi8xSmzgNqFJfdFkhRu6Jonq/aPG986m4HZQzx7rZgizoaRYSAtXoSdTeKKAGb Mg8oERWZWTFtnoBPQMZHqs4T8AnI+EhWuVEzZNszaowIfrSKVtAkeS07KZgUVQ5WdZ6IT8zt BRVSJrrxAUBP5WVW0l4pqjSsOj7US7q9bl2Xr6L6w1LRDCowr20PpBpTTJd4xh9qzBTVJZZ6 ctCkEfzy0qp307ap7p+tet60cCLaRa1GuHluTcaLMZ2ddfVqj6TLU2TWT9k6qOOz7ZV0f4rM GarqBOoEXXYjZqGqUBGF46n6ggpE6js7QPYVZGESHsgyI1Y+riMal/G87vQyZZ/jPpNRKlF/ yJ6iavjQO1JrIP0he0eqygP6Q9teSH/I3nWNqDflLUA1eeirKi2mBkXPeFa1F9S/8hapmjyJ 79U0eRL2AtKqhflb06e1egzsKFKlHo2YHUXVlMKoX5hv7k1KRWaVLhTi1qNfdXqOOI+u03P0 CqrrE0mpyO1dozcgfhZ7/eilitjzR69WjXqOWkXWa5amvV1C/C72+tHLduPCc588TKcH1Yqk vy8Ne/sv+zbI5/74NsiTkZ7n+JYkqxxApSL7UsmQBL5UX/ZlkyHM+WWrVthwfgmbK+wMPm+X ggr7yi704To69FUurqLTeTwRXEXnGAdEV9HBzEbHGaqX0/FeZVxSjnGJj2Nk0HqOY1T/JuG4 x8dJqotzjJNUAWeQKpGNw1QBh8Zh1RVwMKvUEZ4q4PAY73sp4GDOqiNISQtsBIkjTtW6KRit MkJVrRucLdURrWrdFD5vc02bgncrI2ZJdwoox9sIW1VtaITdVNMGZwV07K6aNjx2l3t9f5Pu qOcGql1z5AbZysRQk8hyD9GoOXMP1cAJmKt4blPeH5lNt9q2Qr2kZE6SrnLmpN4V8yzPyUSL 5sjJvqPV4KEmkeV8Uql35nyigYMZomeU2TJQyihVE4YyUM9YpaLwzFi71R1ChusZsWjOcEas VtLxfVm2LdMQR7Yt9yoKRvBt0tp7yUCPXF6VYij3f9lcgSrIHHMFqhRTcG7B5yJUQeaYi+hW AYqqRDbXoQoyONcxZ0ZUP6Z/0yzQvNd2zqLInYpSDOY0OkujSjHHLE22mleY1fE5IFWKOeaA VEEmkyKRzTGpUswxx7S0Yhq8V53DyvWYwQovU4ShOWuvIP6YHftWzZaGs2k+9ybTdOfsmyrO FNIjsrk9qUlGPaJpr1a5DIpEPncomjCoYm5zjflQPNeZyVyOeUlVLRHFc1xr0llPqbs+Zz2T VWejGtG055dqwqAakc20CnTG0Z7OzIoqzDkz66ow50yu68KgIpHMH8uFgB6RzzbnTKr306rK LYPUiGzOWnRhUI3I5rjlsmGO+8vmxEUX5pwTb1Zaj3pE096tAB/1iGyGXm4TZuh9nl+UYXDX gRKyXT/tUeDrCDmBHpGtOaguDK5/Bldd6bRbgq1pqDIMrcSp8pcow1BfoOgF1Yh8fUUm+HGn B1uNkYeeKOqLXWUkPSJb7ZGXkWhGWJW8eJcKW0uSV5TgbajWy7nu5JouDVepZEVLNWPONS1V eimkRjTt7aXKMOd6mV4JrK7pSpwstfBKXLMroR1ExK6qMLzGp2ouA1cEfQVRVGHOFUTRW5EV xG3VL/BsUrw6qV/g2dMmnEUN+qWdPTOve+q10Cqpr6qKLgivquqVBFyDlTVbOeexYitfPFkM S2+0VlOEOVeDu+mZwOrxl61By1IbrTbLgr8qwkRc/YvKb5A1/mMtu5kkDKoOFSEIKBMFV8rD txM8UHVo2uWs5xq8nFPW+HFlNarKzecav/TTEmwxI7r0u0nW+DP7N7GXVyTmRhJrfkUcsSmb QZZEI/aYyn5Issof2L+LXXZw2i0myrW8Iq62R8m8kqzxE+NCeqikK+P4ltTaNptDGCFZrLxL 1bR3sZeDKyJRnlTnF5+WjPGTjqKhNcYm1kislWbnDAfHpSkGqRBNXs28Eon/gMjadiVXAGWt Is0+SNcEoljK75nmygyfZN7lhS8z6aP1fsy8f1IhKrXadU5iY5HdsxTgr6/jCDyNH/ZHftzo p+PzpwN+2vCH3/hTon/e6hChJyB+I6aSPd1T6fK/UiJC741rSHY0CBW1fR6UiNB5gw6ElBt2 P2J+PukQoTOAKpAemZ6TeUov/EsdInResA60jgbBoq7Pkw4ReiMuPAWTdXLPgITHRx0i9N64 hmRHSvV0T2wGDypE23VDGsg66ghJj+BJgwi9EbcDbsLoy+kb6MpPKkTovGETxqVpOm1PlPZ5 0CFC5w2b6SlkjNqcKWqfdIjQG3Ehck3TyT0LRe6TEhF6b9yCkZsroWLkPikRofdGxRirGLq5 Yug+6hChN6BS7DaK3Yax+6hDhN4bt1HwNgpeqvl80iFCZ4TF2O0Uux1j91GHCL03bqfYHfQY UBjjSYVo+27MQY9gUPAODN5HDSL0RlwIXhN1Ms/y/v4jKkTovXAdyY4CRm8hSb1HHSL03rgB w9dUndwzYPg+6hChN+JC+Jqqk3tGDN9HJSL03rgRw7cwKj6FJyUi9N6ohInhWxKF74MOEToD KEaviTq5J0nqPekQofOGzfQEMgZvyRS8DzpE6IywELwm6+SehYL3QYcInTdswdg1VSf3xNb1 pEK0fTdmxdg1SaflR7H7oEGEzgiLodsodBuF7pMKEXpv3Eah2yl08XU9qRBt343ZKWw7hW2n sH3SIEJvxMWwHfQMqNTzUYUIvTfuwGcgik7bj7SNHlSI0HuhKo7/jWFb3xS2TxpE6A2oGLem 6OSeLKf3oEGEzhs2YNyapNP2JGmjew0idEZYiFvTdHLPiHF7q0GEnhszYtCanpN7JnwCjxpE 6L1xEwau6TltT9I2etAgQm/Ehcg1QSf3pGLPRxUi9N64mZ5DwcitqGHxpEK0fTdmwcg1Rafl h5H7pEGEzggLgVspZa8VA/dRhQi9Ny5l87URKmkbPagQofdGxWttFLgNA/dJgwidAZTilnL9 Srn+owoRem9cyvVN0ml7krrRgw4ReiMuRi4l/JUS/kcdIvTeuJTxN8r4G2X8jzpE6L1wG6X8 puu0PUnc50GHCL0RF6K3UcrfKOV/UiJC5w1LGX+jjL9hY3hSItq+G5NSfhN1Wn4UvA86ROiM sBAQjTL+Rhn/kw4ROm9Yyvgbg2LsPqkQofdGJUx6ApTuP2kQoTOA0hOgbL9Rtv+oQoTeG5ey fdN02p4Yu086ROiNuBC7jTL+Rhn/kw4ROm9YSvjbTvjHS7dg+bUOEXpvXEr4TdZpe2LoPukQ oTfiYujujN+3lvy1EhF6b1zK+E3YyT1J2edBiWj7bsxBsTvoGVDG/6hDhN6IC8+g74xfScak b3SvQ4TOC7ZTwt8DgeIjeFIhQu+NGhBzBe946Z4nv9QgQmcAxeDtO9cfRhz/tQoRem9cyvVN 02l7ojTIkw4ReiMuBG/f+f4wMv6vdYjQe+NSwm+iTu5JCf+jDhF6b9yM0dszPQfK+B91iNAb cfE5FIzeTin/ow4Rem9cyvl7peeAjexJhWj7bkzK+XvF6O2U8z9qEKE34mL0NopeSvofVYjQ e+NS0t879mCdhPQfdYjQe+NS4t87hTAl/o86ROiNuBjDg2KYpPSflIjQecMODOHxJlCSN3pQ IkLvhTreiInhOyjvf9AhQl/AxOAdAR/AoKz/SYcInTcsZf0jYOwOyvofdYjQG3EhdkfE2B2U 9j/qEKH3xqXUfySM3YHR8KRCtH035k77x8tFnZYfxe6TBhF6Ky4g2VHG2B2kof+oQoTeGzev 2B0vV3VyT2xeTypE23dj7rTfy9wBE+P2UYMIvRG3AW6lZ0Caeo8qROi9cSs9g0aoqG30pEKE 3hsVr7VR4FLe/6hBhN6AukJXhV0wdElP70mDCJ037M779WgQLEobPWkQoTfiDsAdFLokof+o QYTeG3es0B1L1Ek9VVPl1xpE6O24C2kddcIlbaMHDSL0RtwOuAGewzxa4fvfr0L03ybos5V3 pC8QrroezYtqXrKrf8vkzV/8SAn4RSlWM6PbTJzy+suXERL1X/Rl2XazVuKlWHqkZwllPQa8 Lpcqurv89RwTPGN/jk8/0utPloXCEWoSpToJlsrIskefZN0gaf3f99hmkWKRLUeBl3WZxdhA eugrSdVG0u1MgSCWpAoj6fanEU9ZzH9Snza5KxXdplK3V13+X0kKZJJtx4rXqNZZaLFpZkmW 6y77KwCVO4mkVNINYGHLyyTbOifdMLbjNQrVVTeY7XjOaDiVyG1Jyk5SU4EjxBeKqQhUo/xQ kj15kkxroPxQklXdJJMfkZ6ZkDulYBLkh76SrC5fdhIfuqyXbT4qFB9KssKdRIMbtzdMUrqR ZOoGqIlfSdbWk0zwoPxQktqBJEWaSH1MUj2QZCtjJEomWfdPUrwZ95VLcUWSjZJjw6vpYg3T Ctfe5PlmIngmKZVIMq8FhNCvJCURScpCUX4oCX0iyYbQEd+e1Agk2UA6YXBIlUCSQtL0hhYv 9I4k83IJ32rWSEhKoc1o1/NG2uQzSZVAaueWoElIKZedNhBNugmtyMjjhqNJN6GVrbtTQmsS q4gNZcQOYufNT1NWjAL05GQbx0os5G+y65Wkae8bO9uVRBAhSroVrMy5Iqk66WawjTeETXPT V9lafW8em3RrV9mIHSWIkm7t2oz03dBexV5RhEjsil5QhEjwk9gziRAl3cRVtp1HEaKU1Ttu CaLLJu9FtrQHCaKvpJT8xgJESYn3TaIdJIiSUu9lKh0kiMSexd5QgkjQo9grSRAlo9gL9Xvg E1DvjAJEl1V7r7cWLEBbkScrCwYoQZSUTi/LCpnavz7BNwoQiXVuBSwSKAGjSJ5gFQmUwOhB 7FSeMe1irVTMkZQkL0snIED0lZQkX2WLdIoWeVZVtkiPiC7Pqo6jECUpTb7KFukJn/xb74rK XJLS5GUkkCm63mLtW4Doij6hw9euJTcbWQjx084biSchxE87l/okefFJdi/BsqAkBNIky14Z +3UhxKdq26Yn9NdrDyRBlKQhXnYqarqsl002Ta+ILd8G2aAFBYiSNPJpb1RilYT4nmTJD0uy khDfkywM4pbySYJo2md5GHpnsUpxWPy0RyoaSxKgSbanQWGiJOTgy04laUno8EkGtChMdNnF 2qngLQkhPlUrhIO3Kl+wKoVwUEKTpGOZdhEmqmivYhdhoo72IvZZ3IfoWawiSxTRO4ldZIny h53EipJ0ikm2GMpQXJSELD/tUrCI1yLWKVW0bfItlVXt8sYrqXL/UmCNfYx03NMuBZgV/dW+ JIyWvYpdSjM72ovYp4QRos/nIkWfdC3TKsIyAduFfL+rlG/j9zuJgJ4oNRQQENz2SsWp0x7E vuSO3C7WWSi7bSqsJ+I0IBCy7ZHKZ6e9i31JIC37fF5ShFvROs8pJeNQSLftnUp8p72IfYkj LXsWu4gjxU97wdJiwU9izySaNO1R7Es0admD2KWguX/aA4kpXfZppWLplES4T7QaUEgpyRAl iS4DFmMnqdpKQpJBKaVpr2JPVOg97UXsgaSUkgyNZm5VqDeVUY+QfFBIadqj2CsJKSXZoT5V K0fHs4o1kYzSlf3KvUoxOsgoTfu81/lRxiL7JEO9JMIXhfpZGSkJVQpL+Ke9iD2TlFKSoWQS +QuUCEhSpXbZSUhpWufoTgrMG96rjHhF/gKFlGZOn4RihjJKKcnISsQvUEZp2vu0k3iCW6Vg vGOsykhYiHEowpCkYi4JBEo2THsReyIhpSRD8iQXiEJKSSrsktwOCkhMe7R8GgUnUtLx8Oy3 UUrpsos1kJBSSjIilleE8hdJ5ISnvZJcRpI0QzNzFFNKUtmXpCmhmNKyg2zHtBXJ1juJfKSk 5ZGzUaOUUkpaHjkjHKWUkshRX3aSHEmyf0+SwEOJkssu1uSCJlmtMlKWLsCEUbJiy+hPuhgT WFn+TezZBVkC24PLtyS3z/tPLvUSHL1Kzt9cGGZ5F7EXkJHZ1kSiM0lKwubMIgjUfLnVBHAS XmESOwvgbHshwZxpn083oLzOl1vfit7QO4g9k3jPtrPYz2WX+QGTV/IrF1tyESFFiDKaFb0B Ex2KaBdhLO2Vq9u7ZOSJpI6SJOaa66I0UpKCuyRFKyik5P4zyk7/LjnDid5llD5ISsmvUp4L SClteyApJXkGyaSeArRGsSaQUbInm8b5XMXav8vHe4g2bkURJbc3fZ8V/dNLx5Znq0g2Vjxb UX7paLHS99rtgWSUrE3LmO5s08XGaBwB1UZiKKS07YmklCwaZbSEYkpuLxrtFe3dxjQop7Tt heSUrNeQMQfKKW17IDkl6XtktIBiStZTydf/6KnknUhfdfRsSb7bKKVkvaZ8h1FKyXpZ+d6e vaza89EnV/uuopSS9ffypUQ5Jfs+yDfu/D4M+5bx9yTalwnFlOxbJVgopmTfNrmm89uW7I7P b2G254ZiSvatlbeCckr2bZbWcH6bm7XB81vere2fY4JhMYeCSjLekB4B5ZRsdBKP0YmPZuLQ MRGNZhQnkpySjZXi+BgpzXL8rmOigPYq9s+RWBN7ITklG+nJdOg50htiXwKbPh6dVpJSsjGn 1MajlJKNUaOMWXBuTse0Ml2LUko2Ao6y4lG+aeRdxB5JSslG2LF9jK/nnZoQKp21i719jN+H 2AuJKUluEE0IlTKYIPZEUkrb/pl5RLEHzFQ8s4n1I6+ZT0Dkxuhr7vb+kTcVsVOe5XlZlOz5 yMvUXjCPe1nWJ2X0Z97XxZ4wS/SsMpabrFLtAbPQl2SssVC+KrlttNwZMjLJhaPlzpQLq51y Z/sapGi5M+XaWewFc/Ovbc8fuXwRe9p5/8tmCWK+mSVoYg84q/C17B9zEPMpSvb85mscYu/H HEcTK8yH+NxJFFEZnjuR5yKiMrgWoTMzUURljrkZtSecyfGZHxF6OGd+itjDnid62axSTB9z SvPKRSCdciaZs4pR57ho9miInea4XjIjJhti8IyYzJ+J/gRKQNlsmwhdnPNtSeyJJKBsNi/G m9k8tQec/fO5whiPmcJ5/yaQjnN58gSCzluSfxc7zVv6PGcMOm+Jc6hiLSQMZTOoUYTTeQ5V nkDQGVpojUOeQNAZWpoBLmIPJAxlM8AxfMz/znsS4fTM6F3s/WN+eYid5qN17lq2C0FhKB0T J5FYyTgzozPgso3IMQMu9yRrDMeMeRY7S/zbfLwQBXBLAJvXj28UhvJVANmMBKWhdKSfRFAG paFkLUEWcDOtu8lIT2RpjpWHeU+yecm5UpHFnkkYKqmwkGxqAsJQX7ZuIhI557qJXn0gYaik 0kdhkCyUre3IsnTe/YyuBIWuK0cNvZPYGwlD2UqTiP4kWiOVMZdsmQLCUILfxJ5RGsrXvWQr FZSGkjUy0XRBYShbUZOldhCG8hW40D/W3+bzld4GI17X94KuCaO1iZVWA780Z0xB59N5/TGI vYA0lK1KiurMsS5p15JwFdPXPEX0KRW802xXE0geKkmIXvZjRXViyFcFmQ8S5Em2djnWauVa bCMZWvNVHFnbDWhvYi+4cuzrzEG/rLReLdaEq9Kyiq1Xc65ii6dsEwOr3rJKLjivRBjzjDLa oJbexNpfCb+n0p0noXfEga1Ft/iZY6KIqxrKBxDxsXhyB4JwMHCFJas1vSLsr2W8BBE8Q9Go JB/AJBvK4IZJST6Ylx0ko5J8XJOQVXArppSHWPvBm5CvQDD+RUN7FXslyagkmpFJhOBwG6lU 3oaTmfchHKUkm88cLBG7St7SKhXtBYWDgb1j0d4uH4wVyTxF8o4ZLlGsncShjD9jW9VASyzR UOqWh7J5uqSyfERDkhxKZfzwXRSNdJH9w+cu6UFSmUDYqExnH5OKCsIdFT0ryUMZa0k3sEE+ RdF4EBlDYuxINKvsIbGitI3OXha749INpuBub0bPEhFGHK5U9dXnasaf5KHS0F5K6zI0h1WA v76OI/A04t4f+/GgH/fPH3f68YAfa72Fe1Llxq1EFHpuTEOxI621cE+q2niUiELvjWtI66gT LsoDPYhEoTPCdoDVUgv3pKKNJ5kodN6wBmRHVe7bPVHE50EkartuSANZRw0hvwn0QSIKvRG3 Aa4WWrgnlWw8SkSh98Y1JDvqhIrySA8SUei8QfFldXoEVK3xKBGF3oBKj2BQBFK1xpNEFDpv 2EGxOSg2BzKenySi0BlhPWqLZQQLNlLBxqNEFHorLiBFz24gciOVbDxKRKH3xg0rcovldoiL kfskEoXeiNsBN2LoRqrZeJSJQu+NG1fseua+cVGy40kkavtuzLSCt9iMBWDiM3iSiEJnhMVH kDF2I5VsPEpEoffGzSt2ZXqMUP+IRBR6b1R8rAWDN1LJxqNEFHoD6greYhOLG5dKNh4lotB7 49YVvXo0CBcFRp4kotAbcTF8G4UvlW08SkSh98ZtFL6dwpfKNh4lotB743YK307Pgeo2HkWi 0Btx8TkMCl+q23iSiULnDTswetMbH0N6I+i9SNR2XZAOso46QlLwPkhEoTPCQvCmgMGbAgXv g0QUOm/YgLGbInZfKVD0PolEoffGjdiFpYjxm0is4UkmCp0RFsI3JQzflCh8n2Si0HvjJgzf lAkVH8KTTBR6b1R8tBlDN2UK3SeZKPQGVAzdVOgZFArdJ5ko9N64hZ5BwdBNJNfwKBSF3ogL oWv1Le5ZKXSfpKLQe+NWit1GsYth9iAUtV03ZKPYbRS7JNXwJBOFzgiLsdspdjvG7q1MFHpu zE6BOyhwUV/kSSRq+27MQUE7KGgHBu2jRBR6Iy5EbX7j/ZuW7a8kotB74TqSHQVCxWfwJBGF 3hs1ICZGrenY/kIiCp0BFIM2U9puWra/kohC740bMWgzZfSZZBoeRaLQG3EhaHPCoDUx21/I RKHzhk0Ys5ny/Uz5/qNMFHpv3IyBmynfz5TvP8pEoTfiQuRmSvhNzPZXMlHovXELPQfK+DPG 2ZNI1PbdmBWjN1PKnynlf5SIQm/ExeillN/EbH8hEYXOG7ZR8HYCxeB9kohC742Kr6tT8HYK 3geJKHQGUApeyvgzZfxPElHovGEHxS5l/Jky/keRKPRGXIjdQim/Sdn+QiYKnRdsoYy/UMZf KON/lIlC741LGX+hjL9Qxv8oE4XeiAuNoVDGb0q2v5CJQucNSwl/2Qm/UlF/LRK1fTcmJfwl rdCtVhr7a4ko9EZcCN2yM/5qdN1fS0Sh98aljL8UQv0jElHovVHxuRZ6BgVj91EiCr0BlZ7B zviVUo3iKg8SUei8YSnhLzvhV0/UFnkSiUJvxMXg3Ql/Nd75L2Wi0HnDUr5fdr5fjRb/a5ko 9N64lO+XvoK3Gm3/1zJR6I24GLw7369WbPBrmSj03riU8AtfcuFWSPgfRaK278J0lHXUEZOe wZNEFHojLjyDGjB6K6X8jxJR6L1xKeevkVAxep8kotB7o0bExOitlO8/SkShN6Bi9NaE0Vsp 4X+UiELvjUsJf00YvqZo+yuJKPRGXAjfmjF8KyX9jxJR6L1xKemvBeO3UtL/JBGFzhu2YPjW Qo+Bcv5HkSj0Rlx8DBXDt1LO/yAThb4blTL+2ih4McweRKK264ZsFLuNYpcy/keJKPRGXIzd TrFLKf+jRBR6b1xK++sgVIzdJ4ko9N6o/rK0yBpjl9L+R4ko9FZUQNKj9sbYbZT2P0pEoffC dSQ7CoSKz+BJIgq9N2pATIzbRmn/o0QUegPqittqIgsbl/L+R4ko9N64cQWuy0sgLuojPYlE oTfiQltoCQO3Ud7/KBOF3ht3J/7VpEI2LqHei0Rt1w2ZvwNBdoTE0H2UiEJvxO2AWzB0G+X8 jxJR6L1xywrdaho4Gxc1yJ4Eorbvxqz0DCqGbqOc/1EeCr0RF0O3UehCzv+vJQ9lIkgaAaLO qkfzkrKVGtvfMmXzFz+SkgL7hRBynIWTX3/5ckpi1JKP+bf669+OZL2ZnMNESrS03q/pB2Go /QQxeF1N+OlHeu3B8k448h/tlV/7HDcf9UbZ3zsqFyRoSYhNXwQtvdDZFSXiaZnHX19R9qyO Qlv764UxX38M2tg3orODlDfqC0nK3YwW4EFrzN52tD3txzEF2eli9ud56I7bmn/4UaMjbeD6 K83W9G+5bkAz+PKOBjHhfatzBZSj6iricZ1Kb6rojpY6mxSFre+CtFFEklwKNsqMkwu4zkzl enJD5nIEJVxH9sQB029f5gGnMHCT08g1mXZolGkAFwNGT4i2ecdRCI1jXtRoWldj4datU3YG VlyEgDj0lc6zylpiDMUeJx5tP38uv/zh7oK0zYyPn+ojJXc/avBT0jZcd2JZeVxkAfDeqA0w O2DShlpdPy42HIhrQR98N2JHxPVRbHLUbjB1PiauVXdwBlAB8qPxjZdKMtjdPllO+YprdRy8 N64i2VF8I64RdT5wde4krpVs8F64huRH4RteV6RRUbdPobO+1vQROG9YBfKjuIZITY7yHaz+ Zy0Og/OGVSA/2iOOJke3sDoXEdcyLnhvXOsF7CgTLs2idft0O/ErrgVX8N64mXD38KDJUbzD 1XmDuBZGwXvjKpIf7YmqJkcBcXVQ4J/ixXQC5w2rQH7UCLbdw+qXPa41R/DeuI1wO/ZDEaPX puqd9xXX2uDy3Zgdu6g4sIuKlCg5qrO+4lrGA++NO7D3EoaI+5GkcreJemd9xbXYBt4LVXD8 b7hS43x8YGqHuBbEwHlD4mUG7L4STakvUMtq41q2Am9Axf4rRexnmNXR7QPknK+0lpjAe+NG 7GdSwn4mpVtcy0DTWg0C742bsKNJmXBpNqbbZ8ZZX4m7RWNgMJAfFey/EtGAN6wmi2mtsID3 xi3YgQG/ockR4epVWk6X1kIIOG/Yiv1MagRLnN0FqyldWksW4LxhG8F27L54e99uH0enfKXj 62Db+zKSHw3sZ4yh8IGr+VdaCwHgvXHH6meu4Wx+Yz/Dm/FuXM2V0pqxB2/F3Uh+FAgXUe1T 7rSvtCbWl+/GDIQZsf/KNEm7UXWaMq3pb/DeuHH1X/MIniyTBboND5z0ldZENXhvVHyuCTub nO5RZXourflkcAbQ1dfMo0ywlN53G3M45SutmV/w3riZcAv2YZmYpQvXpijTmqEF741bVh82 jyr2Nbz83nXw4ayvtGZSwXnD1tXXDEk9EJYIoA5r85TJJ7vAd6M2Qu3Yg/FusQtVZynTmp0E 5w3bVwc2jwb2NJl2MOw28nLKV1ozieC9ccfqaq6j8sauhjd2Xbg2U5kaPwbb2JWR/CgQbqAu zEZ0zvtKa3YOvDduINyIXVihWT/HzesZA2bEbsZQ/ChhN4Przt3GiE78Smuya/luzITdTMmE me8wdY4yrSmp5bsxM2EW7Lp4dbj7BJDNUKY1JQXeG7dg11W8wXb5l36HqgnkalXuuREr4q3+ pcvRLaKMEPMqEQJnAMXupTSCpQWFbqNjJ3zlVc4D3hu3Ee5eHu1yVO9wNXTzKrwB743bsdsq e8q+yxH2LzbudsJXXlUy4L1xB/YwdXNHuhzd4mrWkGGk6M4L1oD8KBAs7Vc3bEDvhK+8yk7A e+MGwt0cjy5H6QbXS/YwaXLvjRux56pp9TBdjghXUwWnfGWcunHvjZuwh6mZcDP2XAvXhqIZ J1Lce+Nmwt2U4C5H4SdcmE5x741bsPeqdfU007MiqoLpQDTjbIp6bsSK/Qys402/doOoY7qM EynquiEbdjG1MyR2XcPSJaeRZZxGce+N2wkXegTewnKj6jgpwzDZnTfoQEjsZirNJA3LwJxD lnEOxb0BFbsZW08zT95ncuNqL4NTKO68YA3IjwL2Xo02PxuW2DmHLOMUintv3IC9V4vYe7WI vczC9Q8uTqG498aN2Hu1hN1MS/e49onk3qAlgk3Yy7RMsLRX7rA81FlkGadQ3HvjZsIt2Hvx ktXGtY8ETqK498Yt2Hu1ir1MI+7UsATXeWQZp1Hce+NW7GVaw16mtTtcZ5JlnEhx743bsJdp nXCJ5TS8Wsp7MZxNce+N2wl3YO+FWyJuVO1zcDJFXTfkwO6rv7GvaTSXNLwAy4vy3vyBbAP7 GkPyo4C4vHnhxrWyPJxKce+NGwgXHkCnnbQWqpflccfYA/ZhHR9BxL6mR+prvFbMa/JwGsW9 ARU7m56ws+npHtdaGc6juPfGTdjZ9Ey4tP3q8Bo0bw84keLeGzcTbsFOrBPzceP6Q+YvRC/Y 2xiSH1XsbTpNJw0vb6PnAbgVextD8qOGvU1v97j4PAC3EW7D3qZ3wiXOzPDKOcfHqRT33rid cAf2Yry93sJd+DCZ4t4bd2AvNt7Y24z3Pa6V5uF0insvXEPyo0C4RLQejue1eTij4t4bNxBu xF5sxDtUrUrD6RR13ZARe7GRsLcZkXobv0Svy8PJFPfeuAl7mwEvbKRbVK/Lw7kU996o+Lqg cQ3ax3NwQWKBCQT33YgFEbEDs73hDkwvyMNZFHcGUOy/RsV+ZtBM0lhFjlaQh7Mo7r1xK/Yz oxFuu8e1grx2PIRGuI1wO/Zfg6ouFq6X5OEsintv3I791xjYf/FebcNfv1fl4UyKe2/cAf1X er+hn5lHt7jKJCs4l+LejutIfhQIl/i6w9pWXcV5MJ/i3hs3EG6E/msexTtcnacpOKPi3hs3 Qv+V3gn6mXmE/Yy1W+eS6fMA3AT9jCP5UYZ+Zh7d4nqBHk2tqPfG9ZmlcP1dCBXbmMWCMckq z6pM13/5Qgj9u0LPld6F+hgHXIV5NJ+i3o656Srp3QCx3iNiSR4gVkBsC68DHvEahoVpxVI8 gHNig4PYX9BdzaN2B4hFeIDorIaNo3+Pb7xI4o4Oi/m6CvAoU1Jvx3Q+QxBCETzI8L7F9OI7 njNRb8M0HP07ECYxGYb1IV4UVXm+RL0dMwBmhP5JOWV/lCTn/MG1Xi5JmZDknmheN6wxvwqg HILeUwXeTqC/T2bZ/dX8+pyfWI98OD39v3zxhe09Dx0qKsnJnlZUTW8R7BqwL1dUTe8g3gmt SV7ReI2tZjgvU+h0MxEZsDNQVO1ueaWj8Vmr2OtrND5rs+YwYHfCqOrdYZ5ltK30pYvn055e o+J5o1jjtMJZVS9y3vEADdOo6t1BrAm9kzTxMe0B7Vns170WOqfc6wyJARqmuiyvYTMK3qsq vc0P3Ch8Xg2z/BqFzzvEft3rVje98PUq47TCvapi3DyUijuwz3t9T2tCa5IuYkw7vFfd2W+G 30h4r7oT4JzmGonPWq3bGYnP2sRepj0hvnZT+TUS3qvo173ngtWIeF69mjitcFbRr3zPlekR 8b0KVfMKvBHxXkUDT7rYEfGcQgl9zwnBEeiccq/CDAz4XoW5+54z/yPgvYqW3nsG0wh8Xu3m 82sEPu8Q+3Wvb3yvetY4rXCvosn3nsEn+32DPcqnaLzxnKLV954hOd74XkU3Uz5ifeC9im7m e4ZqH3zWKvY67XTWJvby6gPfa7GPZJ72gP5D7OnVO55X0eOrU98kSprvGfC943sVpcHri9Kp bxL1TfnO947nFPrxW3Zwpb5JVECFltsbvldR63zP/+3UN4nK6Hv+qjc+r44v8rTTeYfYr3ut +F6F6Pye99Bhd9CoOtgy2umgzqoMkcs+rRGt2cZJvSJ2Eet1r6DvGFXt+j3fVi98zib2Ou10 Th2FlWmPiD/Eft0rPBn1ve4z4zlF21ZGhDI3A/Yo9jDteWMLr/kaH/SM9ylqo+8ZIz2jtYj1 us/E56xib9NeEbuJvU474eiQuEw7nVUHx9d9wptW23WfsDeOMmJ0IN0j3qeomcpwu0c8p2ha v/O0RrRmGeZf9xkRu4j1us+A9ylDkffsVXvgczax12mnc2pKUaad8DW5uK5mt9ypcy0JR3/D OVXn+j0fUwfFWuXqaLrSYT+7qDrXb0GJ6J0lTbru843WItb+aoPPWcXepr0idhN7nfaM/pqS lVcbfFZPztruAab29Xt+GlqH96na15LWtY73KSOi9/xktI7nlDHRW7wjWrOkmePVCLuI9brP hvcp46H3/Ly0xudsYq/TTufslsQ2UHpXZtK0X/e5+9G516mkv7KN9bbKfc67atgPqX72ez6F VvF9ynjoLdaI3vM+5/NthFHEet1n4XNWsbdXK/g+ZSz0nm+7YT+ke8bKJEArfFadHLjuc/dD U2n7PVtdy/g+ZSQkm7437IdUgVu2hm+gQO2sf2cZLkZR/tuT/oHSEoBUjCYk/QPFF7Q+lXZP VEG7lcViYr5R2Os9G8mP9oyxMu9vmI1OYzroRmFPGG8gP9oTT0q8v+FhLhbT8eT3vNMGsqO4 81rl3RMb1QiIzmI62EZxcyI2kh/txVUl3tc7XGcxMeMo7sXVjeRHe31GmfftEze/PvlGca/N bBQ/IrJgPMiCtrTuPKaDcxQ3W3Aj+REz9G/okpvJxJyjuDlHjuN/U51LxKfqy/U2O0aVBPg8 qfQlNoy9g0C/EI3DhPNidwR6JLt3DM3IRFznADiTCebG3Bk59MjLHxi0cdzCOpMJZ8jcGzn0 yO99Y9Cmg8znuM5kgnky9wYWPfGRA0ZtImqQcRo3kYmp6QGDNgUMWtAfbJZFf6IajQnnzNwZ Ge9IIU8Yswfj3YkQi8fERRofjHdk0hNrNh2sWcN1HtNRKpYyxm3KGF+JCe8YtU6vWCwmLttK BaM24aNtGF+Ji8Ec9Y5r5N5ITMfqByooSXfXekM2UlfkpEOI/chJdx7IHd/o15x0ZGTTEuLC vWMcuTdy0hE3YIxlWopY5MYbzpE7Iy0dFrwyFW5lLtxavJUb1pF7Iy0decOJcIlus3E/WUfu jBRyhKXyj0wL9oszecc6cm+kkCN7+qSQ33E871hH7v1MIUfK+0FJRZoNs47cGSnkyHjHiyVS 2wK94xy5N3C9AZMKrDIVWC2+5B3jyL2R6Y0sXyrSKO871Bu+kfoiyxsZyQGDjIXLHPWWbeTe yPJGRnbED2ThdTkX/75jG7k3Mr2RPU51jOWWM3rHN3JnJHsjiT5jkBUmn9miwx3hyJ2R7408 6oJBxrpdC/aGb+TOSPeGGCu0CF54Edwv855xVGgNvNAa+E/07A17zzn6kZ6NqLcUzyfGUSGO Z0GO5/sbyBWFKWL+SB/4RoUoYobkR7tgabJBwx3qPduoIr+XCpbqXnfqcoSoS6/9nmtUqeqh UtVDTYRL+k8b955rZPpPjORHJ3/6hjH5xDWqGYPsgz+NPHIqDVy4D1yjWjDKKjExK3G5TBbp A/eeayTeyKJG3vsuL+pyRMRca7EPXKNKnJBKBUaVyhVqv8e9ZRtVqlaoVK3wI+3ZQ+GBb/Qj 7Rm5mG8KX0d94BuJN7CTATNi+Daq4duot5SjRiV8jUr4WsLobdhuPWofOEcNeb5UB9Qy8WaZ sbFQ7xlHDRkbjuRHBaOsUYX7YmI+MI5awehtBaOsVYyyVil6HfeBcSTeyEtGvnPDKGsHs9F6 mQfGUSNmoyH5ETGkGjOkFu4t40i9kZeMNHVkX8TG7AvX8rtnHKk3kpORkfrGMOtcBeBqfveM o9ipDMCQ/OiZROyo93yjn1jE0HI7ExBdH/Cea6TewPUFzIyh2/Md5h3XaLoiyRf500hfmkc3 pM4HvpF6I8kXb79i6Ham6C/cW9aReiPJFx9Bw9DtVDS+cG/ZR+qMHF+I3B85vvadeeAg/Yrj i1xn5gou3FseknojxxcidyAXKQ6aszWK5wMVSZ2R4ovURqqHGVwP47C3bCR1RoYvMjGJUT+Y UW+wSwmci7cGEeoHEeoPNi4xZ/VbazrK9ajeGlTfzWRcjLBBM7Yb1HTAjwKuQVWig6pEB9WZ DXys9gF3ZeJ6ZA2DebNIcqZqlUHzthvVZMB5wDwaRu6gYpXRMcIGTdsuWqfLgB8lXKNj5I6O ITYGhtigIuyNqx3CUcI1qAZ7YA22Ln89smYd1mTAuYTrkzWLbNxAuMzMc7aoy4BzCZd6I2sW cbE0TBdjb3BNBvwgJkYIMQfyIywu0TXuT5anC4FzCZd6I2l2UzPzN1IzmZ2+UE0InAu41Ntp lD5pKxwOQDz4rUb2dAlwLt06+K0LDwsuP/itJj7q8t9ctHXwW783Y7ZDuCpV9QPRpL+5XGv6 bjrqZvUOCFXlXH1QR013tnKpljpvNmpyyPCGMFUq2yek5fiNC7XUe7NR88Ikpnhgprgro1ou 3rhIS703G7UszL8JG/W/lxo6LwPoqLp789um5dba9j0h9V+PdbqvUhfv7bFMczHaKe5zHG1X 1BdulRvHIp0Cv2Sao3FOgQg3zc4iBpbKZTa+KZDpdAc0fceb6fKl26Qp2/T9PdC7WesIaKzG NQ3fZC5GNQW+zTQLT/YV8P76Ipri3ulRN8KdF4bbDMvecEoz3cyfiWwcU9yQWnQplWIK7KEU 27czTHFz9yhkMCGYwhU3Y6/GF27qKzvfKb004vvT/ajfL9xiPrZFLo34/pTvJp9FvD+lx8n0 Jb4/5Y9ebQzvTyl2sy1FfH/121mlEe9PCXzSmtCojNXrWvD+qhFcr2vB96dcwuuk3wThhNKE 709ZitKW8P6U1ChtCd+fc0lxe/OodElpS/j+lF0pbQnvT8mYszXBUy7GUo2vjPdXjNQaXri3 c1ReaH9lvL9NIs3fhCwszO/pXdBbP0HtlfH9Ka+0vnAL+KjU19mWMr4/ZcrOtpTx/pRYO1tT QaNzR3Fr8JiNyHr1xfj+lOPbXgXvLy/iaMH3l42P2V/lm06o9M0JAu9POab1hRuXR6Uxz7aE u23H9O2M0YL3pyTp2ZoANxkbNb4q3l8y8mp44Q7qUfna9VXx/pTcPU9V8f0l42H2V8X7U7rU vI2K708hJjLcn9Kw5uOp+P6ijXF4r+6oJK/56AlCmanx1fD+ohFZry8qvj9lm5VXw/tTYtps KrgHeozGv+yvhventLfZlhq+P/Wtr4b3p3S62ZYavr9go8L8anh/StYTgujGDcZIja+O9xeM wBpeuJ97VNZgfnW8PyUYCjUU318w3mV/dbw/pS8KNRTfnxrrq+P9+TB57rUO1/y2sfS8joHe Si5NLzIqEzW+Bt7f24ir4TXw/Sn78wLA+1Oi6GxLA9/f2/iWnfaHl/GVpgwD39/bsgqgretG zUoHBVap7uasbFAgv6eg5NnZmsJ7AYdhFNT4CjiCCcMoq+EVcAgTlMgr3gmtQp6c33gcxIRh ZMv+CjiKCUoqni0q4DAmeBYWcBwT+rfXNAYcyIRuOVx+BRzJBKVDy0gmoFVJqNe141gmdCOt hlfAwUxQarZYE3orDXO8Ag5nQrchaX8FHM8EpYnLeAYHNKFbHhtwRBPat1eFBhzShLay4IBj GhXSFlJogCtvRkO97hRHNTKIVvFUGbGKcr/9QzVS2PkDp44xvFDIPi5lCGFtHJeuNLZ+3Oh8 LFGGLMdjmSMxGbWcjzGJvXw89iz2/PGaiunPni+1iv2zETSj23GTkav/aF5DJHPH0RzV2o/G K/LeMng5mrrcadHGTqGRxF4+QimbUO8ZekXs6SNQq8n8noHdxB6ObkDJi0ePMYzfiP3L1RdF GcMM7muDmM9+S+4yS89FvVwyNeOjT8xizmcPWkwJ+ehtq5g/+mZlZQbux+f9ffT4w3ig9H0I RhXt/K1U8/ndkfvTLw99pZKpQB/ftGxS0ccXsIg5nV/LKuaPb6tyWQN/h4XSen6xh/Fn6fse xdh5LBDl/uLHuOE7mkz2McpIYi7nmCSbxPYxgiliTudop4r5Y2ykHODA4yihAp8jriGc48Hj s2REZBrLJbm/8DHuk/sLMvKjUaKClHNMmcWczxFoEXO00Wp0cxVzOMe2wpvmUbCSssc5Yh4v VVSn8XU2AjeNxbPc31uG6Dhul/t7yxCdRvlJzPnMCRQ7nRlEEXM8s40q5nDmJsI35yxGyezj zHiGKdFTflRMrJ5yqXkK5cNz3jXvT/rAI0tLxqU/cros5nRmgHrKeGaLVczhzC2Fp89ZaDep /iNjHWLunN9WE/mnXLjK/WmKjHmz3J+myJRlJzHnMyfPVplwZPBFzPHM9vVKwjk3IOUNPIvQ pXRinDMOwzZBoPkJLbpoPJfR5P5koEHzHnJ/MjDhWZJktRrHnEoWczpnYIrVeRyzNVXM4Zzb kQvkWaBu+0McM0ZDzJ3nl9S38VyUDGiCDFxo3kruT8YtPMuVxJzPObFspS/HDFoRczxn26qV zRxzc1JNw7N43XbVOGb8hphlc+eNq0aZQ96+MowJ2rfgvKPcn/YtNEuZxCy8Y0CW+9O+hWZA i02uHrOl1TYugQGMTTk74zTYun84pLH/NhVMvPdIPX+6eYPb3Y+oxiKQsty6F+MGhEOQO2xl uY3kR5vB0c4dQZw/G2y5PRyS3D/uCELKxpGUjReurYuHQ5U7bmXjjeRHP9QEOTM36GJgOES5 fywL+mGLjQ2ry8LhEOX+cYsN3GeEdze0lapgC7jh0OSOVLYQsYxrk4Q0u8p3qPYMuDosbo7Q BvKjH7asWLC2bhmOGrmft6zAZp+IweDs5GBLjOEokktUdZao6ixFjMMU71B1CS8cNXIJpf8j huhP+0AYbyHYkls4CuR+3AaiYPAm3jzTYXXVLRz1calg7KaCsZsqxm6qGAvOpI7rOVDtCtbZ VIzbnzZVWJjG6ApHfdzjpgrjpaXUWMBC2xXrSmM0Rlc4KuTEe7ECEhEnfyo0WbjG6aJqkJ+q TB43KdiItlXUUSX3wyYFRH7PRH53Gnm0/WCOGrlM5PdM5PdMJYKZVtkXrG/AdNTI5b1L1kby ox9U/52eHn1Lo6NG7kfd/4FBm8cNqm88xBUAmSs2sLrijVFQSK3JOe/Rtwc6KuTK3ntqI/nR Dxr6G9c2CDoq5H6ho4/XSwSOhWuUrnMztULqoIXUQQvt5lSI6+os/b1JG9fIFeK6FuK6/qRT v3DXlmlM6vpRqJ6YeIV3qDXOr7eJg9ZViIhXiIhX3wBKJQsb1DdOY1rXWbIAmD+IvntRwdo2 7dTl/kn0ndQrK5FHN65vm8aVEMQdrSReWXfZmVYLYPA6n2LtmnZoc2cM3kplZ88a6h+oB6/r RxV15OkT/3+j5o+tze7o/8zTx7IN4uF4WcXaiu3Q5a4Dg7dSveRP8uQL17diO3S5f5InR4XF 2KiSy6s19k5shy43VXI1quRqiS732GXccH0ntlOXm7iTjfbG+Unv26tANmPn0OX+Se8bWepE 8NqothXbqcpdMR4actQ7Bm+jrWYcdW3F9qnJjZx62mvmJwFtr1jZm7GdstzfPwlooxoz8RE3 rkpWHLrcHemIDuRHVLbR8YWZhIeN7tIpyo2cZ6ra+EmPeoH6Zmysyf2TGvVJKKed5m2/Jd+L 7VTlrhi6H4RyrCngndYXrqlrnKrcVHnXqfLuJ3VnL9pJvhnbqcr9s7ozcqmpKGjh+m5sx9dh UFHQoL5m0E4jg3Ya2bi+HRtXyg3aaWTQTiPPksleZLQ2Yzvq5H6STMbYHVTNtlFtK7ajSm5Q NdsoGLuD9u4Y2BJcBcY3Yjtq5AaS1Gnzjp9UiBeqb8R2qnE/qxA7TVE9ryNENWmZtREb1cdN X+Q8R8BE+r/zlk9U72u4PE69kfPcAfcHRd+Nq6+Nq+OeBH3vuMn0ukwGxwOYq+PU+5abjKTa N1WtFNogjLWN3HmRkzen9lkst9DOYIfC0LNaLtLonRF8Inq74po49d5c4s3RBQJ1eFOMkj7P oSvk3ov1u/D+h3N+56md53vybDdhIa8jDKfFD37eTP1vpTabdd1wrkSgupaqcSmT4lDjMh5F Qw3BrAuYbat8fekUhPIoTk2wZkyKU0OsGpOiofZhjsaAqKhR9qUyGsqkYEWzZDyKU/8sGo+i VT5rMB4FqKtNdGNRsBabLkRXUm3TFes5hwEab6YJp7OnoAn3pRpyyqM4NeSK8ShOzblsPIpG 1mQsCtCz+1L1O2VRnOp3wVgUh1qecShAW890+CaLYqnwfalmn5IoTs2+ZjyKU+OvGpECNAFN Q1CZFKAh+KWKgzprzYqDyZgUpz5htBlvUDM09UPlUoD64UQ3KgVpJSYjhqCqYlIGiZApApwx bekt0Gz8Uo1HI1QcGo/FGRWHJmR2SgWhJ2dURHifaRgvI32oUwbnVLCapVMqIp5TmT5pq2R+ qaamrj6cmprNeBWnBme1tQvQ7HypxqcyK0Dj80unXZVawYqgyZgVp35oNGpFz3zWYNwKUCed 6EatYC1T5W5FUj1VlteM3I79UGq2xNNRU/VLNViVYHFqsBZjWJyardkoFp28ky0ZgR7sl6rH RqHVnOqxwRacDrVZY150UsiWBesYDsVaWd0W9sWpcNuMfnEq4lZjYJwKusUoGKfibjYOxqnQ 6ySMU9E3GgvjVAAORsM49IKNhcHqwkI+iO9DiViZCjN+T+XiZkuAp9JxtYXCUxm5GB3jVFLO xsc4lZedkHEqNUdjZJzKzsEoGYcOtDEyWDXaiCSHwrSyTkQJ+1CkbkbLOBWsnZlxKl4Xo2ac CtnZuBmnoraTM04F7mjLt6didzB6xqHvbUu/rAYupKDQD+VwYRAJQ+NUGm9G0TiVyauxNE4l 82I0jVP5PBtP41RKd6LGqawejalxKrEHo2ocuu3G1GCVdxkfXfkbK8LLCEnYGqeCfDO6xqk4 X205/lSoL7ZofyraZ+NsnAr4Tto4FfOjsTZOhf1gtI1Dj99YG6zeL2OkUA+lfxklCXPj3Bmg GXXj3EmgGnvj3HmgGH3j3KkgG3/j3NnACRznTgjRGBznzgm+RcSxz4IxOHBXBssg6i+WTv81 RGjj+dOtaLDd/WhvW9asba/0y+/lbrk2bDmDjbLJHMgpoUkHq4l/Wq0Ne85hA/0BVsiCvV+s /ZkUskEjTWh5qf3dUm3ck1mOsTkcKGga7/DuF2ojEkyIAhATvuJIUxheuv+wUBv3FMYG+gME kwX7sFD7I8Fkz5A1S1cA15aOHhZqY8EWEPcMWbdEceOS/NnCvV+qjURjikQviHsSVuko/Q72 frE2NmoHexL2F+QV1zB4Wqz9BXkFmRtvag2O+7BYK95IXkHqBtGjEtEWTBvhaa02BWwNidhR ifQxE+ljOuzdUq07Iy0GhVJ/oMW45MLdUu2vaDE/aMVu2JvFWvfeuIdWLDaGRKQIV3K4Xa51 b+TGYGMg/eREOhwb93O51p03LMkn/0S5WbB3y7W/ptygzjFJ0tS1mJj30yDGDcydJ9Th0ImH TeEgPlelNcpjyda9N4+DJGlywNaQA7UGWqM8lmzdG9k8yBB6ZPNsVHgYf5DMgywWfK4+ZenQ p6ApM3lgMS0TRywTfWOjHhOi6L1xaePzXLEVZJIqq2sx1f57SJpmkirLJFX2E0PIcfeyKoua /sgQ6vjhyZ2bgeP6siqLmuZOzYCU+8obUIl+5pohtqgaD0nTTOyzArSQErCfKeEGcq2pHnqm rOmK+rM/sI5cimQvqh5ypj+zjpAdRJquC9dXVblL/NB0RXLQD5qupnOy11RhrdadN+yp6Yoc qYIfnAVrS6q4VOvOSGXCNvADlcklVPaS6iFo+jOVCYVSSeJ44/qSKi/VFpI4NiQ/IhZLIRbL wvVF1WOpthCLpRCLpaKkzDyKiGuNay2rHqKmb+xr6htbw088qY1rC6unqOlPPCmUUppH2By8 0a6l1UPUFLWUHMmPiB5TiYq3cX1x9RA1JSpeJXpMRQlWkhZrHgy+uHpKmpK0WGUB1gfy1ca0 hdVDzvQn7hU2A9oVpXl4+cLqKWbaqBmQxl4lZl8lxs3CXYurLGdaiXFTmdo3qBkM/OQ0D9ub DWncGTldSBD6gdO1YO82h/klqQtQSWxyo97sDePeQOkCzEfx1eb9y93GMP2/SXw13qDebQvj 3hv3FF99JIk177XutoX5FUmMpIgbSRE77se2MO65MUmGuBENsREN0Zejb7eFcW+gnuEXp2HL IlnujXqzLYx7b1QkHL2/H4lnzXrXj41hfk06Q9IVSdRvzJutYdwbWWdIuiJiY4/cBhz3c2sY d96wxGvsCZtAT9TD2IfgdmsY90ZGG3L6fmC0bdybrWF+xWmjjdo7FQI1+8Dc7Q3jzhuWNmrv RGPqRJjcsDebw7g3UtqwNaAqXuxUbNbsy3W7OYx7b9yOPc1PVLmFe7c5zK+pckgTI2lI+x7c 7g7jzsiUQ5YYMTEHMTEd9m57GHfesMTE/EkkdcF+7g/jvki/e9ZIxZZgn/Db/WF+Rb9DMdNy g3m3N4z6IvUOxUyReeVCp45qg4K7nWHcecNWagINPzaDiuIW7N3OMO6NrD5kNf7A6mv+tm52 huk/kvqmtCnq79IE+4a92RnGvTfu+EYCHipk0gx7sxHM7b4w7g20PsBEHfkp3XOD+bknjLpu QNSQ/5EnuEDv9oT5FVEQGXM0x95sqHW7J4x7b6LgYsy9kYGqWl43mDc7wri3Y/rsejDRNCQf 4lfG1ejv9oNx780+3GzBR/bhRrzZCeYn9iG+dJpQb65sf7MHjDtv8uEmC77xpQeaS1+QdxvA uLdT8N77lYcAvckhZNpcKP9u95dPIdMtjvo/CanRSYS+CLqlS5nSuI7gV/8DKI0GRUKmbiQZ UzO+iK8RPiVM3UgCpm4k+VI3knzpFqgFcYL9sjfTY3mCcKmbSLbUjSRa6ozYcN7NPAFtMhw+ 5UrdSGKlbiSxUjeSVOnW9Q3n3ZBMqZtIpNSNJFFqxlc87uaUJ3VjR9kNN7ZXPN7NKU26icnx eDenLOmWQ/64IJIk3b1NOt4Ny5G6YjOJkbqRpEjdSEKkbiQhUjeSDKkbSYTUjSBBuiWk83k3 h/yo99D5vJtDetSNJDzqRpIddSPJjrqRREfdSJKjbgTBUTeR3OhW3S7nuyGpUf+okdDo/tKV 824OkVE3ksioG0lidHP3y3k3JC/qJhIXdSNJi7pUeT0vXGVFCyOqqGg9PdurnheukqL9NJYX ERDVmF8fP06vdl64SonG0xheTAN6qYzocTcqIlpOY3+1825UQLQxogqI9tOzvNr5GoR4fJrS i6lELxcOjadnePWzWeVXP+9GhduOd6PCbfX0bK9+vhsVbeunsYBG3MLMr3H6pdc4343KhMbT GF7jfDcJde/UpAKh5TT21zjvRsVBj3ej4qD99CRFPzfmLf23bAllAhdmJFFBtwaSIDQryhWa zfRAjzdkaqD19G0knOjWiiKLy1pQknHhZhBvdFsioUe3RpSFXFbS+nRUEpxUmwwNzmGAa3/W 09pQ+vLLrZVkMt1aSFTTrXnLby5bQqnOhRpf4RgNLL3PtPQ+3XzvHD6ARevz8DOdz3Fa+8dt LZXPxpim8VlP3/LxaJe+Zz6t6eOFLW3Pj+sNHw1BlD0Pi6l6DsY0Vc9++n422aXoWU9r+QiF peaZT9/0EWBLyTOe1vARuLMChQPcRTzHaexnn+ESnu00VtT1dGM5eywX78ynkTSR3Yi95cIM Z786C02OC9ee/8PYz/7cBTuPpqc9fz09y+ukrppUZz6NCb5PC/PjS2YVJefdpNdxjSrQOU5j h2/tlxvxq7w86/n9dmnOchrzq/FA02U50+n5McowSc7zbuLruByV4zwCSOU4++n5MWJyKc56 Gss5CnMZznx6plc972Yrc5IRdTkd83Wc+f09zkHmhyKnG9s5cP3Q43RjOQfDH1qcbkznAPtD h9ON4RyykwanGE4FTjei/uYyov7mlxvrmX58aG+6EZU3lxF1NxdmPJOkD81NM74OvENv042o tvnlxnYmfKfW5jKWM4k8dTYXZjoT01NjcxnDmeqSvqYaWF3zy439Fc93c2hrurGeafupq7kw UVVzeaZz0uBDUdONqKfpmK/D69DSdGM/pz8+lDTdWM8plQ8VTTfmc5rmQ0HTjfGc+PlQzzTj 6zAcypluRN3MZUTdzDX3R6qZbiTNTDeiYuYyol4mzCeeo4EHrcxuM/FP22j/bQotgFcW6p6D RRMWWgBdORDJPNBs+LqXm6273RlrLYBWHDYbq1kfA7A6q3u7dbd7Y1UElgYQoTYSoXbj3mze 7d6bu04CiRFrI2j334V6t3m3e0N9BGASjTASjbDbMsjt5t3ujeURKOu5F96bDRc/ce+273Zv LI/AeoOKDTDiFny2wHK7ebf6Yg0DPgOq42H9zY16s3W3e2MNA5ZydGy2kZivC/du62733rgd 2236oYZh2KLQ7dbdv65hwGID3jjRce+27nZvLGKgagNA5Q11dcHpbt9u94VSA0DM2GoTMZwW 5s2m3e6MdQZYbUEs1UQsVYe927XbnTdswTabNqtDKgcA1FfHbnbtVlcsMcDKhY5NNvGutw56 t2u3e2OJAayOf6h60sXa1+Ju3273xhoDVvVEMjzRkTbuzb7d7o21AEiGp/qYTPUxC/du3273 3ri7QGZYCYD78Qa1/p2527XbvaEkADBJz5ELAjbqzZ7ddwUBiEuVXZlWnx33ds9u98aCAOA4 5Y7NNhMJethn8XbPbvdG4j5KkVIZS+btZB33btdu9964VMdS3th2C+8xbp/b25273RtqArDt FipKZAb/xv3cvfuOwI8ypwmbbiHK24K927/bvZHBT1R7QOV9X210cLt7t3sD0x4wScKt8J7g jnq/d3chjk8hBbeyS06UOI8t1wYdT3t3FyJpFio5Kch1mBT8cYd7v3d36dhyy8CWW9/Eg35T y3Xch827xRtp9siDps27K1VKDRskPe3eXalSqtLu3ZXIxTXdoD5s3l3xWolcXHeBiNLbsdna 0Oth8+5KBSKVCkQqESorESo/YJnuVolQWYlQWWmn7co7bS9Y2xX8FHqlrbYrbbVdiUVWiUU2 bKi49wVnoVdikVVikbU3NtxKTOAN6xuDH0KvxAY2JD9CVs08Sje4vjP4wXprJKzdAn56WsSG 23hLbBvZrp3BmfTWqIzDgPwoY7tt+Q7U9gU/pF4bqntSOV4j5cFGyoPDBst7V3AWeiXhwUbC g40qkBpJtm9Y3xT8EHqtGLqNKpBax4bbiLG7cH1X8FPolRi7rWPDbVRy0ajkYtjYfu8Lfgi9 Us1Fo5qLjrzlN7XbhWp7gx9Cr+INbHPAPLnm+NXRAfPeHpx1Xjtp6H5wzZETTsXPC9b3CGeZ 156w0XaS6+7Ere3lBlS62nZqvKLCKzFre8XPTa/UZC292RuFHyKvFdtsp0rPn4RTN65vFs46 rz/rpmLJAW+VbmmTF2G1U+eVits6Fbd9kMHLHa5+G9qh8zqoPvlggyMVmqZTNqoOw9pROjgC NtmBZOj0zbRtbLKW5HmxUDs1XhOxoaksc5AC+KDplI2rI5B2arxSHcMgBfBR8YMz7lBtpNBO jVfEpK0GPpjb+LGxnNTJk+3UeG34sflgbiPNnqdTFq5+zNqp8kqFxKNDu/3QY6V2a7mu14o0 LhpU781dPjVZkWlMxZMbV7vydiq9YvGkI/kRMq2p/n2hWpfbTqVXLIBXHP87Q7tVFg6gal7u DeLUecWKMQdS+kGBRuuE6Q9Q629OnVefT9k4+jdWyCi3bGNaou/lAe1D53XTmH02xYl+yIxO d5B286fSq8+lbBz9e0BbVQrlJ6a32U+t1y1x67Mozl4FajQi6lyE89fbqfW6qdbBWmj4n4EW vRcumLmspOgVTkSR3r/5geG8wf7/pUR3pdnMDjWI3JWU98LCiqsTLakXSwJzm40juPCP1OqF aF0xHaGnvY4/8mMtxtye4/PHA35sihLraMCPqSRi3dFSmbH0E70RdwCujjrck2YNuglJ+B4x ln6i70a10Ysdaehuz36D6hozloCi84a1PmAddYClRYDuOk6uMeMZKHojbgdcrZZ2z36H6goz NtbavhvThGDsCF8XfQe7678seZlMb8s+gwCz/pbOwP1oUm6D5r3dCoAOapcKZEe2wLA9xx2s a8tY4oneC9eXKtYRPIPES2yuYkUKPhs3vbHJGpIfBWyyiXa527iuLmO5J3pv3ICNNkVstImK x7vLYy2JmVwYFhqCAe0j6DNYHmrDWkfs2Sd6Iy50JymtRlvnEaKa5tZSmLHufftuzISNNhEi rQca5lKX8bwTvTcqYa5WW+UIX5dNxG1tGcs70RtQqdlqz789xx3uIMkadN6wltCtow6w3NE6 rO/J5qkneiMu9DFpd7RVjnAh2z5FW2PG0k/03rjU1abd1apnu8FdGjOWgKL3xqW+NrXVbKsc YbMth8oMdIrujLDYavvqbKZnvwN1jRlLP7fvxuzU0QxEpFZr1+fSD555ovMGxT5mUKOloukF 6toylniiM4Bim81varPc1doHcWvLwHfBvReuIe0jaLQsD7ZxTVvGU0/0RlxotDlgH8NLghvX tWUs+UTvjRuwn8kRGy3LjnX7gC9tGU8/0XvjUl+bIzZaXmrcuK4tY+kneiMutNqcsNVm7Gtt YLC1ZSz53L4bM2Grzel7ICa124Vqu61Y5onOCAstN2fsZzJ3tzbi2Poylnui98bN2M9k6m4z LVotXNeX8fQTvTcu9beZ+ttMc75dBx9bXsbyT3RGWGy5lVoud7cGu+RlMrUD6mwNx48aYbYb TN9vxXJQdN6g2LSon800E9Nt1JVocxRAbTiqy9TRZupoeWV44dIeKYSLXQ11trlTs+Xu1kZz W2DGVvPRG3Gx3Q5qt9zjevn8esKASd2trzbrUaHulgXoupfPu8CMr+aj98It1N0W6m4LSV9s XJeYsdV89EZcaLSFutvC3a1X5tuq+5KuQe+NS91tiYTa7lBNZoYRoc0WvP+IX8dCAjMb0QRm bBEfnQEUv44l4esqxEJy9twSmPFVfPTeuIleF/W0Jd1x/bbAjK3iozfiQpMt1NWWzK/L5AmW wIyt46P3xqWuthT8OjI/YOOawgyPFAv1tAa0j6CnKby65soHS2DGVvLRG3GhpynU1ZYbut+S l8G0SX03JnW0Ba+U2TKuqLC0ZWD6xr03Kl5no1bLc96OuqRlYArFvQGVmm2nZsscnA9cmERx 743bqdlST1t4/drgDska9EVUbLTUz7K84UI9NGvQecNSV1vf1Gapq3Wy24duDXovXEPaR9AU KnW1G5eVa9AZYaEt1IBfx3rDdPvQrdm+GzPgl7EGfF+V9nfbqKxag84ICy+sUmdbeYXVErsP 1Rr03rjU21bqbXkf3IV76tag98al3rYm/DhW6m03LmvXoDPCwrfRWCzuSZ2tM9I+1GvQe+Nm 7GkqdbaV9LA37qFfg94bd/e2UY6w4ZIQn1PHPjRs0FtxN5IfVWq59RP1Q8Vm+27MulquHmHL 5f7W6eqnkg16I+4AXOpxWety47KeDTpv2N3hziPqcCuVGjjF60PTBr037u5w9QhbLne4C/co x0BvxO2AO6jpcpe7ePtcGoHOG3aslnsdNepyK69fLdr+URqB3gu3vbHlNupyGzPoqBwASiPQ G3Gh5TbqcxsTUKggAIoj0HvjBmy9jfrdxv3uwj3KI9AbcaH1tohfSt4f2glZH+UR6L1x4/pU zqOE763x6vDCPQok0HvjJnpv1PE2JquuEoajRAK9EReab6Oe947p9VEgsX03Zqa2i0+W+9yF eRRHoPdGxedasLdh6VOnY32URqA3oGJ306jHbbSzwcbl6gh03rDU6TbqdFlR1flYHwUS6I24 2GwbNVvudB33rJBA743bqNl2arbc69rtHyUS6LtROzVa6nMbyRY76lkjgc4Ii22WutxGVDd7 pGeFxPbdmNTf9jci3hGyPqoj0HuhCs76G9ts577WUc/aCPQGVGyzPeAnsnNf6y//rI5A740b 8BPZw3pdTY5ueF4f9RHojbjwvvrua5scES9N28FHfQR6b1zqa/vua9Wz3eEe9RHovXGpr+1p fSObHBFvSNvrR30EeiMufCN7Xn3N9LxFPaojtu/GzNjRdHyyzEqzGDgrI9B5g+Jj3V1tk6N4 A3rWRaA3oFKzravZque4wz0qI9B741ZqtpWaLfe1FrRnbQQ6Iyy22katlpnrC/aojUDvjUtd be/Uapn8ab3BR20Eem9c6mx7p1bLna3jnrUR6I242GoHtVqie2kf81EZsX035qBWO9bnUfx2 u/1XYz5JBxu6MqrnhRQ7QhKPP4Z0HqnnD5KQBE8/euZA4Xn/5Yuv4oMDJXrNgbb866JLJE86 DBQ56W+7u+vR06aC8l0Jwv0NA8XF+tteYKBNC7soKsn+pWE0PvWQf+jyD3DqYO0pDJQgEYXz +Q9V/qGBv7XAIv9Q8B+SNdRAmzrKHsZB9mUNA+VD5JMURC870LaRsruxRk8YhU8uwfD/NXc2 O7bjyBHe11PoBfr68F8HuLjAjOFZeGegd4Z3ht//EVwiM5kRKVKnPcC4Bw10d6VYqdIPKUr5 MaKHaddn73vvviHhHt59w/gNOOoofTW8UdyjP8yuDbVvaLhBx4kALpxfQ7L92pD7hoS/kfuG 1DfgrvtRdy0pMgbt7spjZArgJNr30YeWHi7Y/uxj4rtvoF2/ZbAMZG16ph6+EqFsRn+4hm4G HMg4tbs1jzE4vFH18kw/RqrcNyTckPuG1DcE3EeR50Ig69e+YODaEPoG2nl/APQw7fqUx014 o5LVmfpRd90pMq89cw9fR/3CHed+1F17iqxxu1v0taH0DXCtcz/qrkBF1rvdR/rakPoG3HU/ 6jKHVNhQ+4bQNzTcR3+aymAE7c8+JXjL+AEb3n3DKcPE3FB6uMloMPOPXWbpYHDUReYuRXo3 bEh9g3Zi2JBlthNOlCkcp05OI41m/WTLiW+88zGJCmQPPS6mXFgUaxyXX24FGs2qzOnCiZ6w 4/aat1rDDWMWWOQ+n3votzDczvAbuW9IctfChtI3RLk9YcP4q4Lch7CPPiGVmw3aX4cV5Xam Xb/7hlNunblB58vjDpn5+1AiwwqNZm3O1ccVhw2pb9ALCxty35Dk+sE+St8Q5ULBb9QjyICa eOf9z5XTDuHrsIJc2IR7eB9BhngazUb7JufKwn2XQXbfcMN48yly7HMP/dEkjykazfrDTB5s oCOsLLMyU86AxyYG/zCUGYHZ4n+VcWOkYuuc2Q4weQWAedsfbI3AcaC8yNvSBF95Le/7g40x LRK39gF7IMQLDMxb/2Bj5I2h9BKNzfC8sUJV3vrH2iJvjID4m84sE8czqzP+wdZIBwfKi8z1 m8+sFAoPx09oS8yJLOSLCN4XnVYtEnrjH2yNZDCykPbVo0xq+JbXWf9gaySDkQnFrPR9WUEt sv7BlgDvYr4HJHhmdMY/2HqPBCNjSg4Pymh54x9sjFQwntaMH5MS+ZzMtN74B1sjwRspL5Kb rD808zrjH2yNeRHepNJbog/Bwml53x9siwAvnlzCHNKKKLvZ/mBj5HcRj/b8LnF1Utb1tj/Y es/vIsdMVqEzr7f9wdaYF/vuiV8s2Th3clre9wdbI8SLOLd9Q6jC4vqsG4Yi4Q32xjGxfxdA 3Latsi4RivTGIVES2U972lYr2xuG4gNtiwgcL2zQvBuGItPChkwLG3IkFNCpkknJfM1Q5EAk YGSAFZKSrMBMumEocvxB/CrmJBqSvqta1iVDkRMOjDlh371BsQsVubxhKDLBAx+g2BWxtmEo Mi1CuEGxCFkWPrkIDdwYilzo3NJiL0FWtSXZEs+0G4ZCbYkpk/7UCLbl76CTRlgzFLnR6W2E 21LJKXPJaeZdMxS54diYT+rAVHTKjqwS0bcNRZGJrcondWBaNcAM6xRn23AUN44VCbMXduDu hnzLuqQovpsiagodTeDS2Y4+MYuM2gahUB0mSmQ/IRnr5Okk7ZqgKAFPbAl4YguV4guX4vXP XBMUhRCoErH7FsL6GTi1tGuC4gac4slFHpIMbi3rmp8oic4tEpEZ+y6bPk8VtQ09oa7PlEl/ KnRqC/XdmXdNT/TWSIXiua04NBYWC9JLtaEnCr3plYpDY6GyeVkqqe3oCceG0qteIQ7f0aF6 D2zoiRsdiuf3xLGxsEiM5t3wE+Wk80vrS8ubOvDJ51fzrhmKctL5pfe98qbzy+IzetduKIpC 73ySSX6qVOlm+2vLu6QoKr3yVSt0h0eQUzvDhqF4ADlpdZKT+tKsG4KiEjRfaXVSjcSXRebL NO8SoeiNMS2SkfTWV1nPRHvuhqGoiU4tvfbVTKeWXvss75qiqPTaVzOdXvxrmf3R8WDDUXje 8tjTlnmRdcNRVGPbV7Ql/rX00jfZsg1HUe2tzzLpT40QRnrrs7wLjkJbIxoZKS+SnKzWp1pq K45CW2NeJDlPOr+sv6HiZCuOQlsjGonn9wmN1LwrjkJb/1E2Es+v6pOtSAptvWcjEdpinaOZ 905TaGNMi8xWwMHRab+pktiKp9DWiDAiukZvfi2usi5oitEW8UXk1jy+uFJTW7AU2viP0osr 0bMVS6Gt9/Qis4YLHG7JUmhrJBiZNkyUlxizARatUAptjLAhUYGQtDBklrckhTYGJBBTEs/r JMryUmISGyNniDiv5wyx68oz14tMYuM9Zhgp7blKK2qQ7uPKDTSMlBd77kkjozzMTQ2S3yH6 vzEvdt03nV1Wyp15VQ6S4eM39dw3ITUvHBjPF51dBddUDdJ9XumtEQxEiJHe+84Xnd6ZV9Qg +QNLb4z8XqC0SOs4LlDTih4kfmBZcYFwdk9b/NKkNHYn4qYiJHxg0dbIBSJoZm9+owC6yKqC kIxXYcqEPffM88y2Q7E+z66pGiR+XNHWiO8FyovsWmZ2TfOqGiR8XNHWmBfhNXvxWzB8Aq+p HiR+XFkxfAivVTq1juETRbEpCQkfV1YMH55fRNdYw3NmVUVI+LSirQG1w5wExLGrgEqAydCI n1a0MfJ7mPakU8vvfJp2ikI63vCkznvSqX0THsmayaovNkUh4fOKtkbWLlLef2rW7iVF8DGO nfTTn83a2d86DGDk9FxhJe2ucwzhJKcf+J3cTrkO/ROphPs+O55zGAR0tT2UqKkWbJOuA5Io tyY03hU6LW+TW+JK8MbWVe65gMEB5GT03LnCk6mbx9czDxgnopdPbm3SqOD7k9vgQ8ie+Tt4 CEk3j+87bzWODo+vCoDT0KMotypdtKKf0RWuxwB8ImYu0p0jHl+d9FzE61eFtovovHSFxygQ 0LD5CnfQCA2bv4PHYIMiXr8yibmIx1eEsGto2pxbkXGtom1zboNuug4oYXCgRRn9rHIrEyxK eP2KYEURfbKu8BiQA1o4X+HO7aH71ndQBvKE1y9PNi7h8WVBiRraOOcmDNqPil5hV7jK4yZj 5rHDjO5juRkRl/H6KUEX0dI5NyXuApo6X+GOTKFX2nfwGJRTxuuXJgWX8fiSUHMNjZ2vsPL1 GY9v4GHXzgoGBySV0SsutzQRqYLXLwkgFdGD7grrxKLg9RtIWEZnu+/gMUCqgtcvTt6t4PFF gaIaeuvlFmVWU9GHL7cBgl0HRJkHtZbR8PkKK+VW8fpFoeIiOgbmpvhXAHfBnrvDX+BDeLU9 Bq9V8fqFSbZVPL4gJFwDJ8SvK9xkSlnx+BT5KgelGLhXRh/G3Az2anj9FPWK6O94hcdfHdAf +gp3vg5dI7+DMotueP1ek2FreHyvH8qwNbx+L5mYV/S4vML1GPP1EzMXeR6feHz9od35lO6z fj2CJD4oluqb1x52qZsQL+7POHs4+T/63cORDzGIIh+djn7ikj9x10lO49TRSU4i8ecuSe7h 5i+gsj/uclcRHKRbo/Vg9rfR2cPJ33RvIZPoFh1/c+Dbud/4Kbgbvx/fq9/61ElSD5++S+Ue br4DDlqq+u5aBceirt16MPth4DyGWKQbNN7Cd9EQM/64wMNRH7jSyw1c1/F1SUo3yCUh0NyQ mHu4+QG0iEKmG26rQG20w9aD2Q/jp0huukH/3cORHxFZkDt6nPQHT3y7B08/vrM/eughlXr4 9I+0LGifewAO4q/6x2XtYfdobaJr6h7Dp+CH7qH97uHIj/ixu8DTgT5xiKebOPTja33qQJOM JIqtbkqSe7j5CUwR3tJNd2oPu6lRE2VYN406ezj5SddbuE6aolWRqaXpXJ/4RT/x68c3pn40 SUyie+umlLmHm5+ADmi1+ulqFZaVpratB7OfBp89nPyk+S2yvjTFbgLb0nR8WI5XN3Hvx9dP E0/yk9C77pUg93DzLxCD9a3+daOKkjEFmxDG7jXmFP1k99Lz7uH+2m2tR9v++QSC/fjI7FNe 0uLo6vSSNhZ/dXgZW2d5X3QvgOM1cuxMwvI2rfBNkNJHwELzPxjoxl8u918mMjISGRkr/TJ9 YJ5HJMWRgCVubY30NeZ9kHtWnChIxSFgifuz3DPmJfxn5pXSQMASt7ZGBBvzPqDSiimF8S00 YIn7My291VG2tOPLeMAi92cdZcxLXLPST0G+YAcsc9/ZZhIsEvtIbRnXeeU8MDSfCAyURPrT Vpt4JpVPt8EVuR+0iRGXplK0YlpBvrAGV+BOVIpOSEvbEoc6GeJb1vHFMrgCdyqUlZY4PAn9 SvkmyLfF4Crcjzq/xNglqrfMtOPTYnAF7kSIXSLELtmnytq3YVqVT55nghBhzGmfKcOzeu7M KcXt4Irbj+q5JJaQX5x3fE6NUtwOrridadlApmUDT9ztzCvFbcJjH6FbyplWGcUNwJW1H5Ro CfTIMMoqUxdF9NuVtDMCt8R4ZFsgdLUri5SqrO/K2RnpSlo79CTpqpReVL16V85+FnUlOLgt 86quPBe0b/AqssEnpT057QCeouq/u4J2JvArn5T3QSjV8ooCvCtofxBLRRDwtcwrFe3oRReJ 0Cq0KKcQ21CIbVBg0bw4nOxiwFlHMbYhPIuQzrzTEcPJLj6rkCIImDjvwJ70rvC6i4nSEoL+ xG9aWvXEcMKLz/zmVtVT+crpieHZ2GdVTyR56zqvumIwFkpzulJxMlNoWUqhZSmKbZoxBte1 Cy1LKTSnexLLvOV1he0PcplbHNLy5puHhTbe05DIab1oOiOT/+m54cUXXzidqTSne9KgnHnV c8OJLz5pUCIISMSPoqtmuOGkFyNOPSpigAh+pWVONdvwsosESdc/KOaoMKyVI53o4pOYI83p 2PnU8orbhpddNJjZMulPNKdjDFDzTseNu/AiY4CY90EhUeFd89y4KS/uFRJpVlepAG15xype L7xI9edK9edGEzu2VBUmWC03vIVFfWPa9qK0D4KDM606bjDw8yQ3uGXqlDSedhtuycAjU4dy ZWmVU5Ybe8FFJIjMyyU+yfYpuzydNrzY4oNsH+WkxQIzq5pteKlFWyxgmfQnwmxbXedVvw0n tUiYbSPM9kkLT0nr6bfhpRaftfAw77nOK34bXmrxpLwEeDRaQNR4bqfL4tVvw4stvimvLSAa DNhWZm7mVb8Nt1jgfJaZw7w8t9P19tNvgxcLnMStnsStnrZAuknt7J5Xxxv8lKKtEftCMOdB ts3yjsuHX1I+q7YxokVpRR9AOzJ+SdHWe0QL85ZlXu0e8CVBGyOhhWkf1NAKWUI4EYbPcmiI EbVlXr3b8HuKtkacCiHAk/ISullI0sDJMGhrxKkw75+OPclnL8ae5odcraCe9tNpDhETkPqT JMbOWd8lZRLRMkmj1O+0TKKUeFH95BC9lBSlIA7yNFrmdfoqbRZ6nR5Lk8JwOFDB5RDFlxQP VHz5EoWYpIovpBCjrm43TRkt+qIKzSG6NWkAAFaG+xKlmxR+LJRughR/vTaOFH9RS+cQ7Z0U Jqgy91ClXByOm1pPT3Xc1H2qfAtGNaBD9IPSa8pbwR60FHxTHEpSDL5pFEX5+oyqRofoIKWX wEcoRSQlYaebVGZR2OksFSkid8AKd11G0flAJacvUX7qxeGb8lORT+43rSgtEKO61CF6VL1E jHpUX6Jg1b/l3xSsghSKveaVFIpRI+sQTa1eKkZNrS9R4erl4psKVy9FHzfVriolY1T5OkQX rNcvUBfsS5TE4tDje+FRa5m53rXHohRGUK3sEH2zOPT4Xnits5SPnR5amgVkp5+WpOAcSHHt EIW2eJJC25cousWhxucU3YpUg24acFpMRtW4Q3Tm4tDji3itkxSrF8p0QepPXstOisqofXeI Vl5UNT641lHK0OGurtfL1nc1virlZVTvO0TvL6oa3xv3oCXmm0JgkiLzTVMwSpkZVQgP0S0c pWbQLfzqOoej1Mw6h8GKzayLGKQ4HUhJ8RDlxavkDMqLX6LUOIrOXqlRRaNu2o6z8PyuvOuk pWfQj/wSxclRfPaKk0EK0F6jUkqmqGnZ5x1agkYNzP5o1jL0TTWzl7jvKptVStGoytk3FClG o45n34OWo2/Kn+yXzDOd+lQE+v/UGLN3QgxhSZp1xiL9Mrz66xHdyk/aEsvRUM6JXORumHF8 Dl7VnrQx1KIx5b7CPZMuCk+fC9woW0avp7p26lZ40pZY3EbNMtPn6c+sVcZF4Wm0xco2OwSj Zhnp8+harFXpSRtjYTtQ2m3BfKZdlZ8+F8zhtCZ629UlXssClLbGgjlKH0W80xOJn8+8iwKU NsaCORa3yeAnkbqFpV0XoBKpWyQy+NkX4nVB2q789GgSjGpV9AY9s26KT4mqIyljT0ikbpFo kZMsc9vVnlLBzpBI3CKRJUSq96SbwlPC46/UFx7K+7pyblN2+mDjixpr9E5uaddlp5sMGPYF G2JG1R77wjT1Xped0kl9gYaZRAvCEy0It7zLslMie7L0xr7whA7MtJuy0zM6YFkzVXHqLIhk OxfEDaBME4oTkYSO+Obekqodu9OqCtgVMmnoZNLQyaShU6nSci85ZRLRySSisycSLCucij8I JOB5peKQLnU0J3anU0XFoZyxM2QSHMy0lNLyus822Brzoq4WOc9kEhyssyykZuxOp4rAulyw MzwRD5rXykNOp+qZeIiU973Kq+Uhp1NVqTc06g1445L2hC74nIbsXHPKjXoD3rUkPJHJsmAm nbUhR2ec1BtOnF0+URS6jtSKQ1xz+kBRbKS6ZtZpxs61+L9Lqqs5I3YvUvUs1YWVbVqy3bwV u1Op8lJdWDB/wDJ0zauViJxO1TOWwapaYZVXS0QOSCBx05KwLxQSNy0JS6Uz77RkdzpViXSU SNy0sDUs9gW9rWaByKlUkbRpYWPYLethWdWO3WlUPbMe+NdW6gx6u87ykNOoqoT+VOoMjTpD W2XV4pBTqMLbtlFvIF6xkDdK024wzdidPlWj7kDA4hNAYnmlNMT6VB/4EewOJA/RtHtNO3ZW qCpv6g4kCVhJH0I8U33eWRpyGlUv7A71hd2hEgtZSR+iabddqI1rYwRIIqXdcikz7Ur3W1vv wJSIPaJSodDyLoS/tbXlJSXlJ02tpqPMSvlbWwPygj3CaWrlRdaV8vdoC8gL9ogn6KXpyLVS /tbWO+iFREhroR4heW/K39rSSA9TIB34C6rAkQKpFs6Wyt/aGkEatAQlBdLaVlkXut+jLUI0 ACU8QTRNRtmb7re23AE0NMpUKmVazoXyt7bGvHheSYVGtLBueZfK370xgjmo8UNMqNA1mlYe CDvl794ayRzkHB7IHMu7Vv7+wOagNhUp9zV51Gykv5sJ91ki+wm1qUi4z9Kutb9bxN7QIhbM W8Le0Ag1bfIM22l/t/SD0R9UfNqiPzPrRvn7Ef1BXSYypZfnwU72u2XsEK1gh2g0yDRSOta0 G93vVrA/NBpnnjSvZtql8Pf/SfIKu4M8xHfC3x9wokR534u8G+Hv1qg7nNQdSCO0kSdEk8nB Rvi7ndQd3tQd3tQdiImdaTfS3+1N3eGN3eF8oJSaXrW1+Pf5DCmhlFZYJV1Lf5+oxBOwN5xx 9oZ2qJelZpV5zFL4W1sjoBQpLyIptHbK8t6Fv7UxpkXS5YF7mmlXwt+fwSc2l8QOIdOupfC3 tkbwif0lyQaTOsTMuxD+1tZIPqGGFLtWYndQydGV7Le2Bu4Jc+5pKsu6EP3+TFPhX0uCxE2l TBey39oYYSr8c02P+KZNNdOulL9X2lTYI7w2FfYIVUhdSX9ra8v7T6ZNde3agKh4ar109APF oADSSpGqer3ln+4DeZ0aLvl6bSoLkzaVhUmbaoYPQj5ewLLUe5jUqSxM6lQWJnUqC8MScAuS OpWFSZ3KwvEI9yN06lQzfIT7ETp9KguTPpWFSZ/KwvUI9yMkfSoLkj6VhUmfysKkT2Vh0qea 4SPej9ApVFmYFKosTApVFiaFKguDDIMFSaHKwqRQZWFSqLIwKVTN8JHuR+g0qixMGlUWJo0q C5NGlYVBSMOCpFFlYdKosjBpVFmYNKpm+Mj3I3QqVRYmlSoLk0qVhUmlysIghWJBUqmyMKlU WZhUqixMKlUzfJT7ETqdKguTTpWFSafKwqRTZWEQs7Eg6VRZmHSqLEw6VRYmnaoZPur9CJ1S lYVJqcrCpFRlYVKqsjDIEVmQlKosTEpVFialKguTUtUMH+1+hE6rysKkVWVh0qqyMGlVWRgE pSxIWlUSvmlVWbyum99Te60qC6fFH+21qiwcFickrU6eV6uy8Lm4LF6tysJ1cclZrcqCeXEr ebUqC8fFber1qmZ40QG8XpWFz0XX8npVFq6Lbst6VRbMi+HA61VZOC6GGq9YNcOLQcwrVln4 XAyPXrHKwnUx9LJilQXzYkj3ilUWjovHhdesmuHFg8hrVln4XDzivGaVhevi8cmaVRbMi8ey 16yycFw88r1q1QwvJhNetcrC52Ka4lWrLFwXUyBWrbJgXkytvGqVheNi2uZ1q2Z4MSH0ulUW PhdTTa9bZeG6mMaybpUF82J67HWrLBwXU2+vXDXDi0m9V66y8Ll4XfDKVRaui1cRVq6yIClX WZiUqyxMylUWJu2qGT7uL2Zeu8rCpF1lYdKusvBKu0rt+ZYv+f9gUBhpV2D8MISgMGKtVvou h5oKy2eLeUQLZzFtjKww1Pmi1aOKdDNIO745LJ3FtDWSvcg1752DZ9aFs9gn52DKiR/bZtaV s5i23tO9yGCTB4u6DS6dxbQ1YrjInxoPo8uV7nlXzmLaGjFcRCXZ5ZcM8cQTcOUrpq2BwsWc ey0sy7pwFfskhpUI62S3FM27cRVL5pZimfSnBw53eg1uXMU+cLhsybvKu3EVS0Su3Ex5EUOl erL6Da5NxRL5WaaKg0KiOk+iOs/MunYVS2T7nUgRKJEVXGJbAEm7sRVLJAiUyAnOI7OQVL/j rk3FnHEu47JkxvtjlXRjKXbDZRHsfFDammaDG0uxD0pbCIxSOcbyrk3FcsAhIZNjm7O4bYus G1OxTLonZHGLSCfh89O+cGMolgmfz3i9HsBWy7q2E/sAtiLSWVZ5d3ZiufxgKS+kOr0RLQ4H 8ljc2YllUhe6GdEiiLs0cdzZiWUyccwNB4R8Ul5aUKPmhTs7sUyLaiST/uQp1LDKu7QTy0S7 3yBUZCVfy7QbO7HeGklUZCUJ2ygLs8WdnVjBnGS2WCIOCYVE8mbWtZ1YIZ28EnFEKLT4pUQa EWTSsbMT660RF8W8hKY7c9eZd20n5s1dcaRxuOgq68ZNrBDC5XBRRBqJrVBTxJ2dWCEb6UI2 0jdpsLLIu3EUKxVHhZs2GFuwkomjmBeuHcUKrYa7ObBiWudd6NI64TVaqVKIIH8iOy2tGJV5 4bVnshPRQ2KupiXiNCojaONmlIrkIVEQNdCYMNOqTxlDG701EpgIjJIcUl39sWpT5piNin8r iVzWxDlpTFCXRTUpY2Sj0sK1SstKKqHelVBvSysmZV50jVDvSqj3DcCkvOKIOE3KWHQtU1on OgZJ2QpwJlWPMie6RrBCJU4ScrJ3suZUizIvumbeyZpn/j8xjbTEbDosToMyJ7pGsi83z1G0 y6WlH5ZXDMq86Jot/bBM+tMDKyl+iOZP5jTXnllJhPleNB5oWjUo4+UvvTGiksjyeWvQuEjb h9r2uhGNSJx5Y1Ak2WjJqbosmkMZL39ptubUMulPTshsnVcdyhhkS5TWa5mR2SYklRcmXVDQ vOYaA40Ix3mg8b3KOp4LzauueQdPJBpJK7Cx8fnMOyZhzSuvkVZgI63ARgtEGzvgyQueIu/N a6+RA14jrcCGLB8bBs+sYwbSvPIaGQY3BFsfzTYlq8wUmtddO388mW1uyUM1blS0p3ndtWfy EIaE80VDwsw7HmfNfU7prRE9RD4uUF729ZX3XOWdm9dd8/pomNfbYsZV3jGgN/ycoq2RE2Rb TOT5uPtqXhl6m9ddo/57JhwWTgOSVTgJ8op7o9wWXnctU1pikh0mWFZJZczxqmuI3TlEkHPS sKDejdqNb5prD+6VhMex4fdMK6fgrrmGeBwZfp+2HKoJf3TPq3fwXXMN8544KpysuIZjjRpN 6v1wV1xDUvKfSm/t+kO0sOFZO28siWAf/t7/P8p3nZvrn+9j+uvvX7GvGP6+kt9/2e//ffzL 38KRvv/vf/7zZzx//RZ/pvrrt/TzFX791+///vVvv99+P+UsC7r/rt/ui/dTetvew/j98Ldf v4Wfr7/++i3/fJVfMf58/eXXb+Xn6193uQazP6bWLtdff4XrF69fr6/06/s/cZelhK639f18 5hwpXcfz+kt822/+x/G/ufM1BQplbmRzdHJlYW0KZW5kb2JqCgozNCAwIG9iagozNTU2NQpl bmRvYmoKCjM2IDAgb2JqCjw8L0xlbmd0aCAzNyAwIFIvRmlsdGVyL0ZsYXRlRGVjb2RlPj4K c3RyZWFtCnicnVQ7i9wwEO79K1QfrDMPWZJBCM7rdZHuwJAipEsuISSBXJO/H41G9trehcsF gyR7NOP5HhK0aP40vw2YE+SlJxk7K+PLF/Phwfxq0Mjz8rUBCZifTd5UVj9ku5F5GfXrt+b5 oZSUJ+cNc4PkW2dsoDaY+bN5N6FhMvPzx8hDOmEEgjxzhDM4pEQRGUYJYF/CDnzK06QfKSR0 LsJj3siQmHJ+4oikYe6TLSUtQioLLXVGV+YxfZrfN5e5eZIuW+gtoszBkS8zcVf7tpyJ4OBa 1rbJoG1tbjzCJc3f1yIbqF64Yx/a7oAUC0LqkgzQJQJBIOgG4AK+wuPSqI3kS3QUDAiEhL7g zLn6XcBMZS1M5DiUF03TTcqqK2FY6r0RPvOi2j/Dp67tD/CPonVRICkKYGVi7XEQG1Q4ukNt AZdKWZfQRwwVnyYJyrXOeIVPvZCmeXYl4crUpKzueTlCouBvFM1uJWTJdUsLh5ZqH0X0KvkC iwrYsmer5xnrQRAwrhqjuHvEy3/pR5beqp9UOBxTXn1GfWVvUqh6yLaEPm4oVjQL7ZOgolXm jO8eXTjIPZBji4yX/FZI2jl8/0t6TUHsXb6DDqakdKq3R1XBZWYwRAglsNxB6pK9X7p7Rrrl YfH65oKqqr52aNXx9w7tDbQutHS8bvZOZOlud6IO5r8jlih1beFGrHwdLWfTS42trjqHa9dP 5i9alVz3CmVuZHN0cmVhbQplbmRvYmoKCjM3IDAgb2JqCjUzOQplbmRvYmoKCjM5IDAgb2Jq Cjw8L0xlbmd0aCA0MCAwIFIvRmlsdGVyL0ZsYXRlRGVjb2RlPj4Kc3RyZWFtCniczb3LrgW5 lR04P19xxgZ0K/gmgUQCpSrJQM1sJ9CDQo1UXW0YUgP2xL/fwf0IrsUTca9stAqWgMwbO/dZ EWRwM/hYe/H4Cu//+frv7+P9u+P8s8X5z5LnP//H//3+v/7D+/99hff8///4f17H/A/vv7xO J/nrz9P9Pf/t/1Trf339238QyPn/83e//+0VYvuq79zjV3//9q/vv/tjeKf4/u3f/vmX9Ptf fxd+OeJx/jv9cvzDUUP8Nf4S0vGP8z+EIf+5Hu3X819/VGPsv4Zafzn+/nRMx68pnr//Nf0S ov7nNH7NApnD8av8oVD/EP8g//7HX//lt396/eG313+aT/l1jBzC/Hevscm/Yyr23DmdFZF6 /4r62PEd4lc5H/yX4w+//vbfLhAoaq1nGdNZ0uQljf0EmWUNZxnLL7GcD3X+43fnY59/znJY 4ZPY/ih//+P8O/3D/Od87PxLbFITav/jr+WYhZ6eXX4l9vBH+fvvp3/Q//qHs+7Ou5z/rU/r 8fuzJqdPvbyuyvhP7//+DqOfLyr0cRZiNgJrCGHU849pbu90VsBlLmfNTHN916+xzPks/TSX 96w6Nb/CSIad3wNB4vnTaT5/cyBKNBSp9bjswfzPJ1oP85r2PO3vkMn7tPX5C7jjIQ/Sz0KG YiU1exR7e4d6ujiyVMe0n79q503cX4oy7eX8J9xzPsNpPf/bKo3e7fznWaZZjRd2N4z4PoMv oX+wf0asld4U5x0D1OFpLfLP8Y7xem+vaYn2m9Peln+VOmynKSa8a5WamdF62gfak90lZqjz rt75HQu0ll7kGdv5m9Pe0K5PeZa1Yn0VQw/TDvVepA7OZwSMLNjz+WPDGsjy5DP6YsMnz1K/ dZa0XyV9TXu08saOz6jeZzkHPmGabeK052lvaC9WO+nAek9SolnI017QP4g9TDs8pcZAfaeA 7SvKXcv53047tJkod521nCLWe5SyzipPkXGi2Ou0N7QHeysJakbjq5wAKSFKsKdJ097QXsV+ lpW89VnOkuYLRdDlWaa1o3eQd3WWFGrrkCeZjqngkxzSBvIsZ8F60bieLSFV9M5iPe9ZGSVZ +0gVy6O9wOzD0urVJvpbW01q0DLasGcM017QLs84rQ2tVVrBWc5+Ibch7zPJlwOisWn/Mis7 dcaOYq/T3tEerE2mAa2xDbHmaQV07ZFmS03jq6K9iT1O+0B7tRacsa037cHStGb0TtauT3tD exR7n3ZEt/aeA3wyWpPajXP0gP1d015wxkEOiN7k2WfjzwHRmzz7/KJk7B9bk2ef8ZExYlqz pw/TTvjy9NNK6OGtcSMjhoUu1j6tUO/a987HzvgxbVXKNKMpY3w17ZNn8fOKo1alzcwoy5nR s9jTtBN6emv05czo0eIvZ2jtTb/4pxV79lYtKnPBe2p/P6MyF2xJRd7GfP25IHb5UpyzpBXR 9fswO8xcGT9bHOeKZdLvxozjXKEfaDosmZdZIzi6/yzT8c6N7mpRnBvec1aGRnFu8MVr8v1p 8yOQKbJnpWp8Z/z+NPkuSYTnjnedL2fa07Qne0bBzxbhmWJexlQS4bnzfeO0TyvdNUisnXbq CbLFfaaeIElZJ2zGkVlLUtb5GFm/etHt7a1xnwe+VxngSeQXHD02+UpK5JeD76vPE6ad7pve GvvluO4r+NFiv1DfIV9Vif0S6L5iLdOa1tPLt1YivwR8s1FKOxtBoT5FvsIS4yVga4pS2vOe +A1u8m2WGC8RxhtNvs1tNtMS5a4XSrIYL5HvGt8a5YX6GvlmSzQX7WusbqLFcqG+Rr7lEsuF +pogZZ1BWRK+WfnGSzyXhG9WvvESzyVjaYOUdsZtyVjH8vWX+CwZSxuktDM+S8aIlVFBE5SB 3uGtEVfKVdZpt3gr1AvJaEHiqpTrnq9p7xY/pWBZDynrLE4peFcZRZyRUqhvOqSkMyJKxXiV 0YW0/FKxpDK6kJZfcHTRZHQhLbxUvmuwllwavtfDWmxpUL9VRh3SMkuDu1YZdUgbLA3KWoeU dba10q67vqa9WpsqHWq4yohEWk/pfN9sraR0vq/a67SvEXyVWZ20htL5eeJb33rpUAtVRjDn +y2Dnuatb7EMqPkqszp5W2Xgs8i4Rt5LwV6ryrhG6rlor5XcXq3mqvZayfHLW2uoHlgHMt6R klXttS6cJM9atc+6rNGeqR5Y825v77paWZVZn9y5BqyBbkhVezLDltGR/LOG60le09LFPrGx BmR0VGfPVwPWgIyO6mx2NV41IJZZA21a15jMrLNR18hPk8Vep32NpS57mvaC/knscte6akbt MyRr5KePYpf79k97mfaB9iD2874J0dV63jVhDc+amT1NTVLWhNY2raunqTKCq/NLXXWGZPXu 9nlH6G1lTSjUpOizpIXtgt/Qv4k9vuVH6v9y+yxkTfj+ZIQolVvn02S2niXVPvuyz/c3vwA1 X2V9LXt6V+3Lr6fMYo/vmvG9qv2Y1vOHXo8yzpROQyputj9DP99SkdYhQyuxX/7TBP6OLh+n HV/tFZ/Gn14+ifvTT3vk0nrtlNlQ99oR+6pJr3cZFOz1rnZ6T/5eZSiyv9dpnz0WtANvNzIE 2tuN2iO2M22VMsDiVnla8+AW7O09D71n2KIjD2nDWyzl2TvvsSR2jDyP1Cx92xapaq8Y2d4T yHB37wnUHrHn8J5GhtN7T6P2jj2T92MyXN/7sSb2iP2e95P5s5eca4hVe0/s38Watz5Yeuxc FXt9ty972Pr3WY/Stx1Yv/LtkMnT/vXIYqdvjX+bZGq2f5tmDWT+lvm3TyaE+7eviz3ht9K/ rTnrtxK/86d1hgB8if2rnZN+ieGu8pXPSb/+NOpIYo8fo4JZ2vQxtphlnQ1vH4tUsRcfuyRH b2KnsY6PjWT6v4+NZqmCjrFwBCfWhiOvl43TZDECxmk+rsvhZlyXxB4/xoGzrAFHjS8bZcrC SKEZsIxJZSHFRqU4hs2Hjnnprl3s2ce8wfGH2COOkXVEnQ8fT+PoW5aACq0ByFg9DZ0LrLeq Y3tZSiq0wiBzgTTf7T4XKGKPH3OHKvaAc42XzU3SwJmJz2RkGWyfyQyxt23mE8VacZ70sllV mtFWsJfUWZgsyu2zsCT2+DFrm2XtOMd72ZwwNZ4T+gwyyXx2m0M2sdePGWcXe8EZ6stmtGmb 0er8VxYref4rs+Vk81mapc+yNpxbv2wunqrOuWkNIIu9fczdi9jrx1y/ir3g2sDL1hJkYTbT aqOsPaTZr+5rD0PsYVurkKfBdY2XrYKkwqsgvmaS5ix3XzVJYm8fayxZ7BXXZF62hiNL0xl7 Jl3zSUXXdui+TezxY42oiz3gmtLL1qBSwRUomSWHlD/Wq2RtSxbVt9UtKWvWtTaIVlk7S1nX 2hr6Z7F/rrXpfdPH2lwVe8S1vJet/aX5BmDtz9YWTvu00l1nSZOuLNKqZRC7rCzCurCMJmUb AlYtbV1k2uvHKmcWe/lYFS1ip1XUl625pqSrqLj+KaWakZIT37eLPXys3Uq5cKVX14VT1NVi qEkZkaWo68UB7Uns7Z0jrvbLqCnJ2ngkdCmTrI1Hxq9iz7gGbutm054+1sy72COusb9kpV62 nTLuVckq3mmf1oDW+Z6C7gLQXkIWu+wCVMCWZ5e1ceo9ZPySZG38QGsXq+x30B7DELvseEDN 6J7x7AwT7u7pfkqa37VE/YGMU9IsUKL+YOhTvuWDAeizfg/Z28E6kHFHml9k6erBPsTeeOdo 7jOlWSmpQYvUXSnZTEy0V5XE+rmHVcSePva8mtjj2iF72X6abGAm2q+dtXVse28yKohDduqg lLLjMO197uzBnpx85WXTNGXGqWKv75QZp4u9bLuMUayyJwm1Eu1pZE+SdkL1aeLHjmcWe/jY IZWnwf3Ul+5Shdh5/9V3a+NsfbxfK19Q2U7m3V35VsY56oDd4Jfu4E17wd1j2x+cdtlthp1M +Z7JNjbvTst3KwqHYO0HvnTPMwj/JHZ8TvkOxX2nfPo23VcHX/l+RGEQwFuVr0QU/kDFJ5Sv gbB99h3+LvayMQKqoROD4KU77dOeJt+gon8Te5x2qDG1hslaIFbErJc2uQ+wjyv9Y6zKlSDv LnbhVhBzI4i9TTsxNJLY62RoQK3LHCwKh2BjdCh+RgbI25gvUb5cA61NrHMnC75847Cnmeuk 8J7GoaVC5opYZ0uSrysxXTRa5a0Qg6aJte0cGkOpyLh5T0JPEPt554DoyfzzZPTAs2fDT++O D6lNbP6TWETNvANzjrR61WDIQlQ775RTmPWdRz/mv/vkZMWkPdYcJvzlpeuN8+d/fuPf6GUU tr/ih+eTrJ/Oath+Ok3wU3H3q/m+14/ne7Yfz3K0Y5avHGHUvRzTc2EqyroahNkBsxyjI+aR RmTcTrgDcBsVdDY7wM1DYEvvd7DTecE2qoIuhXbPGWYA23sU3KGwrWeEnc4LVoHWVSfYBrA1 tvwtbCPYDrDjCxvKkIq/YM//Tdhz+jSfuoe5Uw6403vhKpJdSc9/4aYDUM9WIK/sBMs3qOlY mIayrhpiSq1fqLkQaKmdQE9nhG0AG+TNu2egKjhrUlZd4wl4hxuwCgzJryKhDkAVMuZE1WbW Z+MlUIjNFBGSaiCu2JygyvR8Ao0YtQbkVwmjVuYBC3Yc0n+XOPLsmeajYyiI98JNGLky80Fc jFwjqH6D2wkXIlfmfQs3U+RaL1lSEvZXl5YBuBlD15D8qmDoykDwwk3Ww5QzFsodbsHYNaR1 1Qm3Ia52MRdumosVhNsIF4JX1h0WbsV6SNYxnrXc7mArVUOl2G0Uu/iw1hOUfHY1gnq+PkTF R20Uu42qoFEVWNA+o34xLlZBp+DtGLzJgvaMh0Oa2NmJB8TtFLydgncQ6kBU+zbMlnuPitGL zXZQ9A6M3mRhcKHKRx9QB4XvwPCVOeWFK8ugC9fCoJz9Vr3BFe8L15DW1SDcjrjaXEs9PzaC Oz/uhNsJF+ohBwxfWXReuNZeH3ED1oMh+VXE8JXVAMDVtlVqlnCQTyXARoxeA1pXg2CxGqxp PcN2gsVaSBi8sp2wYK0VzJcmX97Z5AA2YfAakF9lDN5MoNoEyvnm8g0oQmaMXdl4AUiKXXtP C3SOcBAVY9eQ/Kpg7Mp2EOBKhZbmFbvBFgxdA/KrSqAYuladZY7nJqqMmwgVQjdj06oYurni 0CNZ0R9RK449DMmvGoVuo9C1spcZs4I7h2OA2yh0G4VuJ1SsA3vKWaHpHhXrAF9Xp7DtFLb2 jBeqDPIAtVPYdgrbQWE7KGwNr5x9bLnDHRS3g+J2UNwOilvDW7j0MRdnhIW4lX2BC7YcFLfj DAeB1X9vsOJ8wRqQXwWM2wJ1IG1rnP8TwDkeBUQovSGsq454GLRZpjPfoWLQGpJfRQxa2fgB 3DnxOIfaht896Qi9F27EqJUNqoWLqDJBmKiK/oGKmInqIGHUCrsCUOdIHlHn8BlRMWoNya8y Rm3JGLVZh4nVHvoDNmPQGpBfFQKFoM0yOJ6o+tBdBuWECkFbsFnRbL4UDNpsk6ZHVJroF5ro l4pBK7u3C1fGmhNX5+Qy0gfYijFrQOtqEGxH2DksPGGtMm5wO+Fi0DYKWprrZxnAIe6cQQAu TfYNya9osl9osp9t3aZaNX/g0my/0Gy/0Gy/0Gw/2zqK446DZ3qFpvuFpvtlUPTSdD/b8kG1 1/eBS9N9Q7KrStP9eiCqjJarvbwh050FWmG2X2m2X2m2X2m2n20d5RkVg7fSdL8GDF4hgC1c W0ip1iQGD+fEecEGDN4aCRSD15ZRqrWHT1CI3RoREmO30mw/2yrKBSozM0Cl6b4h+RVN9ytN 97N1CdbGPmBptl9ptl9ptl9ptp9tHaVaGxsy5SPcTrgQu5Vm+5Vm+9lWUh5xabZfabZfabZf abafbTGlausdMpMEWJrsV5rs1zXZd2LngrXFlGrtl3DdG3EhdOua7Ee5wtC1xZSFC2N79164 NNuva7Y/PelpdSmlWlR8oOKz0my/tit2xQ9j15dqF+qc+SIqxW6j2F2zfaUZJ8TVhZRq4faB S7P9SrP9Ogh1IKr2iRZuQ6bTBIrBi612UBXQZN8XVB9RabJfabLf1mQ/Gj8LcHUhpdqHQebo C7bRXL/RXL+tuX40otWCtXWUakF8g9sJF6qhrbl+NNIU4Nq3wXFl7g+4AYO30Vy/rbl+NKo/ 4OpaSrXO4QOXJvuNJvstYvS2iNHrS4rVOochawqE2wgXorcljN5Gs31f+nvEpel+o+l+yxi9 DVFtJaVanzNkqQJQEZPm+y1THWSKXltHeUbF6G00328Fo7fRfN/X6Kr1ZENWQACXJvyNJvyt EipGr62jVOvJblAhfBu2r4rh2yqFry2kLNR5DagVw7fRhL81Cl+a8PuaV7Me8gOXJvyNJvyt Ufw2il9dR2jWQQ65DcF2gsXw7RS+NOf3xalHXJrzN5rzt0HhS3N+X0pq9kmfTw+oNONvNONv gyphUPDaakqzvvcTthEsVEI/MHY7zfh90WfBzkpZuJ2m/J2m/D1g7HasAltOadahf6BCFXSa 9veAsdsDxa4tpjTrz4dUNKJi7PY17Y9GMVm4NO33RZRH3DXtX0h+lQgVY9fWUJp9JUbjNybe CzUhJsZup2m/L3k8oq5p/0Lyq4yx22na70sezb49Q9oF4K55/0Lyq0KoHVF1caLZl+cGtQNq QUwM3E7zfl+bWKiztQHqmvcvJL9a8369Coir6wjNvmcfuGviv5DW1SDchrjSHTb7oA1pxgTb CHYAbKPQpXm/z/cfcde8fyH5VafQxVdms/JmH8ohwQGo+ML6FbrRmDSASVVgc/Jmn8lPVKqD TqE7KHRpzu8T6IU7gw5wB4XuwNAdB9XBWME7NXe+0V5am8o+b9GW+J//o0gXtXQOiv/nCfBP 7/D+b68l3jPDPYZmf5/3tQ+4/CXrMn/Sv4VlL57Cs7nINefff3LOof4XLYn429+GY1fK4DXt DGE2wtP86fVfX//l9Z8ey3NW4115rrocVLNae//F9Ju2H0mxos4619/+g1nfJak8kbOkrcJL EuZhJ4WjklSCZIYKcJOK8BlVbQbSXYtQBY2ktohP7xJVzEdIxUCUKlFlKZSEDHeNzfwzErFO /Gq3TSBnVJQ6plS6gujFnma+ssW3KkrY6iRm9Cr6mrv+Bp9dSFtK4BtoVQmaRmS2Iqw87QmB /HaiCyVM+ksgy72nXcVjMpHrSlQBnTmWRTLeaTdKIlD3TnQhaorYDFD93iWaUA7RAqdVvwiD SISn3b4TQDk8sVX2ZtYCihwV0V9SsRmkNE674hSiQJ72t4rNoMRRiS5lk0DkaFqrfQmRjDnt 2WigsWEtCinw/ACixFEJKk0zax4ljkrQxjsXkpBGOu3FvuRIO532ZN/7dCB6eJvYDAi/lNC/ LrkZfNPBZWXSJM0mtOtd47Svmgnd7ipaceCtY5gUCcNGOSnic7tITAd5o2lViZiGVGLxLm8l AqfEKCoFU0DeaFqDjdBQ3qiEZqM4IEGf3tWeJIK8UQkq7DLn2EixnnZ5EhI3mlYVcBkgbjSt PgJFovdpf6vEDNLCS1ChliDk8oWsMi1Co29YIyrTIjR6IKhPu0vMIKF92l1iBgjwgu+jbyDM T38Znydqm9k+I4Oo+NOuUjIdqfuvaVcpmYZUf/FXKZlKqQHTrpIxBRIJSsjXDCRjrxVUdiZh ksLpna5PHSY1TLvK4ARKgph2eUZMmHiVoKIoIjwT8AlVFEWEZwKjJ5t9YfrGtOusrGK6h+AH S1WA9JDTX+VPhqaBdLR3S3nA9JNpbzZ9hHSV17RXm2SijFEJKoAyKBFmWrMlZmDizLQnS+SA RBtBj5b2gfJG0+5TZEzkOe02jc4Udyp/0jW9Zyx0lTmZPQykFYl/taQVTEOa9mIpLpi2NO1S KpI3mlaXr0F5o2n3RQRMoZr2YGk4mHJ12i1pB8WNSlCZk6YJWldy4LS7fA0mgE17sxWRTNGt MifTFQWOpn2WleWNpjVbOhOmrk17svQnTHUr4bD1nUryRtMebN0H5Y1OuyVpYeLdOS/4GpbU hYl6097fmgSG8kbT3ixpDAWOpr3KqhWmDE6ritd0SjGcdhWvaSRvNO0qXlNJ3mjadQBcKOVx 2n0FDlMk52zHJHBA3KgcKmcy+0oUN5p2keqhZM1pbbZqiMmd0y7iNV+NxI2mvdiaI4obTXt+ a4IjpppOe3qbaE7k++raZSR5o2mXVUwSNzqtb03YxCTZckiCvUrp4GjtkO+1SumAtNG0N1vN RXGjaa+25ospvtOuUj2RUoKnXaV6AokbTbtI9ZC00bRGW5vG9ORp1zXrSunMp/1twjuQ/lQO SQBU4Z2M9SsjAllRx+TqaRccSsWe1vrWVGeUNpp2lelpmOYt/irHw2nh065yPInSyKdddxEi pp0LvuwnkLTRaX3r3gUmtJdDZg7NUtThnjLmkMR2FDaadpXjSSRtNO2KHygdf9pVjmdQ+v60 Z9v6QWmjaRc5HhUfuEQJpl03jiLJCUy7bkyh+MBpfatIAggVnNgyShGxBZQvmvZu+2cohDDt 7a2SECicMO0qvDNQZkHwi+3oFeqZJBFZ5DJQxmHak+0souzDtOue5kCZCMHXaXwlCaPTbjug KEJRDhnvyFonilZc9iVw8Zq2bvuxKGA07e1tIj0gnzHt1faFUWxj2mcNFJTmEPT8NkGegOWX sZEK8kQsv9sTCYVM+6yXjLIiL7fOUqGA0bTrVnsl2ZJlzyRzctpt+x9EUV5mJemicshYTEwo t7LsFcRZprWLNaOUy2vZA4kXTbvIBZFMjFtNzCajdxV7RRGa17IHEi+adpELIokbt5qUTUdv EQv6iiih8zJ7EdmaS7poWpMRZ1CcZ9kDiflMexQCT0Xxn9eyF5IumnZdCEskLnTajb2FUkTl kFGkfDJAuuil3vMO7K3YYUeWJzm0RLI3iiU6FCXiO03Cp2xeA1iPKttD7y4bxRMFiuxtqBAP CEkte/l4e1WorPubri7DQ99ZaUm5KXrGd9pchmdred1leLZ2ajI8CXsMiYE8v5M1Yb2o9RL7 8lh0cR6c05g1eCRi3OZLnOjquYJL8GiUZ+grZJpgvcVlTy61E7GNSh8lkxMUG7IeTSYzKDdk PWDOH/1fE8J6++gvuxHZUW5o2TPIDVkPLUI73HNn49hzPy9fhRz5q/Cyr4jo46LYkH11ZDK6 f3VE2uarf3ylimUioNiQfQVlcoxiQ/bVVOmc7avZVTpnYHuR0JRsChQbki+4TN9RasitBeUK fQwgSwDbKEBqQMYkOJvRMYZK5HR8FhXR2MYkPoaRhYp9DKOSNwnHPD5GUimcbYzULX8GRYhs DKaiNzQGq28TvcGZpI7uVPSGx3eztCpuU79oFKqiN4GkMW20qfI2BWte17XbGp3iaFZlbArf V2VvMgl72lhZhWwKtnkV12jbyFrlZAaJENmoXeVqeNQuZa1fJGDqcwJZUttnBSp7k0iGyOYc IkuzzzlE9gZnKD6jSSa/SjOabolshfpCmTGJAA3PmNS74PzK52IiP7PNxqSsheduPteTtLx9 rqdSMAPnhj6XTDb3pLmkSsHQ3NPnqiI1s89Vu6UZwtzWZ8KyS8MzYbUGnDe/bZadPubYUlaZ e+KKns7hJWVyn8OrQAzN+d+2RqDCMdsagQrEZFxT8BUIFY7ZViC6pYCiFJGtcKhwDK13ThGQ hKshvnaiwjG8diJlFYEYnNHo2owKxGxrM9nSXGEtx1d+VCBmW/tR4ZhEQkS2sqQCMdvK0iUR 0+C96spVCrouBitX4W1SMLRW7Rm+H6tiUtqg62KwHqnyYyKTvq26ZUs4RiEiW+uTrQgULbe1 QdmqBZFzwVexGZZEtzXGRPLpuh4pe4e8HqkyY4eudsKam8qMHTernfmtKdk5o1XFXcrHGqsK 0GSSG7IVXBGDyYnRVfYlfqz4qjBNIJn7EkRqBgXxX7b6LHIwKKBvq9UiB7OvVmeTg9lXt4vJ waDYkK2dS8Y8HgBga+0iCAMHBvjavOTb89p8NjkYOIzgZev+IgeTaQ9LBVUGHnQg1uxyMIOw v6rLwQwYUQaTWdG9iYT+3eVgsC8IxcVg4FAH2z0R/RY4BEJ2VaKJweChEbY7I5IIiVBcCiZR bKtgS8cdnpftE4kYDB52Me3DxGASboeHamIwvNvk4i4V96ZkJyubGAzvZFXTi0gUj9WeJb0T rdVXe5Z57Aj2YvKllx30lL/2fbwoMkQRrS4GkxLWuoqPyGFOCZ/dRWIaCQ7JDqRs7CbaU5Ev rkjBJIoO+bKKFEyCvSwXjkm4E+o7p7KZzDunw4RgErV0PTCJpYamNZsQTKI2PYzw0elgm2nv JgUTse3Gw4RMYoc6j04UKe+IXybdrxYhmIhfIN3fFiGYiK1Rd8NFCSaC+JXsncvmeyQSRtC7 viN+H6L096LaEvE7oPv1Ufb3cV81qrjN5/6+SkvJ/j62oxgNv+zsAXlLssOPve9kLETZ3ydm gvabssOPu3Mx2VOGnfcgNUMsiRN7Pons7xOnQnsv2d/H/QjlbESZWRJnQ3sY3aW8cIQRUsU+ 15jxWdQ6V5jB9qXPMle5IL6iRqmUFr+msdkzzvkWMhya3nPjw8iIM6rsFqJrW5fv2IHtUUZV 8kZwwycdBlPfyHBRjo+8BmxeST9VssUP71PZQ9EH0Ob9nQJRqdqFzSf/y2suJ3UD+PN7uwJP Y4j9NT/mn47Pnw74Kf1QCIvup3T57zSI0BMQFcWulOzpnkqX/0mDCL0XriFdV4NwSdvoXoMI nRF2AKzyPd2zfJG00b0GETovWAOyq0q1QOTPJw0idF6wlSpB0zyXJ0kbPWgQoTfidsBVuqd7 Kl/+JxUi9F64hmRXStt0T3xlDypEy3VBGsh11RDyi6SNHjSI0BtxG+AOisDxBZTlJxUidF6w A2NT9JyWH0kb3asQofMFqjD+N0ZtOihqnzSI0BtQMXJTwBpIlO75qEGE3gs3UBUEjNwUKHKf NIjQG3EhdE3UyT3jF2n6PGgQoffCjRi7purknglj91GDCL0XbsLgNVWn5UnaRvcaROiMsBC7 Jurknhlj91GFCL0XbsbYNVEn90QJiycVouW7MAsGrwk6XX4YvI8aROiNuBC8JujknpTx+ahC hN4Lt1IdNEIlbaMHFSL0Xqj4rI3qoGH4PmoQoTegUh10Ct+O4fuoQYTeC7dT+HYK347h+6hB hN6Ii+E7KHwHhe+DBhE6L9iB0WuiTuYp8/cfNYjQ+YJ1oOuqEywG74MGETojLASvSTq5JyV9 PqkQofOCDVQJEWM3Y0t4UiFavgszYuyanNPlR7H7oEGEzgiLNZAwdHOi0H1SIULvhZswdDOj Yug+qRCh90IlTAxdWcH7WYMIvQEVQ9cEndyzUOg+qRCh98ItGLqm6bQ8MXSfdIjQG3EhdE3V yT0p5fNRhwi9F27FEYipOrlno9h90CFC5wXbKHYbVQMr6j3oEKEzwmItdIrdjrF7q0SEnguz U+AOClzUxnhSIlq+C3NQ4A4K3IGB+6hDhN6IC5Frgk7mWQ6M3EclIvS+cB3JrgKhYh08KRGh 90INiImRWyjZ80mHCJ0BFAO30LS9RAzcRyUi9F64NKMvjIryIE9KROi9UAkTg7bQZP9Jhwid ARRjttB8v9B8/1GHCL0XLs33C833C0npPeoQoTfiQtQWmvAXmvA/6hCh98KlGb8JO7kntq8n FaLluzArRm6h6X6h6f6jBhF6Iy5GLk33C033n1SI0HnB0my/0Gy/kJjeow4Rei9cmvIXmvIX mvI/6RChM8Ji8NKMv9CM/0mJCJ0XLM3460GgJO3zoESE3hdqPRATY7fSlP9JhwidARRj1ySd 3DNQ7D7pEKH3wg0Yu5Vm/JVm/I86ROiNuBC7lWb8lWb8TzpE6LxgacJf14R/CEfzZxWi5bsw abJf12Rf/Ch0nzSI0BtxIXTrmu37UZM/qxCh98Kl2X5ds331JGWfBx0i9F64NOOva8Y/5Ir0 jR50iNAbcSF4a72Cd1gK8o9KROi8YCsFbyNQrIQnJSL0Xqj4qO0KXj2tlfSN7nWI0BlAKXg7 1QDN9x91iNB74dJ8v675/jDu+886ROiNuBi8a74/jJf/sw4Rei9cmvC3A6O30YT/UYcIvS/c RjP+dmAEN5rxP+oQoTfiQgSbspN7koj+oxIRei/cgBHcIkZww9bwpES0fBcmzflN1enyo+h9 0iFCb8SFkGiJ6oAm/Y9KROi9cGnS3xiV9I0elIjQe6ESJoZvo0n/ow4RegMqxm8rGL+NJv1P OkTovGBpzt8Khm+jOf+jDhF6Iy6Erwk7uScp6D/oEKHvQq0UvI2Cl2b8TzpE6LxgacZvqk7L E2P3SYcIvREXY7dTJdCU/1GJCL0XLk3726DYxXb7pES0fBfmmvZrhi/GLk37H3WI0FtxAUmv +oGx22na/6hEhN4Xbl/T/vFWVaflR/pGD0pE6L1QA2Ji7HbSz3/UIUJvQL1id7xd1ck9ad7/ qESE3gt3zfvH23WdlifK5TxpEaE34g7ATVQPNPd/1CJC74WbqB4yhm+nyf+TFhE6L9g19x9v l3Zanqjv86RFhN6I2wG3YPh2mvs/qhGh98Jdc//xdnEn94RAe1QjWr4Ls2L4mrDT5fdFqA9a ROiNuBi+jcIX5v7/+1pE/2uyPkt/R+JAqOt6NR+qeeau/l3mC/yTXylPX38hxJzFxsnvP72c nyj/RYtrB85qBpdhWa8md9Ff6N3huVyw6O7xr3rEMHZ5wqcf6fNHm4XCFSoTpTqPZSReUZKM mCS5TsCISrKwkTRz8Gsss9AnJdsJuKKpVPOu70Dg84OfZDYcgMmfJP0iVWUfL3ZWkhpMVXPT LpzXtOttZ5YMPo5aZz4coid9mneoWCJRgKn6bhZTLMmKZpJlgdDx2YWYVVWdB+8ZDacSyy2J OH+SJCtUJkqyvjvtmVh0SVIVkiRfoTLRaRdrJH5ekpSEJIsiqEyUJCnhtBP7L0m+X5KULFQm SpJ6MO2duIVJUg+SJGuhNlGSPMAkizrIXUxyvEOSpR/UJkqSYjDtmbSJkqQZJEnuQnWiJJsT SbI2I6EouqgQwdPP+j3oUMmUhSssaWCoTZQkazDJihdqE017FnsjbaIk+zvTXomnmiSRwIJk texXklSCJBmkwIMV/yL2RKzZJKkESdb1EhzpmSSVIEmiWQJeepINsdOOB4a+k2yaJUk/Q75v kgSDJALzeBxpEpGRJMuSKSF28ghPjBLEzkejnnaxZtAnSpKXmCRZDfWJpl2fRFjTHf0VJYBC UZJkhNmToT7RtEbpagYpFJ12sXZgdaec5DmMG57R3sReiTOeJHEhSRJcAmRRk9LODTJNkmwA J1mTTtQSRTWqCDe8YSnVO5A+UZIN6dNO6kRJ0hySpNElaqGiECUL6qhQlCT9IcmyOyoUJRHl sR544DOqGpS0R2rRas2gT5QkVSJJMh7qEyVJlUhyMAQqFCXJsUyymZCplYvGU6mkTzStSfr8 QQpFSRIr9BuBCkVJfpwkpQ9zOE67WCtlfCR5gCSbJahPlIQIkWRLBfWJkhREv0CoT5QkW3Pa OVslSeJGksRA1CdKUlGnndSJkrA6kmwJZYqhQ8okx6cnLNMh1kbqRCnp8cdyqDrk60x7Fzsf M57kBetXEvOBkqSLJEk8RH2iJASXJBtiqE+UJI0kFTtUnfClVKROlCS5JBU7VB3RxdopTypJ Y06SvIjqREk4PPrNxjysJEGRZGsQ9YmS5JlO+6VPdPkXsc8sMrRm+/bnhiV1e8DcMkGfNcCZ aEn4S0lSIzFzLSXtz+RI9UbPItaGeXEntvZoli8HNaDfMMmXwx5C+Fc6DsmQRTztVeySv9cR v9j4JA/0zmIVzaKI9llSyRfMu1Vy6CDvMEmajo5xMvYmSb+bQfMaO9jfOvIpq5dJ+i0V1ZgD erAkfV2R/OwDn0W/sUHzNOun/VI4uuxV7JLB2RG/yLiqBPTNMk6S3NP4ab90jy57slFYwT4s SdaMPF4J/IxqL5TDmpJ+74+vSw/J7WKdGbULW8cAh+bTwjO6PVCebUo6Ojg8K/eyNhv5FdAj SMJ3TPLSCvaDl71RLnCSPOAkhI2C/aN8upM0lpK+6OnVnikHOUnecJLkVVRVSpJ8pSPLgj2n MDyTUE5KwrdqdsqTPq02CsWs6iQJXDoKRa2lJEMUHYVC1vYrSY5xkmAs1J/K6EbGp5gTniT3 OEmwo9pSkqFRypa5nhA/ib1RhnqS1DEdu5bC9w02dkW9pdMu1ohqSyd6ktLOyCzU08pYSTpN zMdPMthLooSBiktJZCqTUKgg21/wi9gzqQMkGUxOeyQ1gSTZyqed9JaSkJd1RAtaBYIebESL 2gZzvq8jV1RbSpKtrCNXVFtKkiaX5KMHSguvJMPjJB9J1GtIksWso1RUXEpJdTlFj2zwfWdZ MypHCHqyMSkqTSTJYZ52UqYQe7BRJipZnHYZS4LqxYktYzQZsqBKRhIKe5IhDmotJZlO6CgQ VTiSpP7NUSAodrzcOu9Rof3KeE4GZ6i2lGQKk2Qwh+ohSYj5On4DtRFBjzZSQ22SJNnOOiJD vaXT/tbxFaotJZlQ6QgL1JZeZpcxE+gtiX+3MRPqLS17Ib2lJPnROgYCvaXXsgdUXBL/auMa VF1a9kaqS0kmijpOqQnR1ZpInyZJnvUcSaCWjVtNKydhmZKNDFArZ9kLaeskycqeX2lU4nFr VfSG3sG+jajzs+ysC3Ta7buzNJfclkhxKUkayuy1QW/p5VbRuFl6S+LdrVdFvSW3iw4NqCIl mcprKwYNJcGv9itQXHJ/SQhCzSXDl1zDHV/tHZ/Hn18ybffnFzupS0nNRK0tau1ijVqHWN+x eG1HeDuSGWpvp8LblDxNe8sV2opkWFpbyY4+84WTt7gMrVaWlyp9991uGmJX+6xivfSTrhhV e/RYwZiL8SOypjVo5Fa0d7FT5L6WPX9E+hB7+OgZxE6qbdLrxEOjlvpdtee9j5Lald5o69Nm fvXQvo764yz2in3my/pYyZ/e+1i1p61HrmJlrTzr7SW9Fnr7l30dRAN7/zoMsaftazLXpzrp LdlXKpha4FjY8lWTDPf9q5bEnj6+glnsrFJo31jJtwfFpZd9k0PVbzV9k5vYy8c3XO2ZVJds LCBpw/tYYNZB3UYO89llVNK/aGwTxP4xKpE6KDoWolGM4sSPUc+sg/IxQpo1kHUsRHetYv8c gTWxl48RWxd7+hjhDbFfI8I1fgwZ1ZZeNtYU/YttrCklTWtsetmT2PPHWDaLPaHa0svGyqIe DWpLPrYWbZB9bN3E3j/G4l3s9WPsPsSet7F+EWvaZgYyi5Ck720eYfbPWceshc85yqyDGVP7 nCaLvX/MgdTePuZMReyfc6wq9vIxJ1N7/pjDNbGnjzlfF3v8mCMOsX/OKMW+zT/nPWXmTHP4 INa+z2ulvmze3D7tn/PmJPbyMc/OYs8f83K1p495fBF73Gb9+uyfKwSzvo6P9YTTKgpK+/pD F3v/WK8YYm/b+oai8FqIrJuI+tO2bjLrRdSi9nWWJPb0sS6j9s91nCz2z1WfuZMxthWiqeYh 2unbelITe/9Yf+pibx/rVUPs+/qWepdtNUzWzkQDbFs7kxoQ7fRtrS2JPX6szWWxf67kif1j 3W+WX7TTCbuKtX+sKTaxt481yC72zzXLIfayrXGqNW8rorJ+Kkpw2/qplLTp6mxF/yz2gMpR NpM57aQbZWu/omG3r/02sfePteIu9vaxtjzEvq1F64q2aPBlWNOXMaco9u3r30ns6WO9PIud 1P99NV4UBGE1/mWr90cl5agkKZBJ1Alz5LsOsXdSj5KdBNE+hJ2El+07iFbitu8gZZIdhm2f Iok9k3aU7YKIdiNoR71s10S0HvddE336gOpRvitzFNKOkv0b0aIE7SjZBQpi76QdZbtDonQJ 2lG+myTKmKgdpesISZQ0QTvqZbtVoryJ6lG2tyVKnaAeJfYh9kjqUbZzJkqgafU0oiB6Wkk7 ynbfRGN0330rYu+kHqXrK0mUTUE96mV7gUe62QscYi/b3qE8neis4k6jlOXQHUHalZSalBJs u5j6lHL6SkC7PM0bT3DRlap06GoW7pEVsc4VHsSQUchhZ8zQfm8Wu+zsJrQrjuzswluVcYKo ++77xl3sadtnrmKN2650tafZ97DlW3587nhPFG3bvEPexd63HfUm1rbtv+t3L+h+Pbwl/b4J C2Pb31ccUYrqaB9iT+/Ysd716yQ8DOIb6FdFeBgNS6VfkLDxGGZZhIVBrIch1r5xJGSP7RAO BnEqtB+/42AoemHORtF+WTgY2GaK9rTCwSCmj/adwsHYOCT6nDvjRHvDY+OnaI0LD4PZLLM8 Q3gYxH6JYm0bV2a2rWnfuTUzAqa9oIKU7fZNeyYFKd1lnPa0NKReuq85rZE0pHSfddqFRwR2 KdE74FdPpjJxqIIotBfZI5/2/g4YGzJtm3Y5sQ2evMk9Z6vBTXshTkxzAQWpl3I1pjkTG0vp QEMGRgBSFUJ/bsbv9KPSELGxMZv8X2TxKhvAn9/bFXgaq++v+/GgH7fPHzf68YAfazKGe1Ja x62GFHouTEOJw4IgXJizKf+sILV8HfNCua46Yn41RL3Xj0JnhO0AqzkY7knZHE/6Uei8YA3I riLVgGbB/aAfhc4LNlIlaBaGe1I+x6N+FHojbgNczeBwT82E+0k/Cr0XriHZVSbUv0I/Cp0X KNasJmG4H6VzPOpHoTegKpJdFYhAHSz+qB+Fzgu2QGzqmBlhsQ4eFKTQGWE9aotNCxYsZXM8 akiht+ICkl01qgWMsScFqeW7MNtVBXqFkUvJHI/6UeiNuB1wO4Vux9B91I9C74Xbr9iVyTvF bsfYfdSPQu+FO67g1SsMXkroeNKPQmeEbQs2HBi74cDYfdSPQu8L15HsKhAqVsKTfhR6L9SA mBi8gfI5HvWj0BtQr+D1dceFS/kcj/pR6L1wI9VBxOgNlM/xqCCF3ogL4RsShm9IGL6PGlLo vXAThm/IGL6B8jkeNaTQe+FmDOGQMYQDJXQ8akihN+JCCIeCIRwKhfCDhhQ6L9iCERwqRnDA OHtQkFquC7Ji8IaKwRsoneNJPwqdERaDt1EFkJLDk34UOi/YRhXQCRRj90k/Cr0XKr6rTrHb KXYf9KPQGUApdAeFLqk4POpHoffCHRS6g0KXhBweFaTQG3EhdOOBoRsPCt0nDSn0vnAdya4C hm4kLYdHDSn0XrgBQzcGDN0YKHSfNKTQG3GhOcRI9cDqjU8aUui9cCPVQ8LYjRgPDwpSy3VB JozdmDB2Te72B/0odEZYiN2YMXYjSzm8b5Se0HNhZgzcWAjxr9GPQu+FijVaMHBN5/Yn/Sj0 BlSM3FgxciNJODzqR6H3wq0YubFi5JrQ7U8KUuiNuBi5jeqBdByeNKTQecE2qoZOgdsxcB81 pNB74XYK3E6B2zFwH1Wk0BtxMXBxwq+Tix91pNB5wa45fzGSzAWbDgR9UJFavhdmOjBw04GB a2q3P2lIoTfiQuQmmvQnmvQ/akih98INGL0pEipG75OGFHov1IiYVAc05X/UkEJvQKU6oCl/ oin/k4YUOi/YhMGbEgZvojn/o4YUeiMuBG+iaX+iaf+ThhQ6L9iMwZto1p9o1v+kIYXOC7Zg 7KaCsWtatz+pSKE34kLsJpr2J5r2P+lIofOCpVl/ahS79LAPKlLLd2E2il2a9Sea9T9qSKE3 4mIV0Kw/0az/SUMKnRcsTfrTmvQ75/RnFSn0Xrg06U9r0l9tz/hnHSn0RlwI37xm/dU4uz/r SKH3hZtp1p8DoaL4yJOKFHov1ICYV+xW2739WUMKvQEVgzfHK3iFcY3B+6Qhhc4LNmLw5jXp r7YB+7OKFHojLnRheU366ztlmvQ/6Uih84KlOX/OVAukyvSgIrV8FybN9/Oa71fbUf1ZQwq9 EReCN6/5frVsg581pNB74dKEP1eMXhO7/UlDCr0XLs36c8XozTTrf9SQQm/ExehtFL0No/dR Qwq9F26j6O2EirXwpCGF3gsV31mn6KV5/6OGFHoDKkXvoDoYFL1PGlLovXBp4p8HhS9N/B9V pNAbcSF8y4HhW2ji/6gjhd4XbqGJfwkYvwVr4UFFarkuSJrzl4DhW2jO/6ghhd6IC02hRAxf k7z9XkMKfRdqxOAtCYO3EOa9gtRyXZA04y8J47bQjP9RPwq9ERfitmSqgExx+6Qfhd4Ll6b9 pRDqX6Mfhd4L1dtVtUzuhUrT/kf9KPT+y2tDsquKcVvoaJxH/Sj0Xrhr2l9tJx9xMW6fFKTQ G3EH4DaK24Zx+6ghhd4Lt31h/XaKW5r3P2pIoffCXfN+V5lAXBRPetKQQm/E7YA7qB4GBu+j hhR6L9yB9VAPDN96IOq9gtRyvSDrmvdXE0oBSAzfR/0o9EbcBrgBw7fSCTmP+lHovXDXvL8K IQRRIXwf9aPQe6FGxMTwNcHbn/Sj0BtQMXxrwvCtMO//99KPMpUkjQDRkNOr+UjZvu32tyzb /MmvZG9Of2GkHGPipPefXspONLsWVf31b0fSK72H8hn13tczfaMctWoQgrf6+UJPP5Jn1+f6 C135j9bur32Sm498o2z6R2eEBM0Q0bWPFDQPQ1dYNHNGsz7+fP5i9ltRuGt/PlGq8MC0uSOm s4QkTenaUArNaPnSwiVVQJN+/vxGT/txTEGOw5jBkYec3Zl139GvEvwtT5D0lPr1tzRCQDLo ckT5+QS2g9EFSv7OLjEe7RZaFFMk0pWkKJR916qNkp/uCrNRRryu7ar6O7HLKs5L9YJit5oG TC+0TEamZnCV28gTmbRolKGI6wSjp/14Rtn8//mCf//bSyXOY51v7Ld/ff/dH4W4+9u//fMv afya8y9H/PV38ZdUfv2X3/7p9YfftJHB76NkFQZhCNjvz75h/j72X8+i/3L8vQAcv6YuYOGX EM+m8Y/fA7Y5b2O8fMwfz6eqBnQ+1e/SL0f+NTrycZyNd/51hPmf0h/nP+Px/b3ycXsnh1DA lORef/9r+CWOJzxLYhB+p0EGrczwR4H8/a+/O6u0/Bqj1Ev55fiHJyzVTw2SJbJh/f58iPOH 8+fnCOLXMkv/gDIPYi3zZIsNYxZnPsN3ZZktKMoA1BtGXC+2SgGCvNj5ACGebyFaxaU/2l+P b9nQZRed0Wfl51n5XPdh3i9S3c8PxgzaKHRdIRmOptlg9sXoNq5wImG8eC1RuamzI42SXaog s0fAq+XnAf7jDyP/ELo5MK0fR/pxgp/Sws9VEltYihfnBbwXakLMazTa5IpQZYRko9p4MVPA FzAFx6/WukqTq3aDqsuK8SKQgPOCVSC/KgRLcu/dRl7OX4wX0QO8F24h3LX80eSq3OHqEmC8 SBngvXAVya/WVlyTK8LVEZ0TGK9VUHBesArkV/0a4Ta5ynew+q+L6wDOC1aB/GoQLA3BF6wu q8WLkwDeC3cgbjiu0WiTKxjXdhuBOocxXtwB8L5wDcmvwhcERAj3uLr8Fa89fvBeuIrkV5Fw aeG229jWR5QXcQ+cF2wk2HTNo6ZnugPV4Wm8Ns8v34WZbGSiVxm7k4DtwHabnMIYry3uy3dh ZuxlQkFEnC44ptMX47UPDd4LFZsAhEEglmm3fSanLsZrrxi8F2ZFTOy5Ah1fs1C1O7z2dMEZ QLHrCg37mNBuYW1xJl67r+C9cBv2MaFjHxPomJluHyCnLqZrpxS8F27HPiYMwh3UxziuLaSk a0sTvBfuQNx4YN8V6VCYbp8ZJy8m7hLjgbAG5FcBO5lIRxIuWF3vSNcmIXgv3ICdDNB0mlxh fNlT2rJEuvbzwHnBRoJN2HdF2oe+YHVVIl37buC8YBN2XUbHcc/MsPphdOZi2r4MMRNuxj4m FuxjIm0YL1xdQkjXXhZ4L9xy9TPnfMzoM+5Z71B1sp+uLafLVzEXil817LsiHYfS7SPu3MV0 7Q2B98JtV/81ryB8Y6O+5kLVdfZ07eGA90LtgAk9TeyMqcMCZy6ma58FvBfmQEzsv+KgjuZC lRXmdG2HgDOAfgFsOrD/SpSJ0m2s4czFdG1cgPeFa0h+FbCfSXTG3YVrq+zp2mAA74Ubrn5m XkXCpZWkroMOJy6mazMAnBdsJNiE3Vei7UyHtaX25Ku14LtQ09V7zauMvYydaLyj6kJ7uhbY wXnB5quXmVcFe5lEG4/dRlzOWkzXYjh4L9xydTPzqhIuceAuXFtsT22rhnp1MwvJrxp2X4nO 1eg2knPqYroWl8F74bar+5pXHbuZ1O9w81XHgNkJs2M3kwZhYidjY0PnLqZrrfbyXZgDMfOB XVeig9cXqi6yp2tNFbwvXEPyK0DNlNTQfQXTltjTtaYK3guVMK9upstVv0PV6ePVrtwTELGP AeZAl6t2hyljxHxlu4Hzgo0Em66uq8sVdjE2NnbOYr7y0sB74Sbsuowh4J75HlfDN1/5Y+C9 cDP2MbkQLu1hdRt3O2cxX8le4L1wC+HWq+/qcpXvcHXOkGGk6M4LtmLnldcGUZcrgB02pHfe Yr7yp8B74TbsvfKiKnW5Sje4nnmKEyb3Xrgde5k8CJe498OmC85czLh0494LdyBuWZSiLlfh BteGohkXUtz7wjUkv1q73F2uvsWFxRT3XrgBe5uy1oymJ9WCgulANONKinouxIj9DGxHix/2 NBemjusyLqO484JNBAuvq9BK0rAJk3MhMy6iuPdCxZeVsavhg1oXqo6WMgyU3RlAsasphWAL w+oszKmQGddQ3HvhFsKt2IUVouQsXO1pcAnFnRdsxR6sNOxpSiNYm9w5GTLjEop7L9yGPU3p 2NMUYs9cuP7hxSUU9164HbuaMgiXWNwL1z6U3COUgT2NAdlVPbAHqwf1NDYXdTpkxkUU975w DcmvAvY0Ndzj2ocCF1Lce+EG7GlqxJ6mUuLfsEmu0yEzLqa498KN2NPURLiJehpP/POeFxdU 3HvhJsLN2INVfGme9uf9GK6oqO/CzNh72YGd7lfuMLXHwcUUdV2QBfuZWhmSui/PI/Tc0oM/ kLVg/2VIfgUxVonhsVAttxQXUtx7oTbExI6mtltUzy3lTrE2BsV+pnbsZyrRMIanPHpqKS6j uPfC7djR1EG4RAheuNbCcB3FvRfuQNx2YAfWaDVpeCqltwdcSHHvC9eQ/CpgR9PCPa5XM38f WiDcgD1Ni4RL+WPDszSpPgA3Yg9mSH6VsAfjoykXLtYH4CbsaQzJrzL2YI2yvYYngDo+Lqa4 98LN2IPZ6Y/uScdIXrgXPiynuPfCLdjTtEq4RNNauJZhiksq7r1wK+E27MEaRoWjeYoprqmo 78Js2IO1jt1N63eYmliJyynquiA79jRtICD1X/54nlyKSynuvVChS+gHYBKvdGxZtQXXUdz7 whSc62/svTotJg3Oqi2wfOC+gImdVw/YyfRwh+o5pbiK4s4LNmAfYwcauiflIo0rV9dySnEV xb0XbiTchH0XH2+4cC2ntG3VkLCPMSS/ytjH9HyL61mluIri3gs3Yx9jpwe6J51DOLwJeGIp rqS498It2Mf0SriV+pgLV6mQBddS3HvhVsJt2Hd1opsPa131yi+F1RT3XrgN+67esY/p/R5X V2kKrqe498Lt2Mf0gX1MJ2r4sHbrVEitD8Ad2Hd1WlUaB+KO4w7V80t5UWUcC9NQhPkwAvZc 46COxiLBaJB1W08R57+8EEb/xkcMt4BXVimvpIwAiOsR4RUN4jQsPMwmBTznNDiK/YU91kjU t1iQVswjBcBkfcuC0b8z9isj30NiFilgZsB0LsP8m5aOBjEZhsV8vXJIeYY0nMmwcPTvSpjE YrgwPX90Wy8ZzmJYOPp3wz5q8JqR9SGe01e3tZLha0YLR//u2I8MoC/8yPF0+uu1Uy6Tsf/8 H++ojX6vRQ12YqNdOeXQOEIRng/pj/f3vCeP4j0/sR5Jm3r7v7z4wdbJnQ4VlcZkdRKTC8AJ vamgXZin7wHam1FSg+eLGO8BSrxRkoSnvb8HqOjFpJp+c71gNL5rtRc6Gt+1ib1Me0J8bwyj LUm6KEnFUVxHxftGscb3qHjX+KXNKLzH0tx9xaSagW1aE3onachj2gPas9jPsha6p5R13nCA umeUFOVpr9Ne0L9Z0IzC99VgytNO9x1iP8sKarwx6VPG98hY1vSlYRjekhoK9lnWOq0JrUk6 gjHt8F6TlHXyJ0bCsiYp6yzmSHzXap3LSHzXJvYy7QnxtTPK0x7Qf4j9LGvE++rTxGmFu6oq 46ysEfG9ZilrmdaE3kk60jHtAe3ZOtgR6J5S1lm5I+B7Vc3H+c8RsKxZyjp/NQLfVzvz/B6B 7zvEfpb1wPeqd43TCmUtX/oZCNNe0D7Lmqc1oTXZh2gc+F6LlHXWfh9Y1iJlnW+rD75rFXud drprE3uZ9oT4+jHM7z6wrMLMlibQO95X0eO0wl3rl35Gw7TDe1WlTMFI6J3kiz6mPaA925e+ U99UpaxyEHHD91qlrDNqO/VNwjGXBtYb31dHEnna6b5D7OdzVnyvihLfnfqmJmWdDbJXvGuT sop3Rmuy0VBfOqQTW8o6e8te0buI9SzpfDFgr2Kv007+Tezl3ZcesaDrGCy/O6icRlFtj9LY Ozy5+p5PnvGe/ctHgx00Z3XD9bRPa0bvZOPInvGOwmUfk1zQybuI9SwnnLgQk2qfTg5RT1jO LuWcYdQT31VHr3na6a46OD7LCW3dB8w9YjmFXy9B1yPec0g5j2nNaE0ylB/TDu9TpEf7HOT0 iN5FrGc5A9+zir1OO92zib1Me0Z0nU7kaSd8nVic5VztOR822egH3FMGVzol6Qe8T8nAP+3v DsrjUTLxo4R+P+COIk8+7Wc5D7QWsba3LC8AdhV7nfaK/k3sZdrprjody9NOd/WJWVvxmYNN 3VrHcso4STqW1vGeMk7qfVozWpNMJce0R8CWcs44aoRdxHqWs/E9q9jrtNM9m9jLtGdE7zaB bQ3LGWxie5Zz9Tg52tS3VbynjJGkI2sV36eMkXqb1ozeSabiY9oj2rPYz3JWtBaxnigF36eM kPq8XcN+SPb5daLfCt9VlwPyuxW+67Blgra+FlmfMGrCx+Ur46M+vzAt4z1lfHR2ng36Ief6 O7fw4hLlvz3VH4gnB9CI0YRUfyD2glCtUu2JIGhFufhLzDQ6iHh4rB2eLnx6YAQdG/FQ+YxO YNqIRgfxDo+1TNyFTo/UcSYwOazzl7aaX/ylBeRXiwihTHsiixrx0PlLG8/oWEyIheRXazv1 k5d/4Tp/iblGH8R85PuvXRnl2t8QJfP7k2l0EL/3WDsyXbj0mKCx0QRtO90ZTBvX6Fg8wYVk VwFadTi+bmiSi8HEXCPxBu48YFJ2S6DlIac0OoMJm1agpJdASS/f0OYvRGMv4arYT7R5ZPiT EKlzGS/+EqyLuTMy55HhXwiWNksuWOcv4eqYewN3nnArRleghdeF6/wlWCVzb6S6Iyuf0lMC Le4Ym3HRl5iQ3jC4AmWngICmUtc/CZ0XeQlXy9wZee4Iu/PciX9q1IeLvbSlZQyMrw+eOxKG j1tcZy9tCWLxQNx4YNzGgHEbmXfnlIqLvcTpWjFghMWAcRuROE7MnQv1jmPk3kBIB0xKI4np HvWTZOTOyEaH0N3Z6Ahq3I87lpH6PjPRsQJo4/BCvWMZuTey0WFRPzb8MEbahLgojTc8I3dG MjrsQURK1YrEjbtg73hG7g10dNwziQODLBLBZuF+8ozcGcnjyG8+MMgSJ304AeaOZ+TeSB5H NnbAINvI40Ss2XhGd+RxJKVHDLK0EVGRWMM8I3dG8jhy6JE1zSmRDnrHMnJvYHkDJhPHiXHn TJ0bhpF7A8MbMCktI9U7zBt2kfoitxv50t9wux31llv0M7cbcXk3znXr79hF7o38bsQdGLiJ shYX7ifDyJ2R4o3k0wMDNzPVzAQR7ihG7owMb+TKBoxbFpu7YG84Ru6MhGyk9q4kiv7WOdkH S/KBZZRp5ztTEsV3hOwFe88y+oGQjfzxW1LnE8soE6szE6szI22a0gyde/nEMcoF4zYzaxr2 UDOlKS3Ue4ZRpjSlTGlKeeU6TE981uuogXt+UcYnpVwHkBrrchXuUO/ZRZl2pg3JrsrK4O1y RTxGe/8P7KJyYOyWA4OsrGTALlc3vMsndlEh3mUJGGWF2FuF2VsX7j27qBB7qxB7qxATpDAT xNvrA7+oEBOkEBOkUIJCoQSFhXvLMSqUn1AoP+FbkrMHwgPP6AeSM+JuTEnDfeAaFWJKlkq4 SJ0mfcCFeks2Kg3jrCBxemD0ljui6APTqCDiwMitxNMwbagP1HuekXgjCxmZsgGjl/WfLu7l A8+oBoyyGjB6a8To3VjIjvvAM/pgISO7mbiMdeMyWi/zwDOqxGWsxGWsxIuqlGS3cO95RpWy 7CrxoipxLiql6zjuE8+oUrpOpXSdSpz/ypx/l6B84BlVIv1XIv1/UIfbDe4Dz6g2DN+NO4yo lMzqzMsnnlGlZNYKmCZb5H6UEbdQb5lGlRLiXP/IriilphFJ1LQyH9hGDSmilE7TiJTfSN5h od5zjlrE8G1Eym8Jw6zRku2Fe888agmjrCWMspYxyjZmr31rnthHH8xeZAwXjLLGLMEL956B 1IglaEh+RclrjVlIRrp7ICG1ikHWKHmtUQZM4wwYh73nITVKgGmUANOIR9+YR2+wl4w9p2w1 otE3otG3gaG7s3H1i2sy4HXL2mIybqPc7g4xZpTaD1ATsd/StsQbeLOASdllnSl99hF3Ue26 zR16IFTKMesJQ7ffcEVdVLvyoLkjUTRh5PaMkdtp2fYidLp+/Za01TNGbs8Yub1g5HYmuV+4 2iFsSVudOO6dsq+/58s6rCnYb0lbP/BlkTfMnDxnirqG/Za01SmPszcMsd4xxDong124pmHP HUKnXLDeMcT6wBDrnFLiHE/XsN+StjqllBiSsuEOjLDBzPQL1RTst5St4dz0hXPHbSUuqtE8 Xbt+S9YavmD7Hbd1fOK5InPdkrSGL9Uyt5XSs0a+wzO9+i09aywipidnBeNoIQkV48k1eK3z 25KzhouFLBjnjiIkKQ5ckDbDb1tq1nDFgYXj3FEIz0GnkDkH1WWN25aYNRpwMX1l9m/EQf3f p4qmSPTU0GyvXZUgbVf7K8DDf0sq/RuxUNdT0tnC0+xHAAMvZJpFS/QNpLZpdBLq4pbIHaNx UIEYN83BKKiLnzLNxj8Fct08RmgY/XRxXF56upC++uNroHez1hHQWI17Gr7IXIx6upg2giy8 2TceeB37RTzFU8+jMqTm8D5g+ZRQNUkVi/MzkY1zGrB8StSaXwLgDaXYLHTyGw/kjkoDE1rd wm3GZj2fBcvXjPx6Pgu+P+Wjnb/A8rWLbBrx/SnTTZiDWD4lxgnREN9fM54pHjoflXInJEZ8 f9W6m/NZsHxK6Js9T0JjNY5pwvJVI7yGd8L3p9zC8k5fBOEE04TvT1mLk4SCR21HJTnORZeE 78+5pQnLp/RJOeoF35+yLUVBGMun5Mw5TIFaLsZajW882j0WI7mGd8b3pzzR/MYDzOMileYv Qo7GKc1YPiWszmJkfH/F+KQZy6dU2Fk9Gd+fMmdnZWYsnxJtZ9UXNDqXFI+6j9mIrWdfjO9P Ob8nAJYvX0TSgu9P2cSzYZUvumEwGmnB95eNQ1qwfEprns274PtL9r3O74LlU9L0DB3ATcZO De9qnaX5Cpn1jafSx2Rs0PGuWL5k5NH+rvj+lBk++4uK5VMi+exbKr6/ZAzRiuVTivrstSq+ v2jjm0Rnz0clwM/+kCCq8UMbvj8l109jRNxso6+G5YtGGu3vhu9PWf6zv29YPk0KmN+Ghu8v GjO0Yfk03UDUg/H9BRsRpnfD8mkyg1BDF24wLmp4dyyfJkoc747vLxj7c7w7li8YWbS/O74/ ZSIKKxTLp8RFIYXi+wvOCMXy+RA5vzu+v8PG0endsXxKt5yfXTJW44MOLJ9SOcd74Ptz1uc0 J/RNRgYd+P6UUSoavFi+4ysYGXTg+ztsRgE0dj3nVImgA95f8PlHegMZPgWlzc43Eo4LOAwj n55fchzBBCXl9nfAAUwYRvgc74BjmDCMICr+GdGjUUEDjmKCynXPFhpwGBOGEUEDjmNCt5nZ lM2GFxm6zd/SO+BIRtQglQwaAlqrUUEDjmWEYTOpoAGHMqEb5XO8A45mRE9dqaABhzOh25BU cArag5FBAw5oQrc5bMARjRzmq1TQgEMa0c3UGXDAMY2oayodNMCzNyOgniXFUY0OooX3JWdo t9m/2X+o8h8+f6CkMQbvQkgbH48yxN63R1fvthVUqiXEz2qZ1RiiVkzZqj1ErRiq9myqsvtr KmKPH6+1Gp1ubwSzpHuD6UbE25vXEHvfmqNa29Z4palLIbemLiUN2tgpNJLY80coZZPl3UOv mHjvHqpV7J+BLfTCrRPoQmIce48xjNuI/cvsi6SIg/vaIOa935JSHtJzUS+XTLt46xOzmNPe gxbTPd762yrmj75ZGJnci3cje249/hBz5+9DMJpo52+lmvfvzizfoV8e+kolMef9m5ZNGHr7 AhYxx/17WcX88W0VHit/hbuQZMf+xR7GnaXvexRj47GAjBuEdcvjhq9ootjbKCOZcvY2Jsli TvsIpog57uOdKuaPsZHwf3kU1YVYPPYR1xBz5/FZMhIyjeVk3Cei4Tzuk/I1GfnRKDHZoRzb mDKLOe0j0CLmj/FqFbOPbXEcfDQeBXchZI99xDzE3Hl8nU1UncbiMm4XTjeP26V8VYboNMpP xgff5gSK/TGDKGKO+2yjijnscxPhmvMspr/1HJNtxjNMd57mR0WMjedSMu8SxXqed0n5ikyx aJaWxJz3OV02ev02A9Rbxn22WMUc9rmlcPR5FtqF/z/2GeswvX6a31aT9Ke5sMybD50i47xZ yqdTZJplJ0s42ObkWcxpn8EXS1bYZvv6JGFfG5DUBl5F6G89z2BbcRhvPfSA1ic04aLxWoas exwSErTuIeWTAOJVkiTmvK+pZEvf2FZgiuV4bKs1VcxhX9uRB+RVoC7pJmNfMRpvPSiC1pfU t/FalAxoDhnQ0LqVlE/GM7zKlcSc9zWxLOa0r6AVy4bZVtuqpcxsa3OSScOreP2t52hsK35D zHIi+cJVo6whL18ZxhxaNlx3lPJp2WiVMolZOMeALOXTstEKaLHF1W21tFoGEQxgbMnZ2abB dv3DJof9t8lewhQZkGVGE2YvYR7M2qhoFnTXiv1VFmMFhE2E+6AEi2NpyfX3t+d/OHs22FZ7 2IS4vz3/gzivB5G/L1zbEw+bFvex2N8Lya/6F+bu0O6yM3ODbgSGTYr7WLvLC8iuvjtQY8Hq hnDYpLh/OFADT1SgHTCn/AbbvA2bFneglIVAKQthEYVkhoUbOAvX6oGzw8LiCS0gv3o8qOIC tV3LsGXIfXdQBSWvUMaZs5ODbS+GLUEuUMZZoIyz0DEOQ79D1S28sOXHBazWjiH63ckPxlkI tuUWtuS4bw9+CBi8kWRsL1jddQtbblwMGLsxYOzGiLEbiaLsTOp41QNlrWCOTcS4/e4YhQvT GF1hy417PEZhSMoJ5u4QcdLp2dEYXWHLjotEnIxEnPxIMkk3uMbookyQ9oWZIJxh8ng0wUK0 w6G2/LjnowkSkd8Tkd+dRh7tDJgtPy4R+T0R+T1hsgIRTS5QP2xpy45LRDRJmK7wjc6/U9Oj H1605cZ9q/RfMGBTuUH1I4aY/Z8wCYZkSxOdMpWIGeVs9+hHAW2ZcYmoUWmdMjXe36rmL1w7 DmjLjPtBOR+Tdoi4ceEalWs/Oi0RcSONL2T/07lNmXiuzs9fR7JxZlwmnmsmnut3qvQX7nVA GpO5vpWlJ23NTAw8Z/57m9jIXJkIeJmkNZ+TFRaoH5HGZK5vkxUeJd49neA6IG1PBPlO4p1o 1JkUKxeuH5DGORAkWJmJSV3WGUP9yg24YI1LcZ2PtqlwH8TTPzB4nxXTP1B3Ee7vNNMfuf8L NX8cYtZ/oP6vHMkuVxi8Nty/Dl3bFbgLBm+hPMnvhMgvXD90bVPg/k6InDQVC2VxeabGOnON yVyFsrgKZXEVIkwWynK/cP3MtY3OVQbGbiHG5HfK3p4Bstg6mwL3d8rerOvd71Dt4LVdfzti 8FZW30Y+PfHeHfU6eu1Df3vjvSOf/hu5bM9WWcev7SLcX9/IZRNPnzubC1cJQLsKN/U1lWiI lfqaSg+r0h02sku7CDc+KfUz36lPX6B+9Bp1it9qT0cMXSaSe1rNdfLalh33QSRHgjpl3TXK ulu4pqqxZcc1yrprlHX3nZazp+skP3pt1+D+XssZyc50EN+F62ev7RrcFWO3UTpQo3NFWr99 3uvwtU2Dm/qaRueKPAsle3rRdfTarsBN3GwSSqZMtk7H2i1UO3hty5DrAYOhUyZbp5M6OpFI PXPpOnpty5DrdFRHp6M6vtMevnD98LUtQ+5b7eGKMdGx5bqszHX4GufHdST6UkZyJ+p/b/ys ftqW9Tdbelxv9KzE/f9Ox3fh6qvbsuMeZHyDUVeQl0xVYBI4HsRbbtxwOYmFY4ziL2YSxxtM DwjOCxuev7VgfpTJLXQi2KYv5N4XOflr0aeJRj9IBKiQSs8mLuTei0+8eLqsaIuxSvo8m66Q e1/M3wtv5/1ez/jvxfudt3au7861XaSFTx4w/u7Pr39v7q+xkIVOgepapsUlbIpNi0u4FKzb JVuYwqZAjS/Z7xQuxa4I1oxNsSuIVWNT7IpjxdgUu0JZNjYF65kl41Ls6mfRuBS7WlowLsWm rSZMCtZhk61oWQNFzbZgK6P9Q+GtGZdiV4SrxqXYFeSKcSl2xblsXArWp0vGpNjV7KIxKXb1 u2BMik0rT3gUrKsnvZ8wKVCDz1eW+4diXzMuxa7wV41MsSsCFmNT7AqC2VauWW8wGZtiVyeM tuq9qxkG41Ns2odCpyCdRNVUVEZFQGt3QsWmwNicU7EpNlYnVWwKj8VZFZsiZHZaBaEnZ1Vs apPRaRWbOmVwXgVrWSqtgnQvdYtMFB5BI1P300TfcVPU9H2KXYGzGrliV+wsxq7YFT6z0StY DzQZu2JXD41Gr9jVRoPxKzZtUqFXsI6pbnXOf6Lmqe6Lzn/uCqnNOBa7omo1ksWuwFqMZbEr tmajWbC+a7Jto10NNtjm0qYpaywLVqDVzemGarVvU7cVpgWo275MDVeoFrsabjW2xa6eW4xu 0RvfNRvfAtR5X6bmK4SLXc03GuNiV/8NRrnopGPujAtQFn6ZDvFRNxViZSXM/7arFjfb7gOV 47epIgvzAlSRX6aiLJuFu4pyNu7Frrrs5AtQaX6bprOwL0DV+WUa0EK/2DSgjX3BitFGGkF1 6bepUQsDA9SoX6ZefZgKNqlXOwtjV7suRsMAdey3qWkfpoI9EN+JGLv6djQmxq7WHWwLF7S9 36IELtu8oAT+Mt3wI2+q4coWEhXsTWW8GR0DVMltFV8ZGaBi/jLVc6Fk7Krn2TgZu0q6kzJA Vf1tGuzCygAV9pdptgstY9NsN1YGK7wrmYvU4N+mHi/MDFCPf5navFAzdrX5alvvuzp9MXoG qNm/Tf1eNu5B/f5lavlC0NjV8qMxNHZ1/WAUjUF9UzSGBij3v0zn/4ibyr+y+OZ/208FaEbT GNQ3BRuXNjx14GWnFAhVYz+lIBtXYz/VwMkao/N9o7E14NSEl52xIOPh7YwFY0zgiQw2U6g/ bJP+begayGD4K8RmkaZAh9wftD/vZbnbmj1oc/6gE+6PtcDQ3q4We2HqZsnDzuyx1jIX0F/B ALlg7zdmvyWArCUs/zICrO3C3GzMHkvNZqEszga+S9KzWZj3W7PHErRZSH416FXTsoUn6j9s zh6DGsHARvAdqeSCfdie/YFUgowKWhlzBYCnDdoQsCWEgC0hEEEpEJ/gwr3fog1EKQhEXQoJ W0KghZEFe79JG3xhBJF+JKu4YsHTFu23ZBWUxq03mA/bswHLvxbb+ttVYN2PqFCmgfC0NxuI CRUatQLSwQydWoHB3m3NujNSYLAGvqHAuLTC3dbsTxSYXRO23cHebM669+KVsCYsE2uwk/Gt uLvNWfcGFgxgkj5yTHeYnxuz6roASR75O1rNBXq3LfszrQbFUGmBsF6bhnnVA7FqkAFD59JF 4mxF4lVU2ovctmbde+GS5Exs1ApIcqbSXuS2NeveyNiBfZhnxs5Chcr4Kwk7KOBL8kuugnFt n26SpZH0lwzJr4iqkYgLtnC3RU/0XrhE1UgRe5kUqSVcG6f27126NBLDiCTJvmMDOe7aQt3E S79jA2VsCilzU3Bc30LdxEtJoS9lbAqJiGaJWCCuDWJbqHEXLyUSSCKeWWrYHBJpVl6w1y7q xl8izcpEmpXfMY1cemRtpLJ86Q9MI9ZwjTe4vpPKHaM4I9HoOw3XjLC6MX3to8L+rDsv1squ 4QofHdZwvWBtGxW3Z90Z6UsotvoNfcklU9Y26iZf+i19CVBJ2nuh+ibqRt1J2BQy1iyxVnK5 wfQt1F28FMtPjJVciWZF0jEu77K2UDfx0oqtwJD86htO1MK1LdRta/ZbThTJJWWSS2reWK8t VN6azaSXlEkvKZNeUiba3cL1TVTems1Eu8tEuytIiTqop/Eg8E3UXbr0wK6mICnqkWi1MG0D dZMt/Y5nhQwjOtu+eVj5BuouWkpn2xc6274Qu6YQi+/CvTZRN9FSovEVYtcU0tErpCrZPFxv Dp1xZ+RvIYXtG/7WBXt3AEz/icAFqHQa/UK9Of/FvYG+BZgsskrswOZ9y93xL+6N5C0WWkWa 1UFNwXHvjn9x70UHOrApfEcKa95v3R3/0n8ghZHscCXZYcf9OP7FPRcmSQ5Xoh1WIgP5tvPt 8S/uDVQz7GUqSXBXkuBeuDcHwLg3ks2QcPcN2axZL/txBEz/kWiGgrskSb8wbw6BcW9kmqHg LhGMKhGMFu7nMTDuvGCJX1QH8fjobIZmH4TbY2DcG1lsqNj5DYtt4d4cA9N/4LEFbAqNjmNv 9qG5OwfGnRdswJbQWGV13IHeHAPj3kBiA0xSwGtYsfbtuj0CRn0XYsZW8B0t7kK9OwCm/0iL Q+FWkn+078Ht+S/ujKw4bAW7EGr5hL07AMadF+z3Qqj1BvbzBBj3RaodfBmeqXbNPuG3J8C4 9xPVjgRLbzDvzn9RX6TZsQgqKosSlbPZoODu9Bd3XrAkCdxJIbvTwvoFe3f6i3sjew9Zgd+w 95q/rZvTX/oP5L2CbaDT4vqCvTn9xb0XbqFWQATRTqvrzcYwt6e/uDcSA1EOt1NLoBX2hft5 +os7L9hOjeEbXuAFe3f+i3s/EQORHUfr682GXLcnwLj3IgYudlzAdjBobX1h3pwA496O6Svr roaGZENsBK4+f3f+i3svtuFi3X3DNlyYN2e/9G/ZhvDyBy2pN1ezvzn3xZ0X2XDpahJ5ddDZ Uhfk3aEv7u2YFV77Ll6Kr93F8e9OfHHvi8IIr/3/FBLjEdYDGmVwEQWBwhjWnO4iF/77UxgN isRL3UjSpWZ802nc+g5IttSNJFrqRpIsdSNJlrqRBEvXyybGhxpBrNRNJFXqRhIqdQZs2Euz iZS6kSRK3UgCpW4kgVI3kjypG0mcdAn8xh2RhEndSLKkZnzHvTSbJKkb+zvupdnkSN1IcqRu JDHSxU6Oe2lIiNRNJEO6epu0vxuSIHWVZhIgdSPJj7qRxEfdSOKjbiTpUTeS8KgbQXZ0yUbn vTSb5KgZUW5mddt5fzeb2KgbSWrUjSQ16kYSGnUjyYy6EURG3UQSo24kgVEX3y57aTZxUTeS tOj6BJb93WzCom4kWVE3kqjoIvF/IMZ33UujKqPbu4nvupdGFUa3d6P6omX3bCgntUYOdS+N aov2HTO/614a4SXvpvhue2lUU3R7N+Hd9tIIF3l/N6omWnZjQ/EvN9Z320ujSqJ9N+Z320sj 7OMdMb77Xpp50fd3c7z7VhpTD+V3Y9qhZfdsKNXmxoqybm4sKADnxvzuW2mELvlhiu+xlcb0 QuOG+B57aVQrNO/GjmJ5bmworOfGiiJ8biwo1+fG/B57aWblLhVAt0XSC3RrIHVBs5ISodpM GnR7QSYMWnbfRpqIbq2koOjWQmqLbs2kzejWBDqObouk+OjWQPqQZiUtSbWZEGjerZ10Kt3a SNXSrZU0MN1aSC/TrZnUNd2KSpxui6TZ6dagEp9odeHPdAl/upmcX2b9hFXRz7jb+uejuuAn vy6X+2y7b8Hquqz5s2pd6DPvuPHzlbnI5/68n81AJT4DY5q859g9GzbDy3rTZF3as+64+TMU XNYz79b4GWIu6bm9r/AZtvL44dht/aMnMDXP7W0dN72LKXnW3Zg/eixT8cw7ZvzoBU3Bc3tP x0evKtkmYzd16KVfbmzvvr2j467nN93OuhszfE0uzPTu2/sxxc60Gz+/ZDOt5IsbmOaUsJcq dY7d2D6+tabT2XbE8m57aVSjs+zG9DEmMH3OtGPiKMM9P0Yjws5su6l/jG5Ml5Nbmqlyfvy8 fIytTJGz7Mb0MV4zNc60e36OAEGJ0wybDqcbUYXz5cb2MXDdNDgvY/kYDG/6mxfm5wB70968 jOFjyI66m2pg1c2XG1Fz8/JsH5OKXXHTjai3eWGi2ublmT4mP7vSphtRZ9Mx3xveprHpxv4x jdsVNt1YP6aGu7qmG/PHdHNX1nRj/JjA7qqaZtwmxLuiphv7O+6lYT3Nlxvrx7R919J0Iypp XkbU0bww48fiwq6hacb35rXpZ7oR1TNfbmwfCyWbduZlLB+LL5tu5oWZPhZ0Ns3Myxg+lohQ L1MNrJZ5reihVublSVqZbiSlTDeiTuaFiSqZlydpZLqRFDLdiPqYL1vV9BPvn47O/tskXAC3 7AAGI5ow4QJoyweRzA9aD7/KcnNctztjzgVmHKydzGZ9DMDqqu7tcd3ujdkRmB9CBNuDRBEX 7s1x3e6NGRKYzIGpHMRFuVDvjut2b8iPAEyiEh5EJey2FXJ7XLd7Y3oEEtjX5nuz4eIn7t2B 3e6N6RGYbxCxAQY+ftG2WW6P7HZvzGNAcchvNDcX7s2R3e6NeQzIuCcmbOCj2x337shu9164 iwnbP3MZsO0O2xq6PbLbvZ/zGTD9hA9LdNy7I7vdGxMaMP0Es0T4EF3ddLo7r9t9Ie1gIcYD ozfSBuGFeXNYtztjzgEEbyS2aiS2qsPendXtzgs2YLuNCdtt5NMNfY/s5rRud8bUA2i2MWP4 Rj7t1mHvTux2b0w9QJVMyhtjRc/hX427M7vdG3MPkMvfsNnGW9SbE7vVF/MDgJASO+UzUK7M hXp3Xrd7L9xO+QwDvzqR6BjDvzZ353W7N6Qe4Db8d0kCC/fmvO6fkwRQLzNSyzXc2/O63RuT BFAvM2PTTUSJHvZ5vD2v272RzI/s+IJtN/Exso57d163eyObH5MaKrbdxOeL22f39sRu9164 RAXd2fx3qJ8ndqvrM5Ef8y+I+naB3p3Y7d7I5EddywObbubTXm2McHtmt3sjlR+58cT7yXwW uOPen9mdifeTifeTibSZSSty2ODj6czuTGKRmUibGYnsxHhYqPcndueM7TYjjf0b2v2F+nBg 9w+0e6Sx84HdNlB6OrE7U/ZUpuypTYp03KA+HNidv9MhRW44JYoMG3w9HNf9IUOK1HAiVhYi Vn7AMv2tELGyELGy0MnazJBfsHYO+EaB+2DIo2QoscoKscqGDRXXSeBEgivEKivEKitMj+93 oH4Q+CbxSilOBTGJVVOIVXOh+kngu8Rrw0ZbSEy7UE5HIRbksFHtdRL4JvJKNMhCKR1GXXdP Ss9bsHYS+C7ySul5huRXpDrIRPZhg+V1Ejh1CB88dhQMpUykSplIC9YPAmcCXKVMpEqZSJXY u5XPb3dcPwl8o8BVOr+9EoO3UgpGLRS+NrZfZ4FvIq+FCNeUg1GReU+sxYVq54HvIq/EWqzY FL7hnA8dLq9DwTeN1+855/iwlAh9wfrZ4JvE68DYreOLqeHQcNtBDddhpbPdD/MWX2SGoxxr xGbbKPtz2BRnHRLOnLhG2Z8tYrv9EE5td7h+UDjrvCZsth+6qUg6x5q1iZOnZbVd5RXp1pTs 1io22UZLKgtVvw1t13it2GQb5Sw3rABaUlmoOgxru8Irpfc0LP/AQVKjJZVhUzxPHmq7viul Z7aBo6RO+Qyd8hkWro5A2pZG2CmfoVM+Q6ektM5LKo5rY4W2JRJ2OmigU2ZaTxi6zOYeNid1 EmXbNV53Njfq0WZstp2XVC5c/ai1XeOVUnE6JRc/a7EOm+l61kjbFV6/02JFRjsvp1yo2pW3 XeGVkik7JVP2dVJON1bIJ651um3XeKW0+L6OyhlGyUHWNX5ybGbuTWJLJhTnC3b4okowJhTS rssdqPU3u8arr6ksHP2bFV6xydpU3xMGdp1TX01xEP2LziwYJOGwAK3gu76rSzgsHP2b0gMG pQdcmN5eP/VdFzPcV1DCRYh2L2z5thLhPPa2l3uxwn31JPyfQI1emxfMXjZitKm5Mk16/eYb lvMC+/+NFj1rZP7/LMnvf3vNfOz0Vv3O3/71/Xd/DO9zpv/bv/3zL7H/+rv4S6q//i79coRf /+W3f3r94TehVf9/MpMJ3gplbmRzdHJlYW0KZW5kb2JqCgo0MCAwIG9iagoyNjA1MgplbmRv YmoKCjQyIDAgb2JqCjw8L0xlbmd0aCA0MyAwIFIvRmlsdGVyL0ZsYXRlRGVjb2RlPj4Kc3Ry ZWFtCniclVfLqiM3EN37K3o9YEdVejY0grbbXmQ3YMgiZJeZhGESyGzy+6mX1O3bJvcaQ78k lapOnVMquxMM/x7+GdxwdPSYka8x8PXHl+GXT8PfBxj49+OPg+OB4a8DTZKn7zx94Hu76tc/ D18/iUn+0brz/ZDjELI7leH++/DTDYYQhvvXXyeAeoTJnfkKWI84QV6/uFzpMtdjmFx0xS0u 8xtObpFrgsJ3jO4i7wjFqRF0OWD97f7z4Xo/fGZfTm4MAHwvCbPc0UfzLngK149wyuofDuPJ k4OTu9b7t25jE09yp3HwRaZpRAhkQ2K6iTM3i4Mu6l3zESVY7xCzWzjcSNFVLzF73hEdRY4g YSddVOkx01AsEw8gzZttflCkeL/Eg0hTEBKPqQ305AMGdmRh4AJhbKCyXXDiwaJ+2QB5RqjG imhfENnD1DIUzafFnFgesN7hlMIOJefVMKWQMygmL5Vjpc3FtuLFWddt0QJF9is3v6K8N/Rw bDBTQM6C0S8NJ0V0ZnNpklndfGKveCX7pAZt19IiBSc7epcbbppihQrfA8KXRrEtFJc1ydcK SeDnp879KhBzuKN6a+y4dD8Nl84iGWk+++6eJLxISPKoQefqOw1oB8oAjKtLxliC5Vw7jRVF QcurGBdPGcWRrcD149JLiYqCd2WVXhFYWEDPpVdYpt6lU2pIQjlFRRIk+LmSEpw6LWIbGcub QCbZygqoRN1HZhdMrF44blM4JK+pZVOliqqzYBfaxNUq783FqqJtbp/tJVWzwZSXPIHULb2h io8WhLdUer9+YQ6tvn6wfmHG016Z/lajBFw67aikNTIaGa7GAmR2Qpk2knmisbNo3FS+Ua8t 8JSB1wiDATnlLxAG6UgLO8L4zCqQVJB3IpEoOerJ8CqWbfp0QOmQZdE2mTPhxgzqKV351g4E KqZonEmdcjoymsRWxhHUqdWXWa3Kd06TE4eZ7Y2kbR7zmmS4K80fgJaGXwKWtDvugIWZ95a4 VV3q5xaEaIXf9+gUEkX8pvC5Hq8+BjEmtVFw4Xw1mHoZZg1ukKKyFDs8aSvW1MuFJdWO675S r+rRLLlUN5IVCamRR8nPG8O24CgH7GsZAMK1CzkxuO/lgPqenoHIazu1Ueqxk+CCyo/aJv3q jcfiNAdxYz1mOX440jMTkV4TA5A5UrDpczsx5dDmsVbvIqdUEgGjzVO2J57G1TKoIfNJd+eJ ZfKuBrBRtb3xrfV9RHxvWaMlxPsXsY2xtWwfxTb6Vmp26Dqr18dkHSvrkM9lwljHbhKHBo8d cf6mHW5o0FtP1UPPHfbWCvO09AD9YlTM7cO1Sqd8Nr1oJxct8X5jJ7RKLJu+CCF2wX8UQsw7 AJHE0jmpTuVnODU6saea8tg51EuKRpcfiKlCzVt1Cpkbvp2AkqA94W6N75qN5wx9pdORQ3rM L/7HGOOzvxgAQUQAAtHaIz80062D07MZewO9bFtb6+YX7Y+tC9TeXhrO4pMsA24N18F9h5g2 HeLaIL4xJyVSZwP/+9G/SpsOeja//7+PTuN65KygtIi5HZGmRBqLY3rYVVvWCzd2Ukdgs9Pn 4T/7rjcgCmVuZHN0cmVhbQplbmRvYmoKCjQzIDAgb2JqCjExOTAKZW5kb2JqCgo0NSAwIG9i ago8PC9MZW5ndGggNDYgMCBSL0ZpbHRlci9GbGF0ZURlY29kZT4+CnN0cmVhbQp4nJVWTYvc OBC996/wOTBeVUmyJDCG6U73YW+Bhj0suWVnQ0gWNpf8/dSXZNkznmQYxm3LkurVq3pPdiMM P07/D254cHSbkK8x8PX7P8Nf74b/TjDw3/d/T45fDN9ONEnuvvL0gX/rVUc/n57eyZb8R+vO 9xNEGMsQkhvzcP80/HGDIYTh/vT3DOcF8gxpeQC7uskl+n9cHnAG5Ks7y/jFvZcncDrqXXBR 7nhFprcf73+ervfTh330EilugExZ7aLf+jjg3GQY0EWLusMCbhNldCUA8G+eMMkv+mhxg6eA vrjRa1gcwI2RAs/uuty/vAR18jTZ54mnKVJUpJgl05ubhCnHXHj+vShnxh9Dl4H6GhfPOcgj RaUtHnmEuJOXthdnSHdo8xLFsW3oXt55t/hkm7d5uECZIS7oeMcbMxboLfiGA64y8bA0mm9M Y9rl68AiKFjemIrtLVOtd82HB+Rdj749HoNsAWQilnUgQTECNglzs84r45E37CLVnaUMuuAm c88Gn4Ao/Rer0ausYCbN7Fix6nMvhjn4Wtmu8lRO3zHVZcWtzVgVestJiqXYNOUz72qTdSQt sSah9F8Oa/trQWDxY3ibIDCXZ4IAEDznXTZChLYE93huBaScnNclrX9r12s5svVBXAnhYiEe qIvmYLARL4tCR1H3skdB/tH65Xn7vtYPOHXuWfshCUQWp9/16j4NmqrYvT4oylX3v13ExIcD YpMsDmVEqeHtoIY50fxQXZAWg4D3ecFJ6FJFtOt7gXZTA0Y02tuLJE74aCKbuMVlRnuO2gOs BTUE4pkGteKSLq698vKetY+EL64sZLMDLaMdBW29b+sRq+vM9XSSYOaKfbhbS+ug7kQclLKe WkZc7cS20bk6klAIiozlOVlAr+drNJsi7HmpLXKpQqeB9IIv/VrRMAXugLcoGibX9cP6KZA0 OXOf6vW1V/2sxkeqv6w6rKfc0TEhW0nXW7fzOV+/N6rjR7G9jSj4YDT7VGcX6eLqBVsTeV29 4GGc9md67GxEttGK4GoJFZJZ++odIumrndFmgYpKbR83KQZz7441dZ/LymxRLt/u6mIIJVeH /i0/oC+yfVf7sgS0tr60RrUOP9Y/dDRGk2DcS5AdwPSh0nf9anVr2Oh32hyrG7OwnsirnOX7 sNVOsMAG/t4CJkOQVzA1T1BtyiA6k/CxP0yl+0hQIsUCNKRBXeF0jqSxOEwI9pVSbbI3hsnk 80JC1U2VhGv9yDE/kjQ0SDGWaj34vFozrJSoMeFzpmtl2XOLrtzWt/nd1rw+DD8Brjm+Jwpl bmRzdHJlYW0KZW5kb2JqCgo0NiAwIG9iago5NzcKZW5kb2JqCgo0OCAwIG9iago8PC9MZW5n dGggNDkgMCBSL0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGgxIDMzOTM2Pj4Kc3RyZWFtCnic 7L17fFTF2Tg+c87Z3bO37O3sfbN7dje7m80m2dwvJCQbIOEmBLkIASKEECCYkCsgagW1ioIK XqvihVZtiyiGABpAhfb1WrVoRbHWt6AvaqtGaYvWVrL7fWb2bC6gbd/v7/fH7/P7mMPMPDNn zpyZ53nmuczMWXq717YgDdqEWBRrbm/qbBjXNBsh9BpC2Ni8rlfMWPHAMYBPIaS4dkXnyvbf ffX7pQgplyMkm7KybcOKL9Dl2xBKexyh2stXtTQtL2udoENobga0UbIKCnYMPSaH/GLIZ6xq 773cbtrAQ34T5Fe3dTQ3dW2YfA3kPyf59qbLOzPVWSxC8xZAXlzT1N5iefPtdMhfDo9P7uzo 6Z2LgnGENhwl9zu7Wzp/+Vb/DMhD/1R7oAzDRf40AMpJnmE5mVzBK1VqjTZNpzcYTYLZYrXZ HU5Xutsjen3+jEAwlBnOimTn5Ebz8gsK0f+v/rhPINyOnJC62WXIjVDipBQ+jF+dvB8fSiSY E1B5rhSSf3PhuovGc/GMZIqWo+OoHd2GfgJlhfi3aBeKIR2UH0csoH4BqkR3oPXobTQv8Rco 9aKH0ZcoG5WjVYk4MqCNKI5/hB7GDGLgqTL0FmpB25lKNsJ9BnTLwnnsbnwtyoFW5qK7kRUd gxazEirI72PSmUp4ai56lV3CZyfyEn/FR7lXEsvQz3Al8w63Bzh2EPs4FL8usTWxI3E/SkNn 2fSh/0rkJ9rhqXloKVqLroIebEIPotdxAzOeOZK4Cfq0APqwET2NXsURDnFLkRHNhto/Rveg g+g5dAy9iz7CGOtwJt6E38LHZWjo+fjziamJZYkOVItmolloE9xNxwFcwyxkF7JPsCeG/id+ KuGGtueidehydCXahraj3egE+j36A2YZFTOXmcc+gZxoPFqIlgE274A+7UKvoJOYx0V4HI7h G/DjzDqOHXoe5iWHzIDBKRT7t6EdgNNH0ZPoefQGehPa/AvglMV2HMHz8GL8I3w9vhXfiR/F j+M9+DNGxrzLsuw13IvcZ/F3EqrEfYld8F4nciERhYEyZegioOfr6FMYXxbOxtX4d0yEyWYx pxmKxwsTkxMbEy8kTiA/CkHd8WgSjHkGmg+93oCuQ4fRi/Ds6+i36GP0d8ASi1XYCLgQsR/P xnPwWujFE/hLPMRYgH5lTBvTzxxnI+zr3Hxuz9D+uDneH/8ynkjsTvQl/ivxGqVvCbxnIlCg EXWiHkqxA/CeF9Bp9Gf0FbxDjj3Q1yl4Ooz3Hmj/JD4H7MQzVzOPMwl2PLudfYWzc/fEZ8bb 4/fE9yWKEjOAt1gkQ3ZUBNc44KZ5qAHavhaw+TB6DCizD7jnHfQFtmE3zsNT8SV4AV6KV+EO 3Im78JX4KsDqLrwfH8bv4D/gLxiOkTNmwFOEaWauZe5g9jPPM+8wp1nEzmEXsF3slewd7H72 DfZPnJ7L5vK4GdxSbgN3hQzJWLmFf+2c9Vz70LKh+4b+K54bnxS/LL41/qv4O/EPE+rEkcRH SI7yoI8NaCX08Ucw/hvQregh4I/HoI8foE/QZ0DzvwIuWKzEDuixh9JtIvR7BvR8Pm7AK+Ba hVcD/jfh3bgfP4OP4l/hV/Cr+Hf4ffwlg6H3uXBVwCyYx6yAMdzH7Gb6mN/D9RXzDzbIZrMF bCFbxS6F0Wxmb4Tx/IR9n/2IYzgzl8/N4TZyL8lY2XLZ3bIdsudlL8s+levliyQZMXe0/GFf Y37FVbFtaCeaxbDsp8zvmEr8I+Zb/AsmHf8K3pbOzmJnMROZCsTgw8Dl7UhQ7JB75V5GQHrF UtIGcy+Tw87ngqwG9cJ8Q8xC5gZmKfo5fgZ9y0wBTlvHvs7sZJawO7jbuSp8Am2EdyJGi79G NagGVwHt3kJdQKEc9knut6RFGc+ek7Uz2sRm7hMZw/4O5OB4UBW/wQvxIJ7FWABbFcytyA95 PR6EdCrMwN8D5x/E81EZd4q9mZnG/AHK2tAd+FcwxsOojTmMfwZ0KYP52I1n4fvZfHQ17gJs lKPVzJ3Ix3QyPuDneehv+Fpshpn7LdAmg1mBOFbLNKPjTANQ/Q1sZHLx1cCn7Wgr3oKy8RA+ il5jbkMluIV97px9KJPB5wbxXnYK2ou/5V7hXmE4aOlXgM08kB4x4JCHQUbMg5npZYPANWVI xmQD/zeCBLwIGZiv8FVMG2rF97B/xo8yNagetbA9TB2+O/4VV8MWAsYOgTSZKC/nkaxSls4V AcU/QVXAjSsRkq/iTsquJTD7Fns20ZDwxpfI0uLvoysAO1NAum2FuTQFvYct+FJ8MZdgpnOJ xCVoN/Mk937CijXYi95MwAyLH8CVOCMh4q6EGl8MHH6pfNfQvdxW7npuLXcV6KZvQWregG5H 96FfgzZ5BPRWCPB4EWBzMcieVtAReagAFcPoqtAEkEpT4d4sdAnI06UgJVegNagLJO8D6HG0 FzTUdMDHpfDcCrQayntAQ12Jrob5vxndDDLgbvRz9CbzGPMQ62VuZF5g1jGt6D30HvsSG8OX oOPcTdxGNAdloIuxCd5cClTywHM3J96Ct4WRE6R/EcxS4PvEZ4l3Er8cOgbt/Rz6frt8AvpM PhGhWCxWXTW+smJceVlpcVFhQX5eNDcnO5IVzgwFAxl+n1f0uNNdTofdZrWYBZPRoNelaTVq lZJXyGUcy2CUXeuvWyr2BZf2cUH/lCk5JO9vgoKmUQVL+0Qoqhtbp09cSquJY2vGoOaK82rG kjVjwzWxXqxElTnZYq1f7Ht9kl8cwAsvXgDwLZP8DWLfIIVnUHg7hbUAe73wgFhrWzVJ7MNL xdq+unWrttQunQTN7VWrJvontqhystFelRpANUB9Vn/nXmytwhRgrLXj9jKI10Kn+hz+SbV9 dv8k0oM+NlDbtLxv1sULaic5vd6GnOw+PLHZv6wP+Sf06SK0CppIX9Mnn9inoK8RW8lo0FZx b/bRLTcP6NGypRHNcv/ypsUL+timBvIOQwTeO6nPesVp20gWGjdOXLB59F0nu6XW1iqS7JYt m8W+nRcvGH3XS+KGBmgDnmUCdUu31MGrbwYkTp8jwtuY6xsW9OHr4ZUiGQkZVXJ8Lf5aUrJ0 tdin9E/wr9qyeimQxrGlD83e4O13OGIHE6eQo1bcMneB39tX7fQ3NE1y7RXQltkb9tljon3s nZzsvXpDErF703QSoNGOBlqG71GIVifQ9NnDmMWkR/6pwBB9YrMIPVnghzGVkailDG1pLoNq 8NeA4am+5UCR1j7lxKVb9ONIOXm+TxbQ+8UtXyHgAP/g52NLmqQSeUD/FSIg4ZNhVoP7Kbgv EunLyiIsopgINIU+VtF8cU72ugGm1d+pFyEB9KFZgNumhnFRQL/XSwi8dSCGlkGmb9PFC5J5 ES1z9qNYNNLQxywld46m7pjnkTubUneGH1/qB07eT/0Jcx8fHP6n01tMtavG9WHLv7jdkrw/ fY5/+sULF4i1W5ZKuJ0+d0wueb9s+J4E9ZkmLmCdjAQxTpbeBaZcPFyZZBZo+rgA/JNTpl4+ oOCBK2kJFuv69EunJOMGldf7Hz40kDhDnqLJyGNSN/vGRcbmK8bkx3RPs4WFDnNBZvrchVu2 qMbcqwMJtGVLnV+s27J0S9NAYtMyv6j3bzkIdkdwS2ft0hRFBxKHtjr76m5ugEGswuNywEIg uhsu0GcKVLdXrhjAmv1QKuMIwCKVXAbAUyzLOJQKUvYURna+/kpbZKb+bOWMocqZ+q8rZ+iH KlF15VAlCfl5XoPXEIAIg6F9TmSPnovJ0LdI5I6C94gj8ePMmzgXKVFhzPZr9Dt0Cp2Bek9x +G/Mr9DvdAqPglE8g+9BKtSO05Etov+68fTQaRQdzM/DjdiL5X5fsLioFAwwQ/yEM2j3szh3 6N0Cv11FXFR0iFFwJmYjjMcR06CjDHLIGDvXvJt0+LT+YxSdQRoye4s507lfMBsvvxz69Hri Q3C2/oK0yBVT4X5ezb2rtqe1H8RuRMc5YxBVw1OBwgLQJnI/7UAJMy+jbNbFpST6S33ZuJkk gHfcGD8HNtEn4BHMioXCmiw9I7OmmVRGi1wu01stJnOVSTZDqTTtTAOPXg8Gut31m0NYhmzY fj15V+OMobOV+kH9aUBodaXBWF6OSUQHX2Q0lpbQTijAXBaMVtodXyjIBJnGysdCmjSjXbHm 0kvXKOzGNE3glzH81x7M4Nl+tc2g0vwmPvDIo/GBVzQqg13tw9PiZKoxCvBMPkE5uCh2neDS +2OurxzfZMgm2jebNgmsx+nJuCiDzcpYql1uas94zfo341nnmQw+O8vHokyVkMYLXmN2Vkin knEBlJOTEcgQAoGMDH9GwJ/hcgoul9PpcLocGSajYDIZlTyfYTQIRqMhB7S0S4YyHaCblbI0 PgMZlTkcCgywbMxoUBgX8TxSZMxwisZnURpOG8D3xXR8zDnDKCqgLvePTIwG8PiYuj6zI5PJ tOe+9IxtAGdICKT4G6p02PWDDpt+sHGQQDbAJ0mqT1eXlwNGAavWchK4zbmRtB/pn9+clmuL 8BcAHACI1i0spJQgMKFGI+pqxIYiSg9DIEkWuUKWoklIITFqaSBI2KWwwIovsZmMNmwwqfQ2 gyP+5S693WAx79plNhvthl3xL+wGm05tYrdhj8fh8MQ/aJDbDToL3/Anq9ZoT//zn9PtRq31 Twt5s85gl5O5lBM/x2yUeC2sZJQOO2N3cITflEa51aKXyYHXVCpgOeA2HRhZMBvSHzmEZ6S4 7WvCbacBXZTZxvCawDCpEZQYi4uYkDQIi9HCbPxOXvtLTzwRf8KnsQOvvYKnPPIonvIb4DWb 2hd/CngNP8MOsUZZPjC9F2amAlwRRadik0IGs/2vSIc4/HekiQ7CRG+EDliH8Zh8L6P93MLa jTrr53aIZemv2WVqo114zWIy2oGPt6OJ3HhuBgxxUSzfvsjjQYgXfqFfxP2C1y1SKnnX+2gR b11kMNgW6fU8XqRQ8O/nabDGLvKzrrFFUBSPcA4EykCnkZ5OxKHTkAIEvTIIFCUGL5UAhd4U +b1JwcDcRggcv9ntcLhxLyV2L4EZT3wxLXvEajJZ8c8IHL+UwISKHzDbmM+AijwKx/Syp6Bo D3M72rONT/AM/wwzA0RlHM8ckYREFGEvKyddCeEPsKpO7rXZRTn3ydDfsrzeLCIF5yROcldx t6M87DuMXIlvkCfxTb9H7zoEoDPxTcy33nla/rHrU88/mK/kXzm/8XwrKtUMJ8dOted65w65 3GgbYB6J6ZFZb2bMhXaz2WZPN2blkcI0kBY5YZjteSg9y6AiRWptWKnVqpTphrCf5CcHC33B oN+XHs4LZmX5g+GwLWhUBY0GJj3AKX1eN8YdaBtidOAsLSGiusDucPN8vXKJskO5UblNKVPa 88ddBnM6OzmnqYoh/NooKZvB6spBSidKqvHG8qgN6786+zz6nkzj+TnAYVdjWVkZKiuTyAp0 lfi9UKKn3yBYCgtKSqQbw+Xs0Oe/6NxzxWS3I03jxiWEnDueu3bOTSt3UCrTAq5qaMLeM8te upx5DgitVRFqD03Y+uuLHmymJVZKfoyOJU6ycXYTmoT/ErtRqHbVMMaLUANqnfS4+HjpT8te M70y4Y+mdyzvVP1hwmem00V/mnDOdLbomwlGtUlukVUpJ3hMZou5yjlhq++uosM69XzTwrLW stUVV5RdXXFT2U0Vjwr9gurWigMe5mI+EvYH82PjK4scNl2awqwpR0UFeX4ut0SXpmFViDXY K8aPB709UTWAi/ezYi7OHcB3x1zBEq8XVSjmlXvr3UvcHW7W7ajLn+uvCJu9sYHE0ZhFZ6+O NXSEcdheO1HByoMqr/rSTUnioWr4kyYXjpBZlZQ6Q4MICDfYSKhnKI8OgtyR5DFOgeXlRhBF EzfEykonGEVXwBSwVpk9qMJZ7sGlIkTGCZC1VNs8yGqrGj8uvdKDnY6KyjJPiQcJNQYPRpEI mbrJCEfo3zXXoOl9hjnT+zLA3tpfIRSpXM8kPkHWxOdoUuLz/iqhdCDx+T6fpdJVlvprwI1d IOzB0DuIyhKfx5RaS3WFAFEZVI3Z9GbIQTRJ0AkQafQQqXXVLtIOYIZUehpSJJAoMvzXgECh U/FBBV0wBJffp5CbBauFXJL8E+g8Ly5OVoV7hCOLi0LBDEmtsFfZjCabzWSwMvKy2ZtvmVlR l3fDk5Oalvz2pZc28mat0WYFGWn139vxyM6LZ8dfuvGi43fsYSPpoGK2ux0We2WorDxSXJnp 0pls/qumXPaLFp+Q5nA/4XbYzbmevOorJs2MRsWiVZVtG8FcQJtAskSBX+1IRG/EWlWWe81M ATOBmc00My8yL5p+Y3/P+J79fef/2D7y/NOitbuyXEVMmXua8yLPYudCT4ezzXO182bnva57 3U/LdGsth1zPs88bX3G94pbzLxgcoggS0ZDutSo4r0Gtmeuo2IlwJyLq/qOY1SdW4IqdAu4Q jgjHhJMCJ9i9WY+PiImuGYODwF5dg0RKVg/CbAeDlEhuoLlGonm/RZCDNb7fKXjcDNAmSWLU 2AVUxl6K3mEjC1CPiotQYQFSEHEmV3A5535p+WjXpb+tMaXpbfq8r655N34S617+LVbNt799 xx3HHfiBh1+qKtTZDQZ9wXzsfOVpLI//7Zqtex6/hcjl3QhxC9n1KIL+GROuSsPZynrVauMG 403Gu+UPmBQu3wCzJ6b2vOz3eHx+n8tpPsTsAWUdiykFm80s+JyRAKlRnzkzIzMzkOGLqNME uq4hU2ixCQlpelVGoAJF5KpqvZdTmCucvgowwlQ6xRkwqx05SBAzdP5Z/k3+7f6d/jN+ud+e PXSrTZKxRMR+3Ai2wAwyN6sHB4k9DxMxZfZgQ3n59wnY8zIU5alpdsAkpFmMLornLtyFzSWS uUTZniI2pUIlzVqYkrgM88jDtdOvsZtUaSZ/kb10xxHcS6yjoXbgT8+rO0jMLjt+57wWh8mu MPkdC3bHi4DhbVYjTIhniA4Grk1a+OwysPCdKD+m1PVb1Hw/khsPYwtwMoctB9Rqu901YvIn UUC5CDTFGMPf9H1uwEjELptVWjGThKFto3yDyvgQcxtoei3yHkQcUxjTqhEuQhkK3p7Wsivl UkkanpVsDTrxmdswGRSZ6dyef24mCka2AfBAeOow7gOP5yQKoA2xaQE+qAy72Yb01fp79Acz ON6OVXy6Ry9jLelODS9XeTReT3r6IhUvqFQ8+p13kXyP6XeaRc4OFuvYDpZhHSGLPTjsL4Hk i4KNeHboNFjDkaQtTARzyoImtmIXSLIx5FTIFfKU7Uh6T4UWgOxnetueqTmL55VX2NId/vHp BpXB6piwKj88q7ol3zZ5VrrA3G/T+39aOKvEpxcme1VWg947uzpU3pi+IqCBsR4E6SNwT6BJ 6A+xrPGFFznrCxsL11tusGx23OS8ufzeCaqpYl0Nc5vnZ55dNb+c8Lb1Y+tXVoVzIPF1v8lW MpD4Y6whEguPrwANKBMQLk0DBcjmFum0oP3U9mBlZZEhMFG9lcvdGioKeCeyHBPivcq0IL+0 NEBUHwOqTwjE8oP+YKymI7wxvC38UPjJsAw03wOHsAemqiSJZpwGSTQ4rOuIFiQMNaLuRpSd pO1gxsAEwdStKB6rGMgMMQtuZpRaSN6S1EJKKVAdIhnM7B1JI8NoxbKHf7z1kdyLlq7YXTO/ 4eP/+sN1dH7QO4cffPDputq8e95cvPitJ/q4KhfhrHfcDptz7g3bmgpmF3oMrvTQlku3v3pT Hrn1Jw/cWvyTB9smrHSbHf4pU67/8XOEByvInijMLz9eEsvfjXcbHzexokpUixpRK6aJOlE/ DlXgMuM40wpmpaFVaPU/CZUeMxljHqzSE5Fm1iKtXhvVstqZBq1Wb/CpDMakODR4kAd7Fksi 0Y+ULClNk8sXM3I5y/iUDHaaSVG1TWfz2BjbTElWCiYDg7GY9DgFP0KiSQA3VDAZMVIRuQji 0amvULEVKqXcXyEM4NUxtYmpiBqqDU8aWMMhvBqZsDKmjRlxnrHDuNP4hpEzPoufRBk4gL1A 7OXXR4jW+fhs46D+LHGihm3S6spodLMsN7L5R89vBi8SEhvihwXkXxqjIC9H5c/Lnn+b5KnB ihq9fjzWGPXjwvNLmL5b47+4hNqiFSTeiosCODfpllR67HbPPFZLJCMJQ5OZgymY6PdngZIW mQGMchfaGMvy2QvsMftse7O91/5jELBa/QJB8GnlGuUCmcynsbjsd5nNPhf7AjOA73zKJddq VAgfxsSoZ/CpWBrHyURzvYAFe/rFG0f0DNjwdMmo+mvAGCiM45XovJQ6oWZ/sek8zeAd1gzb r9qIp1FdYKMjm/aV2+nwyAy//3384nN/lcSlFUYHQpPqXpAd08FyyUJnDnhVYKGZQSzEsgF4 yfx+4PehU55T3s8Cn4YUGeaQZZI4IzAjNE9sDCwMrdattrcGbrJrLAOJv8Z6TEKD6RLzZYEV oa8dMrnDrjc7wvqwMeDYot+hv9t2l+NR86NQ1w/ujs4uODFi+TS7y5qUMehGgzesUO/j5K6f Wb1+dVoF37DTg7d7jnoYjyNb8AZjOmX1ziDWBT3B7UE2aI88f+soAwdHZlCp0jWD8BtoaLhO J6VJUiATVS2JE+LfAM+A4TssUOSjBcoYUydl6bAvEHyBtiH25JN3Hv71O48te3W2WW+wtjz8 8qvxb7H61V+xWhfB+3Meh9U5edOnP3n4+JRZgtUQmXAZZl96FdN1uI8T89lPZe3g7bfHximV FmxXsmWoXFmHpyoXKS9TrsOXK2/ib1Leje9VPop3KZ9CT+GX8CvKd/DH+M/Kr/E3SqtaidUD +OUDrLoKLVIO4P6YCi/in42CJj9hGMCH9z5jI9NvaPDsoLQ+2NXYiIcXCCUjgz01tNjgNNhV zMNqIc1gl2X8c0HArtOYZb+0ptl1arIKlriY5WQrkQ5ddECZqbYX4YHEu6Cc7UVKpV25Brfy XBp0ZL98Bryf9EMD/Xk2mobTTujlLx3EryK6hCD1ZQjRpcpIxIQlYY2TInk+87DKbnAZhhoh ccom/HOBRaW3B2S7zGo95VCIuKPgtZcxodi4D9M/djN1aFrZUfQGegu/63oz/Wv0Nf46XRVA ofSQO1g22TXf9Uv3QfdxdBwfT/8U/yldu8CNNUbigZse0mGdzqNjdGGTTmc0pWs8gaRH75vl Y3zhoM8XCKZ7osXUfS8oLCkoKC5Jj6plNM8Xcjwv49LVRLCSxmw4KVrDVLSmO3MzkysBkVkR JhIORSKZofTcgcTWmCsdI9GVnu7GjIBJ7C5DyJ3uFqAIDTDpMbU7EPR43G5XehCT/DQwT8tK GdYcdDK50VBJMBpVqzWcKajhg6GysnS3O720xB2KoWPYE1oS6gg9GToSkoVioXBRKGYs1oW2 hd4InQqdgbIB5oOYOd2Dl2BmGz6GQfZzLhfHMFz6ALMhZjGJLNgO7nrTMdNJ05cmzmQv/3VH UiTNAJFN1wttoJyT/xq7IAtE7LLpP3aAuEqW6kFoDVXS9SCSAAx/JDOYXCPSD6aEPg9SXwb2 UsT2/asQXf/Kgv6XjwGDdYM26MKgDQyF3206F+Jhu/XCKsyDS+PP6ul6Rfw3JJ5cTOLf4ipc /lsyuYvq6CLkq0Sm7jDiJczJc5aUTGU/pasZ2cxxko4uJxpkO8jZS0DOZqISvCx28WOKRzyP 5bJBRcBTwfWa1jvWOTcJ1ztuF+5y7FbsFB5x7IkeUDyTtlfY7zjofjXtbL5Zhe04C7P3Ge50 MFfmbsndkftY2u7cF/Lfzv8on8+kNoEjEPUGAj6vL9OYbrKGS7yoJIzZQo0yu2QA1M5CfGMm UhV6WbXSi7L12Z3ZbHa4QqPJFO7Xe9MV5IYWiaI3Bk68zouj3mpvvXeJ9yHvk94j3pNe3uso s27L88rJ/Q75Q/Ij8pNyTm4vzTo8IopBEg99TEUxjhCVRn0F4nIORhuJWK48Ky1qYMliLr/Q QbJLDtIRpEh8g4oSZ1AxBHvi7D4jn8uXDbumUFUNVQWoehi5oYopcZQ6U4240VsslwgOhiDY gMT8lmzvpHBPEZ8NSusLVO6zC55+4yePnTox7sb6TZuW7RWVeqsqrfn+WQ/1dxLCv1Dx46lP r5y5vrv9cPOG++7tuOIpnf7G2hXlKpvRoNI5sh5oHjpOyI5/ZtDXV8y+aNX8JUSCtYEEmw+0 L8NtsdK35W/zzPPy53nmYb5f3s+zXYpNCqZZsZxf7mR3OB+VM1d69uH9DOvyrPYwCMNUdfNk 4XFPTK8ze8yMuY4uPPqM4Sj1i7MX52VnR/N8YYOamoBka6BOlZamVvkMSb7Qo4A+wAQWS8xR VkAKtcV1+cXFBfm+gooyOT6ETyERN8dM6eAghzMzwTZUKVWi46Qd2weYh2NgqXrF/O15O/OY PHv55KZRRgsk1GrR06l/Fqj8Hy42/ouJTVe4BKdLxit4Oc/IXTKHBzvBZcMogiNZdLnKmVq6 8Aigmf641ykkXekuoD8EUHrUoybOgWGMcwozvSjpXn+PjMDzF9zasLS+bNFkMvs/IJSvu7Z9 zhVdS6hk+ILES+g9dtnGhklh99apQ18Om1Zsw5UTrx/6yyhTixiRDPpR/GruauCCECrE7lh+ rdApMO973wp87j0d+NZ7NkN+Wbg9pznaXHiF9qpwV+HN4U2FD4RvK9wd3ll4yJ3G8IRoy5AM y6JKmYxX+hjkjuTbRL1VNBj0ae478r2iKuJFdwQVfAUjx3KcmS5iUaXSK3cq+5SsTkkWkp9U HlPKlI7iXG9ysaPPzx3xH/Of8p/xc357UVbTmGUjOpGJ0w8SHby1werTxLCqpiKdzN/zaDZq PekwcibOIkfibH8WXzCQ+KbfzaMByGXzeSQJawpJYY4lOpD4tGzUX3L24uJhGS0o0pgU3azE MismM5spLjIWFpiKRkw29poXCEG6Mmydi2dQCv1l2vqQZfPbT3z77RNvb371llt+85tbbnmV efk+Qo5zB+dOyL40EwS1DV80Navm3EGMDxzAKD79ztdev+PO11+HWWuGWXsE6FXHyGOVulJd WVq5bpyuUjdeF9NN1NUqjUFNiWa/sz+bC+ESzMxzLVMsc/Uqel2yEkWBq1ZR65qnkOXxpePp rDw5Do+rqxo3bnyVr9SsI0Vu0YhngfN0ynjGyCGj3hgzssa6NKNRl+YzBzzJievTg11S5/b5 PG5foCQvWVioL2QK66KFhXlRX0ldjBS2nJyIJ9ZVT5wYq/blROXuYG5OZrpLjhVZpbEKVCfP 8rIOr1LJKkpLSgIBs0qbJlotMU9xnmWThbGcC6a7xVCQ5IObgkzwXBWKitVVRNCjqiNVx6rY KvvkrCdskoiXpn2kcjhJTX/KGeDwDS9Zl6P/aP6flzvPBkgJBDEzbLOrNJxMHQhzIQ+Wye0q qwdnyrI82KZx0KVtHNFXkvVsEBGNjaOkRI0KqRJfIA6CIvEekkPAibdSPIe76Dq2InF0n8VR JR9IpiBWjvZDStanG3CjyUy1SVKojMiU84RJMq8YVXCedPnTZW01y7xlPeMWlUymQmTHzMLc FTV1FKzPz8keP5EWf0gNEEnMzOupraurrbho4dABIliYn8Tm1rYMvUXh2ybOTw8vT2ZGSRyM bgebowIs52z0SizjWyfWOh1O5hHVAdWvVW+pTqtk69JuSLsr7edpL6rfUcutPFaQdVUOd8fM PMcpeB/WC0qzgZxmF2R2TXgAPxwzuCsyMhQVGCO5xmtXCzdyA3hXTMjO5pVi0PsiculdoqvT dcQlcw0wH+3LIUxDduiAR4BX6AI0XQoYGky6ZYRJzrMAgNBpDqdKrXYoPUjl1HgQkflATyLX G3HK8TUI5y9KB4d3pAolzw7U2stUZJet7Zr3Yqmg1du04t+77thDTbwdxKdjl1F//82pywpF rd2g03pnbFnLREnhN6QS0d8fIcT+GfDoQSdiOVEuV+YnCziCaI66ou4qWaEmT8gzV7uq3TNl EzUxIWae7qpPr3eblTrqN2hK9BqNTp+utHto3lWCXC4PSrfzDM3LSrBMxuB03kadlJC5xGA2 Gw3pNk/QbgzabQwT5HVBpZLnEXYb6vVYbxdvPjmigdHwtPvPdv0uWJQGgXvBeoJ3zOIJcxsW CTaG2uiighg/RXdw70zu6Z1vAyf3cBl0G/BfJUhQNbLiKbEyo4WzCFYL+wp+Rf028wfZfyve VssvU7QamBamhWvlW1WrtW2GFtMKK2/2sjqvEgxVhcaLyGwku0QkTbPSNKY1F/chrEd5aCli wYXaHLMZwTKFavIY1OkA4/SY/JT8jFwmH8Af7rMBH1LFBrwInv/gUGMX2foiS5AEdVR1qYdV lwVUl5A4u18vpAnWQ4kPwbD8cJ/WbXCPaCnCiogIjZjaIuid1QKJDGTpxKRzV6sFiHgVRAoS GciOWLpRXa0Q1Ea4CZFFMFirBBKZyAYZ1Hg+ZgRApdLo4UmIGFbnqcSRUXtjyQ0yLKCR/ZdR CpCrjA/++vn4F9j4/K+xad4HO3d+QAJ+8mj8DDYcIQeDzvzqwT+efOD+UyeBp0+QPRfuE1SE Xo0FYppZsk2y6zTX5O/U9Gv2R34dOR5RWXmdUvOyXu9TFuWifJw/wHBPIeTLZXjZAI7FHBj7 +IxMHwo0hr3pCBlFe26OTa7kVb4BfHNMVYKyseg4Btw6gO+KaaPmmLnT/IaZM9uL1x7EryHJ x6TWY6X+Y3rWopKclho6TX2DsUtfjaPXwIiEyIo4XVmubA+KOMNJq/Caay7k48KxEmF4oZii zZxi7ijuoszdQeJXnyLxU4/fun5zodkm8KafrFqzHt9ExbB2aPJYIbtx9f0W3mI0WllrW+3G 1GrhAsDtcyAvclAp/ulB5AXazhS9VRHBaqtaVLwif20+q4iMy5+Wv9CxIL9X7M2+vPiW4kez Hss/Fnzb85Z4Mvh2zpdBA0z5/FpPnffy7Os9W7LJ4v3u7JfFV7wfR7Tuw+AYKZGOSpeIJF1S 0qRwjDSpMEckaZLtEbMiXrkvJ9vvyUUlQTsIFxuTg9zR3BhwJES66txc3hb2B7OyiLTxHGKu QDnMzpgWwUDc+sKACwVxcAA3Htjo2uZiXAM4E+758CzfTt8bvjM+zkfWLnSGmB5H9Wf0jN5e Nq1tlEEJwqqx63Tjabq/DUT/ejBpNwyS7bQocDohP1knppYDXbj7z2VYGUxh47BLoBEPwST2 wiSOaIotHrLVUSTmjxibqKyBLhyTZcDvcwOS7KGwWKwpTc4EQwF69AHmnRfP20EXA3ZSu5Ny ED73wInr71+46ZYYyXXev7sj/tVHa/ZdvGtD/FVGFZ82Vky+9KOFDxVX3U8XZbH1ueK5s9rK 5t4Dc3MRyM0Gdhl4ComYRsUdsDCZFuyA6Uj9PU2U12iUvE/npk6h2jnT6nTarD53yEvyOSgD Z9SJGRle0RfCFp0geitQSGW1VXjcbh2vrNDr5AK4+qKIkNVCfDtlWG8Q+WMKrBjAn+3LnNw0 LCqpgVdZmdzyq0wu8STPM15g/f8r2sB81RtNnFwWMHEGDzLKhaROTx47MElEexaZE5+D7P0Q GRMfSi4+deNDoxQ71fqlI9mUF3/D4y9fGZtDifDCqpmv76YK/ktqPF15/8QFaxk3VfO3zF79 TBJMroUT7b4RsH0R9wQqQydjl+cIOIqqUT1iZRaz5RJri7Dc0prbKfRYOm37rapSV0neNMu0 kkXWRcWrrauKr3fdG1UV5utEp4+uaFuspQWi301WtY1q//6IMVCq3sq5A5FSlmMidMvMGww6 xjmDunxPfjS/Op/Lt5dv3jAySajTldodkzbHpI2xcunco7ScPUZpHUSuxOf9BgEdAhymJz4/ AFzrsllGn9Vo7Dp/By0k7UoqQBYK6DxrKpTLFoOXRTbN3k0qdYOVkV3Se2fTJbHghJAL6/e3 7Z5lMBstkdmvty66dMqlNxVc/8nmNzgP3V35M9kTm1vTEPHkzFxSt+COZ+KfXbrEbDFYo4sb /c4pu2+bv/sqzG4lO7UgLQXQRDbUGCtaZu4xX2cGZ1WzgGge0DULiJ4x2sx3GQw+GwL1grBo 0Ovr9Uf0rN5uH71/QnTIv9g3+d49k9vG7pj8lazucZ98256arlyVTeKV02AJ/on7BjnR3n4j 7wQfFsSdHPFKZ8w5yzjLySl1h5hdSIN3xJRULD8HYpmUyKDESAXzc7z0/YXC6BQOMSeQgVn5 NJIpeY2dEQ4z1yADsjK/janQSoMBr0SgP59lOpEL/RT/NrmRCvOSGtDJvbXqwcF/IyiBT8iR rrILxy8bXhJjtp9n330hKHV2FW/nvvl28TAa8i4hZy+1vBJ0HIJZg2DWaJEdn4slXtG9YGeM H1s+tv1D/w/jWctZu/wly+/1vze+Yzlh+7P+z0aFQ+8wmi0WG/eS8Z+6r03sA8q7NI8wu2S7 lI9ofiP/Dc9fx9wsu4XfpLnJdJP5TmaHjC+Vl/KFykrNOH2hsdAyzsZnMRFNVB8wBixRWwWj eEZ3RN9v7Df1m/ssR2yH7PwTuj36R40/Mz1sfsTypO0xOz/fdLGl0faQ/i7THZb7bffa+VpT rbnWMs12kX2hbqF+tpEP28bpSkyl5nLbTN00fa2RV8tVvFPu5MO6kClkhplhxxxv0mk5pLAG OKUhoGLTAuSMsgi2504kQ+uFgMK+zzHxCulQ9FBj8oAEpQo9CtBF/xrJH/gw5MTUAYvKZag2 glbaB6ke2Gif0VZtIeyUJjirLTZLerWNRMqBxCli+8KtT0kqG0i8M5wHpQ35X5NUKaUmkmoN ZBPvlJSejaWBNWkWtcYqkxsicGr/tM9kr9ZKKUNSvblaI6U2sp2nNZiqcBpEGh+BIhf8oZHj WgJDtskMehAgFqOiiPH7GCpNjBy68cubXo2/iotfvemLm+Z98ezeb7Hi0We/YOp+Gf9gJ27A aViHF+yMf7jrdVwXf+X9T+MncC2xn3KAt+aDRHChTJyxV2uiak4fFfR6k+DTuiwkb7JHzXa7 xexzuRUsVotBTaN6ADcfCHqVohcDFMtiXTBbFUp1ulcnPyln5I4s/1ykEc0C2UzUCR3CSYEV 7OFLbx29fE3kSPI0HpXAlXb9aRtIYPtp2+nkgZ/yfzXRRhbAYnNXK3GeOi9jcuYlmcszd/ke zXgaH1Q/434q9LzsVf449z5/WvYpb7Bw+bhANl49Ederp7ovwfNkjYpG9XK8QtamXstcqbrS vcFzk/uQ51nfgYAFaHemX63PBOrvdVPhTp3iBmwAMY3MxDMImc9fb8CjnAScdc+JASyP//3A +3e8MGK3sA++d/vt75HAfTL01ovxr8CROPPioyOy79zLD/33fz8EgX6IUsOe4GaAnLoh5jsi f1PzVw2rUiozEGgfJY8MPIHBS1GCpFYtMgzgx/YhfhGuUePHkIa5G6nwMyDzdiMeUszsjmnQ wagcy+1GNOtKoIT3+giyR7Eteer/9ODpwUFkP2sbtOsh2sxLx9LJRhIBqGAf3tyUthSt7Ilz vRa1we5jVef+7rMb1BZmclyusRvsJtyH+0wAaIDPDGSFD+z0LJSLn4pFSgygWJ1V2aU5k41T HRdl1+WASLcscSzJnpXzTZYugrKysnMxw+SQsxmPxCzabdqHtMxJLdaG6eGMdJXB6A/TLcBg sDArGAxnpfuzssnJjEfIyYxCejIjXcnk2E20yGK5xGixmIzpdqPB5yJFUzzIs8mz3cO+4cGe sNPjcTnTfU6HIzsrC5SS4HQ6jAaDm8kRoBcZfr9KSZYEIrpcTy6Tm6u052QHHaagw844DuEF 4H9VxYSsoJOwOzJgndPjPOU84+ScwO5P5TFBQ07QeAhXIQP41QYV8UGPxvRkahgwMtQbvjQk DByQL3tftLZt2CTsAmFwlhglFBySzndQgzDaSI1DsBHJdh+h0ned8ej614c8/s0REPK0Ql9Z SULy0xf2POt9+NgHPu8Gy/pZ9sqhd7t+SpeEXiRxDe6hqzz4F/i+Glr8ErEEdt7xJ88HeHP8 9bEG+7e/TuXxZqZ56AEiq/YBDy0CHvKDt3cmZuMcnFPhRh6T0+gJOIudtc6DEVWWMTSQ+CKm X+v4sYMJ8Vn8HY67PExqdeh8/23salD+iP9G14L8yB0w6jKqM5iMDBs4aeGAzoVdjmgOdhv0 9tyvR0xJ6TskKsgqCXUQWa7QZRBnLyOm1EEEHh8R4pJN/58vFxG5Q05RfK+7LblOcPkD3mGH qS9pZMSdozymPz3xh8kF02eNuyT+D6xpfHj6Y9fG38an4r1jMf/aTRdfGyhzmObOubyq+UFi id0Vv5q7B3ykAvxMrNqGbEabL6L1WotxsaFeG7N+a/qHT600TTdN863CqwyXmy733Wi60XfQ 8KzpkO9F3wlfGvnlkQKjocCUPGnl1mqjw0esnD73Jjd23+tzu30+p88fyYcq+3Pz6Nlva0xd kJubX+CLFJiUDF3cl8nupUTzKTFyCPR4ljXPiq1RMJsFk89hKsjKIKXtoVDUHwpl+H1Zfp+p AFwFn+D3+wxGo0gkptGEcAHcMMIE5N0yo5IcyHI6hQqHQ1+hYsiBrIyKrPyKSCQrDblnuZlO 9yn3GXLyvGiWDCOZXibKOmWnZGdkcpm9MOsQPY1FmeF0Yxc9tZg6xDrqSJbkaBPJKpPmLCS2 /8U5rO+7ncrqz6+t4PWVfCU9meKVpivwTurgVmoCJwvk/vPmsZdpi19hdzu0ZsvHlI/wfDyb 8tJHHodeyB36/DrKZPTQHlawWptRa1ZS76+e2Zs81KW1KL59IXnej35tgrbBLK6ks/jWWBY4 H8V6mJA+l6fE7093gRNSjGFCmuyWEiMIa78RZDEDc88+gDue0usNZJEYwJiod0VdS13HXJzO Ve2qdy1xdbq2uZ50nXTxrj8HyLEKIjXP0lMSyS/ZhioxONfEQ5EclbE58nHN+YsT3uHPbVIA s/09arv/ncTvxX9JBsY+QYY2dmk2/t9EtuH18Zto6odxH4Fx3wGWVjFz50EUJrse2uowWWcV NDSN1RvV1StNPzcxzxfhLCErkBvOKsosLs+oDowPVxetFlb71StM2G8qMTERoT78+8Dviz4P fF70beDbIn5cYFzR6ozVxbuF3X55RrHfj5KbmOrhHUx6lHE/OcjoIS8FO9VDlRDIpVFHG3MK 6STLy6sryssrLPLlFBUnt7rVaVFpnzt51NGUPI5ju3f4qGN2kJRPDocXB8LhYMCXHcgIZGSI xUUC+LZ+wWQ0icgvIKC7qThDkPmxdABSHqzILqzIycnOZtQVRgPiKzCjEsghCmWHH/vvC2TM Kz6Ed6IAlGg7izYVMWJRXtHSIraILKikl5oQMmJR1ancpGT0SlGZBwDZhZUr7SWH8QNoU/KY ZGpVjJ6WAXAQNOvZRqpSyRSVDs/QJbHkJOVyI3SjypQ4vs9dScz94/tcpcnUXpBMrTk07Rcy pQ8rGvBm2Y+S3+3J/s3Ujl6wkvP9dcEQuKC6Ii2pl0fs4IPIn/i8X+ADhxJ/RUWJr5PLEWTp rQtqZUCtWVKtb/YF7EXi8GoFcTqw4XxjttBwwUHP8/U8xs+MMm1fwC0RKgm0hOmb4gP4oSa6 bHeGlFbEf4LXxbeMMnT/ibOTX44YbfEv4g3DCr8HsWg+zJYGkBIuFAK9syL27JNZuyMvql5Q n1DJtmVtiTwg7gg8FNkTkF+ZsTHQE1mbs021TdiasS3Az9O36DeqOvWdhk5jp0kxTZzhnZox PXJDmqxAVyGO844LVGdVRGp1k/W8MmoXXV5nwJnljPp1WRF+g/6ZjJeibJ04NbBOvEHckneX +Kh4QOSzeZfFHkEo3QICKkIEVJ6Yxvoz0wrEUHo4aAkFeXe6O7+gwMIzFt4f0Gk8mqimWlOv WaLp0Cg0A/i6WDgnAJ6bgdEZthuOGt4wnDKcMcgNjqJQphvTD3HPgJCwF07bMHYVtzJ52HLo a8Kr1akPSsau256/ADNxQ8ydkW0UVGpTMBLIEnJycEDlz8HZxnAOylAHc5K7t/RjpOReX9Jn DoyxKRSWpFKQiG3ykhP01LowSHYGMTQQJT2jf+CFR6+7YtajTUM3J1khvKR+/KQ718f34V0X X17V8ODW+O/mJg2MA1fctyR6/6Vzty6ji/slftfq0vrrz1mmrC6PXV41xuu5LubeK8djvJzR 3s8iTD0e8HxqlODxEG+HeD2Sx9MvP4gHwOlRRQlijaj+GsCsf7TLA/7Ov3d5DFhaqcOp05Ts zdThOfc1q5QcHvxP6vDEZ8VnJR2e5Jc27AmZjHxpcxBZEn+MZTsziqborki7IXRD5g3hn2f+ PHxYsz9LqTWqLMWasiwu7M9yR4SQO9OvEdRkG0v7qXHQ8k/jkIXL5FNLW+8/La1syZ7Fp5ES qbEWYbxov1Kp0jgG8D/2C+N9MnQYL0JqxEA5/4FhfKBGy3SAzWyFUpicSM20g8NyG5anFrlA FH5N5GHyQC/ozNOElZKyBg2vK7s8GUabJSAGzV5bDJn8hhi2eoQYNmZANMxPyQUw6i7jrkip N7UO6i3OKK1iipMb+HLphFjqMxy5AimGmOupVDiO0V+75nr2XLnmMbtcqdEbrK0Hmx74MLho XfzdQ3O9hLvWXvXxFx2r6jPbfn51o02hsurzHrn0vS3jmnp64+//lOB+HkiPdtC1ZXh+LOde x7ciw2EzXi5fK9+O72R24keYPryPUT0q/7liv+yA4kXFu4qTDoWDN1iTZ78Ej8AIi22CYLX5 DOef/dKrkme/wBldTD869emTZ7/U5x378hdHk8e+yrAYdnm5cGamwaAvQ5xCr+KVov2kDduI DlPTA19H8o7lMXlkW6D8/G2B5Kmv6mp98uDnoKH8+1dG/nfnvvQOp0whDzhldg92KFzJ3b3k XoFxWKvIE2cPiBqPkFwGaUh+IWKgtBs5mzFsNJ13JOOCA1+zZ92xaNlNiy8lnwHEvyT64dLr 1i6uibaNPvFFhQr3ydC38yfXbqsf+vvIia9FV+SI64c+P3+9mEFXJ05yu8lv4qEs9MFTU7NW ZTF80mWgB7mSTgOf3MjRO6PSRo7K4stUNqoGcPO+TK/GQhazRJ9XcCONWlCAJAIWV4qbyK/F YezIDng30U3Wm/dFsjalaNQlnYenpoVEpkGYQafPjt25uZAA0/ssEpL3pfFGnuzDjNbmWaDN RSFEPpkOJj7Z5+cz7CN74sNHXoqTnw7TuWRNYXn0cS2OSR6ovP2D7jc3bHiz5/27ab7z3bvu fvfdu+96N7X8/ouXN5xaf/nJK17G7yXXoXa+//5Osg7FoE3gAT7GbgLbLYovOogiia/7deVh sgVfpivfg37h3BNgZ6MljuVojWO1twdd5ViXex26xXFD7r3B+7N/krsr+Hj2z3MNj/jxjvBu cXeYTVqnaaOP2CXPXarNL0tHLpN252xyxDJleiJHKMdWYSRmYlqO16VSktN3IS+6w6fIwHal XdykwjrVKdUZFaty5Gd5yfLOTk+fhzvmOeU542E99rwU2UafuqOHr4FypweryaYo9dj+4023 80/j9TuSG0NRIF5AyAY53p8pRAYS/7037B/5nreLziHyXcT3npBOfhCRcd7Ru8dfoLSjFIx3 0k30rR8+Ex/C7HOnth6/557jJDCv3EsoOOJ34X8+jfGBpxLx6bcdO3bbbW+8QbUs8+bnzHbt yiW6yq940Kfk7+HAxU0jv/QWv1qGZO0AKKXf4CSyFZHf9Rr1c3AYjf3D3Ovkd8VwBB3CrzON 6EOcA3p5O/4AzUHHwBrfDaWV6DA6iCrQs6AlP0b/g2xoO2pDP0JmdDv6CN2GTqAFaBHaCLVO o1Wgue4EW2Afugt8xyP0lwp3g4S/Gtoif2VwrULXol+iBP4jU8w0M79iPmOPymyyp+U98qfk Hyjm834lr1yrylZdq3pRE9aG0rJ0jL7ZoDA8bOwyeYRq4WvzUxaN5TbrEduttr85zI43nd+4 et1qj9LTJmZ5M7y/8z0jjbQITQbrlP6EHdhsUVQDWv5B1R7ytRGU1bEzyQ/kJZGX/LE8+pyF 5lj6VBpYMkmYRQuxT4I5ZMFXSTD5LZbbJViOXGDZJGEF+jl+UYJ5FGTaJFiJXEyqvopxM3sk WI3auNckWINWyMokWCvfL3tQgtPQYs3sYRpu1OyRYIzU2hwJZpBCWybBLMrRVkswB3XaJFiG NNr1EixHadrrJFiB5mhvk2AembSnJVgJdf4uwTBp02QSrEYlOmH4F18LddMkWMsu1P1IgtNQ rvEE9ARzBOsak4zCMkIRk4HCclrupbCCludQmKfweAorCY1MMyQYaCRMl2CgkdAkwUAjoUOC gUbCKxIMNBJOSjDQSPi7BAONzCYJBhqZD0ow0Micqg80Mn8rwUAjm12CgUa26yUYaGT7TIKB Rp6HKKwi4/Ikn1WTsYgKCpMVdo1opXAahf0UJj/vkyZGKWwC2Cgmxy7QOvUUNtN2FlHYQssv o7CdPruewk5aJ9m3dFrnLgp7KPxTCmfQ+k9QOIvChymcQ2aGSPHG0/5LcPJdbxNYkyz/gMLJ sQyiuWgD6kQtaAVqQs2QimgXhLkw1wk8A3WgNRB6pVoimgi5boBJ3ATlrbSGCCVt8HwuQJNo edP/w5aiwz0TQaJ1QNna4To9UDYV0uT78lE5XHkgv5JQES2tgSfaIJ0Nz6yEPvTSp2ZDez0Q utE6iJfTPqyFXCstE9FMSNfTWiuhvA361X1Bz8d9z1PjaJvd0H5qJAXQkzKIRZQJrbRCf7vh Tg+EFdBa+HvaueR7WhlbO1l3FuCG/MLwmHteH8U7wepyyLfTUVwGZeS9//cUEaGU4KUV+tZL +0AwKEKe1GmmJYTuqTzp0RooSfaqB0Zx4RuTNO6AVskbO6FnG9AUyK+nfSatT4d6vXC10fYn 0ZYIRddIb2+idCXclmp1PX1jr4TTEb5eQcdFOGcC9CRbGu9o/K+XWuum9ZfTPq2noyG/2kt4 ajmt3UTL6gBO8uTK4XeNfgPh2xba72YJCwSHSe5LYUSkrab6Tmo0Ua5dAfDl0gg76WiaATci pWdq/GQE7cMY7aAYSVFjPcApvhdpf5fTdxOOXjaqFytG0a+DzqgWeF+v1LN5tN5y2r8OiAkv JWdFL33Xd2O8g2Klk8YjOOmmLXdQHumhfe+lfUnNMtLnDolPU/3tpbhbBbkRzCyHWs3wVDvc W0PbSPFpLh0tefM4kB5RaI9cuaNwlOxtLh1rO9Qg9duh1SjEvVCnibZKcj1oicTBKe5YQ8eZ O/zM/7vvWk85JVm3ZdRbZqJ6mCNTgdemArfWULgeSkWI6yC+iJaTX9OeAzHhpckgvWrpb02T 0rlIi1Q0kFnfSrm79wKJnypPyoVOKqU6pfm8YVhu/Gezd4R6rZLMXUu5KDWHNlCspt5JRrxu lCxZS59N8lGqP0m+aqf1kz0hs72N8kQL1QYttGwlbaVlmDMIDzdIb1sF99fReh3Qj5SUSvH2 92MmJauT8qiFzoFWqWfdlBtbaXkzlVAbKL93Uyp+F746pHF1UIkx0sp6qc3vet9ySd4SPlxG 51Sy18skyqyRWv4uCoXoqMZiKil3LuSKC9/cOixZ19G5t5bO1zYJ2z20td7vfXculR9raP0e 2tKGC2iRpNNYTZKUNE20R50Us61UGjb/RzQXJV5cQ6XCGsiNvJdow+UU00l5kZQn3aPsg+zh 2t2j+DY5vt5/iynSu3ZJDo7IzJH2UvKtZ4zUGpGQIzU7JK1DZOgy2m4PfXtyPMl+jeZuouEJ NyTxn5xVnRJ/pLj0fB76VyMa4Y+pdOwXUo5gmLTfBeUttO3UaEb0SDeV26Np0H0evkdaJuPr oLpguaQr1lG5u36UHPhPqJ9qLzknyVxdJ1FjZI6l2ruQjklsJUfQS2VA73fO4xTFms7D9Yr/ VW9HsHzhG5olG2OZlBvdo5Td0wu6J9XCPJD/xI7IQcTWLAMbuBTsSxHifMiR3/wugpCHiIc0 D2yqZM08uJtPf9s/CZeiQgjkqRJUDJY0CaT1/52u+7/XjKl70fOwN6wP527obFnR1Nwi7hLn rmoRZ3Ss6eiFInFiR3dnR3dTb2vHGrGzrTlXnNTU2/RvKkVJY+Kcjra1pKRHnLoGnssvL8/L gagoV6xpaxNnt65c1dsjzm7paele17J8Ysfa7taWbnFmy/rZLSvXtjV1pxofN+rWuHUt3T3k JQW5ZQVi5ozW5u6Ono4VveFRdS4ZVUUqhtJZc2bMlXKPiXO7m5a3tDd1XyZ2rPiXAxG7W1a2 9vS2dLcsF1vXiM0t3b1NJO1Yu6YXmurJHX4QRtyxsrupc9WGKR3rm7qXi9NbenvbWrontfS0 rlwDjzf1iE0iqbq+uxUaFCmuV3R0i1MnzMgWU/1fD9W6W8Tl3U3r14jLNog1y7tbm9aIdd2A yZXkqeQD4pyWtpZm6EKzCOgjHRHFGtJ6a3NTm7ii9XJ4YWdrb/MqcTl9f7bYTjrasaaFDGN9 C8G92LRmudjT1rSMNrGCjq9jTXNLZy80Nq8HWujtEFvagRS9LaM73rG2t3NtL+1Jdwsgq7cn W+xtWkZIJq7vAJySdntbmletoZ1Z3tG8tr1lTS/Fae6q3t7OcdHo+vXrc9sl1OU2d7RHV/W2 t0Xbe8l/rhNt71nSnETHmpb1ueTOf/jU+pY2KG2hj8ysnzu1burEmrlT62eK9XXiRVMn1s6c UyvWTJ5dWzujduZcrUqrmruqtYcOjRKDwMALnd0dnUDnDYQ3voO8dHitwLlre1oIhTZ0rCVP Nneso1yyds1ywBFpB3DV3kMaaRLbWptb1kD1ppXdLS0EGbliAzy2qmldi9ixjLAUwfaYzhCu Bj5qEVtaobFucXlrNxC8bYO4orujfaRfQITejpUttMp6qDny3HLg2+7WZWt7oWnoJiH9qAGF elKdAt4ZRsXww62EWdc1ta1tWtYG3e7paekd/XSuOG9NW0tPDx08HQWMSZokwDRNYk9nS3Pr CuDOC0YuAhbX9LauWUmfbVq+vJXwBfBJN5UH2aS4m+IW3td7fqfaWttbe5OcSesRfutJshZl SFrYAVOnc+2yttaeVeQ90FYS3e1NG0ToP5CqcwNB3AiGxr6I4mPqipHBNa3ZIHatbemhr6Fz pHuNNIJuqd+0cs+qjrVty2FWrGttWU954MLhk3pAyZZWkHlJipF6w2OEbsELepuae0doTAbW JPV6xXc3S7s8/EAzSIxlLamGiOzpHUcqzJtTI+aImWVFpWGxNL8sJ68oL0+pnDcdCvPy84uK IC4tLBVLS4rLi8u1qu+Zdf9yMpJcVOoenYfgKHVQF4OYhMRB2IC1oHZWg/r5M1VaqXtzqBIm LgpdnmDvY/eyz7JHIBxkD7GP/7CY9sNi2g+LaeiHxbQfFtN+WEz7YTHth8W0HxbTflhM+2Ex 7YfFtP9PLqaN8XpG4CZa/7vufXDeMy1j/KGkjfndbbZRDh+V59xcPjedm8yNh7h8zBuIDP6+ VmbSOUNkT3L0q3Af/imL6Lz4/me+G5bOD6G4f+z/u5n6O5g4yh7tn1cYG4BkHE32pWUUbCKp WkvTfmVhdU2UPYo6ITwJ4RgEDi2BeKNUwiIPxNUQSOk2en8nexj1QTgK4Q0IpOQQlByCkkNQ cghKqtkBhNmn2af6Mzzw6v377BkFX9Y42H0oAYFhb2O3Ii+0famULpHSbZBmQbpdSm9ht/ZX eHQ1SvrDBF9CnIDAwNju759cX3CQAqWVFNiRKtmxD0o8NXb2fujV/dCr+6FX90OvvoQYQ6s7 oHwHlO+A8h20fAfCtClvWGpKAu7v11mkEgBqVGwDewm4Xx52gZTOZy/pL/AcqVnKzoOmn6Tx TnYu+YKJxktoXE/jjfTuRgp3ULiDwtUUrpZgEkdHxR4a60jMzmbnwFT2sBez02g6i61FAUjr IU/SmexUms5gJ9P0Iii3QTod6hkhncbW0fxUyE+CdArkSTqZreuf5Mmr6YT8ErjHwPtI+STo wyTo0yRAEinZBmEnhJO0ZAnEGyEcg8DSmpidBNdEuGrYGngiBm3E4E4MsWwMrmq4qtgquDMe 6o6HOMZW0jFWQq1KeFMl4KoSWq4E8lQCeSqRgq2EWGSLUR6EGIRZEJZCkEE72fBcNvQrG96Q zeagDGjLy9yMBEhFKfUwW5EbUjeztd/tidUomf1oFoSlEDohbGL298uMuhoB6pG6UQj1EJZA 2AjhIQhPQuBRdfJOTM1UM9VsPVPPcsDd4X2VlQU0LSxJpq70ZKpxFOhqutkwoCmMHoLAQpfD 0OUwDDWV80BggHVC6AiEYxBOQiAIDwEyQoCMEAwwBM+HaC05rfclhAQEFpgoBO2PrSOjT3sg REe1QkozoSQTcpnwTCbUzYTSkxBj+gS5PwvCNghHpHs+ysw+ypw+aMsHvY1CXE0hHcQe1tdP v57d2o/H6WpKAe/1EOAmcwtg8xbA2y2EQxgyiaNwp1qqsQ3CkxBk7EG4wnCF4MqEyweXFy4R LqAg6wbqbYdrG1y3wnULXDfDtRWoITwZORJhlhR3FG8s3lb8UPGTxUeKFYeZJriWMktjKmSx gEA0GnhHjZ7h0GKkxf+k8RM07qZxjMbWmGOx9vRi7cuLtfcu1t61WLtgsXbmYm3dYm10sXYA L4tZI9o/RLTbI9pLItqSiLY4oi2MaMMRbY0BN+D5oCGfo/EEGhfQ2EfjdDy/X4uUz+BFyMsD x+PQfu81no+8Axzu91znHeAhuTaZW5RMKkjhU54870pPdrIkmEwyvM9y0AKahx9HChyJZSte USxRxBTlilxFjiJTEVL4FR6FwBt5PZ/Ga3gVz/NynuMZHvHCQOJULEJObgpyPUnkHIk5CusZ EjPJQ6wM5hk0DfWZ2OnM9DkT8PS+o81o+jKx7+s5/gGsunhhn8w/AfcZp6PpcyfY+koj0wcU idl9ZZHpfcpZixbsxfjWBsj1MTcOYDR3wQBOkKLrneR/WD2IMM6+/hanlDY0kGcW7OXwLbc0 IMu6alu1scpQXvd/GjuDlsaBKI7PxAWX6i7uZQmU1gyhe6h42YMWpNKmEwLxtruHDiySuIS6 N2FSDzmUXkXPfgYRAhO9GD9Iz34T971J3Da2h4aZecP8f7wXwsuUHvKGrxiCclwofWEu1sHA O2mo25OfQ3XfEOo7Tl4b4gSeHB7Imhsd48DluXGIRgzz2tTouD9wvTblYs4RC9Z5ThgazREL OWK945rGIXItNAXX1FyzwmVd5vKMsTemq5lulRlVmZFmRiWzUTBsgdl8IUwzbPNliWmuwbRW MgtPM3KWK43ML5oTn86yQYKn2Qa2G0EP1PXluammZ5aVkwGdlQfdfgvO/pyjDaMnOrMjrgY2 tzI/WdZVgrJv84wk7q9hlvQi/uD3fNcOuXj0wnZaCXf1Fi5rhyucheisjbG8dIWcouxhrBRj pRjL63k6ls56SMuPxBGD34V9NLZqkMBBnQnn687Fsc7mI2ZO6s8fCL0jW3tCbduO+gQdpf3+ fh8leMtQ+oyHFpeSOTli9Wd6V0o7sPzFdojp/uXQpCwnazYpZXwqTyVa3WQ8hq5Lw8B/7hhr DfS39e/bLuzGuDdfQ7/Re/SGlCIuvk2VY4LeYhzmzv/PxuCZykrhGfn+wszYI0UHd3JMdXka mJRpIymI4IbgTRZOyD+LgiOxCmVuZHN0cmVhbQplbmRvYmoKCjQ5IDAgb2JqCjE5Mjk4CmVu ZG9iagoKNTAgMCBvYmoKPDwvVHlwZS9Gb250RGVzY3JpcHRvci9Gb250TmFtZS9EQUFBQUEr Q291cmllck5ld1BTTVQKL0ZsYWdzIDUKL0ZvbnRCQm94Wy0yMSAtNjc5IDYzNiAxMDIwXS9J dGFsaWNBbmdsZSAwCi9Bc2NlbnQgODMyCi9EZXNjZW50IC0zMDAKL0NhcEhlaWdodCAxMDIw Ci9TdGVtViA4MAovRm9udEZpbGUyIDQ4IDAgUj4+CmVuZG9iagoKNTEgMCBvYmoKPDwvTGVu Z3RoIDQ1MS9GaWx0ZXIvRmxhdGVEZWNvZGU+PgpzdHJlYW0KeJxdk0Fu2zAQRfc6BZfpIpBI SlQCGAIcOwa8SBvU6QFkiXYF1JRAywvfPvzzlRbowsYjOTN8pIb5Zr/dh2HO3+PYHfysTkPo o7+Ot9h5dfTnIWTaqH7o5mUk/92lnbI85R7u19lf9uE0rlZZ/jOtXed4Vw/rfjz6b1n+I/Y+ DuGsHn5tDml8uE3TH3/xYVZF1jSq96dU562dvrcXn0vW475Py8N8f0wp/wI+7pNXRsaaKt3Y ++vUdj624eyzVVE0arXbNZkP/X9r1ZJyPHW/25hCdQotClM0iQ15A7bkLbgkv4Ir8hPYkdfg mvwMfhJ2UvOZ8y/gNbkGvwhXFXgjXFvwlrky/8p5A94JW+ylC87DU9O/hpumf4U6mv61A9Pf wU3T30nM4r8D07+SmvQvcXZNf6fB9HeyF/0dzqLp7ySe/nUJpn8p+9LfYS9Dfwc3Q/8KZzT0 r3F2Q/8Snmbxh5uhv4WPoX8pNenvpA79LTwN/UuJp3+F72LoX8PN0L+Cs1nuH9/LLP5Sc7l/ OFj6W8xb+jv0g6W/Qx273L+WJly6De2I9/LV5qq7xZhaXB6V9Da6egj+77ubxglZ8vsEI6ri 1wplbmRzdHJlYW0KZW5kb2JqCgo1MiAwIG9iago8PC9UeXBlL0ZvbnQvU3VidHlwZS9UcnVl VHlwZS9CYXNlRm9udC9EQUFBQUErQ291cmllck5ld1BTTVQKL0ZpcnN0Q2hhciAwCi9MYXN0 Q2hhciA1MQovV2lkdGhzWzYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYw MCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMAo2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAg NjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAKNjAwIDYwMCA2MDAgNjAwIDYw MCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwIDYwMCA2MDAgNjAwCjYwMCA2MDAg NjAwIDYwMCBdCi9Gb250RGVzY3JpcHRvciA1MCAwIFIKL1RvVW5pY29kZSA1MSAwIFIKPj4K ZW5kb2JqCgo1MyAwIG9iago8PC9MZW5ndGggNTQgMCBSL0ZpbHRlci9GbGF0ZURlY29kZS9M ZW5ndGgxIDMxMTcyPj4Kc3RyZWFtCnic7XwLXFRl3v/znOecM2fOXJgZZrhfDjcRRSAQFTUd EFBMkQBRLIsRBsGQIQY0tdbbK2haZgqmmVKppbVm1hqa3c0uZttuuvu21dtWlvUua777tl0M jv/f85wZLl7attrL+/n8GYd5znOey+/++z6/M9jU2OxGRrQMEeSsnO9qyJ9bloMQegMhbKtc 0KSMDql5Edp/hLda3TB3/sKF6VUIEbhGj8ytW1S9cm7NzQjx6xBK21/jdlWdfbt7GEKZY+H+ iBroqFTrdXDdBNfxNfObbjFFfp0E1/fAevY6T6Xr2ocevB2GPgr318133dLwKfcLHqGRo+Ba qXfNdzc/3TgJrmciNPbDBo+3aRZafgGhJrq+0tDobqg+x78D19cjJNRAH4YX/TFCU6TXHOEF USfpZYPRZA6wWG2BdkdQcEhoWHhEZFS0EhMbF58wKHFw0pChycNSUtOuSs8Ynjli5Kis0WPG Xj1uvDM7Z0Iu+r/8gzNRJzoOrxfQXrQN74araui+GXo6uANoFWqGnpfwcbyGGwZ9u9E59DaM bEXHyV4e4ckoA3oRekfg0Je4FD0Ja2RhO87SiTziC/kn+WK+kz/Dn0AjeS9/gq/gvTiDPCCU CbvhnUVe5mzoNRSNOvEHyIsOk89JBjnC5/Jm9AE5QfaiT2AX0DfssR7tREuAFjv2oKXcEq4Y el4RTqCt8PLA/RN4O34bqDuMV6JT6B7Cc5PQdnwK+DqOvkIrSSm3FOwyg6sG+l+BtU7A/K3I yyPhFJaRyg2FPqAe9prDfkeSYcIp9jqHlsLOpWin2CnadXGwC5XYbvwS7hI3og70Nrme3Eze xav4OP5hfhJar0mAVKD1sPZWOkesxouAd/paQlfnFvIVeC/6nK/QzYG1X6YcwZ5PcsXAUTU6 Au+FogV4GoNXkTVAKb0biU7oJvOpMB9W0N0GXCPkIZloHrSWoH3oABpG2tF6WInxK44UvoKZ 2/gPgef1+A7uK3SC5KIkVM2fBVkjO0LtCD2lEwWecBglK5b9XEJB1X7ntTOVV8tjhiVfdKlY dMp+VLTftEjpvHChaCYfLpTvFyL2kwRpP58Q9+GVbn44LPmaopnK/p68XN+qeRW50FcyE5r0 CrqhPy+X3aOb7hcS4F9BxX6lska53XJ73OjbLe7REDY4VK2289XCTohGOhTmNPLfIfE7LAlL OR6lHj3ZdRWynOw62ZUWaI2xJsRYY6p51O0l4d2fqO068zd/aRSTwP9bL3zMPwBaTUS/cI41 GTmzgYuKjpL0nE7moqOjcmRDVDTvwMhxv31TSJuVb0ObEjZY1w2Okg3R4ToUGx5qHqYLtccO trx3tKu767TVlgU/sPXpL093Wc5+ddZyzBqclQYM6izmP0PT91EeeyAgCePZB6OTUpOmJZHZ 2JGC42JFhz0oGkdhh52PiR2UmBmFM9JHZA4flIpTcObw+Iz0IH6S940bdz2xcPfij36vvq+e mffFsiVdjb880rp1yUev4+C/1v5B2PnyyBHLFlS6o0OHvnPwnT+mpb6Vl7/6F/W3RocMe/6R Y6cHUdndDHwvBfuzo3DU4IxHDqxvkVYLjj1YOGTET4ccsnUa10WEOzjJIaFrOFtAXoSlu+vL rqPAIOOu67TlLLy+PAsdac6k8ZENkR2Rb0WeixTGo/F4PDfeMT5cSNalSqn6ZNmDPNjDeRye cP3smzHwGsMYG+kw4zgFWS0oIx3pGP86fmn3AeOJp+a9MqfyrZvUL9VXcFL3R1jXye1avfWQ mbth1rOvDB++b0gyHoVlHIgnqO8f3fzkvu00mgNP5AzwFIrGO8NRC17Nm1tMq+VDVv5QcKd1 XZjOZkKT7Hlhlu7T6V0aExb1y7OWv55NcxoCwi3hy8LvCu8IF3A/ZfipjKVUxqQHkTOF9xU9 cezYE0X3FU7dNbtH/R0ehsXpD/CZjw4d+vGJEx8PHbo3Ph6Pw2Zsw6PjEJX1PpD1TKArEKQ9 xhlB9IiYsdhqtq6T8RF7p9Gkl+yGQk5C+Q4q46yu9KtQ6unT6V8e7bLawHie9Died3B4dqA1 w8ooyoRGXCalahDe13nrrW2/7Oyc8HjzC6/iX+PD3O4e144dz+7klnzX8Wh15TnyMJXNYYh3 k4EGK0pz2kWDDlkNpNXcqT+ik0UJSfk2S/dRbV/Q8ck3qFKfLArcEQjbYk0W1jhrhmMcqC0o mEyOLkje9tChQ6MPrwpMiSBP2qzHn+05wFfsq64UBMbzC7DpItHOfHOo0yw+yz+OjnAClniU L1m6x2p7dXeB5C16p75IX6Fv0IPkAzPYPnEvdMIPX/Fdh2j/nNI/Ehb9i7AdZDjKGWoWpACy B1nxEalVNoCz8kiy2Mz5dlj4KPxLpx6Y2vXlWGDJmpWVduAxB7gatsY4YkCAY7ADBJcJEsyw 4oV4ibrqGu8zz5x6oLVV2K6+uL6nY03h1h2/5SrW43EsKaKr1TLwlQoUgNc6J+gkTm9FAbLV ICMUYLYGoACT1WhC9MNskg2y0WowyDkmg96CDEIrecZsOGIxm4yyXiRICuADDBbLyWv2y6XX 7JdKr5t5CBmQc1T5NfvtpbR94flR5UePQnyg5pn+ZZc1y5pl84UP4c86i+R7+9rCn4PTy2Ox 85yIBEnUE1OQHGyymOJMmaYCeZpcaJqlnyXPk1tNy0wbTTYZAREGwWgwGwKCsYOz8BYhWLYb 7MYwc1hAIorH8ZzCK0KSNFifIMcb4o2JpiHmIQGKdSTKxJlcGp8mjJJHGEYYR5myzFkBadZs 5MROzkmcvFNwik6dU8rR58kTTQXmggCntRRdi6/lppMivkgoE6fryqQZ+hnydMN0Y7m5PKDI Wo2ruRq51lwbUGFdIt1iviVgDbpdv8qwyrjGtMa8JmCLvs3QZtxq3hqw07DT+Ij5kYD91l9b P7BesLpno9mCGQ/FmeAN4zHO0OMMbmPhpls31k0pzYhRx7yEb8A3vFTz6uKtk1pK+cLuTaRO 06X3wsfCWoj3kSjLqSAhHLeR8DbJdr91n6PNvEFaF8WhCOtwPiMk1GCJAm/sPt19VAsVNFic PEvNKcEakxljFXktdMWk88E0XPguRvAvqQc5W7P6aYf6gNqM1+Ib7sY6T0P3WvWs+meIWLab Hj6FN+zuWVoyHW/B83E93jIp//c3Vqhvqr9Rf6u+mYD88bkZ/NWAgtFkZ6B4yIYOGTtt60L0 toBric2RF8LCsS+KQQCLGx+6BC0Rl+qWSkv1S+WlhiXGpaal5qUBSy1LrUtsHaHnQq3gA/6g BjklMZ1SrEU2zrvp0UfaNj766MZz2KaePfc/6hfYSj4489prZz579ZXPt6mvql3qnyEYZwEH djyK0bgEaBwGNMooAR1xJoZGG4L1ZrQnWDxktiot0YcjDsVB2A02omASAjHOEE0ke94goPuN k13p1DHBSY+e/rIbGDgGucRn6876tMi0qLToNCUtJi12fKIz0hnljHYqzhhnbFFkUVRRdJFS FFMUW5TYkLgqsjWqNbpVaY1ZFXtXYkfiucQo/1T/JP+EiqiK6AqlIqYhqiG6QWmIWRa1LHqZ siwmZHY/qVyNR/oDa+bwERkxICWakzJZ2OOe/eDR5Z4thzo7xx9Z/ejxnu8w99DmioOl7mdn /e85LqN6yRzvO08mTelZvrfa9cIDzzxvW7o2JWVvYmI3tbu+eBj7FNrMYQj2PEiChqk0p8ki OIUioUJoEM4JohYEIQCK9m+76NxUEPY3MDcQlTsjBAs2SntE3Io2m8UjMheoQzq9IJkCDFMg /NHA0hdTzL0xhYXFozYm8tPp3WAx6XCRhg86HUWODgeFH8BoJKYRMo5GRso+983+yqk4Vf3N of379z0j2rcU1VSu704lv1lf+PQjWk7hqxhdw52hfVmt07hZxpDNCqnOaUzuSqeGmjq2y5/Q DlRo8TjOyuTLUouVyZivouns0UOHcp5ofuEYt7Pnem77ju3P7uxpFe09291VX1B5eCDPvwJ2 l4jO+DBbiQ+ylfRBNsj/a3h7i2NNCM3/CZ19mK04XDLrJHts3mCa804OwGzg43+lgMA2ELP5 IRtKBLqd8yPkCEOEMQWATbIh2ThGP0YeYxhjNChIgQg6WB5sGBKYak91DAkaHDU4OklJiolP bJFbDC3GFpONRiGOE2XRQIzERMwkgFhIKAkj4SSCj9QnpiaNT7oxaWnSsqS7kjqSziWFQKi7 +WJwKMZdCg5HgPjI2sKHZ61ZM2fT+KO7vv7PWS/VVR9zrVjnfsT5yD1/fLP6SX78vsGDS0ud BTHmIVvWbDsYF/dsZmb5tdcUJQTEt63Y/miUFiNfQ0iMFk7Bufg553Bi1Uk6zgoKpR+E08t6 bJVlfY6s44hE0GOSQdBLcGgQZDGCHydHIN5E42YXS2KpLAUHXzaDgTwbzFSeZUQXIAXoOdnB 2XWB8iBukE7RDZIVebguU67lbuWW6BbJy7gVuhXyXVwQjw0kEIeTOJxMEiFTDcdjSZlUrndL 8/QLpEX65fgO0obvJXYQXGCMHlODxnFgbK8BUrsNL8XDXlaXHleXHhVOdUvkm/NDhehuxKPz HyLkt2mG1UYMtOkjl7fp070grcLxawrSBlq1429YNUAmatQQ7wFjzGLxfjDE+7hQY6Te1hIY dCiAHBoU15l4RH8o4JmwyEGhSDJOFG02JS+JGu+XEEdZEO2idFjUUxSNZ6UdrBiybEjHEALU aKSw4BZs4frOFFdjGuU4q8VGAV0mHMN3tW3atWtT265OVT3vevTaa7cX/+rJrAO3vtnd/eat B7I6uatffe+9V195770/qR+pn0dGPZE85Jnnrqucg0djgnk8ek7lXiq/A5Bfk8B2rMjpDJI4 qwEJbeZ1erTcJkXIo3AEyrbRKGWhkQnRyNTV3dWLdbJYSIoOXA/Ak9Ao2It2IbNCfj1wfN9L L+47rn6gfqp+on4ACmw+9/bb58ja7uvV9wCJD8HxlIYxoEM4YSMDnuDMF6yiTuSthNfRD4HH HCZWjsMGK4yUrXoZ0w+DDFaut4KNg13zmJfQcwLna3GSaPRDtoDS6yjx8MvKwJvYD7yJDLyd POoz/K70y5v9pW6AnffIPC+H8Q55kHw1f5U8nZ+hmylXywvwYn6Brkm+g18hb+F38Jt1d8t3 ybvxHv4xfpfuQblDjpAJLwh62RBGHIJDH2ZIIoOEBP0Qg2IajbPISGG4boQ+y5BmKiD5Qp5+ ssFpKkdluJwrJzMAk5UDJivTlxuKTB7TLXip6V68SfcI3qnbb/q16QPTBVMq+JCei9Nj+AcY i69Sb8J731EPq4ffwU+oje/gJJzEV/R80PMC7lQncZO5IPVmvJ7qoB10MBlwVgTaCsggLJyE RIDwkVUQ+BzL/dZNpg77Bh51cMgic1iOCLYQMZIahgOEHETla2fyJZpMu55/np07U6nbfdnV K1ZBi8vYmT6dLxPKdIv5xcKC8NZQHY/4UD6MDxcimtACsTnMG94UsQK1hK4IWxG+IuJh9HC4 FVhLgHSXOQKNHIf7J3oe4qtORHgN90L3FC++I8M19aGWG9++ZfHJmZ9he951oeqXe/fuXYg3 jJ6/uWBhe86EN65K/+zF63c1RKp/6sVusyAvWoB7OK2EHUJm+yFBWmfuxJtJMJxVuIlWmyEv kiE45sCa+x49C54btSyqI4p6bu8Zj2Pn4yDsx21AKHmgs3P047cev4AuHL/18Z5XHrr77ocf vvvuh8hB7oZvux6ucuFcLMEr16U6jp85cxzeWmzTRUKMiUWznINEmz4kAImROoexNVIhneFH Qi1wKgyQJLHIKgUURYRIYflxNNB1d0MwZ9IfC+GOBXQa8JyBafFF8Q3xd8V3wOu5+A/iL8Tr gW4W8Rz9o+Al4TAp7/kVjz17qLF5/e5DjQvv2H3o0Pj9ixY/QtbcuuCvH9HgeP82Ghy57Q/c +9yDLEjOnXOrlpvKIDdlgm8b8Z+cBcJ0EWxfz0+X9WQ6HL246ZiDw5dIU5Zg5QVfyjLCaCtC xhxZ4Aicwp4zSEaDrJe0YhechU1+97ZSy7PRX4H0l4HZIKI+jq/Zb4QBJp//+6PXG35fv6Kz +z61JjXVCwIXxAUJsXKmXMAVCPmyU76Ou06YLhfJ9Vy9UC0v4pZyi4SlQiu3hbtH2CQf4Y4I b3KvkF8LkQKnJyJvEGTJoIcPo4MLJUF8mBAuhevtBocxASXgOC6RxPAJQqwYq0uQEvXxcowh zphFRvAjpCxjmjmfm0TyeSef4zux5epz5VyD0+w0l0FkKOOK+GuFYrFYVySV6EvhtFaJqrCb m0fc/DxhnjhPV693GeYaPeZm1IwXcbeRW/jbhMXiUnGxbqnuFsi/S/VL5AWG24yt3GphvXkz 2ow3cRvJNv5e4R7xHt0WyZnabtxh3o12453cTvII/4iwR9yje0TaaXzM/CvucfIM/7TQqX/O fJR7ibzBvy4sonk8IxzTfzjOgOPKOj/95J1PP+lU333nf/7yDl/R3U7m0fd3HaS9ex74Hz3j vQOxh56d4uDs1GZDbcYN9OwUGpBBQh2WEAZQes9OONZXgoLfidoxjv0mie+pPZi89x7G6oX3 INHdoq5Wj6kvq614kTBF7YQc9KnaiSfhMByOJ+1Ur1O3qzvU6/BOPAdeu1gssNBnDZAPOTgl vejMRlaMeIHnaBwEGEVkZOUQIbIOgqNIO/VWIkv0Rg4iujZMlusBXUHmolVZvSAbLCePaiZ3 +mRXv8KA0N/K+mcZAFmKkYKsnAAcwAVQoIVmogWoAa1Deh2WOJHo+SAcypXhmVyRcS6u4W7B C7hbSSO/ENTZildzy4z3cFtIOx9MkwGOoVogMSSOO6Ke5RLUJZ9wWb9d3XPj6lOCuSeU7Ds/ FC9VlzNf3a/+hVsi2pAJjXQGiPfAgcWkQ8QmokDZbHmP+hi4kUzdiCZW2qaedjq9ix0NQUdp WOQcdltw3CAuc7htJLekZcXKVR3tbZs2i7ZP1XFnzqhjPvkTPvbHD/DRLthvJ+znYftFOwN0 dD8dRgYbHygh2G/sl33rBmYE2Rx2Thc3wpY5nNsJS7a1d6xauVK0daljP/ijOvpPn+CXz5zB LzI+3oVf+5AKZzfrU2glh0NRSO/ZbWSGI+7dt99WVV9tIRHsLhSwY5jpfvM+uc2K70f7+Lbg DbT8GGpCaXZLGI2pXb01hbNfnU17MiA8OpzzlR39dYS+4mhMepCQWH1mxQWknsMWjFacqZ73 5/9Qf6kuxi24pOXPwpxTN96gvqL+p/qO+soNN749aRLegUGTeMdERv/2Czb8EtAvoFCnkWxH K0XCUyZEoOTkG5pEgA8SF3ju7Z3Li9VH1eexE+ZV4Q8gFK2kfB9E2zgeTNfy3husrJ4WCKmz igvv+YRbuZPVyCDf0xqZiL5zJhIrs3HMCfSDcCISaQAWczgIvoIo0NMCj3Ra1PVHWJryaf7v ja2aoXelX+HwgJ13TuLmcUuAxBZuGbeB2wlADTbSg0E7kAOHkTB+EBqEk0gSr0iZKBOPJqP5 NCkf5eMCUsDnC5NEp0RjXjkp54ukalSNa0ktP1eoESukZtSEl5AlfDPEtlVoFV5D1vBrhBax HbXjzdxWcg9/j7BZfFh4SNwvPS99IF2QxrE4pafucbVWflKvPw/RqZQ8+l0H0wOcMPhZEAvA zJ2OHNLBcx3Cch3q0EvRYgRB0dhAJcI8AVOJdB3VjAwwz0mGeYDpJwNIAM/NHhljFTITMmhF U8WT1S3Y/Tqe3L1zL++d1Dnp/Km9LPbQZxvr+8XBDhvq0OJgREAUiXCEX1RDwr7zgM1q4QYU h9Zuu+8++Hfffd9hvfr1d9+pX2O9UKSeUN+A9wngOAMPxxkdqldtUVtVgEx4EV6M76A0HIZz zU7AHBQLjXOG+7FQp3kdfoYciQQcNJEhonyKhtLTNWpO++GQU6/hoT9G8Xh2Qi+CAKI4Wvvu d7jB3kOHRj++5A104cIbSx7nRgEieoi+H+7ZJ8p7q1zqEfUbeB1x4T/5AZH/rCtkgE70aJEz Sgcmizl6YMiBwy0cbQUR67gIfoQOTrWydqrN8iX8LJ9Z8n+mbwiz0QYaZtNGcKN0k7iJulqu WreM04E9imCLIticOAPPFN24VlwkrsK3i214q7jDYGGnVAr2YtgR1cK1H1XP9cyD0+l30fyH 54fyH34XDXI8B8S+xMexenqE0yyu5HdDKBIw4VFIbz2dQmMakGgBHQ5GNCzxcSrl88J5sL3P gU8dnC7NIteGlvPYSSKQU5AsJ093n4bZgEXTMPPIZ5CEaACQkASOaB05qtwZiPTRyALkReto vb5Bv0Ovn020clGMyH/Rc/Z4z1nh1N7zp4ShTO9gezsBAxs0DEwOGQP0h0Ic6wI6wzeHIptt YohRBIDZp3UfBj42AAP3V3A/xSdSFsknfh333Nmn+dGHDnGpPg1zxf30XvUwUMP0jTeCHAhK eQo9xsGBlOf7DqTM61hcx05Tmq8ot17YIYisJvfa668Lp84z/mAd/g5YR0KBaLQzBLdZUJt+ uc0iSxyPhFDTeCuK0POsUOAvhTAvdhoCHNGO8Y4bHY85BIbyNUyfEEPPHfxQMAK8Ub1j69Y7 1FH41e8o8vhOfV1I7fn13a0td+/++N33P+p5GKhfC/Jdy3w7DqWiCc6EECPqSBQ7ooZ12DZE rUt8MC3EGD8kwhEfEaAHTwd3D4gJT2M1A5Ayq7bSXNjFPN9ylh68+5WGE/xPG+lRiD2NjIuN zxw+IrDfGYRbe9euXXfdtXuXumvFBnThvz5QNyy/+0H166+/Vr/eOWnDyhUbN65YuYF7eWtr 69Z7W1q3likHlj3x1ltPLDugxB5b/85nn72z/hh2Na1Y0QRvFq/WA0/tjKd4NNMZHygiUwtw FSR2RATtsnQY18RuiFiXYIzVR4RGBUaQmOjwBJAvGP1p7Xlrt/ZIUnsiaT+OjuMT3Alygj8u HBd1O6MORHGzB1bAtbIaR5hpOeyoN91yO1fv2LEa3lg/5d4pr74dMObATR9iQT33kdqjnsVF OHzKvWTM4Qfuf/rp+x84zC3qjB+k/kX9YsZs9Ys/far+NwuAgAB99bRtwJcX+BqMGpwpyBEo t+ijW5TADoepQ79RjOhQNsZtENc5HkwKighExB4aMUixRBB7tF5MoqYZVOo/Deu1x0MngWUw KZ/+TndZPj3bxzh26quiXNEupSqGR7Mv8yhZe2hy8YGXjN/woPqW+tkNr8wrfXX+s68c2rXv YNv2B+8pebbR+1r5p9h4J0mIPnrX+39JSHjpqvT29f/Rtnthg3dJ/KAnFeU3B259hPLpx7oi esqZyFtporfCgYt+8ATuAyLAKAewx2OIAlokCFjnx7NXTPMHiiQaV+cgMoRM5CcKs8htZCWB 87mOk3gaW+1cGJyAhkCmH8Ql8UlCgqhIoxDkJG4sP1YYKU5CeTiPK+ALhIliOSoTq7lavlZY jBYAzF3ELxKaxWUSYEUxCSJxDHuShLnJPcfexu/gP/y25xWIw8H85+D0Wm1wG0QRGR1xJkmU P51V486H6HMkOGCSI2izXhQwL0q0ym+gIeDkUauWNk4H90sbfpTO0oeFofQbeU6WgrhELkkY KpVx1dxcycstFFZwa4Q7pY1cu7BZepCzwZlA5AxwahhMEvnBwlBxqM5prCEVxjVkFaCUO8T1 uq1ks24veUg4qHtZ9zvd1+Qc+Zo/x4fNvpmCFCtlk5ZEDx/iEv7Us4+76VzPK4dEe3ct/rjn y55Hubie97VYycex3JjktIltPMsav5RAa8SXD4ExLe0AejgQQBMgxYXsOWvca2RWTwNX1LMf YuZeddLenpH+fDsG1jSgZKddauN+yaPlsggLCqP0NBgbtYiZzo440Eg7UGTC7IlIDC2IWOnC r3P/9frrPbGwbs82rur8UO6VniwEMZHS28VishUpEBPjQlGbrG+zLcdt8i+jrQaJCwyNFpA5 IkgIjUjRowgbH6Ntd5L5E7NDxkwWcBOrPTLWXKW3AXG6X1CMwRtx7oP33fegegQP3bRhwybV wPFnzi+7tW2Xeu67ns+413reb127bhVXrY7zNN7csPv5x9c8YFeO3/PqH0AWM4HodwEz69F9 zjAJXIVjxfYcaQ86QvYIEgHAjUWZHpUMpbT+cJ2/yug7O7Hq49H0o1bf8+6+wpgPIefQWsMg biJXoBMMUoAhhIRLQyXFMIJkSWkG+uw2jz27nSDNIOXSjYYKXMFVkwq+QpgjLTUsMzxmCGf4 xEEfDGXimJvJvJ4p3JPdt3FP9rj5ioe73934MElAA+rXDOf5831nwLrwZ0KPRLJsPxHyfr+q lx/nHbsI5/UvdOF+BbDgTDAAnOqvdXHevgrY6M7O3qzfs69f+atq77df+XEePw9sQ0AJTqMG fyLIaMTTMxDN+KchNevTdEW6ZWQZz2sG54gBU/t9942Q8wFRa2usZbab4nT4/EFq438pC1jP XMKoucTRXjtKOxBt6u8UdEmyvyeMWiz3Tfc46hn5e3s+3stozEVIt5s+d8FLnAVCmFbbCpP1 JIzWtsJ+UG3rscvUtv7uItUBxJ7L/EXkRIGTId7JNnmwEC8r8jhunDBcTpOncFOFHNkpl8MJ 7CZhrlwh03PYrcJSYZnczrUJkTqk5yQC8hVA5ICiecCSOj3S87JsROYw4uAdUqjRYlb4GEER FZ0ixenj5QSDYlbMY7nRJJPPENIkWrseT2tWcGabzDn5PIBkOQDOcySn5NTnylONtG41kyuT yo1FZoiWxMXPESrECl2FVKWvkqsMCyHOL+FuIQv5JmGRuEi3UGqQbjEuNS41t3CtZDVEy1X6 2w3rzZv5HebHzNf5z3DsGAcxMvcNPBpnfUx/nVDXqOrL6osqZAQbf5a+zw8VLOfPIR8eFEpB d4Fg/487M/WSjoCuCE9AVzzJEXnkILyjTW9vMy038IJIrBB/gsyCHBrKW8fb5Qgjz7AwADQI RVYtGI2lkNGWZRvwFRBfzfuAM4qVdRYHYhAxFjiR6Ni5184FkWCeVgITuEEkURykGyQN0itR I/AILh/nczVCM5xqFwauFlfraEUuejaDCcGBcSQFU/xpjVFoiOuFpuSO7CXjTrzz3OS1t7z3 On4Vo+6VPWvUu9va7uaOBN31C7UGL22f07NGOPW7/7zjMDet52zrypWrQCY4kwqGYW09ynQG 6NBKfjkH1ksPLUim0MbQ+xiInajYV4LeSMMHkUExFBnI7AR2mLGSOIIzjx8/bn/AoYL4e25W 78Vu1Cv3/b6YD15JQThgcYmzyBSFp1MQbmMRx5qV1RslD1QEsuCeoeG9BK3cl4Txxi9xJo5W P1SPqzl4Bz6A29UatUh1CanfLcQhOAUn4+Dd6mZ1mfoLtZ3tvx0hMVh4FniMRhXOq8INqFXH R+phb641ODDAYY2OiggPCwaBBsKx2mwy0mqe9iXLMDlEVCzdPu88OXZs91j6+2g6OGqa02rA Bs5gNJjsfJg1zGaPloDiGBJjwDGBGfTgxd5xgeydGcPefLD6filOyK3B8bUdc/Eo9f5iPE69 t6Zjrvru3Ptr1JdxRan6LK6tJqvUA6RVdeEdqmuremCLOgdvp+8tuHAr3kH5Wn7hY0EFzKpH afiEs92EzcYWq81qaJENNptV34L0jiCHDotSS1CQg8MEt0RGRaIWPYqKilSiuZgoqxwoA9sk xG4NlHUSJ+qtgYEyHK8J0m5xIQ64Y6e9OTaDnohIjiKDHWZxcKLYFjK0LXFT/IaQdeZAOcVg 1qMUmyPRHEVSbIkxZmsAcG0Lt1wFij168iTNINYs+uDTSv8xpHXs9FcMFB+DbupPwVkDnxn5 3Mj/MbCPRsP+39Xsi5W9X91Mp753QGcQYvVJESgCR3PBhiFoCB5kG42G23INN6ByPEuebpsV Niu6PG1u1BJ0L9qKt3CbpTbDRkdbUFvslmHReoPeKFmNicbBIVy4PtQQagy1RtgjHEGR0emJ KBEn6eNsQwKH2Ac7UtPH6IfbsgLHp0/WT7Ff48gPnZZehmfpy43TbeWB10ffmD7PWGutSG/G i4yLrRvRRrwZgvA23TZph7RVf69hq/Gu9I70/elZ1NfN2Pe9Rj2cqUdmiJwOxyWyrzjCCW+k /6sEwb1fOcB/uW76yY4bdxeoS3D3mBzxsLFmNg7uXl9zeuX/qG+2tKSl/1dnya7pM7bn1q4c Q+KuvX/m3S+Od3Lre74pP974Hyq4yscby2fgwN8v+7By/G1jH3g5Pv5g6lWemRlzad2Qm0xe AjuzokJnssVkgCSq1/EcL5EtgtW4RcbmDTbJKBM9BFMMZwZ7AG/Q202izXIS8OF78Abt2tj3 5b48CUHkKH3sSh9PYRPW0YqRkDgMjxQgiCSQl9QteO5odX+jun80nqtuGY2LGnER/8GLL805 Tmv6x+e89GLlcbxIbT3eWxuax+p1XzgHXxnvo8f8cB8gwEC4n35FuA/gDizobjuHeU4PiH+w MFgayY0QhksTuXzAY9O5udwCQP4r6VMUaRN3r3SGc4iEIv9wEqoTZED/IYRi/yG6EfwIYYSY qUszZhOWI+lzHeMcwHE1wlzdQqHBuJasFe6EU8F641Zyn3if7iD5le5l8rLu9+R3us/I5/xn wn+LX5NvhG/FZHpCuJkeEehXJzBD29sx3xNOwtSvejIo5l7DLeyZ1P0x9+ueq9j5FiP1AB8M 56J4tNA5PDTAYRAT9GEWR6RBUGIIMuzRoz34eb1jT+DjCUa9LMQHhaJIWQjk7EgJnSAHCAm0 7GmkqUCggNb/FU7qujb2oVXtj1JEBaq1MT/XbqbhA3Dwmy3Qb3Rejf2HW2iNGOP7RhPD6pEU U/LB477dU3fn1Vevv2nPt+Ny7yi7rt4zq+yOZ+/a9P4Xm5vWe9vOvb9x/cw7vrnvztDwO7d9 c8fMgby1OkdEJ4QHGQOkcIMjNIAXFIJC94SjPXHPhwfssT6eEBEa5gjAPJLCHHE2HoVFOyZY kIFP6C1z8xp0Z9/K4jVO04FVH5OX5VWLahq/fl59DIKn9nIcRBns43go0J2/bvosj2fW9HX5 4799qO7OcePurHvo2/HPlq3/Ztud4aF33vfNnTPWb3z/XJt3fdPmL97fRGP+RjiP7AdfJMCt 2zk0Pkov8nJkII/sLYGrLW3BG9BKLjLMpBd4OQqbIsL4CEjlaFBYYAI9ojAFBrIKBT1QsQqT xha4wtmv6BetT0AXdc2Di/SL5cWKlt8D4yDgjMcDn8FTABIAkUoHwQq3Hj/+8nOjZs3KylhZ N+0J1w0vzO38YNKsmamJkiiqKt6w1b2irDzzhqvK6/MnHMka9eKOKWvKylIzQx1jhzM/PkBU /HuG/UOcBrIdLdeef4iW97THH4AIMHv8gXn6/EM4dY/6Ah6v1W7QhRzuAMMww5x2FEbrw2EE kRxuBxwhOIRJ6lGmskvOXoAfOWlvzzd7hVPfzvethbhp1zfzO5NvDBj7VxQtsb+5eTVpzBD/ 399cOK+W6XaDtSEk9f1RDpwK5quR/f9M56I/28njT6BqwY5a+S50M1+NbhZsaB+ZjA5zWegF EodG8kfQ1WIG8vKfwP0zaAnt59YCOb9BqTD2MD8UecQz6DXahnVuFt5FB2DOGCEYtdNr3XF0 WFyLysQpyCssQhYSjfbDeyes8a7QjrzwuZ37GFXRfWDOh/BuhXmHhW70GncAneM/vnCeXnPX o9f4t2GfYLQW3uvhvY2uxz8ANGxFrwFKfk24DcZkoJl0X74Zrs3oNd3nKFdYj14jmThTTIJx T6Lt4tWgAAT7jafrYUTf/Hi0EWg5AHvSn1i0HQ6Bpbgdv4m/4oaTMFJPnufL+CZ4Pc93C4+K Q8Rq8XWdUfemNEW6RzovG+Vi+S2DZBhumGTYZNhvOGacabzL+FtTrGmBqd30pjnMPM78C/Nn AaUBr1pGWfZb/mCVrBXWY7Yg2yhbTWB+4Ft2zp5j3+f4KCgt6GhwevDDIfaQ9JCZTGN56Cqw IuR7KryFaph3cEHwSf+mKQyP69XrPb06xnDWvMfX5mDcg742RFX0kK/NQ/uAry0gI3rG1wY8 BRlMa1N0/LavbUCR6LSvbbLdh/1/BWdGwwO3+9oQtwJ/62tbER/4PuyIeT0QlBb4oa+NUZDD 6mtzSHIk+toE+lN9bR7aeb42eJ/jOl9bRHaH19eWUKyj1dc2oNGOPb62KWG042Nf24xqxkT6 2hYUNGaVr21F0ph7J3gaFjXWzq1pUgZXJinpaWkZypxFSk5tk7ep0e2an6wU1FemKNl1dUox HeVVit1ed+MCd1WKfMnUEXRqqWvB/Hme+rlKjqvmChNz3fNcZc1KZY2rfq7bq7ga3UptvdLQ PKeutlKp8sx31db7x5S46r05Hs9N/S77Ncvcjd5aT72SnpJxldbdb0C1px52bQImapqaGkan plZB/4LmFK+nubHSXe1pnOtOqXc35bNhlAbKRS/jymCv263Mcdd5FialKD+A4hRlYt2ihhqv Uju/wdPY5K5Sqhs985XsRvcCHyn+PZiEmjUJ9d9Glvt2B85cikZar5jlYd/7I1+qkB+sS+Wi nWu9sktpanRVuee7Gm9SPNUXryLLRe7G+bVeJv5ar1LjbnTDXnMbXfXAejLwDmzBNJAYyDlZ afIorvpFSgMoDCZ45jSBxGpBBC6lEoiWYWRTjdsvp8pKz/wGGE4HNNXA6iBld70XpBfLRBKb BItVKS6v11NZ64L95CpPZfN8d32Tq4nSU11bB0oaTFdkE5QST3XTQhB/bBKjpNHd0Oipaq50 s2WqaoGx2jnNTW5KgzxgQjKoubKuuYpSsrC2qcbT3ATEzK/1bUR3aNRECcs2e2E8ZSdZme+m XMvMQLw1yf32SKZ7pnoaFa8b9ACja4FUH/sXbU2Jg2UbqKCbZE10bKOFNWBYl0ygaqhubqyH Dd1sYpVH8XqSFW/znHnuyibaQ/mr9tSBsVGGKj31VbWUD+9oWS6F5VxzPAvcjAPNihgBvUZQ 72kCNXi1XqqVhj4L0O4p3hpXXZ08x+2TGpABXuIawKenHuyiUZnvaXRflm2laVGDu9oFG6Vo RA28O9+1CLwFplfVVtdSQ3PVNYHpQQMWdVVVMc410VEHdTUCXc11rkaZblTl9tbOrWdkzNV8 FSZRC3VVwiJeOsNPj/fineiSMmzABOaqu/wCvjl+OvpWA/Lq6xYptf3MXKbsNLrpX16zsbTh pYKkevG7hxtszt3IJi30NFZ5ldheP4yle/tvyLHUbWOZyEAzU3z+MscNnkRXbQYdUJks8NT2 Eua+pQk8RnE1NIB7uebUuekNjXdYmTbkPqXUuJqUGpcXVnTXD5AJtbo+665SmuurfAT3kSoz 4jQOv0+rXk8d9WqmNqokl1JHowf4in9gg6vyJtdcYAz8sN4jU1P9+4xqwFYQsIBEd101JWpS npI/rbBUKZmWXzojuzhPKShRioqnlRXk5uUqsdklcB2brMwoKJ00bXqpAiOKswtLy5Vp+Up2 YblyTUFhbrKSN7OoOK+kRJ5WrBRMLZpSkAd9BYUTpkzPLSicqOTAvMJppcqUgqkFpbBo6TQ2 1bdUQV4JXWxqXvGESXCZnVMwpaC0PFnOLygthDWBuGIlWynKLi4tmDB9SnaxUjS9uGhaSR6s kQvLFhYU5hfDLnlT84AJWGjCtKLy4oKJk0qTYVIpdCbLpcXZuXlTs4uvSVZgsWnAcrHChqQA lbCGkldGJ5dMyp4yRckpKC0pLc7LnkrHUulMLJw2NU/Onza9MDe7tGBaoZKTB6xk50zJ02gD ViZMyS6YmqzkZk/NnkjZ8W9Ch2ns9IlDphMm5hXmFWdPSVZKivImFNAGyLGgOG9CKRsJsgdJ TGHkTphWWJJ37XTogHH+LZLlGZPy2BbAQDb8m8AoY+wXArt0ndJpxaW9pMwoKMlLVrKLC0qo RvKLpwG5VJ/T8pkFTAd5UuUV+uilOqJ9l1oHjKKzfQzm5mVPgQVLKBnQIQ8YC9aVd0ulu6GJ 2rbPubXQyMKoFjuTmdVqQQBMeGI9OK7Wx5qQlsCzWNbRoltfwqbpOFkLvSx8gHVDJtJCb9UC N0RALw0lnkbZQ4PJwlov83RIgfM9Ws5TvK462AxmUS9ioyBWuupgmreXzAEOJfuTYUNjLUxZ 2FjbBMFEcTVDb2PtYl8abvSlKcaB0scB3aUvOGj0N7q9DZClahe46xalwNhGmssYJbX1gNXm +1hn4qtsGu2HCk3KXLZ4ladJBkSXosgyQ1w/GTr9UCz78+AgWcNByo/BQXIfDlJ+JA6SL8VB viBfyVby+nPGZQBqH2CRfwpWUvxYSf73wEqypod/GFaSNYf9SVhJ/hmxktyHlZQfiZXkAbjg R2Al+UpYSfnhWEnuh5X6u+8AuAT5HILEzwWXZB9cUn4SXJIHkMvOjT83ZJLrPcpPhkzyzwqZ ZB9kUn48ZJIvhkzKj4FM8mUhk/L3QCa5NLts6uRplOzsST8KHcl9nP8UdCT70ZHyU9CR3B8d KT8KHcmXRUfKT0FH1FgHOEov8JGvCHyUvwP4yN8PfJQfAHxkBnwGYoe/DWia/OOdDDTIKfCR 8r2Vq9SFtTfVptZCBLklpaGmIdUXxi6qnKEJyIMa0CLUiGrRXFSDmpCCBqNKlASf6SgNXhnQ mgMjFJQDY5qQF96NyI1caD5Kht4CVA/jU6CVjergpaDi3rW87MoNn26YswB+V8FI+QfsOqJ3 11LYaQHsRf/7pXoYTelwwZy/b8dcaM2DeWWoGUZUwlgXW83NZrgYRwqsUg+/G2DMHFi3FsYp MN8Du7vYvYvXKWGreIEiD7xuusLdy/eWMQq9sK6H7ZoOdGagqwaMvvwK1WyGxmuTTxOU9yag fDRKhVeVb/wCGJ8C4zzw2QjcuNncRsZ3Cqzhhjn5/Vbzy8Gvi0s1Tu9R2bqZftwgJQ9aCGOp Nn4eGdOVJsKdRTCmhs2shXsNjO4mpk8qgUY2g1oAXXXBRVK5mI8+G2oeYENX4oZ+MetyvGs6 c0Grv9QutWYZDfsJL/kHecjP75eX13cfz7VwR2atJtZDrWw+k/VN0OcBDfwtWihnRWy9+Wy1 PuuvZTTVsHtuH19z2S71Pq0n+/SuaUvbTbMxzZ6TGV0epv16Nr/B52HaDh5YtclnY7U+K3Cx NTRJy741mxgVF9tTJRtH7VBb3b8CHa3Rrtmym/mrZnux/awklmmOzq1in15GVyXMcfn4k5kX VIKFzmerNLE7fvlUQ6vO50mDe2ns24HGFUp/E9ivZv10xz6Z0J4G5jVVsEMlm+2npopx0MRs bQ7cbWJ3tT3k79kh2efNlUBZM1tFk8lCZgM1LOo0+SQzn/X158jPQ+MAq9SobWYyTO6nHdqe z/Sp6VruF0G8MDv5Cnwk9/KZyiKIwlbW/EFbu9Yn1YHa/36u/ZLTqG3otegmRlef1fVxtJDJ Y/4P2sHvDdUsatf7OHT327GK/aZ7JLNPKol5MKKSraeN8euP2nGdL7L5NVTJ9q5iFNf6KB3N vLPUR50LVvSwyNCng/6xqE8Cl0aCehjf5PMG74Cxfl/pk1j/GNB/nsJ4djHKZRabB9qaJg0t l7i+R58eluUUn+7ns8+++PFDdNHEMhHNnC4fRykDJPV9c6lMFvlyi7Y7lXk1o7HKZ0l1zE4b e3s0SqlMq/rpvL/V+TOoi2XEWhYz6tiV3MtRFaOU6qu+nzTmDsir2k7+GOpi1qPZrn+Pi+Xj /Zs8+amUfRz0WZiL6eiHUzBwn4vlcTnakn36rmPzaq8QzeVe7TSyOOticaVvXX+Pt9ci/f5y cfZw++Kcm3Hh32kh46qKzY+9TD6M7eX74hky3PNn29h+Vqb5zJSL8ssc5u+efrQ2+/zAbycL 4G7tZSTmRrcwOdf7PLkBXlr2crGI6u6d0V/vGs3+HvmynlLDIrzCPr0+Gt3Mkq5kJ/5Yd7nY XcUyQT3Te395XU6qcj/J9dfhj/VVL4ua/lzd521+T6LIoa4XezT6ZgxcsYFZ9E3we65PY1o+ pFYl90bVf2SkujJXc3w+0uTLh9W9kpqE8tg+01AhXNF9psFVKZoBOLKY3SuAPgVwXDHcKYOr XOjNZXrJZnfo/VjmjTOgTVechqaztbQ1iuE3XbsceujaCrumV9fA+EJYi87NQzPZHnmwWglQ Ng3adO2p0DsFPvN84+iMCdAzHa5peyKiKFTbrxBmlTLfofMoLRqlpdDft+tAqgrYjn7KpsJV Maw/yXc3G9YuYOtR+pMZPqLtQh+dmuSK2epURnRluuYEoGgKu6K90+GzCMaVMHlmM541agsZ D/lwX+Mlj1GgaUKjaAJ8FsHedMREoKuUSYHuVOobmcz0SPnJZfPprtewURpl03xapu2+VVJ8 stTooPIv6925hPE/BV4K478UekqZbrJhff+6ftuZyFagdMtMGtMZf9lMDtPYDjlsHJUileeU Xosr7qeVCUxeVG+U8ly2UzaTSMllOfGv1l87l7MOuXeHiYy/PCapKWx0CcgxD8YX9PZo9ljA eJ3gk7W2pmb3mk1M6SfdCYxHqtlrYdc8n01lM9kN5ILqaQajv48LTQPZvt8T+smsT/uFPu36 6SllO5deRiozmC/msVHZTNclvT6Sz/x3qo/y6b0W1hcDpvvsc1ovZQPl6/cj/7gfEju0tfx7 D9RgLrOnKT4KS3qloY2Qv2ddLXblQV6rZOecpt64PTBz90eNfWi0P+5M7hdr+yMBLQpPZGPn XzSur1c7LWk5q++s0x+7Xe6E7T8da1jej3r70IcWu7UzUX/UW8XwuYYBvb2oxMNwoKcXmSxk d/tyeoOvduIZcM6jO7tY7k/u3cufi/rW0nCli6EFupv3MtK8coaSLzkZNrB8r+2ykLWbfMiE 8tfsG0v7F190GvbXfy7VgXJZHfh5uRxy6C//RqbvBt9ZqpZJmOLJFN+6jch/LuuTCZWAVleb f5HW+6yPrjYaXVxVoDKY24/yKiZrGWk1OrqnzOKVv8b1r686/dx12X+nepA8oB50MfL6x9WD 5MvWg5R/cj1I/kH1oIFIvrIfTX21Dv/IH1ZBvVyFRf6X1ZWUS+pK8v+vK/WrK/VVGP5v1pXk ARn2X1dXki9zWvt3qCvJl60r9XH0z6kryd9TL/jn1JVk9PfWlfqeOv2cdaU+fxtYV7pS9r1y dUk7n2tI4t+tuiSjgdWly1c3/jnVJfl7pKv0k+C/d5VJZjZ2KZr551eZ5H/jKpN8UZWp76z7 z6wyyX+zyqT806pM8t9RZVL+YVUmmcmgDFadzKjVpJ0N9/95tSP5sjr/V9WO5EtqR8q/rHYk X7F21FcD+sfXjuS/o3b0fev+Y2tH/sh65YxyacVH/hEVn/5Vmp+z4iP/pIrPpWe2H1fxkftV fL6v7vBzVGiaLlnfifoqDTLbh16l/ITvXKUyudwE71RGWxVDTSkMvzZA30A09v3fOWN/s6z9 jfsv0Cx0mZ9ObpnzwncqOW8n3yaQb9LJ1+3kKzP5q0q+VMn/JpC/mMn/tJNzCeSL27OFL1Ry tp38uZ10nSd/Ok/+WyWfjyaf5ZAzKvk0nXxyukT4pJ2choGnS8jHH6UKH58nH6WSD1XyR5V8 kE7+y07ebyfvqeRdG/nDbeSdp8l/quR3MPx3t5FTJycKp24jJyeSt38bLrytkt+Gk9+o5C2V /Folb6rkRDt543iU8IZKjkeR19PJayo5tsoqHIsgLweRoyp5SSUvquQFlTyvkudU8qxKnlHJ EZU8rZLDVnKoJUE4pJLOp54WOlXy1MHZwlNPk6eW8Qd/lSAcnO28QA46+V8lkCdV8kQ7OaCS x1WyXyWPqWRfFfmlmTz6SILwaBV5ZK9NeCSB7LWRPUD0nvPkYZU8pJLdKtllIztV8uADZuHB dPKAmdxfRTpgSEc72aGS7fcZhe0quc9Itt0bKmyrIvdutQj3hpKtFrJFJveoZHO7SdisknYT aYNJbe1k00azsGkw2Wgmd58nG+56WtigkrvWzxbueprctYxff2eCsH42We/k70wgd6hk3doU YZ1K1qaQ24HN27PJmtUGYY2drDaQVuhorSItIKmWBLLKSv5DJStXWIWVKllhJctVskwlS1Xi vPCL224TfqGS224jt1aRJaUOYUkCWaySRSq5xUwWGskCmTSrpOk88Z4njefJzedJg0o8KqlX SV0MuUkl86w5wrwSUquSmtvIXLioVolbJVUqqVTJHJW4RpOK8+QGI5mtkutUMksl5TNlofw8 mSmTGUGhwox0UqaS6bDz9BxS6iAl2CKUhJBiO7l2cqBwrUqKDGSaSgqnWoRClUy1kCkquQbu XKOSyQUWYXIgKYg0CQUWMslEJqokv53ktZNclUzghgkTzpOcp0n2NcSpkvEqGXe1TRhnJ1eP DRCutpGxY0zCWOeFADLGREarJEslo0bahVHnycgRFmGknYzINAgjLCTTQIZHkQwTSb/KIKSr 5CoDSUs1CGkmkmogKcP0QoqFDNOT5HQydEiCMLSKDEmyCUMSSJKNDE5MEAZnk8QEMijBIAwK IAkGEq+SOJXEBpAY4DPGRpQqEn2eRAELUVUk0kQiQIIRKgk/T8JySChchKokpIoEg6SCVRIE k4JCiUMldpUEqsQGA2wqsQKv1hxiuY0EVBGzSkzGIMGkEiOMNgYRg0pkC9GrRIJhkkp0diJW ER5u8mABDgK9RCUcXHPDCLYQpBLciatW3YGH/l/4Qf9qAr73J/L/AQZ4iyMKZW5kc3RyZWFt CmVuZG9iagoKNTQgMCBvYmoKMTU1NzQKZW5kb2JqCgo1NSAwIG9iago8PC9UeXBlL0ZvbnRE ZXNjcmlwdG9yL0ZvbnROYW1lL0JBQUFBQStEZWphVnVTYW5zCi9GbGFncyA0Ci9Gb250QkJv eFstMTAyMCAtNDE1IDE2NzkgMTE2Nl0vSXRhbGljQW5nbGUgMAovQXNjZW50IDkyOAovRGVz Y2VudCAtMjM1Ci9DYXBIZWlnaHQgMTE2NgovU3RlbVYgODAKL0ZvbnRGaWxlMiA1MyAwIFI+ PgplbmRvYmoKCjU2IDAgb2JqCjw8L0xlbmd0aCA1MTgvRmlsdGVyL0ZsYXRlRGVjb2RlPj4K c3RyZWFtCnicXdTNjpswFAXgPU/BcroYga8NZKQIKZNMpCz6o2b6AAScDNIEECGLvH197nFb qYtEB2NfPt/EZNvD7jD0S/ZjHtujX9JzP3Szv433ufXpyV/6ITGSdn27xCv9bq/NlGRh7fFx W/z1MJzH9TrJfoZ7t2V+pE+bbjz5L0n2fe783A+X9OnX9hiuj/dp+vRXPyxpntR12vlzqPO1 mb41V5/pqudDF273y+M5LPk34f0x+VT02pDSjp2/TU3r52a4+GSd53W63u/rxA/df/fKFZec zu1HM4epJkzN88LWIYvmskC2zDruNFc6XjALcsk5L8gVxx3yilnHXzS7CnnD+XvkV2aDvGXe Iu80S478xvESec+8CtnkrA+bod/tkKP/DTn68VxDfwG/iX6tQ7/FXgz9JfyG/lJr0l9pHfod /IZ+B7+hX7Rm9GPvhn5RD/0OZqFfsF+hX/Asob/CfoV+i/pCv0VPJPo10+9QX+i3G2T6C+xF 6C+xR4l+2IT+QuvQb+EX+q0a6Ldqpr/AuKW/fEWO/ddx+h3qWPodnmvj/wc2G/3Yl41+9MHS 7/Ab2ehHzy39hdahX3Rt7D/2aGP/4bSx/+qJ/dfnxv7D7OL/RzP9Ffrv6Lf4fR38khv0ytEv PFDx5OBo4ez/ObJpe5/ncFz1BaHnFCe0H/zfd8g0Tliln98CiwqcCmVuZHN0cmVhbQplbmRv YmoKCjU3IDAgb2JqCjw8L1R5cGUvRm9udC9TdWJ0eXBlL1RydWVUeXBlL0Jhc2VGb250L0JB QUFBQStEZWphVnVTYW5zCi9GaXJzdENoYXIgMAovTGFzdENoYXIgNjgKL1dpZHRoc1s2MDAg NjM0IDYxNSA1NDkgNjMzIDQxMSAyNzcgMzkyIDU5MSA3NzQgNjExIDYxMiAyNzcgMzE3IDM1 MiA2MzMKNTIwIDg2MiA2MzMgNjM0IDczMSA1OTEgNjM2IDYzNCA5NzQgODE3IDc4NyA2ODQg MzkwIDM5MCAzMTcgNjk4CjMxNyAzNjAgNTkxIDYzNiA2MzYgNjM0IDc0OCAzMzYgNjEwIDYz NCAyOTQgNjAzIDYzNiA2MzYgNjM2IDY4NAo1NzkgNTc1IDc1MSA2ODYgNTI0IDYzNCA1NTcg NjMxIDk4OCA2OTQgNDAwIDc3MCA4MzcgNzc5IDUwMCA2NTUKNjM2IDYzNiA1MzAgMzE3IDMz NiBdCi9Gb250RGVzY3JpcHRvciA1NSAwIFIKL1RvVW5pY29kZSA1NiAwIFIKPj4KZW5kb2Jq Cgo1OCAwIG9iago8PC9MZW5ndGggNTkgMCBSL0ZpbHRlci9GbGF0ZURlY29kZS9MZW5ndGgx IDIyNTgwPj4Kc3RyZWFtCnic7XwLYFTllfD33XPvZHKTmcwkM3lCcpMYIDokGAjISyYkIQmE JCbDS4lmkpkkg8nMODMhokWx1rW+qtYWKWp5WXUrKoJbKViLlbaKWrWCbX20dYtru43Udalr Y7js+b57JzMJgSLi439kyJ3vcb7zPuc794BGQn1ekkzWESDOjl53cMncxlpCyIuE0NSO1REl cfru/8HxHwkRXJ3Brt5jAbKYEHEawmzv6lnTee7jztk4x31TT7fX7Zn0mqWEkNR63J/ejQvl qj8B59/A+TndvZEr3WbvZTh/COeX9gQ63PsKcwsJSTPivKzXfWXwDpgk4XwOzhW/u9drf79m Cc5XEjLXHAyEIxeT644T0tTD9oMhb/CSTe2DOL+VkIQHcY3ih/0k49DA5gKIkiHBmCgnJZvM KRZraprNnp5B/p/5oZ10Ku0kT5G/4Hgu2UoGIY8I+OnEVfa9nbrIAO63I+R14g3Uhd+94v1E wP1rxZcQhUCnknZyBY6KxPvpU2QPeRdPX0dvk2qlixk0J8RwfSQ9Sz+QZgozyXKxV5wr7hSv E3ciRJ/YKV5HduBzpvCqeK94tfiyeDVZzjij9eyX8UE20oW0kGwUNtIqmkWrhJfIM5z/eXQj nS29IL1ADpFDtAkht5N+Qaa/pB/SUrqc7sRTH5GPaB7OyoVyeoS+hxxvIK/CckkmG8ntNBVn T5GXkO93yYckLCJWcrt0SDhPOkSeJe+Q3+A6IauogM/xMFk6hJ8PyENkFWrmHSpIhwy2hHyx U/iYDNDrhQeEj2khFfCTSvNQm5fCS2Kb+EvxJtxF7aDLTYU8mI/PlQxCOkQ3IhfvGDrpGoRj n6uRzoDwrLAbZXyavI1yIXVhpXC1sJG8TR+le5BjQm6gj4ptCe1iDtlo2CguJ0eYbsirwkuo jyauj1vILYbzyUeigXwA9bRNfIhpjBRJz2AY5CcsNKSS9XRhwvUoCYEZ5Gpiw93nKZGe0T4I ZTSMJ+vFifB95F0Q1kb1RteQl4SZ0E7u5Z+76G5yF9lNwgRRwIQnEwySCAIlDsWyQyiq8+xw XrRceW5F/mTHqKliSVB2kKYdpjXK7uPHm5aLOdKKHdK4HVBk3CEWFb5zss13JjsWNS1XdtNJ 1VU62uq2KlxsWY5DNsNlXK+u4nuM6g6pCP/Ute1QOrqVmy03F8662eKdNZl5urpe7JTuxwyX QPKeIiKdgGow0Ak/okbpJkEkpfsPDpxPLAcHDg5MSbPmW4vyrfmdIhkKQ87Qu+r6BPPHH4YM xTyYyHuESCJ6jUwmOe3wqCg8Kt2WQB5NNGYasoFkSjTJcnD/wP4hRFg6UHaUo8y3ShynNf8D 6lK30Uuon7o+GaAy/LyWGmo/KVc/4rhfxSCaSa9HPq1PkofQv0iaaNEwMST5r9JudQO9Xl2L sDLysQr5SCBTnWaDsI/cJtILIJ1cIBktBxftkF2Ldphdlyz/MZGI84IVAxzL0YGyKXSnM5G2 pnFurPmy1KZa1WtVi3RIffuTBnEnj+Plx/8kTUQfTSIZZLIzzbAllWxJPpC6ITNxfko9zLfP zkSuGEbL4aMDliNTfjQjbV5WTRrQVlpgsNvSp5ZNL582ARRitZB8/hSe6V+7tr/va1/ro/m0 Wt2r/kH9vfpjWgNXP7xly8PslxL1OXUAP8/RC6gNPxdo+t6Ocq4x2FDeW502oyQA7CLbEg0S FQ1GaiKWJGSl7OB+60yUb87A4YyZU5xtWZAlZklZhtkJdVCXcDG0GpYnXJYQgC7pWlgtrjZc nfBNuEG8UbolYRN8V1pvuCfhx5CdLqRLs4xVQo200LhUaDV2CW2CV+oXgsJq6WvGG4VvSrcY vy3cLd1jtLdyBdL8RBTGmr8dM9S9dPOxt4UGtUFdpG402IYep/ccU49tpa+pk3V9yiKLvhxS 6cwn9t/SxBeNB6VNyfQ3mZtSDyRvGJdjF4x2E6kSTCmzx6FIRwf2W1Nnaho+bFGPHrEcmTnl idLx88YLqGV7fi5FJc+wmmlhVMvStAmFBYYESR7aa7r31iveX3st2vUV9TG6iBZQI52r3tHf 1v11izC185prKqvUgSnn03KagflplvqzuzrX9vlj+k5FXjNIuTPThIlSfjP1FfsByy4zFUyk xmoypViY+dG1mcYPHz08YJ05E3lry1qXxXiz5pdbp02YWEKRGzvzMfuFyGu6lKpuMFnstSXB depG2nnRj/w/e1744bGlAXrPnf7swomPfO/Y78S2+9tbj2h8/BDv8yeQjyLicxbn2FMTxQSi GBIyU95UXimEA7m7xqUlEFtqstFkqLWZUmvzckzjLRMsQ4t2pLjQ68czrx+aw9x0Jldk6Rzk dc7hgTLrTPygm1BnSt7EKRObJgYnrpt4x8THJia0Us4pY/pCWq6pE8d8ECeJuKdqb/CZAxiJ dEFDZ0BQNzibu4I47Z7/cFdkJzzQ3XvkT8eWCrWmcdn9lz+06dgbQu2ey//1Pi7fZW1BEo0x 8econ4wS3uc8N9FAsvKSyK8zXjZsMr9iVV7Me2HcpsID1g3JpDADMk2JpqS5eWCyzUYRB/Zj IJcxraNYh48OYQz+x5GPjsxMZZJOcdaXTpyrzM2fN3Gxsji/VWnN9yv+/GuUa/KDE29Vbs2/ T7kv/xHlkfyfKD/Jt5flTsmrzHXmteQ25XXktuXdkLsu767cO/K25m7O25m7I8/SGhfTc2kR GhddrmBC+bRz8qdGVYRaUURha/CKSy7y3kx96t21T1z36O9oCi147V++Ff7FkvCfI3gxm+jH 9QurFt/ZW3zjsese6Gx9YevPd49b0lhSQq3jxv+N23wzxolBbCNZZLYzJwUITX7T9krGBgvd lWrAXJhistagD1qyeXyUaWY9XBbzwJx1OeiBmMHtNgFZzuBBUs4sp3G9mXYLZmt6Dfog7VQ3 XvRvvT97gT4hbA9eor5fcmN/TuGE7d8Tij/ZvJV7ISUT8da8DXNPGrnIOc4i0WTjFgPdRLaZ DbtkAd0vIVEymapTkmyWtxbtMA1n3CTme3MGhubs35+q2ahsCNNkGU7Q66R1CeuMAsYw6m48 1fJwoRWVOX0q3PaL+jm0TP2VunHnzhdfN9j+OqOq4TgZ2gxtlDQ8+RjjiflNOfpNFpnhzCYv 0oOi+UXTQXmLVdySge6SnTDfRGyzUUX7y6IJmmWPvx+Z8sRlOdfm8AjVYpPbNC6FoGeX193V uP7BB9e77na6Hlmmvqr+kC6lpcsfFueqb5VNeey++x4rO199My+PzqB2/MzI02I1B/V0v/R9 1FOvM9ssGVNgi5XuMm4hsjEpUUgUicmSanbZtOBctMPiumTRDit7pHJ9mbm+9sf0tX/g6BwW qExdmfPIvDRWWkKKJcXaJDRBk71NaIPEVsJyDX5s6bNxgD7J1GgVptIr1NsvXLlbfeng4zt3 St9Xf3acqEUNM46Txw/SN7HiuTCa52AA9WhFPaZbzYmGBAL7kr5jPpC4K0E2mIjRksr4TWPJ xHh83wUr9g+U8XA7PISXDQs0OjrFZcBAaWvpzd9l+a1619rUcydBabr98R8cGxLbdvu9IDG6 5Ph8YQDvbSBpTwp4aQuEQul+Jrbl6ItTsCAuFMy/P/Zfb0uH/tHL8sRKjAkz+qCFjCMXOHMy tpBXzNYt0ivGDeYDdBvYULmCM3t+0uzxWlQwJgdYVrYcRpM35rblaklZjwFmaWQV+A2teQE8 wMqKhTv7XlY/ovLLkV1bw2vWhENr1sBTwvJ/DGztWEnrKOCnrnXo+Yc2b36I/fIchjoUUpE3 VlcVYxXyNtklbhMkiteGxWgZmsM1hkxNcSY2JbYlBhPXJYqx2mM7i0H2K7Z9stlgU9/idtmK 75J/wNo7k9ziLCbjRUnMoOmZ4yVJLJIyifmOlKTtqfeK5DEh0y4RszHdTnPMkKUFIJoKuKmG DrKUwGsCrQZjvoSlY4LF/D7m/gSL9P6KAuqcIGScm35uBgAxZ0iZGRkZmQWkIKMgs5yUZ5Rn zicLpQUZCzJTmKcxjmnsVuApz24zJAgNwp2fPCvk1y24re/i16/6unoVTabF1xygOeq7NIe+ M/+aKt+6xfW09rzJA69d9drjXMZVGMPt6HsTyVtOpylZMCdNz83L5W+pkihPz8vLLZKTcvNE O49v24v2g5mbrOKmIozvSblyUl5OAmnJaTbbEpoKFk9i98HBgcPokfxC0CL+7yziUzNGCs2/ VhTsNCZR2uq8NDExUU5MSkpOMiWmSIXZydmmbHNmisNYklgilySVJJeYipWZxtmJs+XZSbOS Z5kWJS6UFyYtTK419Sf3m/YY9yTukfck7UneYyoyG8wJZqM50SybkmaY5hVfVqyFZzTR5FEx 3W4TMUgnWrWkPG1CKcYPS3qYdjLCr1/W2bHIPY+mPa1+rA4G3l97+TsR36q63nl/23d0qOMN zD8fTJkytfy8kqTEws0P73qisJBapk2bNXNKqcmYu/UHO7fn6jGt+2Puk2SbwMrD4foZXVBq k4LSOkl3Qe5+Bts/BrQcdhPa5Aj63SRS7zyP2LenJa6XHzdtNyjr8x4ftz1tR+G9hg3F6WlZ GIlZ6RMs6ZBny1MSc4stQ4ex2D84wC9fTf+Hh3QTYMlGc+lowc+j5VOj4RfzJNhz933qdnVP +L0reg51fW/bg9s2br3zWzdf0/r0paE/9uDrZv7NUDTxme/+/r2iIlo8fcaqjk7fx5e0Lr30 3GKarSg/3Xf9gzwmV2L9NhXzi0BMWGsqNN8EJpIPYCoikJTwqEThtkSaLJNsg1FMtpktQwfn 7Ge5luW2gxixqbrPiO9rUYI1LuRjXi3kQSt8qF5MH3DS7YcOqd85tkrccOx2eHSoWf2L+gG1 0IW89yI0ruw6umzCZSlz/k7yjLw18Fzx7HNiHQl8o3oCrUSJMdakwGqvVx0f37YY1cbIEF8i ndKd5D2QyatSH5Gla8lyqZlsl3rxeyfZLjxPiHEp+aHUyeebAeNLfJosh9dIDnyI+2hoaQ9Z KTyNZ+4kW8Vn8Y1bG9/EtIY/E4gL3/g3kN9TJ11P36BvCAuFgzAOOmGHKIsLxEvF7eLrUq10 1JBqWG34kc5lJikmgt4BsRAnk0p6X8jHbxHXsvG+icqyYVguikXCBn0sINw2fQyI4UF9jEmU PKmPJZJMfqmPDSSFvKaPjXh//bs+TsKi97/1sSn1PmrRx2YyLe0RfWwhSWnv6GMrEdMGkCIV E5GhKWkf6GNK0u2KPhaI0T5dHwNR7BfqYxHHl+pjiWTar9HHBpJrX6+PjaTA/oQ+TiKz7K/r Y1PRrHSLPjaT7tkL9bGFpM/eqY+txDj7ucpAcE3I19UdUSZ1FCtlmACU9jXKfF8kHAl53b0O pc7fUaJU9PQozQwqrDR7w97Qaq+nRD7h6HR21OVe3bsq4O9S5ru7T3KwyrvKvbRP6eh2+7u8 YcUd8io+vxLsa+/xdSieQK/b54/CtLj94fmBHk/cVBlrvtQbCvsCfqWsZOr52h7bmhwH2hnw IxMRlKk7EgnOKi314PrqvpJwoC/U4e0MhLq8JX5vZAEHYywxoYb1oEwKe71Ku7cn0F9copyG ACVKTc+aYHdY8fUGA6GI16N0hgK9SkXIu1pnJUqDK6xPU1g8GVmOUUfx3IrG2rDW5cmn/JFP tM9pm1YZRdkXlt1KJOT2eHvdocuVQOdoLLLc5A31+sLcBr6w0u0NeZFWV8jtR9EdKDuKhcdQ Y6hnhxIJKG7/GiWIVsMDgfYIasyHKnArHci0jJCRbm9UTx0dgd4ggjOASDdiRy17/WHUXgFX SUExIvMo7nA40OFzIz3ZE+jo6/X6I+4I46fT14NGmsQw8gNKS6Az0o/qLyjmnIS8wVDA09fh 5Wg8PhTM194X8TIe5BEHHGjmjp4+D+Ok3xfpDvRFkJlen06IUQhpqkS0fWGEZ+I4lF4vk1rm DhLudsTRcDCapYGQEvaiHRDah6zq4o8izZhDtEGm6IisqY4T6u9GxzrhADNDZ1/IjwS9/KAn oIQDDiXc177K2xFhK0y+zkAPOhsTqCPg9/iYHOFZsuxCdO72wGovl0DzIs7AsBP4AxE0Q1hb ZVYJxjxA21PC3e6eHrndq2sN2cAocY+QM+BHvwgpvYGQd0yxlciaoLfTjYRKNKZG7va612C0 4HGPr9PHHM3dE0HXwwEidXs8XHJNdSxA3SHkq6/HHZIZIY837Ovycza6tFjFQ8xD3R2IJMxO RPkJj6bEUMpIgCvM3TM2Av1MlI8YNmTP37NG8cW5uczECXnZX8ZwWDYIM0Uyu0TDw4s+5w3x Q/2BkCesFAzHYQGjHd2QC1jYFnCVoWXq9Xhp92IkMax9aAOmk9UB3zBj3isjGDGKOxjE8HK3 93jZhiY7YmYDOWaUbndE6XaHEaPXP0InzOti3u1R+vweneEYqzJnTpPwVFYNY/LGqOZmY0Zy Kz0se2CsRAGD7o7L3V0oGMahPyAzV/10TjWCFCYsZNHb08mYqq1WFjQ2uJSWxgWuZRXN1Upd i9LU3Li0rqq6SimoaMF5gUNZVueqbVziUhCiuaLBtUJpXKBUNKxQFtU1VDmU6uVNzdUtLXJj s1K3uKm+rhrX6hoq65dU1TXUKPPxXEOjS6mvW1znQqSuRn5UR1VX3cKQLa5urqzFacX8uvo6 1wqHvKDO1YA4kblmpUJpqmh21VUuqa9oVpqWNDc1tlQjjipE21DXsKAZqVQvrkYhEFFlY9OK 5rqaWpcDD7lw0SG7miuqqhdXNC9yKIisEUVuVjhICXKJOJTqpexwS21Ffb0yv87V4mqurljM YJl2ahoaF1fLCxqXNFRVuOoaG5T51ShKxfz6ao03FKWyvqJusUOpqlhcUcPEiRJhYJo4MXXI 7EBNdUN1c0W9Q2lpqq6sYwPUY11zdaWLQ6LuURP1nN3KxoaW6ouW4ALCRUk45GW11ZwEClCB fyo5Z1z8BhSX4XE1NruGWVlW11LtUCqa61qYRRY0NyK7zJ6NC7gHLEF9MuM16PwyG7G1E70D odhpXcCq6op6RNjC2MAFeQQself1lR3eYIT5th7cWmrkaVTLnQ7utVoSQBeu8WPgamt8iNcS Rha/dbTsFruw2XXs0FIvTx/o3XgTaanXs9qLGTDMUkkgJAdYMun3hXmk4xXYG9DuPCXs7kFi eIpFEYfCXOnuwWPhYTZHBJQcvQyDIR8e6Q/5IphMFHcfroZ8V+nXcEi/prgESkwCRiWWHDT+ Q95wEG8p32pvz5oShA2xu4xz4vNjrdari87V1xGZFS0VIkoXR+4JRGSs6EoUWeYV12cunU63 tD07dZCs1UHKmdRBcqwOUs6wDpJPrIP0JN/BMYWjd8YYBWqsYJE/S62kRGsl+atRK8maHT63 WknWAvYz1UryWayV5FitpJxhrSSPqAvOoFaST1YrKadfK8lxtVJ8+I4ol/A+xyRxtsolWS+X lM9ULskj2OXvjWe7ZJL9AeUzl0zyWS2ZZL1kUs68ZJJHl0zKmZRM8pglk/JpSibZVbF08cJG xnZF7RlVR3JM8s9SHcnR6kj5LNWRHF8dKWdUHcljVkfKZ6mOmLOOCJThwkc+aeGjfIrCRz51 4aOcRuEj88JnZO3wzwuaSBTeyYsGuQS/Sk7ZuSrt913uK/VhBrmyJNgdLNXT2KhGGqkkARIk a0iI+EgX6SYRopBJpIMU43cZmYKfqThqRwiFzEeYCAnjb4h4iZv0Egeu1hE/wpfgqIL04Ech zcO4wnzmxW8vnlmNTw9CyqdBdfowVRdSWo20VuEZP0IzPtx45tNRrMLRKjy3lPQhRAfCujk2 Lz/h5hIpiMWPzyDCtCNeH8IpeD6A1N18bzSeFo4ljBwFEN5zkl3ltPeXcq7DSCvAOSlD3qeS 80eci56afBKsnfyspomIbiemmQjKNYuU4sejw69G+BKEC+B3CGX18rMhrpUSxOHFMwvisEW1 FLXUif7A9pjmvdx6XuQuQPoRltnq7FiAYarBnTUI081P+nAvyPmOcGszDYT4CeYfDOvqUVoZ LUfMw/pGeNjJpJHxM5bsmvXcOIrX2om+LqPtzvwjn1b8nP2oHdveMZl9uCPzUYSvMC/r5bq+ HNcCaIF/xguTrInj6+XYYnHg4zx18z2vLlcXp+LXre7Q7a5ZS6Om+Zjmzw7OV4Bb38/PB/VY 0ygEEGtE9zGf7gVujkPTtKzjjHAuRvtTB4djfqhhj2Jg0Brvmi97eeRqvlcQ5yUF3HLsrId/ hzlfHXjGrcsn8yjoQA/t5VgifCeqn04c9eiRNGmYxxgFlmsY/xH0X837GcWYTthKkEeNByl0 8NNRbjxcggj3tXbcjfBdjYZ8CgoOPZo7kLM+jkXTST/3gW6edSK6Znr5WrxEURlCI7xS47aP 69ARZx027uX21Gwtx2WQMJ52nEQOx7CcpTyDKByzFg8abp+u1ZHWP7XUUc1p3AaHPTrC+Yp5 XUyifq6P3tOiEI2GTp61/bqE3jiKHv5kNBz8m2liFUJ0cHwaTNR+nfwO0TJb1EIdnLaHc+zT OZ3Fo9Olc+dGjAGeGWI2iM9FMQ2cmAn8CB/RoyE8AjYaKzGNxeeA+HMKl9nNOZd5bh7pa5o2 tLvEfQp7Bvgtp+i27+XfsfxxOraI8JuI3ZxuXaKSEZo61VmmkzX63aJRZzrv5Dx6dE/q4X4a Gl7ROGU69cTZPN7rojeom9+IPp4zevhMHpbIwzll9vLHaaNrxL2qUYrmUDf3Hs13ozRG6yf8 T2WKcinrEsQ8zM1tdPocjKQzWh9j8ebQ7d3Dz/lOks3lYeuEeJ5187wSwxtdCQ97ZDReRt8e Xj3PebkUUUr9XCoPP18wxn1YMCz36BMy7kVv24I4L9Nipn7U/dLO4z0Qx2ufHgdRP1mNu74x NOYlV3I9+/VIDuJHu73cPKN6h0/E213jOboijxkp3TzDK/w7rPPo5Z50Mj+J5rqxcreH3wR+ bvd4fY2lVTlOc/E2PNNYDeuVt6JLEo22aCSxyqFnuPYI6SdGYgxyj74cn126xbT7kHmVPJxV P89MdXKp2vUYiej3YeewpmpJNafTSBpwxug04sxFlmEd2cz36nBNwTquGXeW4qwKV6u4XSr4 Dtsv4NG4DMcMYyNZwnFpOJrxyXCvwBWGW+FzNluE8A2Ii52tJss5jWrE1oKcNeKY4V6Mq/X4 Xa3DsROVuLIE52xcQ1gVqtFrwFMuHjvsHONF49SF6zGqI7mq4xSjnC3GWTPir9V3KxB3HcfH +Hfw+oiNG3Q+Nc01c+xMRwwzw1mJHNXzGVtdgt9NCNfC9VnBZda4beAyLMB9TZZqzoFmCY2j SvxuQtoMogb5cnEtMEouHdLB7cjkqeLnGdVFHErjrFG3MhvHsJToutT4YPpfOky5hctfjx+F y+/CFRe3TQXij+KN+k4Nx8D4lrk2lnD5KrgeGjmF+RyOaZHps37Y45rjrFLJ9cXsxjiv4pQq uEZaxpQkii3eOmN5hzxMoYbLV801Vc+hW1CP1QhfN7yi+WMdl7VS17WGU/N7zSfq47RbyWVk lr0IqVbrPlXBdTdSCmanZZz/mBSaBSr0Z2WczmLWb9CtG+XHxSm7xtDKMh6L1Ryqgtu6ZThG FvD4XaxzvmTYw2I5YInun43DnI3UbzSOonCnkzs0XFHaIy1Yxf2pXuewZVgbGoR8Crxa7qrG e62Dv+dEhvP2yJs7vmqMVaPxdacjLtfGVwJaFq7hsL2j4GKr2tuSdmfF3nXia7ex3rCjb8da LR+temPVh5a7tXei+KrXw+tzrQYMD1clAV4HBoYrk36+G7vTg3rvJDDiPY9RdvO73zFMK3oX xXBpdaWbVwuMWngMbZ78hpJPeDMM8vteo9LPxxG9MmHy9emwbP2qUW/D0f7PiTZQxrRBVJax Kod4/Ye4vYP6u5SPa5jVkyU63hCJvpfFdMI0oPXVekdZPeZ9DNssMrqrwHTQFce5h+taJlqP jtGUeb6K9ri+/K7T2e7afpX6QfKIftDoyuvz6wfJY/aDlC+4HySfVj9oZCXfEcdTrNcRhTy9 DupYHRb5S+srKSf0leT/31eK6yvFOgz/Z/aV5BE37JfXV5LHeFv7KvSV5DH7SjGJvpi+knyK fsEX01eSyaftK8X+1uls9pVi8Tayr3Sy2/fk3SXt/VyrJL5q3SWZjOwujd3d+GK6S/IptKvE afCr3WWSuY+dWM188V0m+SvcZZJHdZli77pfZJdJ/qddJuUL6zLJn6LLpHxuXSaZ62ApYl3I udW0XYH7X1zvSB7T5l9W70g+oXekfGm9I/mkvaNYD+jz7x3Jn6J3dCq8n2/vKJpZT36jnNjx kc+g4xPfpTmbHR/5M3V8TnxnO7OOjxzX8TlV3+FsdGgiJ+B3klinQeZ02KzkM/ybq1Kul8vx t5Tz5uFVUwmvX4O4NrIaO/W/SGP/fTP/OX4NuZiM8VPxDWEdnUBUArSIWPF5Ds1HniV6DhnE WSFJx2eBvlbA4dgYqML388hefOYiJaDj+e44koXPHJKLz2y+ksWfmfyZwZ/p/GmnNmJGrHY+ Y2OgaXycyp8p1EzW4n4Kn7ExUBNNJrfimomvmcg+ItJkmoQ5Q+I7QNn/V1GkSVQmE3CN7QA+ nbjGVoAm8pNG/kwgyfzJThh23l0iVaRRA5dL4k+RQwGXSOArlD+J8/haOH4hqCoMfeKQhlT4 xAGDKvzj4xrpH2vh4xr4n0H4SIW/q3BUhf/eCx+q8F8qfKDC33LhiArvD8jS+yoMyDDgFP/6 n7L01zL4Txn+Mgh/vjNd+rMK7w3CfwzCuzh5V4XDKvxJhX9X4R0V/qjCH1T4/SC8/Vam9LYH 3sqENzfnSm964I3fFUlvDMLviuC3rxZJvx2E37xuk36TDq8fskiv2+CQBQ6+liQdVOC1JPg1 Qvx6EF5F/K8WwSvfSZZeKYSXf2WTXp4Av3opVfqVDV5KhRdx+8Xx8IINDjy/VzqgwvPPtUrP 74Xn14nPOY//skh6rhWec4q/LIJfqPBzD+y/wyLtV+HZcfAzFZ5RYd9PZ0n7BuGnj+RIP50F T/8kW3q6DH7ylFX6STY8tTdFesoKe/ckS3tTYE8y/BiJ/ViF3So8aYcfpcK/qfCECrtU2JkB j2fBjnR4DPE8NgiP4tejg/AIwj+SA9vxa/taeFiFH06Af1XhIRUeVOEBFX4gw/0qbNtqlrap sNUMW53iFlTUlkHYjEc258Im/No0CN9H4b8/Du5T4d579kr3qnDPxlbpnr1wzzpx4+1F0sZW 2OgUv6fCBvSODSrcXQLr8eD6XOdx+C4e/a4C30mGu3DprkXwbfz6tgp3oh7uTIc7LHB7EXxL hdtUuFWFW1S4WYWbVPjmjUXSN1W4sQj+RYUbVPhGGVy/Hr6uwnUqrMuCa2W4RoW1KnxNhasH 4apBWKNC/+oHpH4VVj8AfZEcqW8QIjkQHoTQWrhChWDAIQUc4B+E3kHoGYTLVVilgk+F7o5k qbsMulToLAOvR5a8Knhk8DjFjnZZ6kiGdhncbXbJvR7aqFVqs8NlMlyqQqsKK3G+UoVLLs6R LlHhYpxdnAMrVFg+CMtUWIpz5/GlKixRwZULLTZovihLah6Ei3DjoixoasySmgahscEqNWZB gxUW50L9IptUb4dFC63SIhssrDNLC61QZ4baQahZYJNq7LDABtWDUFVplqpSoNIM8yuKpPmD UIE4K4rAOS9Fcqow70KzNC8FLjTD3DkmaW46zDHBbA/MUmGmDS5QYUYaTC/PlqYXQfk0m1Se DeX7xGmySZpmg2nrxKllydJUG0x1imXJcP6UB6TzVZiC+Kc8AKXJUJIGkx2zpMmD4LAXSY5Z cJ4HzvVAsQqT7DAxwypNzIUJChTlwjmFqIDzzsmFQisUEJNUMAj5KZDvFBUb5MmQmwvjx2VJ 44tgXEqaNC4Lxu3GnHGnmGOC7KxFUvZayEKiWYsgU4UMK6QjtfRBsOOavQhsHkizQqoKVpxb VbB4IMVskVLSIGWfaLaAeZ1owh3TICSXQRKKlpQOSetE2QSyU0xUwahCggoGSZYMKkgySE5R HATwgICnBBWzl0miViAmoLup54bb6Hn/d/yQL5uBz/FnPPlf96owrwplbmRzdHJlYW0KZW5k b2JqCgo1OSAwIG9iago5MDk2CmVuZG9iagoKNjAgMCBvYmoKPDwvVHlwZS9Gb250RGVzY3Jp cHRvci9Gb250TmFtZS9FQUFBQUErRGVqYVZ1U2Fucy1Cb2xkCi9GbGFncyA0Ci9Gb250QkJv eFstMTA2OSAtNDE1IDE5NzQgMTE3NF0vSXRhbGljQW5nbGUgMAovQXNjZW50IDkyOAovRGVz Y2VudCAtMjM1Ci9DYXBIZWlnaHQgMTE3NAovU3RlbVYgODAKL0ZvbnRGaWxlMiA1OCAwIFI+ PgplbmRvYmoKCjYxIDAgb2JqCjw8L0xlbmd0aCAzMjgvRmlsdGVyL0ZsYXRlRGVjb2RlPj4K c3RyZWFtCnicXZLPboMwDMbvPEWO3aEigZauEkJqaZE47I/G9gA0MR3SCFGgB95+sd1t0g6g nx1/zic7cVmfatvP8asfdQOz6HprPEzjzWsQF7j2NlKJML2e7xH99dC6KA7aZplmGGrbjXke xW/hbJr9IlYHM17gIYpfvAHf26tYfZRNiJubc18wgJ2FjIpCGOhCn6fWPbcDxKRa1yYc9/Oy DpK/gvfFgUgoVmxFjwYm12rwrb1ClEtZiLyqigis+XeWpCy5dPqz9aFUhVIpU1UEToiTM3JK vN0gb4izCnnLfETOmLfIO2bSPnIfibzn/An5wEx3HYl3pC05nyGfmFPkM9eQh4o5Cawk90c/ iv1nWKPYf7ZHZv8p1bP/HfZUd/8lMvtPKc/+0w0N7T4dHB/u92ctQt+8DyuhR0C7wC30Fn7f iRsdquj7BoF0oPwKZW5kc3RyZWFtCmVuZG9iagoKNjIgMCBvYmoKPDwvVHlwZS9Gb250L1N1 YnR5cGUvVHJ1ZVR5cGUvQmFzZUZvbnQvRUFBQUFBK0RlamFWdVNhbnMtQm9sZAovRmlyc3RD aGFyIDAKL0xhc3RDaGFyIDIzCi9XaWR0aHNbNjAwIDY5NSAzNzkgNjgyIDY4NyA2NjUgNjc4 IDcxMSAzNDggMTA0MSA2NzQgNzExIDQzNSA1OTIgNDc4IDQ5MwozNjUgNzE1IDM0MiA2OTUg NTk1IDM0MiA2OTUgNjk1IF0KL0ZvbnREZXNjcmlwdG9yIDYwIDAgUgovVG9Vbmljb2RlIDYx IDAgUgo+PgplbmRvYmoKCjYzIDAgb2JqCjw8L0xlbmd0aCA2NCAwIFIvRmlsdGVyL0ZsYXRl RGVjb2RlL0xlbmd0aDEgMjE1OTI+PgpzdHJlYW0KeJztfHtcnMXV/5l5nr2yC8ttL7CwD1lY CEu4hYSQYFjCJUYkN0iECIZl2YRNgIXdJQSvpDVG8W6rrdo20VqvVTckWhLtm1Stbb0l1tb3 VavGmrbalibtz6avl7C/M/M8XGJi377v7/fH7/P5ZR9m5szMmTNnzvnOmXk2hEho0A8GGAEB PL5eb3+RLUcCgFcASJJvW0S68zeRt5E+BqAu3tS/ufeS+/MTAbQmAFV0c8/wpsYnNn0BYDwM EP9Ct9/btbi6xAhgvxZlLOzGho2TX9Ng/VmsZ3f3Rrbfrv71YqyjPPD0BH3eX2T+RxZABptz Tq93e3+3PiJivRbrUp+317/6Z6/egPUuAPfr/cFw5C7IjwGsWMT6+0P+/u8Ofy8N6y0A+tPY RvBhHwOSalangqhSa7Q6fZzBGJ8A/999VAfBhilN9RDYRBdYAWJ/wPQRKycDsY9YPyvpH5F5 XEkAD8PjJACPwyF4jpzEUU/CAdgPPwcL1MJ34Er4JuwCNWzAlhtgLT4qbP8mscX2QxHch1i6 D15F3kvgajgIZmKNfQzXwE7hDRy1E4wwB6phNQThZnJxbBDa4H3x61AOF0Mf9JORWEvsltgd sQfgB3BA+HnsNMRBGvjweTX2F9V/xH4D83DEnXA3vE/u0D0FHpxlBDm/CyG4R2gXSWxz7DPU IAuGUAcRGuFVcpi6Ubof/kCs5EqhBqV8PxaNvYBcdmiHbrgHDpIFZDnNUrXFGmOvghnn2I5S 74YxeBqfcfgxvE0MqpOxB2InwQYFsALXsx9eI4eFydM7JquYodFKc6ECe4Lwb/AzOEqc5Cc0 qDKoSlUe1eWxX0EKlMA61PYhHPl78g96NT7XCC+K9bFlEI92uZ1ZG34KH5A0UkRWkfV0Lg3S 7wkh0OKMJfh0QQDt/W2U/h5xk6epgR4Rvi8+Jn6uzpg8FotHj7jgXvgu/IQYcaUSCZOvkTfJ h7SGbqT30t8K3xQfEX+p8eKqL4NeuBkeg3+QJLKIrCGXkm5yJdlFbid3k1fJUfIRrabNdCs9 IXQLA8KPxWX4NIlh8euq61Q3qj+abJl8YfL1yX/ESmPXwRrEww7U/k74Hq7sAByBt/B5H35L VCSOxOMjkSyyjlyBz9XkZnI/eZg8QvbjLEfJb8nH5G/k7+RzCvioaTrNonPwcdIQHaLfpN+h R/A5Sv9MPxUswhzBLSwQKoVWIYha7RJuw+cp4QMxTTwixtDOpaq7VLtVD6seUz2nOqk2aL6m Be0rX3z/dP7p9yZh8vrJuybHJvfHPoBU9GEaWsEBlai9F58t6O+7EHFPwhvEgLZLI/lkKbkY LbORbCEDZDta8lpyD/kB1/0J8ixa6d/JCdTZSO1c50K6gC6jq/C5jPrpAL2N3kH30zfpZ4JG iBMShFQhX1gutAt+ISIMC3cJUeEV4V3ht8Ip4Qt8YqJedIhzRJfoFpeLG8VB8XviH8Q/qNpU L6t+p9are9XXqcfVf9Us1CzVrNas0bRrbtU8rfmVtgPR+Tw8BT+avefJMWGHUCc8BbfQ+aKN vkZfQzxvhC6hkSJS6cPkenoV2U+zVdvVS+gSshJOii609Yt0Nz1FlwiNpIE0wRZaIktTp4iP YlEpPg8T4rO4ttdQ8na1gVxNT6gNMEaAVuCcPxWKRbfwMrwtvE804n3wjqgnFjJBHxJWIwp+ LC5VtUCW8B14QhggV8FTtA4j9ufamxDHK8mjGBeaSSn5TyEGAl2JKCoXPoSvw1b6HzCB+/h6 +BbpEjfDLTCfXAl/gAdxV8xV9anz1ankFzQgjtJksh+o+AiuroJkE0GVAteSduEe9Qn6FgzC EVEP7wk/RO2P0CeERvGkai3pxh1wFVwHA7EdMKxqEX9JNoNA1kOOeAyj25VCqZiF5TUYVdow pj2Nu/sgxoFqoRFbrIicixEX6zBC3IPPtzFOiIigAO7xSzCKvQb71c10HDar4glGHQDx5cm1 sCH2INwd2wx9sTtgHsaDXbErUeLD8Du4FR4mOyevgH7IxJ3zHrlYVU+PqOpj8+gofYs20bvO 9C9aO4dY4Y/4PAH1sFT1DIyK/w5NUBW7KfZrRHceRti7oRMuguO4yr/gDBcKh2H+5Eq6N1Yv 9ON634c1sYdiDqKH7lgPrIJn4QcaFXg1bk91tadq6QWVSxZXLCpfUDa/tKS4qHBegTt/bl6u KyfbOSdLcmRm2NPTbFaLOTUlOSnRlBBvNMTpdVqNWiUKlEBBnbO+Q4q6OqKiy3nhhfNY3enF Bu+sho6ohE31Z/JEpQ7OJp3J6UHOTV/i9MicnmlOYpIqoXJegVTnlKKv1jqlcbJhTQvSN9c6 W6XoBKcbOX0bp41IZ2XhAKnO2l0rRUmHVBet39Y9WtdRi+L2xulrnDV+/bwC2KuPQzIOqajF 2b+XWJYSTlBL3eK9FLRGVCqa5qyti9qctUyDqJBT5+2Krl7TUlebnpXVOq8gSmp8zs4oOJdF E9ycBWr4NFF1TVTDp5ECbDVwo7S34PDoTeMm6OxwG7qcXd62lqjgbWVzJLpx3tqo5fLj1pkq Ck+qadk1uzddGK2zBiRWHR3dJUX3rGmZ3ZvF8tZWlIFjaU59x2g9Tn0TGrGhScLZ6M7WlijZ iVNKbCVsVfL6/M461tKxRYrqnMuc3aNbOtA1aaNRWDucNZaW5jkQOwZpddJoc4szK1qV7mz1 1tr3psDo2uF9No9kO7NnXsFeU6Js2L3xCQphMM4m/NN9nOLsjGpYO21ZwjRyrkBARCWfhJq0 OHFNi1jmXwSjvkXIhp9WgqOiXeiRQFRX0zFqWsza2fioKsfklEb/DogA58Sfz2zxKi3qHNPf gZEMJ9NQw/4pOup2R/PzGUQ0NehT1HEpry+YV7BtnDqd/SYJCzQfrEbbelsXF6H5s7KYg28c 90AnVqIja1rkugSd6WPgKXK3RmkH6zk81ZO6jvWMTPVMD+9wIpL388tvalTrmv5JMJmT67oX R4n5n3T75f6GJmfDmg0tUt1oh2LbhuYzanL/ouk+hYom17QI6VShaLrAexGUbdPMrNJiiIo5 +KPmoO4a12gRlbyFSPVRU8eFct6qz8r6FweNx06yUbyYGaaoGV3sPrO+5Iz6GeoZRgVUGA/B huYNo6P6M/oQavKEK5QCEQ/NLVlSTRTW4c7MwZ/x2OFFLLWmRz1oshrGgPiTm5TqGYzpCt2K H4bOeQX1GOhGR+udUv1ox6h3PDbS6ZRMztED9Dn63Gh/XccUcMZjB29Mj9bf1Iq26iaL5wEl /PKpArzNamDZfkqOqzXj9G5PMqjE4wLoNeJxAjatWnWcCs/ioa7DK14hWN2mU5WnK1eaPqls PF0JVUibvsCspDgrMSsxBzOCR9oXknD4C48KPgdJPMzerh7AuebgO0McdB8AY+ywJzc5tUwU MnX6PfqjeqpXURqn1aq0kkajbh8xEiONk4iEA3G1nlTkhXaDZCSScbWxw9hvFJe0Wt3tA6ZT 7namQPupShNXpqqyor2Ia0Pc8xPno0bzE52YP/Ac/ey5506rVQdPP0g3fFZP951uxIvjRbGP RLu4FM+9cpLhuUVn1OXbjGn5c435+RXGhanl6YvzV+S3G9vztxgD+R3Fo8br5t5jvjftEWPq g7ZH8562PZP3gu1I3i9T383T1pqJw+KwugvyyyrEioIV4oUF67Wt7k3agHubYZfhF4ZPjZ+6 E8vL4oloKsous5RmpVg3zg3OpXPtRfFV8bfG746Pxat2xz8ZfyJeiI+3C5Zx+qjHbL0zxW7X QF2uvtQuxM31mryQk5U9Ti/1mHI94DK5JFex60mXylVSwSzlyHSWFVccrqB7KkiFJcc6pyj7 kPqImjrUVWqqLllkOtU+MPHJhKl9wH2qfeKTytO/+x1UTVQdr5o4fTwxqaIIewewxJ8Kkphk qSgphnYy0A4DOWq1c45rQdnCheX8WVCW63LOUWtyl9L5pWYzHumpKWaL0yWoNfEUyfmljEmo 7Dqw5clnl4cvXLD17c1kft311wxnRK19R2+4/tHVJp1lzrN2S+cLwbbS3kD3/a6Mr6+rf2zn yh0rU+KNadk5+r55F7QOWAdubPB4LyrcfvLznRcsIu/m2U15jUUXdly66oIhhMcuhO/v0YNm eMWTrBLUyfRh07jpQ+EPySeFU8lqEfe4pyTOWDZsIt82HbUes8asoqRNiU8xJ9lVGqI2G/XG eEN8dpxn/sKyWBzBn7iVVmbKtLKFZVHrSSvtt+6xRq2HraJVoPNTzTkyJpOQ/yQLjBIchWMI +ZUWZlw3gu+TStm+A+6JShNHZdVEYgVJQmvWDHvM6kSdXqvX6AW1yZWojk8nCfqkdAJu4nbn 7yDtA4DARuymLlQMiwAuczFjpybuun/w3Y77Vpv0+/O3Xhh+SHR968m6/sbSq06H6XV9vdV3 vHL6WUR1A6I6E22SChnwnqfLAfZUuk5oV7Xr1sX5ha2qoM4fpzWBiZhobtJbqs9STqVpSpIW 20rs1UmNadX2NUlttrV2b1Jvmte+Xb099RQ9ZTXh23iC0WJZbe4w95sFsz3hNtMeEzWZxHS7 XgMMqzpyZ7JdjLN4jMw+utz8siju4zQH1vbluMpY6clg+HQQh3m+KVvjyc4vc2iqNKs0gsaW WVZudWNUaXc3nj6+0jTgdp8acDdOAENm1QSDZuXpgUrCkMkMSdoZMEPEwnAJiSaYXwqJKZos M0MeyXJxdAqXHSz4y4GPJ0+QlN/8Gl8nv/hIP7bTd9Ppt+kaw6L1N1z5CFlv+f5+4iACvrvl Tb43+alJevJgN7nzupruB1nUqop9JOxFSxaTtzxXiHNS5izWXaSrzV4/xz/nSt0tumuzH0x+ rOA5waizpFktxQ0Fb1pU6XQdpaZSore2adt0bfq2uDZDm3GLdotui35L3BbDFuN+1/7chFxX dm723IXZG/StcV2urryIM5I9kv0N/XcMd+R9q+DO4gf0jxi+n/tA3j7XT13mjPHYe56kzIoN 2twcg15Mk1ypYlxhRhqzut1hq7Ktsm20PWk7YlMn2By2oO19m+iw3WqjtmfoOkQBIJvJRDyE mvDNmQIxEUqYV1LMZaz0ZMYnlhFS2JbRk0Ez7Kka0V4Y50gjadk2T7K1zIbRZkyTnY+cP7JX HM0n+WmlbJQLPdxReriUVpWOlNJSEyEkG6TshDnvA6nCVwMKtpIppw40YtCZCK3kG4P59RP3 RIhFnokBdK0bER86bjrNcjn6KMEHt4snd16mU5VS4Eo0JZmSTYJ6jlFKB12eJp2o5mGWmYLV rHhnOsxxGg3aufp0kper06vdYjo4TBlsY7lNuA3lDPcY7jL3jh072C4j7aGB9uRyjhkW0HLx XbwM45a88zTypkux4Ca0ZGJQ4yGwaizhhiuu3L4g5xsv3r2qelH+7U1X/XhDYtQQDly5xWwu Sr/20LfWB1686shb5AL71pC/9gKnNad0xY6Vy4fzHO4Lr9hsXdu2ttxpz0jWZ8+vvrJtw+5L fsiQVozvegfxfNTAKo9RRTPxhQj4i5FunIb3SSIRxwn5kVoitEggAtJPEfl4xF7t03ezU7m9 Eg2N5+Dx9t+beNypmjqWF2SlZiXS5MkMcXQyXWV8/PHP/hebczWiewLRnQavepbrDMRhr0mu sTQlN1k6kjss99J7hXuMD5geSDNojTb9FhoQtqgGDf3GEeODhqd0T+ufMhjMhusMH1Ihfs7G hGDCNQlCAmGQXFEMHlgNHfhaehvsweB4EnSQkBCHS0yyx2msGCTsCSQhO35OOmqRHed2EAKI nhX21OwjGsJCAtWUpJe9wFc1MIFZSLmMHQDCbj8ToU8U+CB6EiuKTO3H8YcdVujTgamgUJbE HDntR+ZloXJvxokn3p78R+jjGx7/jeNJ2zUbrn/0gWu33EJ2Wn50hGQQ/Q8J3fHkfelbe55/ 483nvqacMOzbzhTYewDMiHtjqqUsR1wg1AkHjaIwHjvmybbYyizaRENiiqAikIAHS0qc3pCj 42eKjhzWEd1KM9syFnammE+aab95jzlqjplFM01RDpTUsw6U1OWrZQu4+R1nwP0JO1LYeTJR lVgxc6LEq+M1OfFqQzoxahOUk4ThW74CcTDLhwiagR0i+68+vO2Jhv2DW1ffXIkXor/d0f7A d05vpPftuqLplqtOP4MbtxZPkFxEhhFs8BNPe5JGbzMsV1+oXa9u1W5WB7TaMtPipMXmBdY6 U0NSg7nO2qZq0601tSe1m9dae1W9ui5Tb1Kvucs6RFJ1apXxUqFZ1ay/1NAj+FV+fY9Bb7GL mkR7XFxKtoatPTk7p6xYQ0Bj0kh4GJS8n07SWbuNHRdIx2eDB1kcUIXKlaSxqIJ2cU/gMdF+ qr2dGQWxgKcCu6rg5d+ja1I16TpVnTqRtLcmm8rRCCBvYEhOkbc7s0btAzf89B1ivuJPN74/ OXFgbNd1Y/t27hqjyST3lm2TH5x+9U9fI5nE+MrLr7z+05dfQt8kYywdUb0BFtjnyUzRkQRb ka3Y5rH12+41fMf4iFGbZswzRm2HbaKNqZ+X5ijL0BoFQ4JdT1KpOyVZFNSg351CUmLJHtGS I4JA7yDc//tKFpVxHOjtjrLbcK7vW23PkoOQBaeIHm/deJ9wu3GH487GSDrRzrZ3JeKiagKR wGGQYkpU6zRqLV70TLqkdEhUIxgQC/k7dhA3GiaEV+EF8xeU8fiGu4JtitT5qc7Esd27k9O+ vu3itvRFpWtrjxwR7rlpYGtZ/SVJ39XXd3Te9MUmNPr1GDAQLPxd4SpP+yrdbbo9uqjusO59 3UmdBnQOXb9uRLdbaTqmi+n0Dh3uao1IBZ1auJqAWqUW9WpNjgrE3eIeMSoeFo+J6sPiSZGC KIlHsSaKK7VTmA9VnuYhrGqCn/kssVM/NJC8YH6qgLi+fv/+/eKfjhz5PFV0ff42OgaWTa4R /oiozYR8OOnpiIvDYyMuJ+XiuLoUtS7DllEQ50opcFbELUy5KK4+Zb2mJa477jP931PjC50F uUudS3Mvzr2tYE+BZmHWwrlVBfVx9Vl1c5uzmucGNL4s39yOgpGCt3M/yvqL80RuosWsTh2n e/fn2ZM1POaZJAzhLOKNwGHcv+xGdJWnWmW3J+jr5tgNenPq/Jz5+hyr9aiFmCweS4dlxCJa IgkkB+Y4sg8lHEl4PyGWIDoSqhJWYRy1uQsiWWVoCvdKdniyKzuejiy4n0KrTLD7evtxVrI3 Hbwytg9Y2DHFb925iHI8x1jwsyyYnygfW7NRv+nJuNKayFXXW+PJtug7J/tev/nZyx/0v7Pn 3/5494NXXfnw45dvf7glbU1OadeG8uiNpPLdbxNy07dHvtjyn0e2Pybkv3740CvPv/g8IrSX HKXdwsv4Tuc4AAJp8sTr1K8wO1AYNFzyEPfjBBThvkwuY1EINyBq0ntnd+DOOwPdd9LXAt/8 ZgBphFbsC/KSGKSXIr4yPQlkAdA0FTvebOK+y9kN4ni76fdQ1IiiBDzMRDFMXrr9duDfS9DX //zHU7f9bWNC5d+16Vr+Lef9H+bmT33jGfticg2+eb6BpE75Nz4+TrN0ciXUzHwx+qV//jKp sUn1M3hADMNFmHZhahABqth31uKHUIz0aqW9FtuSyc/geqSX0VehVwzHvkAZC2EH6SR/prcL LwoviiB+Q2VU3a02q7sxyNVrOpVZTbAIDcY+FOkiWIbyDfrTaAnWWi+sBPaGzj6TPBf4OD2v CXxUPNEqtACXEbNCi6AnEYVWgZVcrdBq5L9LoTXwAnlAobXgot0KrYNReotC68XnBKtCx0Gn 5m2FNsAmbaVCG9X7tfcrdDy0Jayftuc1CWMKjeY0lSg0xUi/UKEFKDJdoNAi8vQotAoMpgGF ViP/VQqtgU7TtQqthWTEhUzroM70qULrqTdxqULHQUny7ul/3Z2ffFShjcKGFEGh46HQ0o6a EJFZ3WC5kdMq5hHLtzit5u0PcVrD2/dxWsvp5zmtYz6yvKHQ6CPr6wqNPrK+o9DoI+vHCo0+ si1XaPSRbY1Co49sAYVGH9mGFBp9lLZEodFHaV6FRh+l/Umh0UeOxxUafSQlKDT6SBpUaPRR 7lxO69m6cndyOo6tJfd2Tht4+32cjue0LNPE1pJ7gNPJSCfl/ozTKZznLU6ncjm/47SZt/+d 0zY2No9wOp3x5Mm6ZTCePAenHZx2czqb85dzOp/TdZyex3ZGXhOjtVx/heZz5W1ktEFu38pp vpa8IWiGYQzQftgEXvBhKcEjmJqhm9ONEIQ+TBGFS8LoEIQQ0iz3YnuAc0jY0oPjC5Gq5e3e /0NJRdOaSdCEPT0wOM0TxrYVWMrzlUAFPsUwT6FKeWs1jujBci2O2Yw6RPiotSgvjCkE2zDv Qq4Q9nuRk/Vsxjl6sBY6S9vFszilL/EuhvVcYnh6BUyDRZhLkIeSAqhnCHvCmDahxLmzZH3V yBmORrTDTO0JblFmry4c2cvn34ptTPL/3NYStrIVBVCTCNeI2UbCOuOJKFLXoR8kfIVh4yVw 8fkaMV+Fc2/iNvciPxvnR6nMykN8JJNWeA6dZP8GcV6mUz/yDn8ll5/jivENca02T88bUFA7 j/slCJ2K1it5TzdHjhe1KZjWPcR7AhyhTZgPcq1lP8hoYh6o4ZpEuJWn7BZCXSTk8ioYlJEU 4Lbv4shiWOvjc83Gi0+R5eW6sZG9XCLTuxvn7+USZetLXGsvn8+neEPuYVqHFX94+RrlccPT /g8oKO9XPOjntglz5Mmrm/KQV9F/kM8m8RlmazXleWYbVh/isrtnoYHxBrksee6pdtnaEcUi PgWp4bP4IijTz60SwFKW7VNaBrmlGaJmMB3kOzbELdrDxzNNmT97lVFTM/j4+G3KrAFlpfLe YxJmrLCJ7+EepXXGrgHFukFlJQHOP8hrM14Nc5T2cO3OjYmpmBqeXgvr6+XyZmSw2LBV0dar 2N/Ho52k7NIpm3XxuTfzVnk822EBxYfdfN/1KxgJYs529DbF2rKEmSjv5b6S0SFxG/qU9Qe4 13o4Tz/fezIa+/hIeSWz0R2YRhbb+dsVz/RybRg2tyl7S447PdN69PLaDHojXzqJwl9an0+Z o5NLGOSW7joDm34YwPYpyw7y33OaWuEmjm2JY2A7t22Y4y4yHU9krzPd5f0eUaKGvJvCCspm oqfc28s94oXL+XhZaybXx3tnkCbP3sWt1c93yfD0Kqbm7uMxk/V7uSVCyhxsD8lWjPDxUxpP Se/nGOrlcXNKt0J+5kWwbzGepUUolz2FnGt2hC3k0akXObr5XupBqhepPu4hP6+FYSPHgOzx wmnO/7szDHHEyLz+WbOsxEjfjOd9PaYaRB6jV2ErOwHqMb+Yt9dhSxPmDJvL8SSow6eRtzaD Ed8MWGrmaAqfA2vSdLu8T2SL9is2n8Hov3aKzXhmKiJP+bmT9w4j/+D0nL7p2CbjeeY8mh0t 5cgxE0fl/RtQYmZY2dObuRT/dExku7VVmY3t7m1KLO2cPo3kOSP/xDJTsXNoOjr5lR3nn8Z0 iMePiLKfNyl4PJe9pnYhs5h/lpSZXXz2fF3KCcgQ2Mkjo6x1p+KZPkXyuTyUy1d1pqXkiHw2 Ks6eeSq2sSjm5XdQL87ao1g7rMSQr5qbWX8dtszE2eGzfOFXbhmz71xy9PZyjfq5ZQPKTedf 8bmkYLFvVmybmpdFki5u6cCsUyQ0645cMM0dmoXbmbP7n1uKadfL5U/hKniGvCHu/63cm7Pv oVPxcYYziLzyDXWQW5zJ755ej6zXbHT3KhFVtr+8q/oVfMxE3jMx9M9WNIOPFXztZ3tu6u7F zhy/ckOTVyPf93zcq31f8kHoS/aekRzmt1V2I+lSzqFt/G40BLNvV/+196fkhZT7X0B51znX Le5sP8rWmrmx+rjMs/fxlMe8X7L1pv+WtjNWPnuGM8/7MzXyK7fYCJ49UxLY+0k1yG8CeXiH L4NyfNeSMC/B2jx8QyzDVAzsW4J10KBwFvPfBS7DR6bLYT4mNmohLMB3AZaY9P/eWfc/Pxmn +oq+ZL3p87B5uN+/yevzS49Izd1+qTHYF4xgk1QTDPUHQ95IINgn9ff4CqVab8T7XzAVMWFS U7BnkLWEpRV9OK6koqJ4HmalhVJ1T4+0NrC5OxKW1vrD/tA2f1d1KODtWevfPNjjDU2JXcwb JaV18Xp/KMwmKC1cVCrlNQZ8oWA4uCkyl3PN7uQNjc28eFhqDnm7/L3e0FYpuOmfai2F/JsD 4Yg/5O+SAn1SBFnXNUmrvRHJJTU3Sqs2bSqUvH1dkr8n7B/qRrbCaUm43uDmkLe/e3h2k1+q DXmHAn2b2dgAmnaetDbYiaJXBnzdwR5vuIBJDwV8Aa/U5B3s68I1oJkWldYE+yL+XqZbaFgK e9GCaKTAJqnLHw5s7iuQZLv4kMsbwM7eYMgvdQ/2evtQfcnX7Q15fbgMrAR8YVyHt0/CvmG2 /gCavB8X6Pf5w+EgTscW5EX5g75uKaCIYosf7PNLQ4FINzdDbzDYxUYzGtWOoCI+NGp4qi0y 5O+LBPzI7UNiMDRcKHFLB7f5Q170dSTk90Z6sYsN8A2iv8NsMuY9f4irsGmwpwdJritO3xvE SQJ9XYPhCF9qODLc459tCYbUMJvFH+oN9HGOUHArivWi/r5BnEh2YFfAuznI+oe60eZSt7+n Hy0SlDYHtvk5A4e8V+pBc0i9frRdX8CH7N7+fj+asc/nx0lkcweYsST/dlxMr79nWMK1hRE7 PUxGb6CHmzeibKKwMp8PR3T6pcEwQopb0z8wyJQd9DH7S5uCuGSUiIuKRBhOcOkhP/o9gtBA N4XRZByeWO31bvZeHuhD0f6Ir0A2Gg7vCoT7e7zDbAo2us8/FO739qNqyNKFKkYCYSaYsfeH gr1BLq2wOxLpX1xUNDQ0VNirALbQF+wt6o709hT1Rtj/6SnqDW/0soUXssZ/ccCQvwdb/XzI ylXNK+pX1FQ3r1i1UlpVL128oqZuZVOdVL18bV1dY93KZqPeqG/uRrNOWY2ZmPkEFcUVRLhF z7HF+GIYkNmaO4el4eAgG+ljaEM7830kwxLBwTGK/sXt14fs3s0hv58hsVBqxWHdXoRBsJNt IxwZOUMZhs4hBic/Os7PLB3y+yLo501oxxm9mAuDm/2chbt4ehy6BtHbORhB0ahmEHfUrAXl hqeUQiBPm2J6MEObtM3bM+jtRIR5w4iQ2aMLpXV9HLPDU6vANSmRC+HtlcL9fl8Ag87ZK5fQ in0cbWyst6srwDCBqAzxiFzAmkPctnx3f0mpnkBvgC0IJ+F8Q8HQ1rAMUo5H3hgcwoA62NkT CHezeVCWbO5eBCrqj67qH5Zk8CoWOnMibo8Vm2YWx6LXwKA/zKfBuOfzh/qUFYQUvTlzuDs4 2NOFe2hbwD8kh6uzls/40JN+jABdMyFueo2oFg+svsiMj9nCvIrWm84tlqs8PUDZ94ognMcb WcwY1jVV4yGQt6isfK5UXrJoXnFZcbFOt64BG4tLSsrKMC+fXy6VL1xQsaDCqP+KXfdPNyOr FSnq8X2Ir6pB/pLHLuXsFW2YGPHg34IXgI/5tWGqr4lfg9hLIru0dQn3CHuFHwuHMB0QDgo/ PP+V/vmv9OH8V/rnv9I//5X++a/0z3+lf/4r/fNf6Z//Sv/8V/rnv9I//5X++a/0z3+l///g V/pnvPnP0F7Of66+D740xn/GdwL8W4GvkNnDET6rLmaKJWKDuFy8APOKM2ZgMfirpKzke4bF Hnn13SRK7hOA74uvHnNuevp3eSGWC3fBOT7VTkgQLHACUwyTAA7MizCtwrQR062YdmNScz7W EsR0DaZDmE7yHo9gGbtjvmccixt5sW9LTymveuVqWzuv7rukVS4b18hl7QqZbbHMVlImNxcu k8vcArlMyikdYaXeWHq42iyY4ajAfvmyH3NCX4AEQsABe4RUiGKiglpp8QhJ+7JdpbsPCSIQ gQoEbeqIHRbImDGxtFpPY/QEJIGD/oVOyD10Yl98Yunu6ovob+FJTIcwCfS3+HxAP4Br6DEg kIB5FabdmA5hOoLpBCY1PYbP+/i8R99DrnehCFMVpo2YdmM6hOkEJg19F3MT/Q37bWCeM7oK E6W/wdxE38FlvYN5An0bqbfp26jaG2PlFaUHOOEuUghHjkJY0hUiyVw6Tn859ulcxzj9cJ/k duypLqa/gigmipP9CoX/CiRMqzF1YOrHpEbqTaTehBFMt2HagymKSY1j3sQxb+KYlzC9gulN KMbkwbQak5YeHcNpxumRMdcyR7WZvkZ/BhY06qv057x8hb7Iy5fpT3n5CywzsXyJvjiW6YDq OOwHHGPC0oRlEfar6E/2ZSc5YtWJ9BCax4F5EaYqTKswbcR0KyY1PUTnjHU5klDIM/CSFpBz DD7m5YNwvxY8WxweVw1iTGKZa/EFSGG2W9rtoh7XXXdjlWWuW+5AimWua29CimWuy3cgxTJX zzakWObq2oIUy1wbNiLFMteqZqQwG6ff+1F2rqN81VYiVSfQIbTSEFppCK00BCIdYg98KjLd 7h3Lz0eL3eNxz813jBwkI8+SkbVk5H4y4icjV5ORHWSkkoxcRkbcZMRORjLJiIeMPEMWoSlG iGf/GdUKj5WMvERGHicjYTLiIiM5ZCSbjEik3DNOs8ZWzOdFHS/2VbN9heUFS0sTUMcstGgW wjoLt/0hzI9givGaB5mkOTKzLZOVc/blV8n1wsWlweoL6fM48Hl0w/PwPiYRHfQ8wuh5FMJ+ Oz0B8ypMGzEdxnQCUwyTGrnnoOK38jwB8yJMVZg2YroG0wlMaq7OCUwUgoqKT3LFihSlV7Ea fR4f9leYsmiWJ8NkN7lNFwq32klCJlmVGcuk5WBm/zshKVGbOE6MT//D+J//MIKuWkdvobdC BjriNqW8dezTDMc4+faY6xlHdSr5FmSKiDpSAS6Sg+UiCPP6ArBrWVkGdvoYlqVj9vU4LGHM VeA4SOLZqKcdn9qPOz62j1MkP7I/4/h3aVwkY45fY8tjTzt+Zb/B8YuicS22POsaJ1gclDjr Afsix+MvcdYd2HHPmONqVjztuMq+3LHVzjv8csdlYax5EhxrXRscF6K8WnunwxNGmU87quyX OSplrgVszNOOYlTBLZP5qOxcO5/UmckFrisfJ92eAs1dmhbNKs1CTammQJOlcWgyNOmaFG2S 1qSN1xq0eq1Wq9aKWqoFbQr774du9p8rUtQmVqhFloucNlGWU/n/mVCipXARRJOFBtrQtIw0 RA/7oKFTip5qco4T/ZoNUZVzGYkmNUBD87LoInfDuCa2NlrubohqVl/aspeQW1qxNUqvHyfQ 3DJOYqxpZzr7EzIHgJDEnTenszJv582trWA1b6uyViUtTayorz1H1qHk7pmP9Qw6I3pXQ1NL 9NGM1mgpI2IZrQ3Rb7C/MXOA/I2crKs9QP7KitaWA8JS8re6taxdWFrb2towTtZzPpDIX5EP EfNXzqfNBInxgaTNlPnukflycDzyZbMC+XQ6yOF8OTod5xMJ49sbzq6r3ZudzXksePXkPGGL NJvnpRzkycnhPOYReInzvGQeYTzRpZzFbkeWTDtnIWlg5yx2ksZZ1s+wFCksN0yz3MBnEsgM j13mMR6b4jEeQx73v/rxL3O7yb4lrb429vd5Opx1fkwd0Ru3dVujI52StNfXqvzhHldHp6+b lV5/tNXpr436nLXS3iVt5+huY91LnLV7oa2uuWVvm8dfO7bEs6TO6a1t3bd8dVn5GXPdMD1X 2epzCFvNhJWxuZaXn6O7nHUvZ3OVs7nK2VzLPcv5XMAxvrplrxaWtda0yeU+GqdHvHakZ7Uu M5v6l3LwLsmyXp1+EC8kD0OcuzVqcC6LGjGxrnnV86pZF+4p1hXP/giT0mW9eklW+kHysNJl wuZE5zJwRwbDg2CtC9TKP2H8YFNkkBlczt3hr/pgX13U460NRwAaovlNDdGqNRta9mo02NrB lhRdPNUWF1c3HjssNxZi42LWKAjTjKytkrXpdArj2f4fVMoatgtG6DP7iCeT4EtdqxDNbGim GAqalb92cxCvS+x4CLfiAsPETcJTMrjaINPA1juVIoMKpdghopTyKBwSnjLH9AfHYKj636Mz dacKZW5kc3RyZWFtCmVuZG9iagoKNjQgMCBvYmoKMTA2MTAKZW5kb2JqCgo2NSAwIG9iago8 PC9UeXBlL0ZvbnREZXNjcmlwdG9yL0ZvbnROYW1lL0NBQUFBQStBcmlhbE1UCi9GbGFncyA0 Ci9Gb250QkJveFstNjY0IC0zMjQgMjAyNyAxMDM3XS9JdGFsaWNBbmdsZSAwCi9Bc2NlbnQg OTA1Ci9EZXNjZW50IC0yMTEKL0NhcEhlaWdodCAxMDM3Ci9TdGVtViA4MAovRm9udEZpbGUy IDYzIDAgUj4+CmVuZG9iagoKNjYgMCBvYmoKPDwvTGVuZ3RoIDI5MS9GaWx0ZXIvRmxhdGVE ZWNvZGU+PgpzdHJlYW0KeJxd0c1uwyAMAOA7T8GxO1QhtOmPFEXq2kbKYT9atgdIwemQFoII PeTth023STuAPss2ApMdm1NjTche/ahaCLw3VnuYxptXwC9wNZblkmujwj2iXQ2dY1nsbecp wNDYfixLlr3F3BT8zBcHPV7ggWUvXoM39soXH8c2xu3NuS8YwAYuWFVxDX0856lzz90AGXUt Gx3TJszL2PJX8D474JLiPF1FjRom1ynwnb0CK4WoeFnXFQOr/+XyIrVcevXZ+Viax1Ih1rsq WpI3OXqVfEavkwt0Qd6u0BuyFOgtuVijd6meavbJdP4huUY/Jm/Qx+Q9+pS8RZ+jpZASXZPz FT3qfnt8Hs7/Z2xc3byPI6NPolnhlIyF3390o8MuWt/p045iCmVuZHN0cmVhbQplbmRvYmoK CjY3IDAgb2JqCjw8L1R5cGUvRm9udC9TdWJ0eXBlL1RydWVUeXBlL0Jhc2VGb250L0NBQUFB QStBcmlhbE1UCi9GaXJzdENoYXIgMAovTGFzdENoYXIgMTUKL1dpZHRoc1s3NTAgNzIyIDU1 NiA1NTYgNTU2IDUwMCAyNzcgNjEwIDUwMCA1NTYgNTU2IDI3NyAyMjIgNTU2IDM1MCA1NTYK XQovRm9udERlc2NyaXB0b3IgNjUgMCBSCi9Ub1VuaWNvZGUgNjYgMCBSCj4+CmVuZG9iagoK NjggMCBvYmoKPDwvRjEgNTcgMCBSL0YyIDY3IDAgUi9GMyA1MiAwIFIvRjQgNjIgMCBSCj4+ CmVuZG9iagoKNjkgMCBvYmoKPDwvRm9udCA2OCAwIFIKL1hPYmplY3Q8PC9JbTI0IDI0IDAg Ui9JbTQgNCAwIFIvSW01IDUgMCBSPj4KL1Byb2NTZXRbL1BERi9UZXh0L0ltYWdlQy9JbWFn ZUkvSW1hZ2VCXQo+PgplbmRvYmoKCjEgMCBvYmoKPDwvVHlwZS9QYWdlL1BhcmVudCA0NyAw IFIvUmVzb3VyY2VzIDY5IDAgUi9NZWRpYUJveFswIDAgNzIwIDU0MF0vR3JvdXA8PC9TL1Ry YW5zcGFyZW5jeS9DUy9EZXZpY2VSR0IvSSB0cnVlPj4vQ29udGVudHMgMiAwIFI+PgplbmRv YmoKCjkgMCBvYmoKPDwvVHlwZS9QYWdlL1BhcmVudCA0NyAwIFIvUmVzb3VyY2VzIDY5IDAg Ui9NZWRpYUJveFswIDAgNzIwIDU0MF0vR3JvdXA8PC9TL1RyYW5zcGFyZW5jeS9DUy9EZXZp Y2VSR0IvSSB0cnVlPj4vQ29udGVudHMgMTAgMCBSPj4KZW5kb2JqCgoxMiAwIG9iago8PC9U eXBlL1BhZ2UvUGFyZW50IDQ3IDAgUi9SZXNvdXJjZXMgNjkgMCBSL01lZGlhQm94WzAgMCA3 MjAgNTQwXS9Hcm91cDw8L1MvVHJhbnNwYXJlbmN5L0NTL0RldmljZVJHQi9JIHRydWU+Pi9D b250ZW50cyAxMyAwIFI+PgplbmRvYmoKCjE1IDAgb2JqCjw8L1R5cGUvUGFnZS9QYXJlbnQg NDcgMCBSL1Jlc291cmNlcyA2OSAwIFIvTWVkaWFCb3hbMCAwIDcyMCA1NDBdL0dyb3VwPDwv Uy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCL0kgdHJ1ZT4+L0NvbnRlbnRzIDE2IDAgUj4+ CmVuZG9iagoKMTggMCBvYmoKPDwvVHlwZS9QYWdlL1BhcmVudCA0NyAwIFIvUmVzb3VyY2Vz IDY5IDAgUi9NZWRpYUJveFswIDAgNzIwIDU0MF0vR3JvdXA8PC9TL1RyYW5zcGFyZW5jeS9D Uy9EZXZpY2VSR0IvSSB0cnVlPj4vQ29udGVudHMgMTkgMCBSPj4KZW5kb2JqCgoyMSAwIG9i ago8PC9UeXBlL1BhZ2UvUGFyZW50IDQ3IDAgUi9SZXNvdXJjZXMgNjkgMCBSL01lZGlhQm94 WzAgMCA3MjAgNTQwXS9Hcm91cDw8L1MvVHJhbnNwYXJlbmN5L0NTL0RldmljZVJHQi9JIHRy dWU+Pi9Db250ZW50cyAyMiAwIFI+PgplbmRvYmoKCjI2IDAgb2JqCjw8L1R5cGUvUGFnZS9Q YXJlbnQgNDcgMCBSL1Jlc291cmNlcyA2OSAwIFIvTWVkaWFCb3hbMCAwIDcyMCA1NDBdL0dy b3VwPDwvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCL0kgdHJ1ZT4+L0NvbnRlbnRzIDI3 IDAgUj4+CmVuZG9iagoKMjkgMCBvYmoKPDwvVHlwZS9QYWdlL1BhcmVudCA0NyAwIFIvUmVz b3VyY2VzIDY5IDAgUi9NZWRpYUJveFswIDAgNzIwIDU0MF0vR3JvdXA8PC9TL1RyYW5zcGFy ZW5jeS9DUy9EZXZpY2VSR0IvSSB0cnVlPj4vQ29udGVudHMgMzAgMCBSPj4KZW5kb2JqCgoz MiAwIG9iago8PC9UeXBlL1BhZ2UvUGFyZW50IDQ3IDAgUi9SZXNvdXJjZXMgNjkgMCBSL01l ZGlhQm94WzAgMCA3MjAgNTQwXS9Hcm91cDw8L1MvVHJhbnNwYXJlbmN5L0NTL0RldmljZVJH Qi9JIHRydWU+Pi9Db250ZW50cyAzMyAwIFI+PgplbmRvYmoKCjM1IDAgb2JqCjw8L1R5cGUv UGFnZS9QYXJlbnQgNDcgMCBSL1Jlc291cmNlcyA2OSAwIFIvTWVkaWFCb3hbMCAwIDcyMCA1 NDBdL0dyb3VwPDwvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCL0kgdHJ1ZT4+L0NvbnRl bnRzIDM2IDAgUj4+CmVuZG9iagoKMzggMCBvYmoKPDwvVHlwZS9QYWdlL1BhcmVudCA0NyAw IFIvUmVzb3VyY2VzIDY5IDAgUi9NZWRpYUJveFswIDAgNzIwIDU0MF0vR3JvdXA8PC9TL1Ry YW5zcGFyZW5jeS9DUy9EZXZpY2VSR0IvSSB0cnVlPj4vQ29udGVudHMgMzkgMCBSPj4KZW5k b2JqCgo0MSAwIG9iago8PC9UeXBlL1BhZ2UvUGFyZW50IDQ3IDAgUi9SZXNvdXJjZXMgNjkg MCBSL01lZGlhQm94WzAgMCA3MjAgNTQwXS9Hcm91cDw8L1MvVHJhbnNwYXJlbmN5L0NTL0Rl dmljZVJHQi9JIHRydWU+Pi9Db250ZW50cyA0MiAwIFI+PgplbmRvYmoKCjQ0IDAgb2JqCjw8 L1R5cGUvUGFnZS9QYXJlbnQgNDcgMCBSL1Jlc291cmNlcyA2OSAwIFIvTWVkaWFCb3hbMCAw IDcyMCA1NDBdL0dyb3VwPDwvUy9UcmFuc3BhcmVuY3kvQ1MvRGV2aWNlUkdCL0kgdHJ1ZT4+ L0NvbnRlbnRzIDQ1IDAgUj4+CmVuZG9iagoKNzAgMCBvYmoKPDwvQ291bnQgMTMvRmlyc3Qg NzEgMCBSL0xhc3QgODMgMCBSCj4+CmVuZG9iagoKNzEgMCBvYmoKPDwvQ291bnQgMC9UaXRs ZTxGRUZGMDA1MzAwNkMwMDY5MDA2NDAwNjUwMDIwMDAzMT4KL0Rlc3RbMSAwIFIvWFlaIDAg NTQwIDBdL1BhcmVudCA3MCAwIFIvTmV4dCA3MiAwIFI+PgplbmRvYmoKCjcyIDAgb2JqCjw8 L0NvdW50IDAvVGl0bGU8RkVGRjAwNDcwMDZGMDA2MTAwNkMwMDIwMDA2NjAwNkYwMDcyMDAy MDAwNzQwMDY4MDA2OTAwNzMwMDIwMDA0RDAwNjUwMDY1MDA3NDAwNjkwMDZFMDA2Nz4KL0Rl c3RbOSAwIFIvWFlaIDAgNTQwIDBdL1BhcmVudCA3MCAwIFIvUHJldiA3MSAwIFIvTmV4dCA3 MyAwIFI+PgplbmRvYmoKCjczIDAgb2JqCjw8L0NvdW50IDAvVGl0bGU8RkVGRjAwNDEwMDYy MDA3MzAwNzQwMDcyMDA2MTAwNjMwMDc0MDAyMDAwNTYwMDY5MDA2NTAwNzcwMDIwMDA2RjAw NkUwMDIwMDA0RjAwNDEwMDc1MDA3NDAwNjgwMDIwPgovRGVzdFsxMiAwIFIvWFlaIDAgNTQw IDBdL1BhcmVudCA3MCAwIFIvUHJldiA3MiAwIFIvTmV4dCA3NCAwIFI+PgplbmRvYmoKCjc0 IDAgb2JqCjw8L0NvdW50IDAvVGl0bGU8RkVGRjAwNTMwMDc0MDA2MTAwNzQwMDc1MDA3MzAw M0EwMDIwMDA2NDAwNzIwMDYxMDA2NjAwNzQwMDJEMDA2OTAwNjUwMDc0MDA2NjAwMkQwMDZG MDA2MTAwNzUwMDc0MDA2ODAwMkQwMDc2MDAzMjAwMkQwMDMxMDAzMDAwMEEwMDI4MDA3NzAw NjkwMDc0MDA2ODAwMjAwMDcyMDA2NTAwNkMwMDY1MDA3NjAwNjEwMDZFMDA2MzAwNjUwMDIw MDA2NjAwNkYwMDcyMDAyMDAwNzMwMDY1MDA2MzAwNzUwMDcyMDA2OTAwNzQwMDc5MDAyOT4K L0Rlc3RbMTUgMCBSL1hZWiAwIDU0MCAwXS9QYXJlbnQgNzAgMCBSL1ByZXYgNzMgMCBSL05l eHQgNzUgMCBSPj4KZW5kb2JqCgo3NSAwIG9iago8PC9Db3VudCAwL1RpdGxlPEZFRkYwMDUz MDA2QzAwNjkwMDY0MDA2NTAwMjAwMDM1PgovRGVzdFsxOCAwIFIvWFlaIDAgNTQwIDBdL1Bh cmVudCA3MCAwIFIvUHJldiA3NCAwIFIvTmV4dCA3NiAwIFI+PgplbmRvYmoKCjc2IDAgb2Jq Cjw8L0NvdW50IDAvVGl0bGU8RkVGRjAwNTMwMDZDMDA2OTAwNjQwMDY1MDAyMDAwMzY+Ci9E ZXN0WzIxIDAgUi9YWVogMCA1NDAgMF0vUGFyZW50IDcwIDAgUi9QcmV2IDc1IDAgUi9OZXh0 IDc3IDAgUj4+CmVuZG9iagoKNzcgMCBvYmoKPDwvQ291bnQgMC9UaXRsZTxGRUZGMDA1MzAw NjUwMDYzMDA3NTAwNzIwMDY5MDA3NDAwNzkwMDIwMDA1NDAwNjgwMDcyMDA2NTAwNjEwMDc0 MDA3MzAwMjAwMDBBMDAyODAwNjIwMDYxMDA3MzAwNjUwMDY0MDAyMDAwNkYwMDZFMDAyMDAw NEUwMDQ5MDA1MzAwNTQwMDIwMDA1MzAwNTAwMDIwMDAzODAwMzAwMDMwMDAyRDAwMzYwMDMz MDAyOT4KL0Rlc3RbMjYgMCBSL1hZWiAwIDU0MCAwXS9QYXJlbnQgNzAgMCBSL1ByZXYgNzYg MCBSL05leHQgNzggMCBSPj4KZW5kb2JqCgo3OCAwIG9iago8PC9Db3VudCAwL1RpdGxlPEZF RkYwMDU0MDA2ODAwNzIwMDY1MDA2MTAwNzQwMDIwMDA0RDAwNjkwMDc0MDA2OTAwNjcwMDYx MDA3NDAwNjkwMDZGMDA2RTAwMEEwMDI4MDA2MjAwNjEwMDczMDA2NTAwNjQwMDIwMDA2RjAw NkUwMDIwMDA0RTAwNDkwMDUzMDA1NDAwMjAwMDUzMDA1MDAwMjAwMDM4MDAzMDAwMzAwMDJE MDAzNjAwMzMwMDI5MDAyMD4KL0Rlc3RbMjkgMCBSL1hZWiAwIDU0MCAwXS9QYXJlbnQgNzAg MCBSL1ByZXYgNzcgMCBSL05leHQgNzkgMCBSPj4KZW5kb2JqCgo3OSAwIG9iago8PC9Db3Vu dCAwL1RpdGxlPEZFRkYwMDQ0MDA2NTAwNjEwMDZDMDA2OTAwNkUwMDY3MDAyMDAwNzcwMDY5 MDA3NDAwNjgwMDIwMDA1NDAwNkYwMDZCMDA2NTAwNkUwMDIwMDA1MjAwNjUwMDc1MDA3MzAw NjU+Ci9EZXN0WzMyIDAgUi9YWVogMCA1NDAgMF0vUGFyZW50IDcwIDAgUi9QcmV2IDc4IDAg Ui9OZXh0IDgwIDAgUj4+CmVuZG9iagoKODAgMCBvYmoKPDwvQ291bnQgMC9UaXRsZTxGRUZG MDA0NDAwNjUwMDYxMDA2QzAwNjkwMDZFMDA2NzAwMjAwMDc3MDA2OTAwNzQwMDY4MDAyMDAw NTQwMDZGMDA2QjAwNjUwMDZFMDAyMDAwNTIwMDY1MDA3NTAwNzMwMDY1MDAyMDAwMjgwMDMy MDAyOT4KL0Rlc3RbMzUgMCBSL1hZWiAwIDU0MCAwXS9QYXJlbnQgNzAgMCBSL1ByZXYgNzkg MCBSL05leHQgODEgMCBSPj4KZW5kb2JqCgo4MSAwIG9iago8PC9Db3VudCAwL1RpdGxlPEZF RkYwMDQ0MDA2NTAwNjEwMDZDMDA2OTAwNkUwMDY3MDAyMDAwNzcwMDY5MDA3NDAwNjgwMDIw MDA1NDAwNkYwMDZCMDA2NTAwNkUwMDIwMDA1MjAwNjUwMDc1MDA3MzAwNjUwMDIwMDAyODAw MzMwMDI5PgovRGVzdFszOCAwIFIvWFlaIDAgNTQwIDBdL1BhcmVudCA3MCAwIFIvUHJldiA4 MCAwIFIvTmV4dCA4MiAwIFI+PgplbmRvYmoKCjgyIDAgb2JqCjw8L0NvdW50IDAvVGl0bGU8 RkVGRjAwNEQwMDYxMDA2RTAwNjQwMDYxMDA3NDAwNkYwMDcyMDA3OTAwMjAwMDc0MDA2RjAw MjAwMDY5MDA2RDAwNzAwMDZDMDA2NTAwNkQwMDY1MDA2RTAwNzQwMDNGPgovRGVzdFs0MSAw IFIvWFlaIDAgNTQwIDBdL1BhcmVudCA3MCAwIFIvUHJldiA4MSAwIFIvTmV4dCA4MyAwIFI+ PgplbmRvYmoKCjgzIDAgb2JqCjw8L0NvdW50IDAvVGl0bGU8RkVGRjAwNDEwMDY0MDA2NDAw NjkwMDc0MDA2OTAwNkYwMDZFMDA2MTAwNkMwMDIwMDA1MzAwNjUwMDYzMDA3NTAwNzIwMDY5 MDA3NDAwNzkwMDIwMDA0MzAwNkYwMDZFMDA3MzAwNjkwMDY0MDA2NTAwNzIwMDYxMDA3NDAw NjkwMDZGMDA2RTAwNzM+Ci9EZXN0WzQ0IDAgUi9YWVogMCA1NDAgMF0vUGFyZW50IDcwIDAg Ui9QcmV2IDgyIDAgUj4+CmVuZG9iagoKNDcgMCBvYmoKPDwvVHlwZS9QYWdlcwovUmVzb3Vy Y2VzIDY5IDAgUgovTWVkaWFCb3hbIDAgMCA3MjAgNTQwIF0KL0tpZHNbIDEgMCBSIDkgMCBS IDEyIDAgUiAxNSAwIFIgMTggMCBSIDIxIDAgUiAyNiAwIFIgMjkgMCBSIDMyIDAgUiAzNSAw IFIgMzggMCBSIDQxIDAgUiA0NCAwIFIgXQovQ291bnQgMTM+PgplbmRvYmoKCjg0IDAgb2Jq Cjw8L1R5cGUvQ2F0YWxvZy9QYWdlcyA0NyAwIFIKL09wZW5BY3Rpb25bMSAwIFIgL1hZWiBu dWxsIG51bGwgMF0KL091dGxpbmVzIDcwIDAgUgo+PgplbmRvYmoKCjg1IDAgb2JqCjw8L0F1 dGhvcjxGRUZGMDA0QzAwNjUwMDY5MDA2NjAwMjAwMDRBMDA2RjAwNjgwMDYxMDA2RTAwNzMw MDczMDA2RjAwNkU+Ci9DcmVhdG9yPEZFRkYwMDQ5MDA2RDAwNzAwMDcyMDA2NTAwNzMwMDcz PgovUHJvZHVjZXI8RkVGRjAwNEYwMDcwMDA2NTAwNkUwMDRGMDA2NjAwNjYwMDY5MDA2MzAw NjUwMDJFMDA2RjAwNzIwMDY3MDAyMDAwMzMwMDJFMDAzMj4KL0NyZWF0aW9uRGF0ZShEOjIw MTAxMTA4MDYxNTEwKzAxJzAwJyk+PgplbmRvYmoKCnhyZWYKMCA4NgowMDAwMDAwMDAwIDY1 NTM1IGYgCjAwMDAyMjA0NTAgMDAwMDAgbiAKMDAwMDAwMDAxOSAwMDAwMCBuIAowMDAwMDAw NDA1IDAwMDAwIG4gCjAwMDAwMjAzNDMgMDAwMDAgbiAKMDAwMDAwMDQyNSAwMDAwMCBuIAow MDAwMDIwMzIxIDAwMDAwIG4gCjAwMDAwMzM2NDkgMDAwMDAgbiAKMDAwMDAzMzk3MSAwMDAw MCBuIAowMDAwMjIwNTk0IDAwMDAwIG4gCjAwMDAwMzM5OTEgMDAwMDAgbiAKMDAwMDAzNDg3 MiAwMDAwMCBuIAowMDAwMjIwNzM5IDAwMDAwIG4gCjAwMDAwMzQ4OTMgMDAwMDAgbiAKMDAw MDAzNTkzMCAwMDAwMCBuIAowMDAwMjIwODg1IDAwMDAwIG4gCjAwMDAwMzU5NTEgMDAwMDAg biAKMDAwMDAzNjg0NSAwMDAwMCBuIAowMDAwMjIxMDMxIDAwMDAwIG4gCjAwMDAwMzY4NjYg MDAwMDAgbiAKMDAwMDAzNzEyOSAwMDAwMCBuIAowMDAwMjIxMTc3IDAwMDAwIG4gCjAwMDAw MzcxNTAgMDAwMDAgbiAKMDAwMDAzNzMyMSAwMDAwMCBuIAowMDAwMDM3MzQxIDAwMDAwIG4g CjAwMDAwOTQ2MzcgMDAwMDAgbiAKMDAwMDIyMTMyMyAwMDAwMCBuIAowMDAwMDk0NjYwIDAw MDAwIG4gCjAwMDAwOTU2OTEgMDAwMDAgbiAKMDAwMDIyMTQ2OSAwMDAwMCBuIAowMDAwMDk1 NzEyIDAwMDAwIG4gCjAwMDAwOTY1MTcgMDAwMDAgbiAKMDAwMDIyMTYxNSAwMDAwMCBuIAow MDAwMDk2NTM4IDAwMDAwIG4gCjAwMDAxMzIxNzYgMDAwMDAgbiAKMDAwMDIyMTc2MSAwMDAw MCBuIAowMDAwMTMyMTk5IDAwMDAwIG4gCjAwMDAxMzI4MTEgMDAwMDAgbiAKMDAwMDIyMTkw NyAwMDAwMCBuIAowMDAwMTMyODMyIDAwMDAwIG4gCjAwMDAxNTg5NTcgMDAwMDAgbiAKMDAw MDIyMjA1MyAwMDAwMCBuIAowMDAwMTU4OTgwIDAwMDAwIG4gCjAwMDAxNjAyNDMgMDAwMDAg biAKMDAwMDIyMjE5OSAwMDAwMCBuIAowMDAwMTYwMjY1IDAwMDAwIG4gCjAwMDAxNjEzMTUg MDAwMDAgbiAKMDAwMDIyNTE1MCAwMDAwMCBuIAowMDAwMTYxMzM2IDAwMDAwIG4gCjAwMDAx ODA3MjEgMDAwMDAgbiAKMDAwMDE4MDc0NCAwMDAwMCBuIAowMDAwMTgwOTM5IDAwMDAwIG4g CjAwMDAxODE0NjAgMDAwMDAgbiAKMDAwMDE4MTgyNiAwMDAwMCBuIAowMDAwMTk3NDg3IDAw MDAwIG4gCjAwMDAxOTc1MTAgMDAwMDAgbiAKMDAwMDE5NzcwNCAwMDAwMCBuIAowMDAwMTk4 MjkyIDAwMDAwIG4gCjAwMDAxOTg3MjIgMDAwMDAgbiAKMDAwMDIwNzkwNSAwMDAwMCBuIAow MDAwMjA3OTI3IDAwMDAwIG4gCjAwMDAyMDgxMjYgMDAwMDAgbiAKMDAwMDIwODUyNCAwMDAw MCBuIAowMDAwMjA4NzgwIDAwMDAwIG4gCjAwMDAyMTk0NzcgMDAwMDAgbiAKMDAwMDIxOTUw MCAwMDAwMCBuIAowMDAwMjE5NjkwIDAwMDAwIG4gCjAwMDAyMjAwNTEgMDAwMDAgbiAKMDAw MDIyMDI2NiAwMDAwMCBuIAowMDAwMjIwMzI5IDAwMDAwIG4gCjAwMDAyMjIzNDUgMDAwMDAg biAKMDAwMDIyMjQwMiAwMDAwMCBuIAowMDAwMjIyNTIzIDAwMDAwIG4gCjAwMDAyMjI3MTIg MDAwMDAgbiAKMDAwMDIyMjkxMCAwMDAwMCBuIAowMDAwMjIzMjU2IDAwMDAwIG4gCjAwMDAy MjMzOTAgMDAwMDAgbiAKMDAwMDIyMzUyNCAwMDAwMCBuIAowMDAwMjIzODAyIDAwMDAwIG4g CjAwMDAyMjQwODQgMDAwMDAgbiAKMDAwMDIyNDI4NiAwMDAwMCBuIAowMDAwMjI0NTA0IDAw MDAwIG4gCjAwMDAyMjQ3MjIgMDAwMDAgbiAKMDAwMDIyNDkyMCAwMDAwMCBuIAowMDAwMjI1 MzM0IDAwMDAwIG4gCjAwMDAyMjU0MzYgMDAwMDAgbiAKdHJhaWxlcgo8PC9TaXplIDg2L1Jv b3QgODQgMCBSCi9JbmZvIDg1IDAgUgovSUQgWyA8NUNBNDQzNTlBNDRGODdFMEM5NjBGMjA4 MjFCMEU2RjU+Cjw1Q0E0NDM1OUE0NEY4N0UwQzk2MEYyMDgyMUIwRTZGNT4gXQovRG9jQ2hl Y2tzdW0gLzUyRjY5OTVFOEJCREM1QjUyOUNBNUY5NDlCRjA5Q0Y2Cj4+CnN0YXJ0eHJlZgoy MjU2OTcKJSVFT0YK --------------050604020608030804040903 Content-Type: application/octet-stream; name="OAuth-Security.pdf.sig" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="OAuth-Security.pdf.sig" iEYEABECAAYFAkzXh5sACgkQ8Jx8FtbMZnfVEgCfYGAGl+vBE4GfTMlAHDQqVVVzKOgAn2QU CoOgFJuiGpvfjl8bK2ONAQ41 --------------050604020608030804040903-- From Michael.Jones@microsoft.com Mon Nov 8 15:07:45 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 789B33A6901 for ; Mon, 8 Nov 2010 15:07:45 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id jT3nuQP0yUGd for ; Mon, 8 Nov 2010 15:07:36 -0800 (PST) Received: from smtp.microsoft.com (mailc.microsoft.com [131.107.115.214]) by core3.amsl.com (Postfix) with ESMTP id 8E73D3A68FD for ; Mon, 8 Nov 2010 15:07:36 -0800 (PST) Received: from TK5EX14CASC129.redmond.corp.microsoft.com (157.54.52.7) by TK5-EXGWY-E803.partners.extranet.microsoft.com (10.251.56.169) with Microsoft SMTP Server (TLS) id 8.2.176.0; Mon, 8 Nov 2010 15:07:59 -0800 Received: from TK5EX14MBXC202.redmond.corp.microsoft.com ([169.254.2.127]) by TK5EX14CASC129.redmond.corp.microsoft.com ([157.54.52.7]) with mapi id 14.01.0255.003; Mon, 8 Nov 2010 15:07:58 -0800 From: Mike Jones To: IIW Notes , "oauth@ietf.org" Thread-Topic: JSON Token encryption spec results at IIW on Wednesday Thread-Index: Act/mZh/Cx1yYL6QQDu0S69+Vi28MA== Date: Mon, 8 Nov 2010 23:07:57 +0000 Message-ID: <4E1F6AAD24975D4BA5B1680429673943245D7F98@TK5EX14MBXC202.redmond.corp.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.51.75] Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B1680429673943245D7F98TK5EX14MBXC202r_" MIME-Version: 1.0 Cc: "openid-specs-ab@lists.openid.net" , "openid-specs-connect@lists.openid.net" Subject: [OAUTH-WG] JSON Token encryption spec results at IIW on Wednesday X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 08 Nov 2010 23:07:45 -0000 --_000_4E1F6AAD24975D4BA5B1680429673943245D7F98TK5EX14MBXC202r_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable We held a session on encryption for JSON Web Tokens at IIW (Wednesday after= lunch in space E), building upon the results from the JSON Tokens and No Base String sessions on Tuesday. Once again, substantial consensus emerged,= which is described in the notes below. These consensus decisions were in place by the start of the session: * Some use cases for JSON tokens require encryption * (plus all the decisions from the sessions on Tuesday) It was agreed that these sets of high-level goals need to be achievable by = application of signing and/or encryption: * Integrity * Confidentiality + Integrity * Non-Repudiation (which also implies Integrity) * Non-Repudiation + Confidentiality Open issues identified at the start of the session were: * Should encryption and signing be accomplished via (1) separate bu= t composable encryption and signing operations, (2) use of a small set of r= ecommended composite operations that achieve the high-level goals, or (3) a= llowing for both possibilities? * Data format and how data formats affect streaming operations * Order of signing and encryption operations * Compress before encrypt? * What are we encrypting (payload or payload + signature)? The primary consensus in the room was to invent as little as possible by re= using work that other experts have done in the space, while adapting their = work to a JSON context. Participants provided the following references to = work to borrow from: * Cryptographic Message Syntax (CMS): http://tools.ietf.org/html/r= fc5652 * Table of Algorithm Suites from WS-SecurityPolicy 1.2, section 6.1= : http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/ws-securitypoli= cy-1.2-spec-os.html#_Toc161826547 * XML Signature Syntax and Processing (Second Edition): http://www= .w3.org/TR/xmldsig-core/ * XML Encryption Syntax and Processing: http://www.w3.org/TR/xmlen= c-core/ * Defective Sign and Encrypt analysis: http://world.std.com/~dtd/s= ign_encrypt/sign_encrypt7.PDF * The TLS Protocol Version 1.0: http://tools.ietf.org/html/rfc2246 * Transport Layer Security Protocol Compression Methods: http://to= ols.ietf.org/html/rfc3749 * Compressed Data Content Type for Cryptographic Message Syntax (CM= S): http://tools.ietf.org/html/rfc3274 * DEFLATE Compressed Data Format Specification version 1.3: http:/= /tools.ietf.org/html/rfc1951 Specific issues were resolved as follows: * Should encryption and signing be accomplished via (1) separate bu= t composable encryption and signing operations, (2) use of a small set of r= ecommended composite operations that achieve the high-level goals, or (3) a= llowing for both possibilities? The consensus was for (3) - that we should specify a small set of composite= operations that will meet the needs of common use cases, while also enabli= ng applications to compose encryption and signing operations in a general f= ashion, should the composite operations prove insufficient for their use ca= ses. A subset of the composite algorithm suites in WS-SecurityPolicy 1.2 w= as suggested as an appropriate starting point. Paul Tarjan of Facebook had= also suggested during the OpenID Summit on Monday that descriptive composi= te algorithm values be used, such as "AES-256-CBC HMAC-SHA-256". * Data format and how data formats affect streaming operations For the same reasons as discussed during the signing session, the group rea= ffirmed that the order of the fields should be envelope.payload.signature, = with the envelope containing sufficient information to determine the nature= of the contents of the remaining fields. This order enables streaming ope= rations, where content is created or analyzed in parallel with its transmis= sion or reception, to the maximum extent possible, and also potentially min= imizes buffering requirements imposed upon implementations. * Order of signing and encryption operations It was recognized that no one-size-fits-all solution applies here and that = different sets of operations are needed for different use cases. For insta= nce, if non-repudiation is required, a signature of the plan text using pub= lic key cryptography must be present, which therefore must precede any othe= r operations. Again, the group reaffirmed that we should reuse other work = in this area to the extent possible. * Compress before encrypt? Several participants pointed out existing practice in this area, including = the use of the DEFLATE compression algorithm prior to encryption by TLS and= CMS. It was agreed that we should similarly document how to optionally pe= rform compression before encryption for those use cases where it makes sens= e. * What are we encrypting (payload or payload + signature)? This was another area were the participants felt that we should reuse exist= ing practice that has already been vetted by experts. Special thanks go to Breno de Medeiros, whose crypto expertise was invaluab= le during this session, as well as Brad Hill, Diana Smetters and several ot= her Googlers, John Bradley, Nat Sakimura, Joseph Holsten, Thomas Hardjono, = Terry Hayes, Dick Hardt, Tony Nadalin, and others who contributed to this p= roductive session. --_000_4E1F6AAD24975D4BA5B1680429673943245D7F98TK5EX14MBXC202r_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

We held a session on encryption for JSON Web Tokens = at IIW (Wednesday after lunch in space E), building upon the results from t= he JSON Tokens and No Base String sessions on Tuesday.  Once again, substantial conse= nsus emerged, which is described in the notes below.

 

These consensus decisions were in place by the start= of the session:

·         Some use cases for JSON tokens require encry= ption

·         (plus all the decisions from the sessions on= Tuesday)

 

It was agreed that these sets of high-level goals ne= ed to be achievable by application of signing and/or encryption:=

·         Integrity

·         Confidentiality + Integrity

·         Non-Repudiation (which also implies Integrit= y)

·         Non-Repudiation + Confidentiality

 

Open issues identified at the start of the session w= ere:

·         Should encryption and signing be accomplishe= d via (1) separate but composable encryption and signing operations, (2) us= e of a small set of recommended composite operations that achieve the high-= level goals, or (3) allowing for both possibilities?

·         Data format and how data formats affect stre= aming operations

·         Order of signing and encryption operations

·         Compress before encrypt?

·         What are we encrypting (payload or payload &= #43; signature)?

 

The primary consensus in the room was to invent a= s little as possible by reusing work that other experts have done in th= e space, while adapting their work to a JSON context.  Participants pr= ovided the following references to work to borrow from:

·         Cryptographic Message Syntax (CMS):  http://tools.ietf.org/html/rfc5652

·         Table of Algorithm Suites from WS-SecurityPo= licy 1.2, section 6.1: http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/ws-securitypolicy= -1.2-spec-os.html#_Toc161826547

·         XML Signature Syntax and Processing (Second = Edition):  http://www.w3.org/TR/xmldsig= -core/

·         XML Encryption Syntax and Processing:  = http://www.w3.org/TR/xmlenc-core/

·         Defective Sign and Encrypt analysis:  <= a href=3D"http://world.std.com/~dtd/sign_encrypt/sign_encrypt7.PDF"> http://world.std.com/~dtd/sign_encrypt/sign_encrypt7.PDF

·         The TLS Protocol Version 1.0:  http://tools.ietf.org/html/rfc2246

·         Transport Layer Security Protocol Compressio= n Methods:  http://tools.ietf.org/html/r= fc3749

·         Compressed Data Content Type for Cryptograph= ic Message Syntax (CMS):  http://tools.ietf.org/html/r= fc3274

·         DEFLATE Compressed Data Format Specification= version 1.3:  http://tools.ietf.org/html/r= fc1951

 

Specific issues were resolved as follows:=

 

·         Should encryption and signing be accompli= shed via (1) separate but composable encryption and signing operations, (2)= use of a small set of recommended composite operations that achieve the hi= gh-level goals, or (3) allowing for both possibilities?

The consensus was for (3) – that we should spe= cify a small set of composite operations that will meet the needs of common= use cases, while also enabling applications to compose encryption and sign= ing operations in a general fashion, should the composite operations prove insufficient for their use cases.  A s= ubset of the composite algorithm suites in WS-SecurityPolicy 1.2 was sugges= ted as an appropriate starting point.  Paul Tarjan of Facebook had als= o suggested during the OpenID Summit on Monday that descriptive composite algorithm values be used, such as “AES-25= 6-CBC HMAC-SHA-256”.

 

·         Data format and how data formats affect s= treaming operations

For the same reasons as discussed during the signing= session, the group reaffirmed that the order of the fields should be envel= ope.payload.signature, with the envelope containing sufficient information = to determine the nature of the contents of the remaining fields.  This order enables streaming operations, wh= ere content is created or analyzed in parallel with its transmission or rec= eption, to the maximum extent possible, and also potentially minimizes buff= ering requirements imposed upon implementations.

 

·         Order of signing and encryption operation= s

It was recognized that no one-size-fits-all solution= applies here and that different sets of operations are needed for differen= t use cases.  For instance, if non-repudiation is required, a signatur= e of the plan text using public key cryptography must be present, which therefore must precede any other operations.  = Again, the group reaffirmed that we should reuse other work in this area to= the extent possible.

 

·         Compress before encrypt?

Several participants pointed out existing practice i= n this area, including the use of the DEFLATE compression algorithm prior t= o encryption by TLS and CMS.  It was agreed that we should similarly d= ocument how to optionally perform compression before encryption for those use cases where it makes sense.

 

·         What are we encrypting (payload or payloa= d + signature)?

This was another area were the participants felt tha= t we should reuse existing practice that has already been vetted by experts= .

 

Special thanks go to Breno de Medeiros, whose crypto= expertise was invaluable during this session, as well as Brad Hill, Diana = Smetters and several other Googlers, John Bradley, Nat Sakimura, Joseph Hol= sten, Thomas Hardjono, Terry Hayes, Dick Hardt, Tony Nadalin, and others who contributed to this productive se= ssion.

--_000_4E1F6AAD24975D4BA5B1680429673943245D7F98TK5EX14MBXC202r_-- From tonynad@microsoft.com Mon Nov 8 17:54:36 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A861C3A68FA; Mon, 8 Nov 2010 17:54:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2a7xn1iLpb31; Mon, 8 Nov 2010 17:54:35 -0800 (PST) Received: from smtp.microsoft.com (mailc.microsoft.com [131.107.115.214]) by core3.amsl.com (Postfix) with ESMTP id A8A9A3A6898; Mon, 8 Nov 2010 17:54:35 -0800 (PST) Received: from TK5EX14MLTC102.redmond.corp.microsoft.com (157.54.79.180) by TK5-EXGWY-E803.partners.extranet.microsoft.com (10.251.56.169) with Microsoft SMTP Server (TLS) id 8.2.176.0; Mon, 8 Nov 2010 17:54:58 -0800 Received: from TK5EX14MBXC113.redmond.corp.microsoft.com ([169.254.6.199]) by TK5EX14MLTC102.redmond.corp.microsoft.com ([157.54.79.180]) with mapi id 14.01.0255.003; Mon, 8 Nov 2010 17:54:58 -0800 From: Anthony Nadalin To: Torsten Lodderstedt , Hannes Tschofenig Thread-Topic: [OAUTH-WG] ** OAuth Tutorial & OAuth Security Session ** Thread-Index: AQHLfisaqAne5bBEGEGUAfaUzHbBGZNnKf+AgAE438A= Date: Tue, 9 Nov 2010 01:54:57 +0000 Message-ID: <180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net> <4CD73075.8050408@lodderstedt.net> In-Reply-To: <4CD73075.8050408@lodderstedt.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.123.12] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "abfab@ietf.org" , "rai@ietf.org" , "ietf@ietf.org" , "secdir@ietf.org" , "websec@ietf.org" , "xmpp@ietf.org" , "kitten@ietf.org" , "iab@iab.org Board" , "iesg@ietf.org" , "oauth@ietf.org" Subject: Re: [OAUTH-WG] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 01:54:36 -0000 I was looking for less of an analysis and more of considerations (of the cu= rrent flows and actors), I'm not sure how to adapt what you have done to ac= tually fit in the current specification, was your thought that you would pr= oduce a separate security analysis document? -----Original Message----- From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of T= orsten Lodderstedt Sent: Sunday, November 07, 2010 3:04 PM To: Hannes Tschofenig Cc: abfab@ietf.org; rai@ietf.org; ietf@ietf.org; secdir@ietf.org; websec@ie= tf.org; xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board; iesg@ietf.org; o= auth@ietf.org Subject: Re: [OAUTH-WG] ** OAuth Tutorial & OAuth Security Session ** Hi all, Mark McGloin and me have been working on OAuth 2.0 security considerations = for a couple of weeks now. Since we both cannot attend the IETF-79 meetings= , we would like to provide the WG with information regarding the current st= atus of our work. I therefore uploaded a _preliminary_ version of our worki= ng document to the WG's wiki at http://trac.tools.ietf.org/wg/oauth/trac/at= tachment/wiki/SecurityConsiderations/oauth20_seccons_20101107.pdf.=20 The focus of this version was on consolidating previous work as well as res= ults of mailing list discussions and start working towards a rigorous threa= t model. Please give us feedback. regards, Torsten. Am 07.11.2010 03:22, schrieb Hannes Tschofenig: > Hi all, > > please consider attending the following two meetings! > > ** OAuth Security Session ** > > * Date: Monday, 13:00-15:00 > * Location: IAB breakout room (Jade 2) > * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net The security=20 > consideration section of OAuth 2.0 (draft -10) is still empty. Hence, we = would like to put some time aside to discuss what security threats, require= ments, and countermeasures need to be described. We will use the Monday, No= vember 8, 1300-1500 slot to have a discussion session. > > As a starting point I suggest to look at the following documents: > > * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SecurityConsiderations > * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SignaturesWhy > *=20 > http://tools.ietf.org/id/draft-tschofenig-oauth-signature-thoughts-00. > txt > > Note: If you are unfamiliar with OAuth then the OAuth tutorial session mi= ght be more suitable for you! > > > > ** OAuth Tutorial ** > > * Date: Wednesday, 19:30 (after the plenary) > * Location: IAB breakout room (Jade 2) > * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net OAuth allows a=20 > user to grant a third-party Web site or application access to their=20 > resources, without necessarily revealing their credentials, or even=20 > their identity. The OAuth working group, see=20 > http://datatracker.ietf.org/wg/oauth/charter/, is currently trying to=20 > finalize their main specification, namely OAuth v2:=20 > http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/ > > Based on the positive response at the last IETF meeting (in=20 > Maastricht) we decided to hold another OAuth tutorial, namely on=20 > *Wednesday, starting at 19:30 (after the IETF Operations and=20 > Administration Plenary) till about 21:00. (Note: I had to switch the=20 > day because of the social event!) > > It is helpful to read through the documents available int he working grou= p but not required. > > Up-to-date information can be found here:=20 > http://www.ietf.org/registration/MeetingWiki/wiki/79bofs > > Ciao > Hannes > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth From Hannes.Tschofenig@gmx.net Mon Nov 8 20:46:47 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 977773A6869 for ; Mon, 8 Nov 2010 20:46:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.467 X-Spam-Level: X-Spam-Status: No, score=-102.467 tagged_above=-999 required=5 tests=[AWL=0.132, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id cv6zH75cUalv for ; Mon, 8 Nov 2010 20:46:47 -0800 (PST) Received: from mail.gmx.net (mailout-de.gmx.net [213.165.64.23]) by core3.amsl.com (Postfix) with SMTP id 69D6D3A6827 for ; Mon, 8 Nov 2010 20:46:46 -0800 (PST) Received: (qmail invoked by alias); 09 Nov 2010 04:47:07 -0000 Received: from dhcp-7730.meeting.ietf.org (EHLO dhcp-7730.meeting.ietf.org) [130.129.119.48] by mail.gmx.net (mp003) with SMTP; 09 Nov 2010 05:47:07 +0100 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX19eBWMW5upeZRBq0+EsGffjMBwqW0K0iKjbzBBkC/ 4bjM5jVxXCSoyy From: Hannes Tschofenig Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: quoted-printable Date: Tue, 9 Nov 2010 12:47:03 +0800 Message-Id: <5F644EED-8B5F-4FDB-B04A-505917386F9D@gmx.net> To: oauth@ietf.org Mime-Version: 1.0 (Apple Message framework v1081) X-Mailer: Apple Mail (2.1081) X-Y-GMX-Trusted: 0 Cc: Hannes Tschofenig Subject: [OAUTH-WG] 2nd OAuth Security Session, Thursday (18:10) X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 04:46:47 -0000 Hi all,=20 at yesterday's security session we discussed ways on what to provide in = the security consideration for the OAuth specifications. =20 The plan was to have another session on Thursday, November 11th, = starting at 18:10 at the IAB breakout room (Jade 2). We plan to go out for dinner together.=20 Ciao Hannes From stephen.farrell@cs.tcd.ie Mon Nov 8 22:36:19 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E0C013A682C for ; Mon, 8 Nov 2010 22:36:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TNwNNrkqQJhC for ; Mon, 8 Nov 2010 22:35:59 -0800 (PST) Received: from scss.tcd.ie (hermes.cs.tcd.ie [IPv6:2001:770:10:200:21b:21ff:fe3a:3d50]) by core3.amsl.com (Postfix) with ESMTP id 8A38B3A67EF for ; Mon, 8 Nov 2010 22:35:49 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by hermes.scss.tcd.ie (Postfix) with ESMTP id 049953E40A8; Tue, 9 Nov 2010 06:35:43 +0000 (GMT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.tcd.ie; h= content-transfer-encoding:content-type:in-reply-to:references :subject:mime-version:user-agent:from:date:message-id:received :received:x-virus-scanned; s=cs; t=1289284542; bh=onrZtAbTnBvnaH odZPqDSiQExI4aI65NXO70kj1iiGQ=; b=SW9A2Qw6Kmee+bs4W6aTH3JGL/qNOS 1KwJY77PkNG7vcNAO20Vh3XMBoytnOgtNsru7jgB9AQM7rwQpGKFlJjrUfiGh+ie mhch0+bws/PZHvBBjn0oB09lPwhX+cotctIyFaVXUmYPTdnRUyVP9msNu/suNUAK TVDRmrIEXUq7uCyfrA/Ej0heNzrsPPohv0H44P1XlIh64oh8jthO60JvytYGjhBo pGhdjKfCgGt7Iifb9nrQSw+fLb1/qOKm00HLcRRh+ZkFXJ8Zmo51//3mHV9NJvsE HiUSjkbAb9/NEHeBkNnxijXAEUckMmeYT4+tgYvDqZ5S/4P6f6K7porw== X-Virus-Scanned: Debian amavisd-new at scss.tcd.ie Received: from scss.tcd.ie ([127.0.0.1]) by localhost (scss.tcd.ie [127.0.0.1]) (amavisd-new, port 10027) with ESMTP id Ef4U5k2noH7e; Tue, 9 Nov 2010 06:35:42 +0000 (GMT) Received: from [IPv6:2001:df8:0:32:226:b6ff:fe56:7d39] (unknown [IPv6:2001:df8:0:32:226:b6ff:fe56:7d39]) by smtp.scss.tcd.ie (Postfix) with ESMTPSA id C3ACB3E40A6; Tue, 9 Nov 2010 06:35:37 +0000 (GMT) Message-ID: <4CD8EBB7.2050108@cs.tcd.ie> Date: Tue, 09 Nov 2010 06:35:35 +0000 From: Stephen Farrell User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.15) Gecko/20101027 Lightning/1.0b1 Thunderbird/3.0.10 MIME-Version: 1.0 To: Mike Jones References: <4E1F6AAD24975D4BA5B1680429673943245D7F98@TK5EX14MBXC202.redmond.corp.microsoft.com> In-Reply-To: <4E1F6AAD24975D4BA5B1680429673943245D7F98@TK5EX14MBXC202.redmond.corp.microsoft.com> X-Enigmail-Version: 1.0.1 Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 8bit Cc: "openid-specs-connect@lists.openid.net" , "openid-specs-ab@lists.openid.net" , IIW Notes , "oauth@ietf.org" Subject: Re: [OAUTH-WG] JSON Token encryption spec results at IIW on Wednesday X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 06:36:19 -0000 JSON crypto formatting primitives would probably be a fine thing but you should delete all mention of non-repudiation since it is not a security service provided by such formatting. S. On 08/11/10 23:07, Mike Jones wrote: > We held a session on encryption for JSON Web Tokens at IIW (Wednesday > after lunch in space E), building upon the results from the JSON Tokens > and No Base String > sessions on Tuesday. Once > again, substantial consensus emerged, which is described in the notes below. > > > > These consensus decisions were in place by the start of the session: > > · Some use cases for JSON tokens require encryption > > · (plus all the decisions from the sessions on Tuesday) > > > > It was agreed that these sets of high-level goals need to be achievable > by application of signing and/or encryption: > > · Integrity > > · Confidentiality + Integrity > > · Non-Repudiation (which also implies Integrity) > > · Non-Repudiation + Confidentiality > > > > Open issues identified at the start of the session were: > > · Should encryption and signing be accomplished via (1) separate > but composable encryption and signing operations, (2) use of a small set > of recommended composite operations that achieve the high-level goals, > or (3) allowing for both possibilities? > > · Data format and how data formats affect streaming operations > > · Order of signing and encryption operations > > · Compress before encrypt? > > · What are we encrypting (payload or payload + signature)? > > > > The primary consensus in the room was to* invent as little as possible > by reusing work* that other experts have done in the space, while > adapting their work to a JSON context. Participants provided the > following references to work to borrow from: > > · Cryptographic Message Syntax (CMS): > http://tools.ietf.org/html/rfc5652 > > · Table of Algorithm Suites from WS-SecurityPolicy 1.2, section > 6.1: > http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702/ws-securitypolicy-1.2-spec-os.html#_Toc161826547 > > · XML Signature Syntax and Processing (Second Edition): > http://www.w3.org/TR/xmldsig-core/ > > · XML Encryption Syntax and Processing: > http://www.w3.org/TR/xmlenc-core/ > > · Defective Sign and Encrypt analysis: > http://world.std.com/~dtd/sign_encrypt/sign_encrypt7.PDF > > · The TLS Protocol Version 1.0: http://tools.ietf.org/html/rfc2246 > > · Transport Layer Security Protocol Compression Methods: > http://tools.ietf.org/html/rfc3749 > > · Compressed Data Content Type for Cryptographic Message Syntax > (CMS): http://tools.ietf.org/html/rfc3274 > > · DEFLATE Compressed Data Format Specification version 1.3: > http://tools.ietf.org/html/rfc1951 > > > > Specific issues were resolved as follows: > > > > · *Should encryption and signing be accomplished via (1) > separate but composable encryption and signing operations, (2) use of a > small set of recommended composite operations that achieve the > high-level goals, or (3) allowing for both possibilities?* > > The consensus was for (3) – that we should specify a small set of > composite operations that will meet the needs of common use cases, while > also enabling applications to compose encryption and signing operations > in a general fashion, should the composite operations prove insufficient > for their use cases. A subset of the composite algorithm suites in > WS-SecurityPolicy 1.2 was suggested as an appropriate starting point. > Paul Tarjan of Facebook had also suggested during the OpenID Summit on > Monday that descriptive composite algorithm values be used, such as > “AES-256-CBC HMAC-SHA-256”. > > > > · *Data format and how data formats affect streaming operations* > > For the same reasons as discussed during the signing session, the group > reaffirmed that the order of the fields should be > envelope.payload.signature, with the envelope containing sufficient > information to determine the nature of the contents of the remaining > fields. This order enables streaming operations, where content is > created or analyzed in parallel with its transmission or reception, to > the maximum extent possible, and also potentially minimizes buffering > requirements imposed upon implementations. > > > > · *Order of signing and encryption operations* > > It was recognized that no one-size-fits-all solution applies here and > that different sets of operations are needed for different use cases. > For instance, if non-repudiation is required, a signature of the plan > text using public key cryptography must be present, which therefore must > precede any other operations. Again, the group reaffirmed that we > should reuse other work in this area to the extent possible. > > > > · *Compress before encrypt?* > > Several participants pointed out existing practice in this area, > including the use of the DEFLATE compression algorithm prior to > encryption by TLS and CMS. It was agreed that we should similarly > document how to optionally perform compression before encryption for > those use cases where it makes sense. > > > > · *What are we encrypting (payload or payload + signature)?* > > This was another area were the participants felt that we should reuse > existing practice that has already been vetted by experts. > > > > Special thanks go to Breno de Medeiros, whose crypto expertise was > invaluable during this session, as well as Brad Hill, Diana Smetters and > several other Googlers, John Bradley, Nat Sakimura, Joseph Holsten, > Thomas Hardjono, Terry Hayes, Dick Hardt, Tony Nadalin, and others who > contributed to this productive session. > > > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From SRS0=si2S7B=SK=lodderstedt.net=torsten@srs.bis.eu.blackberry.com Tue Nov 9 00:07:39 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 66F0E3A6890; Tue, 9 Nov 2010 00:07:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.846 X-Spam-Level: X-Spam-Status: No, score=-4.846 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, MIME_BASE64_TEXT=1.753, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id wlATxjM3OeG8; Tue, 9 Nov 2010 00:07:38 -0800 (PST) Received: from smtp06.bis.eu.blackberry.com (smtp06.bis.eu.blackberry.com [216.9.253.29]) by core3.amsl.com (Postfix) with ESMTP id 73A5C3A688E; Tue, 9 Nov 2010 00:07:36 -0800 (PST) Received: from bda2319.bisx.produk.on.blackberry (bda2319.bisx.produk.on.blackberry [172.24.204.122]) by srs.bis.eu.blackberry.com (8.13.7 TEAMON/8.13.7) with ESMTP id oA987xRm004407; Tue, 9 Nov 2010 08:07:59 GMT Received: from bda2319.bisx.produk.on.blackberry (localhost.localdomain [127.0.0.1]) by bda2319.bisx.produk.on.blackberry (8.13.7 TEAMON/8.13.7) with ESMTP id oA987vRo016870; Tue, 9 Nov 2010 08:07:57 GMT X-rim-org-msg-ref-id: 1893623701 Message-ID: <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> Content-Transfer-Encoding: base64 X-Priority: Normal References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net><4CD73075.8050408@lodderstedt.net><180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> In-Reply-To: <180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> Sensitivity: Normal Importance: Normal To: "Anthony Nadalin" , "Tschofenig, Hannes" From: torsten@lodderstedt.net Date: Tue, 9 Nov 2010 08:07:56 +0000 Content-Type: text/plain; charset="Windows-1252" MIME-Version: 1.0 Cc: "abfab@ietf.org" , "rai@ietf.org" , "ietf@ietf.org" , "secdir@ietf.org" , "websec@ietf.org" , "xmpp@ietf.org" , "kitten@ietf.org" , "iab@iab.org Board" , "iesg@ietf.org" , "oauth@ietf.org" Subject: Re: [OAUTH-WG] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: torsten@lodderstedt.net List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 08:21:09 -0000 V2UgdGhpbmsgdGhlIHNlY3VyaXR5IGNvbnNpZGVyYXRpb25zIHNob3VsZCBiZSBiYXNlZCBvbiBh IHRocmVhdCBtb2RlbCBvZiBPQXV0aC4gQnV0IGEgY29tcGxldGUgdGhyZWF0IG1vZGVsIHdvdWxk IGJsb3cgdXAgdGhlIHNwZWMuDQoNCldlIHRoZXJlZm9yZSBhaW0gdG8gcHJvZHVjZSBhIHNlcGFy YXRlIHNlY3VyaXR5IGRvY3VtZW50IChpbmZvcm1hdGlvbmFsIEktRC9SRkMpIGNvdmVyaW5nIHRo cmVhdCBtb2RlbCBhcyB3ZWxsIGFzIHNlY3VyaXR5IGRlc2lnbiBhbmQgY29uc2lkZXJhdGlvbnMu IFRoZSBzZWN1cml0eSBjb25zaWRlcmF0aW9ucyBzZWN0aW9uIG9mIHRoZSBjb3JlIHNwZWMgY2Fu IHRoZW4gYmUgZGlzdGlsbGVkIGZyb20gdGhpcyBkb2N1bWVudC4NCg0KUmVnYXJkcywNClRvcnN0 ZW4uDQpHZXNlbmRldCBtaXQgQmxhY2tCZXJyea4gV2VibWFpbCB2b24gVGVsZWtvbSBEZXV0c2No bGFuZCAgDQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9tOiBBbnRob255IE5hZGFs aW4gPHRvbnluYWRAbWljcm9zb2Z0LmNvbT4NCkRhdGU6IFR1ZSwgOSBOb3YgMjAxMCAwMTo1NDo1 NyANClRvOiBUb3JzdGVuIExvZGRlcnN0ZWR0PHRvcnN0ZW5AbG9kZGVyc3RlZHQubmV0PjsgSGFu bmVzIFRzY2hvZmVuaWc8aGFubmVzLnRzY2hvZmVuaWdAZ214Lm5ldD4NCkNjOiBhYmZhYkBpZXRm Lm9yZzxhYmZhYkBpZXRmLm9yZz47IHJhaUBpZXRmLm9yZzxyYWlAaWV0Zi5vcmc+OyBpZXRmQGll dGYub3JnPGlldGZAaWV0Zi5vcmc+OyBzZWNkaXJAaWV0Zi5vcmc8c2VjZGlyQGlldGYub3JnPjsg d2Vic2VjQGlldGYub3JnPHdlYnNlY0BpZXRmLm9yZz47IHhtcHBAaWV0Zi5vcmc8eG1wcEBpZXRm Lm9yZz47IGtpdHRlbkBpZXRmLm9yZzxraXR0ZW5AaWV0Zi5vcmc+OyBpYWJAaWFiLm9yZyBCb2Fy ZDxpYWJAaWFiLm9yZz47IGllc2dAaWV0Zi5vcmc8aWVzZ0BpZXRmLm9yZz47IG9hdXRoQGlldGYu b3JnPG9hdXRoQGlldGYub3JnPg0KU3ViamVjdDogUkU6IFtPQVVUSC1XR10gKiogT0F1dGggVHV0 b3JpYWwgJiBPQXV0aCBTZWN1cml0eSBTZXNzaW9uICoqDQoNCkkgd2FzIGxvb2tpbmcgZm9yIGxl c3Mgb2YgYW4gYW5hbHlzaXMgYW5kIG1vcmUgb2YgY29uc2lkZXJhdGlvbnMgKG9mIHRoZSBjdXJy ZW50IGZsb3dzIGFuZCBhY3RvcnMpLCBJJ20gbm90IHN1cmUgaG93IHRvIGFkYXB0IHdoYXQgeW91 IGhhdmUgZG9uZSB0byBhY3R1YWxseSBmaXQgaW4gdGhlIGN1cnJlbnQgc3BlY2lmaWNhdGlvbiwg d2FzIHlvdXIgdGhvdWdodCB0aGF0IHlvdSB3b3VsZCBwcm9kdWNlIGEgc2VwYXJhdGUgc2VjdXJp dHkgYW5hbHlzaXMgZG9jdW1lbnQ/DQoNCi0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tDQpGcm9t OiBvYXV0aC1ib3VuY2VzQGlldGYub3JnIFttYWlsdG86b2F1dGgtYm91bmNlc0BpZXRmLm9yZ10g T24gQmVoYWxmIE9mIFRvcnN0ZW4gTG9kZGVyc3RlZHQNClNlbnQ6IFN1bmRheSwgTm92ZW1iZXIg MDcsIDIwMTAgMzowNCBQTQ0KVG86IEhhbm5lcyBUc2Nob2ZlbmlnDQpDYzogYWJmYWJAaWV0Zi5v cmc7IHJhaUBpZXRmLm9yZzsgaWV0ZkBpZXRmLm9yZzsgc2VjZGlyQGlldGYub3JnOyB3ZWJzZWNA aWV0Zi5vcmc7IHhtcHBAaWV0Zi5vcmc7IGtpdHRlbkBpZXRmLm9yZzsgaWFiQGlhYi5vcmcgQm9h cmQ7IGllc2dAaWV0Zi5vcmc7IG9hdXRoQGlldGYub3JnDQpTdWJqZWN0OiBSZTogW09BVVRILVdH XSAqKiBPQXV0aCBUdXRvcmlhbCAmIE9BdXRoIFNlY3VyaXR5IFNlc3Npb24gKioNCg0KSGkgYWxs LA0KDQpNYXJrIE1jR2xvaW4gYW5kIG1lIGhhdmUgYmVlbiB3b3JraW5nIG9uIE9BdXRoIDIuMCBz ZWN1cml0eSBjb25zaWRlcmF0aW9ucyBmb3IgYSBjb3VwbGUgb2Ygd2Vla3Mgbm93LiBTaW5jZSB3 ZSBib3RoIGNhbm5vdCBhdHRlbmQgdGhlIElFVEYtNzkgbWVldGluZ3MsIHdlIHdvdWxkIGxpa2Ug dG8gcHJvdmlkZSB0aGUgV0cgd2l0aCBpbmZvcm1hdGlvbiByZWdhcmRpbmcgdGhlIGN1cnJlbnQg c3RhdHVzIG9mIG91ciB3b3JrLiBJIHRoZXJlZm9yZSB1cGxvYWRlZCBhX3ByZWxpbWluYXJ5XyB2 ZXJzaW9uIG9mIG91ciB3b3JraW5nIGRvY3VtZW50IHRvIHRoZSBXRydzIHdpa2kgYXQgaHR0cDov L3RyYWMudG9vbHMuaWV0Zi5vcmcvd2cvb2F1dGgvdHJhYy9hdHRhY2htZW50L3dpa2kvU2VjdXJp dHlDb25zaWRlcmF0aW9ucy9vYXV0aDIwX3NlY2NvbnNfMjAxMDExMDcucGRmLiANClRoZSBmb2N1 cyBvZiB0aGlzIHZlcnNpb24gd2FzIG9uIGNvbnNvbGlkYXRpbmcgcHJldmlvdXMgd29yayBhcyB3 ZWxsIGFzIHJlc3VsdHMgb2YgbWFpbGluZyBsaXN0IGRpc2N1c3Npb25zIGFuZCBzdGFydCB3b3Jr aW5nIHRvd2FyZHMgYSByaWdvcm91cyB0aHJlYXQgbW9kZWwuDQoNClBsZWFzZSBnaXZlIHVzIGZl ZWRiYWNrLg0KDQpyZWdhcmRzLA0KVG9yc3Rlbi4NCg0KQW0gMDcuMTEuMjAxMCAwMzoyMiwgc2No cmllYiBIYW5uZXMgVHNjaG9mZW5pZzoNCj4gSGkgYWxsLA0KPg0KPiBwbGVhc2UgY29uc2lkZXIg YXR0ZW5kaW5nIHRoZSBmb2xsb3dpbmcgdHdvIG1lZXRpbmdzIQ0KPg0KPiAqKiBPQXV0aCBTZWN1 cml0eSBTZXNzaW9uICoqDQo+DQo+IAkqIERhdGU6IE1vbmRheSwgMTM6MDAtMTU6MDANCj4gCSog TG9jYXRpb246IElBQiBicmVha291dCByb29tIChKYWRlIDIpDQo+IAkqIENvbnRhY3Q6IEhhbm5l cyBUc2Nob2ZlbmlnIGhhbm5lcy50c2Nob2ZlbmlnQGdteC5uZXQgVGhlIHNlY3VyaXR5IA0KPiBj b25zaWRlcmF0aW9uIHNlY3Rpb24gb2YgT0F1dGggMi4wIChkcmFmdCAtMTApIGlzIHN0aWxsIGVt cHR5LiBIZW5jZSwgd2Ugd291bGQgbGlrZSB0byBwdXQgc29tZSB0aW1lIGFzaWRlIHRvIGRpc2N1 c3Mgd2hhdCBzZWN1cml0eSB0aHJlYXRzLCByZXF1aXJlbWVudHMsIGFuZCBjb3VudGVybWVhc3Vy ZXMgbmVlZCB0byBiZSBkZXNjcmliZWQuIFdlIHdpbGwgdXNlIHRoZSBNb25kYXksIE5vdmVtYmVy IDgsIDEzMDAtMTUwMCBzbG90IHRvIGhhdmUgYSAgZGlzY3Vzc2lvbiBzZXNzaW9uLg0KPg0KPiBB cyBhIHN0YXJ0aW5nIHBvaW50IEkgc3VnZ2VzdCB0byBsb29rIGF0IHRoZSBmb2xsb3dpbmcgZG9j dW1lbnRzOg0KPg0KPiAJKiBodHRwOi8vdHJhYy50b29scy5pZXRmLm9yZy93Zy9vYXV0aC90cmFj L3dpa2kvU2VjdXJpdHlDb25zaWRlcmF0aW9ucw0KPiAJKiBodHRwOi8vdHJhYy50b29scy5pZXRm Lm9yZy93Zy9vYXV0aC90cmFjL3dpa2kvU2lnbmF0dXJlc1doeQ0KPiAJKiANCj4gaHR0cDovL3Rv b2xzLmlldGYub3JnL2lkL2RyYWZ0LXRzY2hvZmVuaWctb2F1dGgtc2lnbmF0dXJlLXRob3VnaHRz LTAwLg0KPiB0eHQNCj4NCj4gTm90ZTogSWYgeW91IGFyZSB1bmZhbWlsaWFyIHdpdGggT0F1dGgg dGhlbiB0aGUgT0F1dGggdHV0b3JpYWwgc2Vzc2lvbiBtaWdodCBiZSBtb3JlIHN1aXRhYmxlIGZv ciB5b3UhDQo+DQo+DQo+DQo+ICoqIE9BdXRoIFR1dG9yaWFsICoqDQo+DQo+IAkqIERhdGU6IFdl ZG5lc2RheSwgMTk6MzAgKGFmdGVyIHRoZSBwbGVuYXJ5KQ0KPiAJKiBMb2NhdGlvbjogSUFCIGJy ZWFrb3V0IHJvb20gKEphZGUgMikNCj4gCSogQ29udGFjdDogSGFubmVzIFRzY2hvZmVuaWcgaGFu bmVzLnRzY2hvZmVuaWdAZ214Lm5ldCBPQXV0aCBhbGxvd3MgYSANCj4gdXNlciB0byBncmFudCBh IHRoaXJkLXBhcnR5IFdlYiBzaXRlIG9yIGFwcGxpY2F0aW9uIGFjY2VzcyB0byB0aGVpciANCj4g cmVzb3VyY2VzLCB3aXRob3V0IG5lY2Vzc2FyaWx5IHJldmVhbGluZyB0aGVpciBjcmVkZW50aWFs cywgb3IgZXZlbiANCj4gdGhlaXIgaWRlbnRpdHkuIFRoZSBPQXV0aCB3b3JraW5nIGdyb3VwLCBz ZWUgDQo+IGh0dHA6Ly9kYXRhdHJhY2tlci5pZXRmLm9yZy93Zy9vYXV0aC9jaGFydGVyLywgaXMg Y3VycmVudGx5IHRyeWluZyB0byANCj4gZmluYWxpemUgdGhlaXIgbWFpbiBzcGVjaWZpY2F0aW9u LCBuYW1lbHkgT0F1dGggdjI6IA0KPiBodHRwOi8vZGF0YXRyYWNrZXIuaWV0Zi5vcmcvZG9jL2Ry YWZ0LWlldGYtb2F1dGgtdjIvDQo+DQo+IEJhc2VkIG9uIHRoZSBwb3NpdGl2ZSByZXNwb25zZSBh dCB0aGUgbGFzdCBJRVRGIG1lZXRpbmcgKGluIA0KPiBNYWFzdHJpY2h0KSB3ZSBkZWNpZGVkIHRv IGhvbGQgYW5vdGhlciBPQXV0aCB0dXRvcmlhbCwgbmFtZWx5IG9uIA0KPiAqV2VkbmVzZGF5LCBz dGFydGluZyBhdCAxOTozMCAoYWZ0ZXIgdGhlIElFVEYgT3BlcmF0aW9ucyBhbmQgDQo+IEFkbWlu aXN0cmF0aW9uIFBsZW5hcnkpIHRpbGwgYWJvdXQgMjE6MDAuIChOb3RlOiBJIGhhZCB0byBzd2l0 Y2ggdGhlIA0KPiBkYXkgYmVjYXVzZSBvZiB0aGUgc29jaWFsIGV2ZW50ISkNCj4NCj4gSXQgaXMg aGVscGZ1bCB0byByZWFkIHRocm91Z2ggdGhlIGRvY3VtZW50cyBhdmFpbGFibGUgaW50IGhlIHdv cmtpbmcgZ3JvdXAgYnV0IG5vdCByZXF1aXJlZC4NCj4NCj4gVXAtdG8tZGF0ZSBpbmZvcm1hdGlv biBjYW4gYmUgZm91bmQgaGVyZTogDQo+IGh0dHA6Ly93d3cuaWV0Zi5vcmcvcmVnaXN0cmF0aW9u L01lZXRpbmdXaWtpL3dpa2kvNzlib2ZzDQo+DQo+IENpYW8NCj4gSGFubmVzDQo+DQo+X19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gT0F1dGggbWFpbGlu ZyBsaXN0DQo+IE9BdXRoQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxtYW4v bGlzdGluZm8vb2F1dGgNCg0KX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX18NCk9BdXRoIG1haWxpbmcgbGlzdA0KT0F1dGhAaWV0Zi5vcmcNCmh0dHBzOi8vd3d3 LmlldGYub3JnL21haWxtYW4vbGlzdGluZm8vb2F1dGgNCg0K From rbarnes@bbn.com Tue Nov 9 00:53:26 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 35BCA28C170; Tue, 9 Nov 2010 00:53:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.617 X-Spam-Level: X-Spam-Status: No, score=-102.617 tagged_above=-999 required=5 tests=[AWL=-0.018, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u1-hw6kBQHuj; Tue, 9 Nov 2010 00:53:25 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by core3.amsl.com (Postfix) with ESMTP id DDB223A69D8; Tue, 9 Nov 2010 00:53:24 -0800 (PST) Received: from [128.89.253.252] (port=54397 helo=richards-MacBook-Pro.local) by smtp.bbn.com with esmtps (TLSv1:CAMELLIA256-SHA:256) (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PFjxa-000OfY-Ep; Tue, 09 Nov 2010 03:53:47 -0500 Message-ID: <4CD90C14.2060803@bbn.com> Date: Tue, 09 Nov 2010 16:53:40 +0800 From: "Richard L. Barnes" User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: torsten@lodderstedt.net References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net><4CD73075.8050408@lodderstedt.net><180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> In-Reply-To: <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit Cc: "abfab@ietf.org" , "rai@ietf.org" , "ietf@ietf.org" , "secdir@ietf.org" , "websec@ietf.org" , "xmpp@ietf.org" , "kitten@ietf.org" , "iab@iab.org Board" , "iesg@ietf.org" , "Tschofenig, Hannes" , "oauth@ietf.org" Subject: Re: [OAUTH-WG] [secdir] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 08:53:26 -0000 I would say that the security considerations should be based on a model of OAuth. Start with a model of the protocol and the guarantees you want, then explain how to use security mechanisms to achieve those guarantees. I promised Hannes today to do a review of the current document (which I admit I haven't read) and start on some security considerations from that perspective. So expect that in the next few weeks. --Richard On 11/9/10 4:07 PM, torsten@lodderstedt.net wrote: > We think the security considerations should be based on a threat model of OAuth. But a complete threat model would blow up the spec. > > We therefore aim to produce a separate security document (informational I-D/RFC) covering threat model as well as security design and considerations. The security considerations section of the core spec can then be distilled from this document. > > Regards, > Torsten. > Gesendet mit BlackBerry® Webmail von Telekom Deutschland > > -----Original Message----- > From: Anthony Nadalin > Date: Tue, 9 Nov 2010 01:54:57 > To: Torsten Lodderstedt; Hannes Tschofenig > Cc: abfab@ietf.org; rai@ietf.org; ietf@ietf.org; secdir@ietf.org; websec@ietf.org; xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board; iesg@ietf.org; oauth@ietf.org > Subject: RE: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** > > I was looking for less of an analysis and more of considerations (of the current flows and actors), I'm not sure how to adapt what you have done to actually fit in the current specification, was your thought that you would produce a separate security analysis document? > > -----Original Message----- > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of Torsten Lodderstedt > Sent: Sunday, November 07, 2010 3:04 PM > To: Hannes Tschofenig > Cc: abfab@ietf.org; rai@ietf.org; ietf@ietf.org; secdir@ietf.org; websec@ietf.org; xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board; iesg@ietf.org; oauth@ietf.org > Subject: Re: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** > > Hi all, > > Mark McGloin and me have been working on OAuth 2.0 security considerations for a couple of weeks now. Since we both cannot attend the IETF-79 meetings, we would like to provide the WG with information regarding the current status of our work. I therefore uploaded a_preliminary_ version of our working document to the WG's wiki at http://trac.tools.ietf.org/wg/oauth/trac/attachment/wiki/SecurityConsiderations/oauth20_seccons_20101107.pdf. > The focus of this version was on consolidating previous work as well as results of mailing list discussions and start working towards a rigorous threat model. > > Please give us feedback. > > regards, > Torsten. > > Am 07.11.2010 03:22, schrieb Hannes Tschofenig: >> Hi all, >> >> please consider attending the following two meetings! >> >> ** OAuth Security Session ** >> >> * Date: Monday, 13:00-15:00 >> * Location: IAB breakout room (Jade 2) >> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net The security >> consideration section of OAuth 2.0 (draft -10) is still empty. Hence, we would like to put some time aside to discuss what security threats, requirements, and countermeasures need to be described. We will use the Monday, November 8, 1300-1500 slot to have a discussion session. >> >> As a starting point I suggest to look at the following documents: >> >> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SecurityConsiderations >> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SignaturesWhy >> * >> http://tools.ietf.org/id/draft-tschofenig-oauth-signature-thoughts-00. >> txt >> >> Note: If you are unfamiliar with OAuth then the OAuth tutorial session might be more suitable for you! >> >> >> >> ** OAuth Tutorial ** >> >> * Date: Wednesday, 19:30 (after the plenary) >> * Location: IAB breakout room (Jade 2) >> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net OAuth allows a >> user to grant a third-party Web site or application access to their >> resources, without necessarily revealing their credentials, or even >> their identity. The OAuth working group, see >> http://datatracker.ietf.org/wg/oauth/charter/, is currently trying to >> finalize their main specification, namely OAuth v2: >> http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/ >> >> Based on the positive response at the last IETF meeting (in >> Maastricht) we decided to hold another OAuth tutorial, namely on >> *Wednesday, starting at 19:30 (after the IETF Operations and >> Administration Plenary) till about 21:00. (Note: I had to switch the >> day because of the social event!) >> >> It is helpful to read through the documents available int he working group but not required. >> >> Up-to-date information can be found here: >> http://www.ietf.org/registration/MeetingWiki/wiki/79bofs >> >> Ciao >> Hannes >> >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > > _______________________________________________ > secdir mailing list > secdir@ietf.org > https://www.ietf.org/mailman/listinfo/secdir From torsten@lodderstedt.net Tue Nov 9 01:14:22 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 0662A28C179 for ; Tue, 9 Nov 2010 01:14:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.199 X-Spam-Level: X-Spam-Status: No, score=-2.199 tagged_above=-999 required=5 tests=[AWL=0.050, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kA1nm2cPVALE for ; Tue, 9 Nov 2010 01:14:20 -0800 (PST) Received: from smtprelay04.ispgateway.de (smtprelay04.ispgateway.de [80.67.31.42]) by core3.amsl.com (Postfix) with ESMTP id ECC8B3A68D1 for ; Tue, 9 Nov 2010 01:14:15 -0800 (PST) Received: from [79.253.52.63] (helo=[192.168.71.43]) by smtprelay04.ispgateway.de with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from ) id 1PFkHb-0003Gm-4Q; Tue, 09 Nov 2010 10:14:27 +0100 Message-ID: <4CD910F1.8090207@lodderstedt.net> Date: Tue, 09 Nov 2010 10:14:25 +0100 From: Torsten Lodderstedt User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: "Richard L. Barnes" References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net><4CD73075.8050408@lodderstedt.net><180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> <4CD90C14.2060803@bbn.com> In-Reply-To: <4CD90C14.2060803@bbn.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit X-Df-Sender: torsten@lodderstedt-online.de Cc: "Tschofenig, Hannes" , "oauth@ietf.org" Subject: Re: [OAUTH-WG] [secdir] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 09:14:22 -0000 Sounds good. Any contribution is higly appreciated. regards, Torsten. Am 09.11.2010 09:53, schrieb Richard L. Barnes: > I would say that the security considerations should be based on a > model of OAuth. Start with a model of the protocol and the guarantees > you want, then explain how to use security mechanisms to achieve those > guarantees. > > I promised Hannes today to do a review of the current document (which > I admit I haven't read) and start on some security considerations from > that perspective. So expect that in the next few weeks. > > --Richard > > > > > On 11/9/10 4:07 PM, torsten@lodderstedt.net wrote: >> We think the security considerations should be based on a threat >> model of OAuth. But a complete threat model would blow up the spec. >> >> We therefore aim to produce a separate security document >> (informational I-D/RFC) covering threat model as well as security >> design and considerations. The security considerations section of the >> core spec can then be distilled from this document. >> >> Regards, >> Torsten. >> Gesendet mit BlackBerry® Webmail von Telekom Deutschland >> >> -----Original Message----- >> From: Anthony Nadalin >> Date: Tue, 9 Nov 2010 01:54:57 >> To: Torsten Lodderstedt; Hannes >> Tschofenig >> Cc: abfab@ietf.org; rai@ietf.org; >> ietf@ietf.org; secdir@ietf.org; >> websec@ietf.org; xmpp@ietf.org; >> kitten@ietf.org; iab@iab.org Board; >> iesg@ietf.org; oauth@ietf.org >> Subject: RE: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** >> >> I was looking for less of an analysis and more of considerations (of >> the current flows and actors), I'm not sure how to adapt what you >> have done to actually fit in the current specification, was your >> thought that you would produce a separate security analysis document? >> >> -----Original Message----- >> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On >> Behalf Of Torsten Lodderstedt >> Sent: Sunday, November 07, 2010 3:04 PM >> To: Hannes Tschofenig >> Cc: abfab@ietf.org; rai@ietf.org; ietf@ietf.org; secdir@ietf.org; >> websec@ietf.org; xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board; >> iesg@ietf.org; oauth@ietf.org >> Subject: Re: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** >> >> Hi all, >> >> Mark McGloin and me have been working on OAuth 2.0 security >> considerations for a couple of weeks now. Since we both cannot attend >> the IETF-79 meetings, we would like to provide the WG with >> information regarding the current status of our work. I therefore >> uploaded a_preliminary_ version of our working document to the WG's >> wiki at >> http://trac.tools.ietf.org/wg/oauth/trac/attachment/wiki/SecurityConsiderations/oauth20_seccons_20101107.pdf. >> The focus of this version was on consolidating previous work as well >> as results of mailing list discussions and start working towards a >> rigorous threat model. >> >> Please give us feedback. >> >> regards, >> Torsten. >> >> Am 07.11.2010 03:22, schrieb Hannes Tschofenig: >>> Hi all, >>> >>> please consider attending the following two meetings! >>> >>> ** OAuth Security Session ** >>> >>> * Date: Monday, 13:00-15:00 >>> * Location: IAB breakout room (Jade 2) >>> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net The security >>> consideration section of OAuth 2.0 (draft -10) is still empty. >>> Hence, we would like to put some time aside to discuss what security >>> threats, requirements, and countermeasures need to be described. We >>> will use the Monday, November 8, 1300-1500 slot to have a >>> discussion session. >>> >>> As a starting point I suggest to look at the following documents: >>> >>> * >>> http://trac.tools.ietf.org/wg/oauth/trac/wiki/SecurityConsiderations >>> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SignaturesWhy >>> * >>> http://tools.ietf.org/id/draft-tschofenig-oauth-signature-thoughts-00. >>> txt >>> >>> Note: If you are unfamiliar with OAuth then the OAuth tutorial >>> session might be more suitable for you! >>> >>> >>> >>> ** OAuth Tutorial ** >>> >>> * Date: Wednesday, 19:30 (after the plenary) >>> * Location: IAB breakout room (Jade 2) >>> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net OAuth >>> allows a >>> user to grant a third-party Web site or application access to their >>> resources, without necessarily revealing their credentials, or even >>> their identity. The OAuth working group, see >>> http://datatracker.ietf.org/wg/oauth/charter/, is currently trying to >>> finalize their main specification, namely OAuth v2: >>> http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/ >>> >>> Based on the positive response at the last IETF meeting (in >>> Maastricht) we decided to hold another OAuth tutorial, namely on >>> *Wednesday, starting at 19:30 (after the IETF Operations and >>> Administration Plenary) till about 21:00. (Note: I had to switch the >>> day because of the social event!) >>> >>> It is helpful to read through the documents available int he working >>> group but not required. >>> >>> Up-to-date information can be found here: >>> http://www.ietf.org/registration/MeetingWiki/wiki/79bofs >>> >>> Ciao >>> Hannes >>> >>> _______________________________________________ >>> OAuth mailing list >>> OAuth@ietf.org >>> https://www.ietf.org/mailman/listinfo/oauth >> >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth >> >> _______________________________________________ >> secdir mailing list >> secdir@ietf.org >> https://www.ietf.org/mailman/listinfo/secdir From Michael.Jones@microsoft.com Tue Nov 9 01:26:03 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B7D6728C1C1 for ; Tue, 9 Nov 2010 01:26:03 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8OQYiD210EMI for ; Tue, 9 Nov 2010 01:25:55 -0800 (PST) Received: from smtp.microsoft.com (smtp.microsoft.com [131.107.115.212]) by core3.amsl.com (Postfix) with ESMTP id 8F08C28C1BF for ; Tue, 9 Nov 2010 01:25:55 -0800 (PST) Received: from TK5EX14HUBC105.redmond.corp.microsoft.com (157.54.80.48) by TK5-EXGWY-E801.partners.extranet.microsoft.com (10.251.56.50) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 9 Nov 2010 01:26:16 -0800 Received: from TK5EX14MBXC202.redmond.corp.microsoft.com ([169.254.2.127]) by TK5EX14HUBC105.redmond.corp.microsoft.com ([157.54.80.48]) with mapi id 14.01.0255.003; Tue, 9 Nov 2010 01:26:16 -0800 From: Mike Jones To: 'IIW Notes' , "oauth@ietf.org" Thread-Topic: JSON Token naming spec results at IIW on Wednesday Thread-Index: Act/8CNRpC+r7n1MTCSKWoIfnsVgrA== Date: Tue, 9 Nov 2010 09:26:16 +0000 Message-ID: <4E1F6AAD24975D4BA5B1680429673943245DB792@TK5EX14MBXC202.redmond.corp.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.123.12] Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B1680429673943245DB792TK5EX14MBXC202r_" MIME-Version: 1.0 Cc: "openid-specs-ab@lists.openid.net" , "openid-specs-connect@lists.openid.net" Subject: [OAUTH-WG] JSON Token naming spec results at IIW on Wednesday X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 09:26:03 -0000 --_000_4E1F6AAD24975D4BA5B1680429673943245DB792TK5EX14MBXC202r_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable We held a session on naming for JSON Web Tokens (JWTs) at IIW (Wednesday du= ring Session 5 in space E), building upon the results from the JSON Tokens= and No Base String sessions on Tuesday and the JSON Token Encryption session on Wednesday. Like the previous sessi= ons, there was a clear consensus for the decisions the group made. Names are needed for these specification elements: * Envelope parameters (such as the name of the signature parameter) * Claim names (such as the name of the issuer claim) * Algorithm names (such as the names representing the HMAC SHA-256 a= nd AES-256-CBC algorithms) The first issue tacked by the participants was whether short names should b= e used in order to keep tokens concise (and in particular, in order to have= them be potentially usable in query strings for mobile phone browsers with= 512-character URL limits), or whether to use longer, descriptive names. F= or instance, the name of an algorithm parameter could be either "alg" or "a= lgorithm". By a 7-2 vote, the participants opted for short names. We next used the names in the current JWT spec to drive discussion on specific names = in each category. In keeping with the decision to employ short names, Nat = Sakimura suggested that the few names over three characters in length - spe= cifically "keyid" and "curi" also be shortened to three-character names. T= he other participants concurred with this suggestion. A discussion was held on behalf of Paul Tarjan of Facebook on defining a st= andard time-issued-at claim (which together with the expires claim, bounds = the token lifetime). There was consensus that this claim should be defined= by the specification. George Fletcher led a discussion on whether an issued-to claim distinct fro= m the audience claim should be defined. The group didn't feel strongly abo= ut this, but voted 3-1 against including it. The participants noted that a= ny claims meaningful to both parties can be defined as needed, so all claim= s need not be pre-defined in the specification. The group discussed what algorithm names should be used. It was agreed tha= t while each software package uses specific names for algorithms, because t= hey tend to differ by software package, there is no compelling reason to ch= oose one set over another. And indeed, given the group's over-arching deci= sion to use short names, people felt that employing short names such as "HS= 256" imposed no more burden on implementers that using longer names like "H= MAC-SHA-256" or "http://www.w3.org/2001/04/xmldsig-more#hmac-sha256". Thus= , the short names in the current JWT spec were endorsed, with the understanding that = additional names will be needed for encryption algorithm names and names of= recommended algorithm combinations. To help implementers, the group suggested that the specification include a = table cross-referencing the algorithm name strings used in standard softwar= e packages and specifications. Breno de Medeiros supplied a link to the JC= E algorithm names for inclusion in this table. While not strictly on the topic of naming, the group held a discussion of h= ow to factor the JWT specification or specifications so as to maximize its = acceptance and adoption. The choices discussed were (1) a single specifica= tion, (2) a part one specification covering signing and claims and a part t= wo specification covering encryption, and (3) three related specifications = - one for signing, one for claims, and one for encryption. The consensus w= as for (2), since the normal use case will always include signed sets of cl= aims, whereas people should only need to pay the price to understand encryp= tion if they actually need to employ it. Finally, Nat Sakimura asked if we wanted the branding of the specification = or specifications to be more general than JSON Web Token (JWT), since the s= cope of the work is actually broader - encompassing JSON encodings for clai= ms, signing, and encryption. Mike Jones took the position that, given that= this is a composite spec including JWT claims, that we're better off brand= ing it in a way that matches the common use case, and therefore and keeping= the name JWT as the overall brand. The participants concurred. --_000_4E1F6AAD24975D4BA5B1680429673943245DB792TK5EX14MBXC202r_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

We held a session on naming for JSON Web Tokens (JWT= s) at IIW (Wednesday during Session 5 in space E), building upon the result= s from the  JSON Tokens and No Base String sessions on Tuesday and the JSON Token Encryption session on Wednesday.  Like the previous ses= sions, there was a clear consensus for the decisions the group made.

 

Names are needed for these specification elements:

·        Envelope parameters (such as the name of the= signature parameter)

·        Claim names (such as the name of the issuer = claim)

·        Algorithm names (such as the names represent= ing the HMAC SHA-256 and AES-256-CBC algorithms)

 

The first issue tacked by the participants was wheth= er short names should be used in order to keep tokens concise (and in parti= cular, in order to have them be potentially usable in query strings for mob= ile phone browsers with 512-character URL limits), or whether to use longer, descriptive names.  For instan= ce, the name of an algorithm parameter could be either “alg” or= “algorithm”.  By a 7-2 vote, the participants opted for s= hort names.

 

We next used the names in the current JWT spec to drive discussion on specific names in each category= .  In keeping with the decision to employ short names, Nat Sakimura su= ggested that the few names over three characters in length – specific= ally “keyid” and “curi” also be shortened to three-character names.  The other participants concurred with this su= ggestion.

 

A discussion was held on behalf of Paul Tarjan of Fa= cebook on defining a standard time-issued-at claim (which together with the= expires claim, bounds the token lifetime).  There was consensus that = this claim should be defined by the specification.

 

George Fletcher led a discussion on whether an issue= d-to claim distinct from the audience claim should be defined.  The gr= oup didn’t feel strongly about this, but voted 3-1 against including = it.  The participants noted that any claims meaningful to both parties can be defined as needed, so all claims need not be pre-de= fined in the specification.

 

The group discussed what algorithm names should be u= sed.  It was agreed that while each software package uses specific nam= es for algorithms, because they tend to differ by software package, there i= s no compelling reason to choose one set over another.  And indeed, given the group’s over-arching decis= ion to use short names, people felt that employing short names such as R= 20;HS256” imposed no more burden on implementers that using longer na= mes like “HMAC-SHA-256” or “http://www.w3.org/2001/04/xml= dsig-more#hmac-sha256”.  Thus, the short names in the current JWT spec were endorsed, with the understanding that additional = names will be needed for encryption algorithm names and names of recommende= d algorithm combinations.

 

To help implementers, the group suggested that the s= pecification include a table cross-referencing the algorithm name strings u= sed in standard software packages and specifications.  Breno de Medeir= os supplied a link to the JCE algorithm names for inclusion in this table.

 

While not strictly on the topic of naming, the group= held a discussion of how to factor the JWT specification or specifications= so as to maximize its acceptance and adoption.  The choices discussed= were (1) a single specification, (2) a part one specification covering signing and claims and a part two specific= ation covering encryption, and (3) three related specifications – one= for signing, one for claims, and one for encryption.  The consensus w= as for (2), since the normal use case will always include signed sets of claims, whereas people should only need to p= ay the price to understand encryption if they actually need to employ it.

 

Finally, Nat Sakimura asked if we wanted the brandin= g of the specification or specifications to be more general than JSON Web T= oken (JWT), since the scope of the work is actually broader – encompa= ssing JSON encodings for claims, signing, and encryption.  Mike Jones took the position that, given that this i= s a composite spec including JWT claims, that we're better off branding it = in a way that matches the common use case, and therefore and keeping the na= me JWT as the overall brand.  The participants concurred.

 

--_000_4E1F6AAD24975D4BA5B1680429673943245DB792TK5EX14MBXC202r_-- From jricher@mitre.org Tue Nov 9 06:42:05 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 05A7D3A6A0C for ; Tue, 9 Nov 2010 06:42:05 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6VmII-IIp6Ys for ; Tue, 9 Nov 2010 06:42:04 -0800 (PST) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id A47C33A6A05 for ; Tue, 9 Nov 2010 06:42:00 -0800 (PST) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id oA9EfffP025198 for ; Tue, 9 Nov 2010 09:41:41 -0500 Received: from imchub1.MITRE.ORG (imchub1.mitre.org [129.83.29.73]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id oA9EffXh025193 for ; Tue, 9 Nov 2010 09:41:41 -0500 Received: from [129.83.50.65] (129.83.50.65) by imchub1.MITRE.ORG (129.83.29.73) with Microsoft SMTP Server id 8.2.254.0; Tue, 9 Nov 2010 09:41:40 -0500 From: Justin Richer To: "oauth@ietf.org" Content-Type: text/plain; charset="UTF-8" Date: Tue, 9 Nov 2010 09:41:39 -0500 Message-ID: <1289313699.18932.112.camel@pulse> MIME-Version: 1.0 X-Mailer: Evolution 2.30.3 Content-Transfer-Encoding: 7bit Subject: [OAUTH-WG] [Fwd: New Version Notification for draft-richer-oauth-instance-00] X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 14:42:05 -0000 Client instance information - an update on Google's "xoauth_display_name" idea. -- Justin -------- Forwarded Message -------- > From: IETF I-D Submission Tool > To: Richer, Justin P. > Subject: New Version Notification for draft-richer-oauth-instance-00 > Date: Tue, 9 Nov 2010 09:32:37 -0500 > > A new version of I-D, draft-richer-oauth-instance-00.txt has been successfully submitted by Justin Richer and posted to the IETF repository. > > Filename: draft-richer-oauth-instance > Revision: 00 > Title: OAuth Client Instance Extension > Creation_date: 2010-11-07 > WG ID: Independent Submission > Number_of_pages: 5 > > Abstract: > This specification defines two client instance extension parameters > for OAuth 2.0 user authorization requests. > > > > The IETF Secretariat. > > From jricher@mitre.org Tue Nov 9 06:53:50 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 14A653A681F for ; Tue, 9 Nov 2010 06:53:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gUSC88b1Ujmd for ; Tue, 9 Nov 2010 06:53:48 -0800 (PST) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id A182D3A68AC for ; Tue, 9 Nov 2010 06:53:48 -0800 (PST) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id oA9EsD8U011852 for ; Tue, 9 Nov 2010 09:54:13 -0500 Received: from imchub2.MITRE.ORG (imchub2.mitre.org [129.83.29.74]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id oA9EsCWB011796 for ; Tue, 9 Nov 2010 09:54:12 -0500 Received: from [129.83.50.65] (129.83.50.65) by imchub2.MITRE.ORG (129.83.29.74) with Microsoft SMTP Server id 8.2.254.0; Tue, 9 Nov 2010 09:54:11 -0500 From: Justin Richer To: "oauth@ietf.org" Content-Type: text/plain; charset="UTF-8" Date: Tue, 9 Nov 2010 09:54:10 -0500 Message-ID: <1289314450.18932.125.camel@pulse> MIME-Version: 1.0 X-Mailer: Evolution 2.30.3 Content-Transfer-Encoding: 7bit Subject: [OAUTH-WG] [Fwd: New Version Notification for draft-richer-oauth-xml-00] X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 14:53:50 -0000 XML encoding of JSON output values, for when you want to use OAuth with an XML API. It is my intent that this (and the instance draft) become working group items. -- Justin -------- Forwarded Message -------- > From: IETF I-D Submission Tool > To: Richer, Justin P. > Subject: New Version Notification for draft-richer-oauth-xml-00 > Date: Tue, 9 Nov 2010 09:32:46 -0500 > > A new version of I-D, draft-richer-oauth-xml-00.txt has been successfully submitted by Justin Richer and posted to the IETF repository. > > Filename: draft-richer-oauth-xml > Revision: 00 > Title: XML Encoding for OAuth 2 > Creation_date: 2010-11-07 > WG ID: Independent Submission > Number_of_pages: 8 > > Abstract: > This document describes a method of translating JSON structured > values to XML structured values in the context of the OAuth 2 > protocol. > > > > The IETF Secretariat. > > From mark.mcgloin@ie.ibm.com Tue Nov 9 06:54:30 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CCC2C3A6A04; Tue, 9 Nov 2010 06:54:30 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kxy8MrZ8zQvp; Tue, 9 Nov 2010 06:54:29 -0800 (PST) Received: from mtagate3.de.ibm.com (mtagate3.de.ibm.com [195.212.17.163]) by core3.amsl.com (Postfix) with ESMTP id 949B13A69BE; Tue, 9 Nov 2010 06:54:28 -0800 (PST) Received: from d06nrmr1307.portsmouth.uk.ibm.com (d06nrmr1307.portsmouth.uk.ibm.com [9.149.38.129]) by mtagate3.de.ibm.com (8.13.1/8.13.1) with ESMTP id oA9Esflx004036; Tue, 9 Nov 2010 14:54:41 GMT Received: from d06av04.portsmouth.uk.ibm.com (d06av04.portsmouth.uk.ibm.com [9.149.37.216]) by d06nrmr1307.portsmouth.uk.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id oA9EsfKQ3305506; Tue, 9 Nov 2010 14:54:41 GMT Received: from d06av04.portsmouth.uk.ibm.com (loopback [127.0.0.1]) by d06av04.portsmouth.uk.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id oA9EsfPh002056; Tue, 9 Nov 2010 07:54:41 -0700 Received: from d06ml093.portsmouth.uk.ibm.com (d06ml093.portsmouth.uk.ibm.com [9.149.104.171]) by d06av04.portsmouth.uk.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id oA9Esf4U002048; Tue, 9 Nov 2010 07:54:41 -0700 In-Reply-To: <4CD90C14.2060803@bbn.com> References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net><4CD73075.8050408@lodderstedt.net><180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> <4CD90C14.2060803@bbn.com> X-KeepSent: 7957FE3B:45025425-802577D6:004F9E8F; type=4; name=$KeepSent To: "Richard L. Barnes" X-Mailer: Lotus Notes Release 8.5.1 September 28, 2009 Message-ID: From: Mark Mcgloin Date: Tue, 9 Nov 2010 14:54:06 +0000 X-MIMETrack: Serialize by Router on D06ML093/06/M/IBM(Release 8.0.2FP6|July 15, 2010) at 09/11/2010 14:54:07 MIME-Version: 1.0 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: quoted-printable Cc: "abfab@ietf.org" , "rai@ietf.org" , "ietf@ietf.org" , "secdir@ietf.org" , "websec@ietf.org" , "xmpp@ietf.org" , "kitten@ietf.org" , "iab@iab.org Board" , "iesg@ietf.org" , "Tschofenig, Hannes" , "oauth@ietf.org" , oauth-bounces@ietf.org Subject: Re: [OAUTH-WG] [secdir] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 14:54:31 -0000 When Torsten and I started pulling together the security considerations= over the last 4-6 weeks, we toyed with the idea of either populating th= e security considerations section of the protocol with a list/tree of considerations, or creating a more comprehensive document to ensure we covered all aspects, list security features and which would also act as= a security aid to developers implementing the oauth protocol. We decided = on the latter and agreed it could later be distilled down to something tha= t will fit into the security considerations section of the protocol. Bear in mind the document needs tidying but we wanted to push something= in before the security meeting in China Regards Mark McGloin oauth-bounces@ietf.org wrote on 09/11/2010 08:53:40: > "Richard L. Barnes" > Sent by: oauth-bounces@ietf.org > > 09/11/2010 08:53 > > To > > torsten@lodderstedt.net > > cc > > "abfab@ietf.org" , "rai@ietf.org" , > "ietf@ietf.org" , "secdir@ietf.org" > , "websec@ietf.org" , > "xmpp@ietf.org" , "kitten@ietf.org" > , "iab@iab.org Board" , > "iesg@ietf.org" , "Tschofenig, Hannes" > , "oauth@ietf.org" > > Subject > > Re: [OAUTH-WG] [secdir] ** OAuth Tutorial & OAuth Security Session **= > > I would say that the security considerations should be based on a mod= el > of OAuth. Start with a model of the protocol and the guarantees you > want, then explain how to use security mechanisms to achieve those > guarantees. > > I promised Hannes today to do a review of the current document (which= I > admit I haven't read) and start on some security considerations from > that perspective. So expect that in the next few weeks. > > --Richard > > > > > On 11/9/10 4:07 PM, torsten@lodderstedt.net wrote: > > We think the security considerations should be based on a threat > model of OAuth. But a complete threat model would blow up the spec. > > > > We therefore aim to produce a separate security document > (informational I-D/RFC) covering threat model as well as security > design and considerations. The security considerations section of > the core spec can then be distilled from this document. > > > > Regards, > > Torsten. > > Gesendet mit BlackBerry=AE Webmail von Telekom Deutschland > > > > -----Original Message----- > > From: Anthony Nadalin > > Date: Tue, 9 Nov 2010 01:54:57 > > To: Torsten Lodderstedt; Hannes > Tschofenig > > Cc: abfab@ietf.org; rai@ietf.org; > ietf@ietf.org; secdir@ietf.org; > websec@ietf.org; xmpp@ietf.org; > kitten@ietf.org; iab@iab.org Board; > iesg@ietf.org; oauth@ietf.org > > Subject: RE: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session = ** > > > > I was looking for less of an analysis and more of considerations > (of the current flows and actors), I'm not sure how to adapt what > you have done to actually fit in the current specification, was your > thought that you would produce a separate security analysis document?= > > > > -----Original Message----- > > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On > Behalf Of Torsten Lodderstedt > > Sent: Sunday, November 07, 2010 3:04 PM > > To: Hannes Tschofenig > > Cc: abfab@ietf.org; rai@ietf.org; ietf@ietf.org; secdir@ietf.org; > websec@ietf.org; xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board; > iesg@ietf.org; oauth@ietf.org > > Subject: Re: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session = ** > > > > Hi all, > > > > Mark McGloin and me have been working on OAuth 2.0 security > considerations for a couple of weeks now. Since we both cannot > attend the IETF-79 meetings, we would like to provide the WG with > information regarding the current status of our work. I therefore > uploaded a_preliminary_ version of our working document to the WG's w= iki at > http://trac.tools.ietf.org/wg/oauth/trac/attachment/wiki/ > SecurityConsiderations/oauth20_seccons_20101107.pdf. > > The focus of this version was on consolidating previous work as > well as results of mailing list discussions and start working > towards a rigorous threat model. > > > > Please give us feedback. > > > > regards, > > Torsten. > > > > Am 07.11.2010 03:22, schrieb Hannes Tschofenig: > >> Hi all, > >> > >> please consider attending the following two meetings! > >> > >> ** OAuth Security Session ** > >> > >> * Date: Monday, 13:00-15:00 > >> * Location: IAB breakout room (Jade 2) > >> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net The secu= rity > >> consideration section of OAuth 2.0 (draft -10) is still empty. > Hence, we would like to put some time aside to discuss what security > threats, requirements, and countermeasures need to be described. We > will use the Monday, November 8, 1300-1500 slot to have a discussion= session. > >> > >> As a starting point I suggest to look at the following documents: > >> > >> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SecurityConsiderations > >> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SignaturesWhy > >> * > >> http://tools.ietf.org/id/draft-tschofenig-oauth-signature-thoughts= -00. > >> txt > >> > >> Note: If you are unfamiliar with OAuth then the OAuth tutorial > session might be more suitable for you! > >> > >> > >> > >> ** OAuth Tutorial ** > >> > >> * Date: Wednesday, 19:30 (after the plenary) > >> * Location: IAB breakout room (Jade 2) > >> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net OAuth al= lows a > >> user to grant a third-party Web site or application access to thei= r > >> resources, without necessarily revealing their credentials, or eve= n > >> their identity. The OAuth working group, see > >> http://datatracker.ietf.org/wg/oauth/charter/, is currently trying= to > >> finalize their main specification, namely OAuth v2: > >> http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/ > >> > >> Based on the positive response at the last IETF meeting (in > >> Maastricht) we decided to hold another OAuth tutorial, namely on > >> *Wednesday, starting at 19:30 (after the IETF Operations and > >> Administration Plenary) till about 21:00. (Note: I had to switch t= he > >> day because of the social event!) > >> > >> It is helpful to read through the documents available int he > working group but not required. > >> > >> Up-to-date information can be found here: > >> http://www.ietf.org/registration/MeetingWiki/wiki/79bofs > >> > >> Ciao > >> Hannes > >> > >> _______________________________________________ > >> OAuth mailing list > >> OAuth@ietf.org > >> https://www.ietf.org/mailman/listinfo/oauth > > > > _______________________________________________ > > OAuth mailing list > > OAuth@ietf.org > > https://www.ietf.org/mailman/listinfo/oauth > > > > _______________________________________________ > > secdir mailing list > > secdir@ietf.org > > https://www.ietf.org/mailman/listinfo/secdir > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth= From Hannes.Tschofenig@gmx.net Tue Nov 9 07:52:15 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E323F28C124 for ; Tue, 9 Nov 2010 07:52:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.599 X-Spam-Level: X-Spam-Status: No, score=-102.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BVnNZc3NDC3o for ; Tue, 9 Nov 2010 07:52:14 -0800 (PST) Received: from mail.gmx.net (mailout-de.gmx.net [213.165.64.22]) by core3.amsl.com (Postfix) with SMTP id 3457F28C0F8 for ; Tue, 9 Nov 2010 07:51:27 -0800 (PST) Received: (qmail invoked by alias); 09 Nov 2010 15:51:49 -0000 Received: from unknown (EHLO [10.40.72.9]) [222.128.202.2] by mail.gmx.net (mp056) with SMTP; 09 Nov 2010 16:51:49 +0100 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX1/XMcIVuGjX6eW0vtUqhx2WxjJv09iuUUYjuP6FOS 2GztvEQ+IJjTd7 Mime-Version: 1.0 (Apple Message framework v1081) Content-Type: text/plain; charset=iso-8859-1 From: Hannes Tschofenig In-Reply-To: Date: Tue, 9 Nov 2010 23:51:43 +0800 Content-Transfer-Encoding: quoted-printable Message-Id: <1C350843-FD19-4D2E-BC14-31B2FD5B2AE9@gmx.net> References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net><4CD73075.8050408@lodderstedt.net><180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> <4CD90C14.2060803@bbn.com> To: Mark Mcgloin X-Mailer: Apple Mail (2.1081) X-Y-GMX-Trusted: 0 Cc: Hannes Tschofenig , oauth@ietf.org Subject: [OAUTH-WG] Security Writeups -- Re: [kitten] [secdir] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 09 Nov 2010 15:52:16 -0000 Hi Mark, Richard, and Torsten,=20 there is certainly a very good piece of work available to us for getting = the security consideration text pulled together.=20 We still have to find out how to best tackle the work. We obviously = cannot put an extended version of the current document into the security = consideration section of the OAuth main specification.=20 Note: I have taken the other mailing lists from CC to avoid = cross-posting.=20 Ciao Hannes On Nov 9, 2010, at 10:54 PM, Mark Mcgloin wrote: > When Torsten and I started pulling together the security = considerations > over the last 4-6 weeks, we toyed with the idea of either populating = the > security considerations section of the protocol with a list/tree of > considerations, or creating a more comprehensive document to ensure we > covered all aspects, list security features and which would also act = as a > security aid to developers implementing the oauth protocol. We decided = on > the latter and agreed it could later be distilled down to something = that > will fit into the security considerations section of the protocol. >=20 > Bear in mind the document needs tidying but we wanted to push = something in > before the security meeting in China >=20 > Regards > Mark McGloin >=20 > oauth-bounces@ietf.org wrote on 09/11/2010 08:53:40: >=20 >> "Richard L. Barnes" >> Sent by: oauth-bounces@ietf.org >>=20 >> 09/11/2010 08:53 >>=20 >> To >>=20 >> torsten@lodderstedt.net >>=20 >> cc >>=20 >> "abfab@ietf.org" , "rai@ietf.org" , >> "ietf@ietf.org" , "secdir@ietf.org" >> , "websec@ietf.org" , >> "xmpp@ietf.org" , "kitten@ietf.org" >> , "iab@iab.org Board" , >> "iesg@ietf.org" , "Tschofenig, Hannes" >> , "oauth@ietf.org" >>=20 >> Subject >>=20 >> Re: [OAUTH-WG] [secdir] ** OAuth Tutorial & OAuth Security Session ** >>=20 >> I would say that the security considerations should be based on a = model >> of OAuth. Start with a model of the protocol and the guarantees you >> want, then explain how to use security mechanisms to achieve those >> guarantees. >>=20 >> I promised Hannes today to do a review of the current document (which = I >> admit I haven't read) and start on some security considerations from >> that perspective. So expect that in the next few weeks. >>=20 >> --Richard >>=20 >>=20 >>=20 >>=20 >> On 11/9/10 4:07 PM, torsten@lodderstedt.net wrote: >>> We think the security considerations should be based on a threat >> model of OAuth. But a complete threat model would blow up the spec. >>>=20 >>> We therefore aim to produce a separate security document >> (informational I-D/RFC) covering threat model as well as security >> design and considerations. The security considerations section of >> the core spec can then be distilled from this document. >>>=20 >>> Regards, >>> Torsten. >>> Gesendet mit BlackBerry=AE Webmail von Telekom Deutschland >>>=20 >>> -----Original Message----- >>> From: Anthony Nadalin >>> Date: Tue, 9 Nov 2010 01:54:57 >>> To: Torsten Lodderstedt; Hannes >> Tschofenig >>> Cc: abfab@ietf.org; rai@ietf.org; >> ietf@ietf.org; secdir@ietf.org; >> websec@ietf.org; xmpp@ietf.org; >> kitten@ietf.org; iab@iab.org Board; >> iesg@ietf.org; oauth@ietf.org >>> Subject: RE: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session = ** >>>=20 >>> I was looking for less of an analysis and more of considerations >> (of the current flows and actors), I'm not sure how to adapt what >> you have done to actually fit in the current specification, was your >> thought that you would produce a separate security analysis document? >>>=20 >>> -----Original Message----- >>> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On >> Behalf Of Torsten Lodderstedt >>> Sent: Sunday, November 07, 2010 3:04 PM >>> To: Hannes Tschofenig >>> Cc: abfab@ietf.org; rai@ietf.org; ietf@ietf.org; secdir@ietf.org; >> websec@ietf.org; xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board; >> iesg@ietf.org; oauth@ietf.org >>> Subject: Re: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session = ** >>>=20 >>> Hi all, >>>=20 >>> Mark McGloin and me have been working on OAuth 2.0 security >> considerations for a couple of weeks now. Since we both cannot >> attend the IETF-79 meetings, we would like to provide the WG with >> information regarding the current status of our work. I therefore >> uploaded a_preliminary_ version of our working document to the WG's = wiki > at >> http://trac.tools.ietf.org/wg/oauth/trac/attachment/wiki/ >> SecurityConsiderations/oauth20_seccons_20101107.pdf. >>> The focus of this version was on consolidating previous work as >> well as results of mailing list discussions and start working >> towards a rigorous threat model. >>>=20 >>> Please give us feedback. >>>=20 >>> regards, >>> Torsten. >>>=20 >>> Am 07.11.2010 03:22, schrieb Hannes Tschofenig: >>>> Hi all, >>>>=20 >>>> please consider attending the following two meetings! >>>>=20 >>>> ** OAuth Security Session ** >>>>=20 >>>> * Date: Monday, 13:00-15:00 >>>> * Location: IAB breakout room (Jade 2) >>>> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net The = security >>>> consideration section of OAuth 2.0 (draft -10) is still empty. >> Hence, we would like to put some time aside to discuss what security >> threats, requirements, and countermeasures need to be described. We >> will use the Monday, November 8, 1300-1500 slot to have a discussion > session. >>>>=20 >>>> As a starting point I suggest to look at the following documents: >>>>=20 >>>> * > http://trac.tools.ietf.org/wg/oauth/trac/wiki/SecurityConsiderations >>>> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SignaturesWhy >>>> * >>>> = http://tools.ietf.org/id/draft-tschofenig-oauth-signature-thoughts-00. >>>> txt >>>>=20 >>>> Note: If you are unfamiliar with OAuth then the OAuth tutorial >> session might be more suitable for you! >>>>=20 >>>>=20 >>>>=20 >>>> ** OAuth Tutorial ** >>>>=20 >>>> * Date: Wednesday, 19:30 (after the plenary) >>>> * Location: IAB breakout room (Jade 2) >>>> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net OAuth = allows > a >>>> user to grant a third-party Web site or application access to their >>>> resources, without necessarily revealing their credentials, or even >>>> their identity. The OAuth working group, see >>>> http://datatracker.ietf.org/wg/oauth/charter/, is currently trying = to >>>> finalize their main specification, namely OAuth v2: >>>> http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/ >>>>=20 >>>> Based on the positive response at the last IETF meeting (in >>>> Maastricht) we decided to hold another OAuth tutorial, namely on >>>> *Wednesday, starting at 19:30 (after the IETF Operations and >>>> Administration Plenary) till about 21:00. (Note: I had to switch = the >>>> day because of the social event!) >>>>=20 >>>> It is helpful to read through the documents available int he >> working group but not required. >>>>=20 >>>> Up-to-date information can be found here: >>>> http://www.ietf.org/registration/MeetingWiki/wiki/79bofs >>>>=20 >>>> Ciao >>>> Hannes >>>>=20 >>>> _______________________________________________ >>>> OAuth mailing list >>>> OAuth@ietf.org >>>> https://www.ietf.org/mailman/listinfo/oauth >>>=20 >>> _______________________________________________ >>> OAuth mailing list >>> OAuth@ietf.org >>> https://www.ietf.org/mailman/listinfo/oauth >>>=20 >>> _______________________________________________ >>> secdir mailing list >>> secdir@ietf.org >>> https://www.ietf.org/mailman/listinfo/secdir >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth >=20 > _______________________________________________ > Kitten mailing list > Kitten@ietf.org > https://www.ietf.org/mailman/listinfo/kitten From Michael.Jones@microsoft.com Tue Nov 9 21:20:22 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E1D7B3A67FE for ; Tue, 9 Nov 2010 21:20:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J+Og3tE4maQI for ; Tue, 9 Nov 2010 21:20:16 -0800 (PST) Received: from smtp.microsoft.com (mail3.microsoft.com [131.107.115.214]) by core3.amsl.com (Postfix) with ESMTP id A31FB3A677C for ; Tue, 9 Nov 2010 21:20:16 -0800 (PST) Received: from TK5EX14MLTC102.redmond.corp.microsoft.com (157.54.79.180) by TK5-EXGWY-E803.partners.extranet.microsoft.com (10.251.56.169) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 9 Nov 2010 21:20:37 -0800 Received: from TK5EX14MBXC202.redmond.corp.microsoft.com ([169.254.2.127]) by TK5EX14MLTC102.redmond.corp.microsoft.com ([157.54.79.180]) with mapi id 14.01.0255.003; Tue, 9 Nov 2010 21:20:36 -0800 From: Mike Jones To: "iiwnotes@gmail.com" , "oauth@ietf.org" Thread-Topic: JSON public key spec results at IIW on Thursday Thread-Index: AcuAlvW10fL3RuyYT5q0Q6Umn/vF6g== Date: Wed, 10 Nov 2010 05:20:37 +0000 Message-ID: <4E1F6AAD24975D4BA5B1680429673943245DEC1E@TK5EX14MBXC202.redmond.corp.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.123.12] Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B1680429673943245DEC1ETK5EX14MBXC202r_" MIME-Version: 1.0 Cc: "openid-specs-ab@lists.openid.net" , "openid-specs-connect@lists.openid.net" Subject: [OAUTH-WG] JSON public key spec results at IIW on Thursday X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 05:20:23 -0000 --_000_4E1F6AAD24975D4BA5B1680429673943245DEC1ETK5EX14MBXC202r_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable The final session at IIW related to JSON Web Tokens (JWTs) explored whether= and how to represent public key information as JWTs or other JSON structur= es as an alternative to X.509 certificates. Thanks to Breno de Medeiros fo= r taking notes, which I'= ve pasted in below: Issue/Topic: Public Key Certificates as JWT Session: Thursday 1E Convener: Mike Jones, Microsoft Notes-taker(s): Breno de Medeiros Tags: If and how to represent public key certificates as Jason Web Tokens Discussion notes: * Certificate installation a difficult and core technical obstacle in c= onfiguring security * Not all cases require PKI validation; motivation examples given by J.= Panzer et. al., drove the proposal for the Magic Signatures specs * In the absence of PKI certificates, it's not possible to 'preserve' t= he security context around fetching the certificate * Is there a need to invent another type of JSON-based certificate? Do = we have a need for certificates in addition to bare keys? * Why re-invent X.509? Create a JSON binding for the subset of KeyInfo = from X.509 that is needed to advertise keys * After reviewing the KeyInfo, decided that the part of it of interest = is trivially small and already described in competing proposals * Even a JWT is too complex, only need to create a simple descriptor fo= r the key in JSON * Key_id needed Decision: Go with simple approach * Keep this mini-spec separate from JWT and cross-reference? Or include= this in the expanded spec of JWT to include encryption? Decision: Keep specs separate * Need to allow this to have a URL-safe representation such as compact = JWT? Examples of what these representations might look like are as follows: {"keyvalues": [ {"alg":"ECDSA", "x":"MKBCTNIcKUSDii11ySs3526iDZ8AiTo7Tu6KPAqv7D4", "y":"4Etl6SRW2YiLUrN5vfvVHuhp7x8PxltmWWlbbM4IFyM", "keyid":"1"}, {"alg":"RSA", "modulus": "0vx7agoebGcQSuuPiLJXZptN9nndrQmbXEps2aiAFbWhM78LhWx4cbbfAA= tVT86zwu1RK7aPFFxuhDR1L6tSoc_BJECPebWKRXjBZCiFV4n3oknjhMstn64tZ_2W-5JsGY4Hc= 5n9yBXArwl93lqt7_RN5w6Cf0h4QyQ5v-65YGjQR0_FDW2QvzqY368QQMicAtaSqzs8KJZgnYb9= c7d0zgdAZHzu6qMQvRL5hajrn1n91CbOpbISD08qNLyrdkt-bFTWhAI4vMQFh6WeZu0fM4lFd2N= cRwr3XPksINHaQ-G_xBniIqbw0Ls1jF44-csFCur-kEgU8awapJzKnqDKgw", "exponent":"AQAB", "keyid":"2"} ] } Near the end of the discussion, it was pointed out that want we are proposi= ng is much closer to the XMLDSIG KeyValue element than the KeyInfo element. The participants recognize that the security of these raw keys is dependent= upon the security of the mechanisms for distributing them - in most cases = TLS. References: * XML Signature Syntax and Processing (Second Edition): http://www.= w3.org/TR/xmldsig-core/ * Using the Elliptic Curve Signature Algorithm (ECDSA) for XML Digit= al Signatures: http://tools.ietf.org/html/rfc4050 * Additional XML Security Uniform Resource Identifiers (URIs): http= ://tools.ietf.org/html/rfc4051 * Magic Signatures: http://salmon-protocol.googlecode.com/svn/trunk= /draft-panzer-magicsig-experimental-00.html -- Mike --_000_4E1F6AAD24975D4BA5B1680429673943245DEC1ETK5EX14MBXC202r_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

The final session at IIW related to JSON Web Tokens = (JWTs) explored whether and how to represent public key information as JWTs= or other JSON structures as an alternative to X.509 certificates.  Th= anks to Breno de Medeiros for taking notes<= /a>, which I’ve pasted in below:

 

Issue/Topic: Public Key Certificates as JWT

Session: Thursday 1E

Convener:<= span lang=3D"EN" style=3D"font-size:12.0pt;font-family:"Times New Roma= n","serif""> Mike Jones, Microsoft

Notes-taker(s): Breno de Medeiros

Tags: If and how to represent public key certificates as = Jason Web Tokens

Discussion notes:

  • Certificate installation a difficult and core technical obstacle= in configuring security
  • Not all cases require PKI validation; motivatio= n examples given by J. Panzer et. al., drove the proposal for the Magic Sig= natures specs
  • In the absence of PKI certificates, it's not po= ssible to 'preserve' the security context around fetching the certificate
  • Is there a need to invent another type of JSON-= based certificate? Do we have a need for certificates in addition to bare k= eys?
  • Why re-invent X.509? Create a JSON binding for = the subset of KeyInfo from X.509 that is needed to advertise keys
  • After reviewing the KeyInfo, decided that the p= art of it of interest is trivially small and already described in competing= proposals
  • Even a JWT is too complex, only need to create = a simple descriptor for the key in JSON
  • Key_id needed

Decision: Go with simple= approach

  • Keep this mini-spec separate from JWT and cross-reference? Or in= clude this in the expanded spec of JWT to include encryption?

Decision: Keep specs sep= arate

  • Need to allow this to have a URL-safe representation such as com= pact JWT?

 

Examples of what these representations might look li= ke are as follows:

 

= {"keyvalues":

=   [

=     {"alg":"ECDSA",

=      "x":"MKBCTNIcKUSDii11ySs3526iDZ8AiT= o7Tu6KPAqv7D4",

=      "y":"4Etl6SRW2YiLUrN5vfvVHuhp7x8Pxl= tmWWlbbM4IFyM",

=      "keyid":"1"},

=  

=     {"alg":"RSA",

=      "modulus": "0vx7agoebGcQSuuPiLJXZpt= N9nndrQmbXEps2aiAFbWhM78LhWx4cbbfAAtVT86zwu1RK7aPFFxuhDR1L6tSoc_BJECPebWKRX= jBZCiFV4n3oknjhMstn64tZ_2W-5JsGY4Hc5n9yBXArwl93lqt7_RN5w6Cf0h4QyQ5v-65YGjQR= 0_FDW2QvzqY368QQMicAtaSqzs8KJZgnYb9c7d0zgdAZHzu6qMQvRL5hajrn1n91CbOpbISD08q= NLyrdkt-bFTWhAI4vMQFh6WeZu0fM4lFd2NcRwr3XPksINHaQ-G_xBniIqbw0Ls1jF44-csFCur= -kEgU8awapJzKnqDKgw",

=      "exponent":"AQAB",<= /span>

=      "keyid":"2"}=

=   ]

= }

 

Near the end of the discussion, it was pointed out t= hat want we are proposing is much closer to the XMLDSIG KeyValue element th= an the KeyInfo element.

 

The participants recognize that the security of thes= e raw keys is dependent upon the security of the mechanisms for distributin= g them – in most cases TLS.

 

References:

·        XML Signature Syntax and Processing (Second = Edition):  http://www.w3.org/TR/xmldsig= -core/

·        Using the Elliptic Curve Signature Algorithm= (ECDSA) for XML Digital Signatures:  http://tools.ietf.org/html/r= fc4050

·        Additional XML Security Uniform Resource Ide= ntifiers (URIs):  http://tools.ietf.org/html/r= fc4051

·        Magic Signatures:  http://salmon-protocol.googlecode.com/svn/trunk/draft-panzer-magicsig-exper= imental-00.html

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p; -- Mike

 

--_000_4E1F6AAD24975D4BA5B1680429673943245DEC1ETK5EX14MBXC202r_-- From Michael.Jones@microsoft.com Tue Nov 9 21:59:23 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1CFFA3A68A2 for ; Tue, 9 Nov 2010 21:59:23 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CPdguEwQwYBH for ; Tue, 9 Nov 2010 21:59:20 -0800 (PST) Received: from smtp.microsoft.com (smtp.microsoft.com [131.107.115.212]) by core3.amsl.com (Postfix) with ESMTP id 4CDD83A67DB for ; Tue, 9 Nov 2010 21:59:20 -0800 (PST) Received: from TK5EX14MLTC102.redmond.corp.microsoft.com (157.54.79.180) by TK5-EXGWY-E801.partners.extranet.microsoft.com (10.251.56.50) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 9 Nov 2010 21:59:46 -0800 Received: from TK5EX14MBXC202.redmond.corp.microsoft.com ([169.254.2.127]) by TK5EX14MLTC102.redmond.corp.microsoft.com ([157.54.79.180]) with mapi id 14.01.0255.003; Tue, 9 Nov 2010 21:59:46 -0800 From: Mike Jones To: "oauth@ietf.org" Thread-Topic: JSON Token spec work at IIW Thread-Index: AcuAnHngxqllPP84QQuaDfx3hl7Zjw== Date: Wed, 10 Nov 2010 05:59:46 +0000 Message-ID: <4E1F6AAD24975D4BA5B1680429673943245DF444@TK5EX14MBXC202.redmond.corp.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.123.12] Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B1680429673943245DF444TK5EX14MBXC202r_" MIME-Version: 1.0 Cc: "openid-specs-ab@lists.openid.net" , "openid-specs-connect@lists.openid.net" Subject: [OAUTH-WG] JSON Token spec work at IIW X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 05:59:23 -0000 --_000_4E1F6AAD24975D4BA5B1680429673943245DF444TK5EX14MBXC202r_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable I've now finished my series of posts on the JSON token spec work that occur= red at IIW. For reference, they are: - JSON Token Spec Results at IIW on Tuesday: http://self-issued.info/?p= =3D361 - JSON Token Encryption Spec Results at IIW on Wednesday: http://self-is= sued.info/?p=3D378 - JSON Token Naming Spec Results at IIW on Wednesday: http://self-issued= .info/?p=3D386 - JSON Public Key Spec Results at IIW on Thursday: http://self-issued.in= fo/?p=3D390 Cheers, -- Mike --_000_4E1F6AAD24975D4BA5B1680429673943245DF444TK5EX14MBXC202r_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

I’ve now finished my series of posts on the JS= ON token spec work that occurred at IIW.  For reference, they are:

  - JSON Token Spec Results at IIW on Tuesda= y:  http://self-issued.info/?p=3D361

  - JSON Token Encryption Spec Results at II= W on Wednesday:  http://self-issued.info/?p=3D3= 78

  - JSON Token Naming Spec Results at IIW on= Wednesday:  http://self-issued.info/?p=3D386

  - JSON Public Key Spec Results at IIW on Thur= sday:  http://self-issued= .info/?p=3D390

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p; Cheers,

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p; -- Mike

 

--_000_4E1F6AAD24975D4BA5B1680429673943245DF444TK5EX14MBXC202r_-- From tonynad@microsoft.com Tue Nov 9 22:03:34 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 3F13E3A68C8; Tue, 9 Nov 2010 22:03:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ed2jPVsD-p8p; Tue, 9 Nov 2010 22:03:34 -0800 (PST) Received: from smtp.microsoft.com (mailb.microsoft.com [131.107.115.215]) by core3.amsl.com (Postfix) with ESMTP id 0EDF53A68C6; Tue, 9 Nov 2010 22:03:34 -0800 (PST) Received: from TK5EX14HUBC103.redmond.corp.microsoft.com (157.54.86.9) by TK5-EXGWY-E802.partners.extranet.microsoft.com (10.251.56.168) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 9 Nov 2010 22:03:48 -0800 Received: from TK5EX14MBXC117.redmond.corp.microsoft.com ([169.254.8.138]) by TK5EX14HUBC103.redmond.corp.microsoft.com ([157.54.86.9]) with mapi id 14.01.0255.003; Tue, 9 Nov 2010 22:03:48 -0800 From: Anthony Nadalin To: "Richard L. Barnes" , "torsten@lodderstedt.net" Thread-Topic: [secdir] [OAUTH-WG] ** OAuth Tutorial & OAuth Security Session ** Thread-Index: AQHLf+vNz+Zyzs3OwkSCnvjMrh08w5NqOX4w Date: Wed, 10 Nov 2010 06:03:47 +0000 Message-ID: <180155C5EA10854997314CA5E063D18FEE90B8@TK5EX14MBXC117.redmond.corp.microsoft.com> References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net><4CD73075.8050408@lodderstedt.net><180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> <4CD90C14.2060803@bbn.com> In-Reply-To: <4CD90C14.2060803@bbn.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.123.12] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "abfab@ietf.org" , "rai@ietf.org" , "ietf@ietf.org" , "secdir@ietf.org" , "websec@ietf.org" , "xmpp@ietf.org" , "kitten@ietf.org" , "iab@iab.org Board" , "iesg@ietf.org" , "Tschofenig, Hannes" , "oauth@ietf.org" Subject: Re: [OAUTH-WG] [secdir] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 06:03:34 -0000 Issue here is that guarantees (and what you want as a guarantee may not be = what somebody else wants) can vary depending on scenario and deployment. -----Original Message----- From: Richard L. Barnes [mailto:rbarnes@bbn.com]=20 Sent: Tuesday, November 09, 2010 12:54 AM To: torsten@lodderstedt.net Cc: Anthony Nadalin; Tschofenig, Hannes; abfab@ietf.org; rai@ietf.org; ietf= @ietf.org; secdir@ietf.org; websec@ietf.org; xmpp@ietf.org; kitten@ietf.org= ; iab@iab.org Board; iesg@ietf.org; oauth@ietf.org Subject: Re: [secdir] [OAUTH-WG] ** OAuth Tutorial & OAuth Security Session= ** I would say that the security considerations should be based on a model of = OAuth. Start with a model of the protocol and the guarantees you want, the= n explain how to use security mechanisms to achieve those guarantees. I promised Hannes today to do a review of the current document (which I adm= it I haven't read) and start on some security considerations from that pers= pective. So expect that in the next few weeks. --Richard On 11/9/10 4:07 PM, torsten@lodderstedt.net wrote: > We think the security considerations should be based on a threat model of= OAuth. But a complete threat model would blow up the spec. > > We therefore aim to produce a separate security document (informational I= -D/RFC) covering threat model as well as security design and considerations= . The security considerations section of the core spec can then be distille= d from this document. > > Regards, > Torsten. > Gesendet mit BlackBerry(r) Webmail von Telekom Deutschland > > -----Original Message----- > From: Anthony Nadalin > Date: Tue, 9 Nov 2010 01:54:57 > To: Torsten Lodderstedt; Hannes=20 > Tschofenig > Cc: abfab@ietf.org; rai@ietf.org;=20 > ietf@ietf.org; secdir@ietf.org;=20 > websec@ietf.org; xmpp@ietf.org;=20 > kitten@ietf.org; iab@iab.org Board;=20 > iesg@ietf.org; oauth@ietf.org > Subject: RE: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** > > I was looking for less of an analysis and more of considerations (of the = current flows and actors), I'm not sure how to adapt what you have done to = actually fit in the current specification, was your thought that you would = produce a separate security analysis document? > > -----Original Message----- > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf=20 > Of Torsten Lodderstedt > Sent: Sunday, November 07, 2010 3:04 PM > To: Hannes Tschofenig > Cc: abfab@ietf.org; rai@ietf.org; ietf@ietf.org; secdir@ietf.org;=20 > websec@ietf.org; xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board;=20 > iesg@ietf.org; oauth@ietf.org > Subject: Re: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** > > Hi all, > > Mark McGloin and me have been working on OAuth 2.0 security consideration= s for a couple of weeks now. Since we both cannot attend the IETF-79 meetin= gs, we would like to provide the WG with information regarding the current = status of our work. I therefore uploaded a_preliminary_ version of our work= ing document to the WG's wiki at http://trac.tools.ietf.org/wg/oauth/trac/a= ttachment/wiki/SecurityConsiderations/oauth20_seccons_20101107.pdf. > The focus of this version was on consolidating previous work as well as r= esults of mailing list discussions and start working towards a rigorous thr= eat model. > > Please give us feedback. > > regards, > Torsten. > > Am 07.11.2010 03:22, schrieb Hannes Tschofenig: >> Hi all, >> >> please consider attending the following two meetings! >> >> ** OAuth Security Session ** >> >> * Date: Monday, 13:00-15:00 >> * Location: IAB breakout room (Jade 2) >> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net The security=20 >> consideration section of OAuth 2.0 (draft -10) is still empty. Hence, we= would like to put some time aside to discuss what security threats, requir= ements, and countermeasures need to be described. We will use the Monday, N= ovember 8, 1300-1500 slot to have a discussion session. >> >> As a starting point I suggest to look at the following documents: >> >> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SecurityConsiderations >> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SignaturesWhy >> * >> http://tools.ietf.org/id/draft-tschofenig-oauth-signature-thoughts-00. >> txt >> >> Note: If you are unfamiliar with OAuth then the OAuth tutorial session m= ight be more suitable for you! >> >> >> >> ** OAuth Tutorial ** >> >> * Date: Wednesday, 19:30 (after the plenary) >> * Location: IAB breakout room (Jade 2) >> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net OAuth allows=20 >> a user to grant a third-party Web site or application access to their=20 >> resources, without necessarily revealing their credentials, or even=20 >> their identity. The OAuth working group, see=20 >> http://datatracker.ietf.org/wg/oauth/charter/, is currently trying to=20 >> finalize their main specification, namely OAuth v2: >> http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/ >> >> Based on the positive response at the last IETF meeting (in >> Maastricht) we decided to hold another OAuth tutorial, namely on=20 >> *Wednesday, starting at 19:30 (after the IETF Operations and=20 >> Administration Plenary) till about 21:00. (Note: I had to switch the=20 >> day because of the social event!) >> >> It is helpful to read through the documents available int he working gro= up but not required. >> >> Up-to-date information can be found here: >> http://www.ietf.org/registration/MeetingWiki/wiki/79bofs >> >> Ciao >> Hannes >> >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > > _______________________________________________ > secdir mailing list > secdir@ietf.org > https://www.ietf.org/mailman/listinfo/secdir From rbarnes@bbn.com Tue Nov 9 22:19:37 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2CE0C3A68D6; Tue, 9 Nov 2010 22:19:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.609 X-Spam-Level: X-Spam-Status: No, score=-102.609 tagged_above=-999 required=5 tests=[AWL=-0.010, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id IZYj+e0Guafa; Tue, 9 Nov 2010 22:19:30 -0800 (PST) Received: from smtp.bbn.com (smtp.bbn.com [128.33.0.80]) by core3.amsl.com (Postfix) with ESMTP id 3EB973A6895; Tue, 9 Nov 2010 22:19:30 -0800 (PST) Received: from [128.89.254.59] (port=53402 helo=richards-MacBook-Pro.local) by smtp.bbn.com with esmtps (TLSv1:CAMELLIA256-SHA:256) (Exim 4.71 (FreeBSD)) (envelope-from ) id 1PG42E-000Emt-1U; Wed, 10 Nov 2010 01:19:54 -0500 Message-ID: <4CDA3983.7050101@bbn.com> Date: Wed, 10 Nov 2010 14:19:47 +0800 From: "Richard L. Barnes" User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Anthony Nadalin References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net><4CD73075.8050408@lodderstedt.net><180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> <4CD90C14.2060803@bbn.com> <180155C5EA10854997314CA5E063D18FEE90B8@TK5EX14MBXC117.redmond.corp.microsoft.com> In-Reply-To: <180155C5EA10854997314CA5E063D18FEE90B8@TK5EX14MBXC117.redmond.corp.microsoft.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: "abfab@ietf.org" , "Tschofenig, Hannes" , "rai@ietf.org" , "ietf@ietf.org" , "secdir@ietf.org" , "websec@ietf.org" , "xmpp@ietf.org" , "kitten@ietf.org" , "iab@iab.org Board" , "iesg@ietf.org" , "oauth@ietf.org" Subject: Re: [OAUTH-WG] [secdir] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 06:19:37 -0000 Of course not every scenario calls for all of the security knobs to be turned to 11. Think of things instead in terms of syllogisms: "IF you want X guarantee, THEN you MUST do A, B, C." Then you can also read the same things backwards in a given deployment scenario: "Given that I can't do B, I can't get assurances X, Y, but I can get Z (if I do D, F as well)". I promise to produce something more concrete soon :) In the meantime, this text illustrates what I mean pretty well: --Richard On 11/10/10 2:03 PM, Anthony Nadalin wrote: > Issue here is that guarantees (and what you want as a guarantee may not be what somebody else wants) can vary depending on scenario and deployment. > > -----Original Message----- > From: Richard L. Barnes [mailto:rbarnes@bbn.com] > Sent: Tuesday, November 09, 2010 12:54 AM > To: torsten@lodderstedt.net > Cc: Anthony Nadalin; Tschofenig, Hannes; abfab@ietf.org; rai@ietf.org; ietf@ietf.org; secdir@ietf.org; websec@ietf.org; xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board; iesg@ietf.org; oauth@ietf.org > Subject: Re: [secdir] [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** > > I would say that the security considerations should be based on a model of OAuth. Start with a model of the protocol and the guarantees you want, then explain how to use security mechanisms to achieve those guarantees. > > I promised Hannes today to do a review of the current document (which I admit I haven't read) and start on some security considerations from that perspective. So expect that in the next few weeks. > > --Richard > > > > > On 11/9/10 4:07 PM, torsten@lodderstedt.net wrote: >> We think the security considerations should be based on a threat model of OAuth. But a complete threat model would blow up the spec. >> >> We therefore aim to produce a separate security document (informational I-D/RFC) covering threat model as well as security design and considerations. The security considerations section of the core spec can then be distilled from this document. >> >> Regards, >> Torsten. >> Gesendet mit BlackBerry(r) Webmail von Telekom Deutschland >> >> -----Original Message----- >> From: Anthony Nadalin >> Date: Tue, 9 Nov 2010 01:54:57 >> To: Torsten Lodderstedt; Hannes >> Tschofenig >> Cc: abfab@ietf.org; rai@ietf.org; >> ietf@ietf.org; secdir@ietf.org; >> websec@ietf.org; xmpp@ietf.org; >> kitten@ietf.org; iab@iab.org Board; >> iesg@ietf.org; oauth@ietf.org >> Subject: RE: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** >> >> I was looking for less of an analysis and more of considerations (of the current flows and actors), I'm not sure how to adapt what you have done to actually fit in the current specification, was your thought that you would produce a separate security analysis document? >> >> -----Original Message----- >> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf >> Of Torsten Lodderstedt >> Sent: Sunday, November 07, 2010 3:04 PM >> To: Hannes Tschofenig >> Cc: abfab@ietf.org; rai@ietf.org; ietf@ietf.org; secdir@ietf.org; >> websec@ietf.org; xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board; >> iesg@ietf.org; oauth@ietf.org >> Subject: Re: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** >> >> Hi all, >> >> Mark McGloin and me have been working on OAuth 2.0 security considerations for a couple of weeks now. Since we both cannot attend the IETF-79 meetings, we would like to provide the WG with information regarding the current status of our work. I therefore uploaded a_preliminary_ version of our working document to the WG's wiki at http://trac.tools.ietf.org/wg/oauth/trac/attachment/wiki/SecurityConsiderations/oauth20_seccons_20101107.pdf. >> The focus of this version was on consolidating previous work as well as results of mailing list discussions and start working towards a rigorous threat model. >> >> Please give us feedback. >> >> regards, >> Torsten. >> >> Am 07.11.2010 03:22, schrieb Hannes Tschofenig: >>> Hi all, >>> >>> please consider attending the following two meetings! >>> >>> ** OAuth Security Session ** >>> >>> * Date: Monday, 13:00-15:00 >>> * Location: IAB breakout room (Jade 2) >>> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net The security >>> consideration section of OAuth 2.0 (draft -10) is still empty. Hence, we would like to put some time aside to discuss what security threats, requirements, and countermeasures need to be described. We will use the Monday, November 8, 1300-1500 slot to have a discussion session. >>> >>> As a starting point I suggest to look at the following documents: >>> >>> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SecurityConsiderations >>> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SignaturesWhy >>> * >>> http://tools.ietf.org/id/draft-tschofenig-oauth-signature-thoughts-00. >>> txt >>> >>> Note: If you are unfamiliar with OAuth then the OAuth tutorial session might be more suitable for you! >>> >>> >>> >>> ** OAuth Tutorial ** >>> >>> * Date: Wednesday, 19:30 (after the plenary) >>> * Location: IAB breakout room (Jade 2) >>> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net OAuth allows >>> a user to grant a third-party Web site or application access to their >>> resources, without necessarily revealing their credentials, or even >>> their identity. The OAuth working group, see >>> http://datatracker.ietf.org/wg/oauth/charter/, is currently trying to >>> finalize their main specification, namely OAuth v2: >>> http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/ >>> >>> Based on the positive response at the last IETF meeting (in >>> Maastricht) we decided to hold another OAuth tutorial, namely on >>> *Wednesday, starting at 19:30 (after the IETF Operations and >>> Administration Plenary) till about 21:00. (Note: I had to switch the >>> day because of the social event!) >>> >>> It is helpful to read through the documents available int he working group but not required. >>> >>> Up-to-date information can be found here: >>> http://www.ietf.org/registration/MeetingWiki/wiki/79bofs >>> >>> Ciao >>> Hannes >>> >>> _______________________________________________ >>> OAuth mailing list >>> OAuth@ietf.org >>> https://www.ietf.org/mailman/listinfo/oauth >> >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth >> >> _______________________________________________ >> secdir mailing list >> secdir@ietf.org >> https://www.ietf.org/mailman/listinfo/secdir > From torsten@lodderstedt.net Tue Nov 9 22:53:47 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B58EC3A698A for ; Tue, 9 Nov 2010 22:53:47 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.206 X-Spam-Level: X-Spam-Status: No, score=-2.206 tagged_above=-999 required=5 tests=[AWL=0.043, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id BPF2ENR5ITaC for ; Tue, 9 Nov 2010 22:53:46 -0800 (PST) Received: from smtprelay04.ispgateway.de (smtprelay04.ispgateway.de [80.67.18.16]) by core3.amsl.com (Postfix) with ESMTP id 691173A696C for ; Tue, 9 Nov 2010 22:53:44 -0800 (PST) Received: from [79.253.41.59] (helo=[192.168.71.43]) by smtprelay04.ispgateway.de with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from ) id 1PG4ZN-00012M-Da; Wed, 10 Nov 2010 07:54:09 +0100 Message-ID: <4CDA4190.3030007@lodderstedt.net> Date: Wed, 10 Nov 2010 07:54:08 +0100 From: Torsten Lodderstedt User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Hannes Tschofenig References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net><4CD73075.8050408@lodderstedt.net><180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> <4CD90C14.2060803@bbn.com> <1C350843-FD19-4D2E-BC14-31B2FD5B2AE9@gmx.net> In-Reply-To: <1C350843-FD19-4D2E-BC14-31B2FD5B2AE9@gmx.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Df-Sender: torsten@lodderstedt-online.de Cc: oauth@ietf.org Subject: Re: [OAUTH-WG] Security Writeups -- Re: [kitten] [secdir] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 06:53:48 -0000 Am 09.11.2010 16:51, schrieb Hannes Tschofenig: > Hi Mark, Richard, and Torsten, > > there is certainly a very good piece of work available to us for getting the security consideration text pulled together. > We still have to find out how to best tackle the work. We obviously cannot put an extended version of the current document into the security consideration section of the OAuth main specification. I see two main objectives: - getting confidence in the security of the protocol - document security aspects to be taken into considerations by implementers (security considerations) I would propose the following approach: We enhance the security document based on the feedback from your security sesssions and Richard's contributions. Having taken a look at http://tools.ietf.org/html/draft-barnes-oauth-model-01, I would say the objective of this document is comparable to our document whereas the approach differs. I assume we will find a common way, although I believe that the level of detail in draft-barnes-oauth-model-01 could be to much for OAuth 2.0 because of the significantly increased protocol features. But I'm (and I think Mark as well) open to proposals on the approach to be taken. I would expect this revision to take until the end of the year. The result should be reviewed by the WG. Once we got confidence in the security properties of the protocol itself, we start deriving the security considerations for the different specs (core, bearer token, signed requests) from the security document. What do you think? regards, Torsten. > Note: I have taken the other mailing lists from CC to avoid cross-posting. > > Ciao > Hannes > > > On Nov 9, 2010, at 10:54 PM, Mark Mcgloin wrote: > >> When Torsten and I started pulling together the security considerations >> over the last 4-6 weeks, we toyed with the idea of either populating the >> security considerations section of the protocol with a list/tree of >> considerations, or creating a more comprehensive document to ensure we >> covered all aspects, list security features and which would also act as a >> security aid to developers implementing the oauth protocol. We decided on >> the latter and agreed it could later be distilled down to something that >> will fit into the security considerations section of the protocol. >> >> Bear in mind the document needs tidying but we wanted to push something in >> before the security meeting in China >> >> Regards >> Mark McGloin >> >> oauth-bounces@ietf.org wrote on 09/11/2010 08:53:40: >> >>> "Richard L. Barnes" >>> Sent by: oauth-bounces@ietf.org >>> >>> 09/11/2010 08:53 >>> >>> To >>> >>> torsten@lodderstedt.net >>> >>> cc >>> >>> "abfab@ietf.org", "rai@ietf.org", >>> "ietf@ietf.org", "secdir@ietf.org" >>> , "websec@ietf.org", >>> "xmpp@ietf.org", "kitten@ietf.org" >>> , "iab@iab.org Board", >>> "iesg@ietf.org", "Tschofenig, Hannes" >>> , "oauth@ietf.org" >>> >>> Subject >>> >>> Re: [OAUTH-WG] [secdir] ** OAuth Tutorial& OAuth Security Session ** >>> >>> I would say that the security considerations should be based on a model >>> of OAuth. Start with a model of the protocol and the guarantees you >>> want, then explain how to use security mechanisms to achieve those >>> guarantees. >>> >>> I promised Hannes today to do a review of the current document (which I >>> admit I haven't read) and start on some security considerations from >>> that perspective. So expect that in the next few weeks. >>> >>> --Richard >>> >>> >>> >>> >>> On 11/9/10 4:07 PM, torsten@lodderstedt.net wrote: >>>> We think the security considerations should be based on a threat >>> model of OAuth. But a complete threat model would blow up the spec. >>>> We therefore aim to produce a separate security document >>> (informational I-D/RFC) covering threat model as well as security >>> design and considerations. The security considerations section of >>> the core spec can then be distilled from this document. >>>> Regards, >>>> Torsten. >>>> Gesendet mit BlackBerry® Webmail von Telekom Deutschland >>>> >>>> -----Original Message----- >>>> From: Anthony Nadalin >>>> Date: Tue, 9 Nov 2010 01:54:57 >>>> To: Torsten Lodderstedt; Hannes >>> Tschofenig >>>> Cc: abfab@ietf.org; rai@ietf.org; >>> ietf@ietf.org; secdir@ietf.org; >>> websec@ietf.org; xmpp@ietf.org; >>> kitten@ietf.org; iab@iab.org Board; >>> iesg@ietf.org; oauth@ietf.org >>>> Subject: RE: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** >>>> >>>> I was looking for less of an analysis and more of considerations >>> (of the current flows and actors), I'm not sure how to adapt what >>> you have done to actually fit in the current specification, was your >>> thought that you would produce a separate security analysis document? >>>> -----Original Message----- >>>> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On >>> Behalf Of Torsten Lodderstedt >>>> Sent: Sunday, November 07, 2010 3:04 PM >>>> To: Hannes Tschofenig >>>> Cc: abfab@ietf.org; rai@ietf.org; ietf@ietf.org; secdir@ietf.org; >>> websec@ietf.org; xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board; >>> iesg@ietf.org; oauth@ietf.org >>>> Subject: Re: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** >>>> >>>> Hi all, >>>> >>>> Mark McGloin and me have been working on OAuth 2.0 security >>> considerations for a couple of weeks now. Since we both cannot >>> attend the IETF-79 meetings, we would like to provide the WG with >>> information regarding the current status of our work. I therefore >>> uploaded a_preliminary_ version of our working document to the WG's wiki >> at >>> http://trac.tools.ietf.org/wg/oauth/trac/attachment/wiki/ >>> SecurityConsiderations/oauth20_seccons_20101107.pdf. >>>> The focus of this version was on consolidating previous work as >>> well as results of mailing list discussions and start working >>> towards a rigorous threat model. >>>> Please give us feedback. >>>> >>>> regards, >>>> Torsten. >>>> >>>> Am 07.11.2010 03:22, schrieb Hannes Tschofenig: >>>>> Hi all, >>>>> >>>>> please consider attending the following two meetings! >>>>> >>>>> ** OAuth Security Session ** >>>>> >>>>> * Date: Monday, 13:00-15:00 >>>>> * Location: IAB breakout room (Jade 2) >>>>> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net The security >>>>> consideration section of OAuth 2.0 (draft -10) is still empty. >>> Hence, we would like to put some time aside to discuss what security >>> threats, requirements, and countermeasures need to be described. We >>> will use the Monday, November 8, 1300-1500 slot to have a discussion >> session. >>>>> As a starting point I suggest to look at the following documents: >>>>> >>>>> * >> http://trac.tools.ietf.org/wg/oauth/trac/wiki/SecurityConsiderations >>>>> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SignaturesWhy >>>>> * >>>>> http://tools.ietf.org/id/draft-tschofenig-oauth-signature-thoughts-00. >>>>> txt >>>>> >>>>> Note: If you are unfamiliar with OAuth then the OAuth tutorial >>> session might be more suitable for you! >>>>> >>>>> >>>>> ** OAuth Tutorial ** >>>>> >>>>> * Date: Wednesday, 19:30 (after the plenary) >>>>> * Location: IAB breakout room (Jade 2) >>>>> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net OAuth allows >> a >>>>> user to grant a third-party Web site or application access to their >>>>> resources, without necessarily revealing their credentials, or even >>>>> their identity. The OAuth working group, see >>>>> http://datatracker.ietf.org/wg/oauth/charter/, is currently trying to >>>>> finalize their main specification, namely OAuth v2: >>>>> http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/ >>>>> >>>>> Based on the positive response at the last IETF meeting (in >>>>> Maastricht) we decided to hold another OAuth tutorial, namely on >>>>> *Wednesday, starting at 19:30 (after the IETF Operations and >>>>> Administration Plenary) till about 21:00. (Note: I had to switch the >>>>> day because of the social event!) >>>>> >>>>> It is helpful to read through the documents available int he >>> working group but not required. >>>>> Up-to-date information can be found here: >>>>> http://www.ietf.org/registration/MeetingWiki/wiki/79bofs >>>>> >>>>> Ciao >>>>> Hannes >>>>> >>>>> _______________________________________________ >>>>> OAuth mailing list >>>>> OAuth@ietf.org >>>>> https://www.ietf.org/mailman/listinfo/oauth >>>> _______________________________________________ >>>> OAuth mailing list >>>> OAuth@ietf.org >>>> https://www.ietf.org/mailman/listinfo/oauth >>>> >>>> _______________________________________________ >>>> secdir mailing list >>>> secdir@ietf.org >>>> https://www.ietf.org/mailman/listinfo/secdir >>> _______________________________________________ >>> OAuth mailing list >>> OAuth@ietf.org >>> https://www.ietf.org/mailman/listinfo/oauth >> _______________________________________________ >> Kitten mailing list >> Kitten@ietf.org >> https://www.ietf.org/mailman/listinfo/kitten From igor.faynberg@alcatel-lucent.com Tue Nov 9 22:57:56 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 925393A69A3; Tue, 9 Nov 2010 22:57:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id WHx5MIc21mga; Tue, 9 Nov 2010 22:57:54 -0800 (PST) Received: from ihemail3.lucent.com (ihemail3.lucent.com [135.245.0.37]) by core3.amsl.com (Postfix) with ESMTP id 1E1113A69A9; Tue, 9 Nov 2010 22:57:54 -0800 (PST) Received: from umail.lucent.com (h135-3-40-63.lucent.com [135.3.40.63]) by ihemail3.lucent.com (8.13.8/IER-o) with ESMTP id oAA6aZcM011476 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 10 Nov 2010 00:36:35 -0600 (CST) Received: from [135.244.80.3] (faynberg.lra.lucent.com [135.244.80.3]) by umail.lucent.com (8.13.8/TPES) with ESMTP id oAA6aUoF026012; Wed, 10 Nov 2010 00:36:31 -0600 (CST) Message-ID: <4CDA3D73.10609@alcatel-lucent.com> Date: Wed, 10 Nov 2010 01:36:35 -0500 From: Igor Faynberg Organization: Alcatel-Lucent User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: "Richard L. Barnes" References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net><4CD73075.8050408@lodderstedt.net><180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> <4CD90C14.2060803@bbn.com> <180155C5EA10854997314CA5E063D18FEE90B8@TK5EX14MBXC117.redmond.corp.microsoft.com> <4CDA3983.7050101@bbn.com> In-Reply-To: <4CDA3983.7050101@bbn.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.57 on 135.245.2.37 Cc: "abfab@ietf.org" , "rai@ietf.org" , "ietf@ietf.org" , "secdir@ietf.org" , "websec@ietf.org" , "xmpp@ietf.org" , "kitten@ietf.org" , "iab@iab.org Board" , "iesg@ietf.org" , "Tschofenig, Hannes" , "oauth@ietf.org" Subject: Re: [OAUTH-WG] [secdir] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: igor.faynberg@alcatel-lucent.com List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 06:57:56 -0000 (With apologies for bringing up a tangential matter...) Talking about the OAuth model, I still see here "Client" instead of "Consumer." I thought there was an agreement on the terminology change. I have no specific preference for either term, but I think it is essential that our terminology be consistent, especially now that other SDOs are considering adopting OAuth. This is not necessarily a question for Richard, but could someone set me straight: Is it "Client" or "Consumer"? With thanks, Igor Richard L. Barnes wrote: > Of course not every scenario calls for all of the security knobs to be > turned to 11. Think of things instead in terms of syllogisms: "IF you > want X guarantee, THEN you MUST do A, B, C." > > Then you can also read the same things backwards in a given deployment > scenario: "Given that I can't do B, I can't get assurances X, Y, but I > can get Z (if I do D, F as well)". > > I promise to produce something more concrete soon :) In the meantime, > this text illustrates what I mean pretty well: > > > --Richard > > > On 11/10/10 2:03 PM, Anthony Nadalin wrote: >> Issue here is that guarantees (and what you want as a guarantee may >> not be what somebody else wants) can vary depending on scenario and >> deployment. >> >> -----Original Message----- >> From: Richard L. Barnes [mailto:rbarnes@bbn.com] >> Sent: Tuesday, November 09, 2010 12:54 AM >> To: torsten@lodderstedt.net >> Cc: Anthony Nadalin; Tschofenig, Hannes; abfab@ietf.org; >> rai@ietf.org; ietf@ietf.org; secdir@ietf.org; websec@ietf.org; >> xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board; iesg@ietf.org; >> oauth@ietf.org >> Subject: Re: [secdir] [OAUTH-WG] ** OAuth Tutorial& OAuth Security >> Session ** >> >> I would say that the security considerations should be based on a >> model of OAuth. Start with a model of the protocol and the >> guarantees you want, then explain how to use security mechanisms to >> achieve those guarantees. >> >> I promised Hannes today to do a review of the current document (which >> I admit I haven't read) and start on some security considerations >> from that perspective. So expect that in the next few weeks. >> >> --Richard >> >> >> >> >> On 11/9/10 4:07 PM, torsten@lodderstedt.net wrote: >>> We think the security considerations should be based on a threat >>> model of OAuth. But a complete threat model would blow up the spec. >>> >>> We therefore aim to produce a separate security document >>> (informational I-D/RFC) covering threat model as well as security >>> design and considerations. The security considerations section of >>> the core spec can then be distilled from this document. >>> >>> Regards, >>> Torsten. >>> Gesendet mit BlackBerry(r) Webmail von Telekom Deutschland >>> >>> -----Original Message----- >>> From: Anthony Nadalin >>> Date: Tue, 9 Nov 2010 01:54:57 >>> To: Torsten Lodderstedt; Hannes >>> Tschofenig >>> Cc: abfab@ietf.org; rai@ietf.org; >>> ietf@ietf.org; secdir@ietf.org; >>> websec@ietf.org; xmpp@ietf.org; >>> kitten@ietf.org; iab@iab.org Board; >>> iesg@ietf.org; oauth@ietf.org >>> Subject: RE: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** >>> >>> I was looking for less of an analysis and more of considerations (of >>> the current flows and actors), I'm not sure how to adapt what you >>> have done to actually fit in the current specification, was your >>> thought that you would produce a separate security analysis document? >>> >>> -----Original Message----- >>> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf >>> Of Torsten Lodderstedt >>> Sent: Sunday, November 07, 2010 3:04 PM >>> To: Hannes Tschofenig >>> Cc: abfab@ietf.org; rai@ietf.org; ietf@ietf.org; secdir@ietf.org; >>> websec@ietf.org; xmpp@ietf.org; kitten@ietf.org; iab@iab.org Board; >>> iesg@ietf.org; oauth@ietf.org >>> Subject: Re: [OAUTH-WG] ** OAuth Tutorial& OAuth Security Session ** >>> >>> Hi all, >>> >>> Mark McGloin and me have been working on OAuth 2.0 security >>> considerations for a couple of weeks now. Since we both cannot >>> attend the IETF-79 meetings, we would like to provide the WG with >>> information regarding the current status of our work. I therefore >>> uploaded a_preliminary_ version of our working document to the WG's >>> wiki at >>> http://trac.tools.ietf.org/wg/oauth/trac/attachment/wiki/SecurityConsiderations/oauth20_seccons_20101107.pdf. >>> >>> The focus of this version was on consolidating previous work as well >>> as results of mailing list discussions and start working towards a >>> rigorous threat model. >>> >>> Please give us feedback. >>> >>> regards, >>> Torsten. >>> >>> Am 07.11.2010 03:22, schrieb Hannes Tschofenig: >>>> Hi all, >>>> >>>> please consider attending the following two meetings! >>>> >>>> ** OAuth Security Session ** >>>> >>>> * Date: Monday, 13:00-15:00 >>>> * Location: IAB breakout room (Jade 2) >>>> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net The >>>> security >>>> consideration section of OAuth 2.0 (draft -10) is still empty. >>>> Hence, we would like to put some time aside to discuss what >>>> security threats, requirements, and countermeasures need to be >>>> described. We will use the Monday, November 8, 1300-1500 slot to >>>> have a discussion session. >>>> >>>> As a starting point I suggest to look at the following documents: >>>> >>>> * >>>> http://trac.tools.ietf.org/wg/oauth/trac/wiki/SecurityConsiderations >>>> * http://trac.tools.ietf.org/wg/oauth/trac/wiki/SignaturesWhy >>>> * >>>> http://tools.ietf.org/id/draft-tschofenig-oauth-signature-thoughts-00. >>>> txt >>>> >>>> Note: If you are unfamiliar with OAuth then the OAuth tutorial >>>> session might be more suitable for you! >>>> >>>> >>>> >>>> ** OAuth Tutorial ** >>>> >>>> * Date: Wednesday, 19:30 (after the plenary) >>>> * Location: IAB breakout room (Jade 2) >>>> * Contact: Hannes Tschofenig hannes.tschofenig@gmx.net OAuth >>>> allows >>>> a user to grant a third-party Web site or application access to their >>>> resources, without necessarily revealing their credentials, or even >>>> their identity. The OAuth working group, see >>>> http://datatracker.ietf.org/wg/oauth/charter/, is currently trying to >>>> finalize their main specification, namely OAuth v2: >>>> http://datatracker.ietf.org/doc/draft-ietf-oauth-v2/ >>>> >>>> Based on the positive response at the last IETF meeting (in >>>> Maastricht) we decided to hold another OAuth tutorial, namely on >>>> *Wednesday, starting at 19:30 (after the IETF Operations and >>>> Administration Plenary) till about 21:00. (Note: I had to switch the >>>> day because of the social event!) >>>> >>>> It is helpful to read through the documents available int he >>>> working group but not required. >>>> >>>> Up-to-date information can be found here: >>>> http://www.ietf.org/registration/MeetingWiki/wiki/79bofs >>>> >>>> Ciao >>>> Hannes >>>> >>>> _______________________________________________ >>>> OAuth mailing list >>>> OAuth@ietf.org >>>> https://www.ietf.org/mailman/listinfo/oauth >>> >>> _______________________________________________ >>> OAuth mailing list >>> OAuth@ietf.org >>> https://www.ietf.org/mailman/listinfo/oauth >>> >>> _______________________________________________ >>> secdir mailing list >>> secdir@ietf.org >>> https://www.ietf.org/mailman/listinfo/secdir >> > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From Nicolas.Williams@oracle.com Tue Nov 9 23:02:37 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BF19B3A6A17; Tue, 9 Nov 2010 23:02:31 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.476 X-Spam-Level: X-Spam-Status: No, score=-6.476 tagged_above=-999 required=5 tests=[AWL=0.122, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4, UNPARSEABLE_RELAY=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RQmB7Qzdzfxn; Tue, 9 Nov 2010 23:02:25 -0800 (PST) Received: from rcsinet10.oracle.com (rcsinet10.oracle.com [148.87.113.121]) by core3.amsl.com (Postfix) with ESMTP id 116863A68B5; Tue, 9 Nov 2010 23:02:00 -0800 (PST) Received: from acsinet15.oracle.com (acsinet15.oracle.com [141.146.126.227]) by rcsinet10.oracle.com (Switch-3.4.2/Switch-3.4.2) with ESMTP id oAA72ATX008484 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Wed, 10 Nov 2010 07:02:11 GMT Received: from acsmt355.oracle.com (acsmt355.oracle.com [141.146.40.155]) by acsinet15.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id oA9HhiJO024108; Wed, 10 Nov 2010 07:02:09 GMT Received: from abhmt001.oracle.com by acsmt354.oracle.com with ESMTP id 765322921289372442; Tue, 09 Nov 2010 23:00:42 -0800 Received: from oracle.com (/129.153.128.104) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Tue, 09 Nov 2010 23:00:42 -0800 Date: Wed, 10 Nov 2010 01:00:37 -0600 From: Nicolas Williams To: torsten@lodderstedt.net Message-ID: <20101110070037.GT6536@oracle.com> References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net> <4CD73075.8050408@lodderstedt.net> <180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> User-Agent: Mutt/1.5.20 (2010-03-02) X-Mailman-Approved-At: Tue, 09 Nov 2010 23:04:05 -0800 Cc: "abfab@ietf.org" , "rai@ietf.org" , "ietf@ietf.org" , "secdir@ietf.org" , "websec@ietf.org" , "xmpp@ietf.org" , "kitten@ietf.org" , "iab@iab.org Board" , "iesg@ietf.org" , "Tschofenig, Hannes" , "oauth@ietf.org" Subject: Re: [OAUTH-WG] [kitten] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: oauth@ietf.org List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 07:02:37 -0000 [That is some cc list! Do you really need a cc list that large for this thread? I've set the reply-to to just oauth@ietf.org (note: I'm NOT subscribed to that list). Please honor the reply-to header. It's a good idea to set reply-to when making announcements, so that replies don't flood people who are almost certainly not interested.] On Tue, Nov 09, 2010 at 08:07:56AM +0000, torsten@lodderstedt.net wrote: > We think the security considerations should be based on a threat model > of OAuth. But a complete threat model would blow up the spec. Really? I would think that a threat model for OAuth could be described fairly briefly. What is the typical value of resources protected by OAuth? What kinds of attackers (active, passive, ...) does OAuth aim to defeat, and under what assumptions (end-points are secure, trusted third parties are trustworthy, certain cryptographic algorithms are not broken with parameters in certain ranges, smartcards are secure, ...)? Which kinds of attacks does OAuth explicitly not protect against (e.g., DoS)? What resources do you expect attackers to apply to compromising resources protected by OAuth? A few pages should do for the threat model. An abstract of the OAuth threat model should also be possible to write. > We therefore aim to produce a separate security document > (informational I-D/RFC) covering threat model as well as security > design and considerations. The security considerations section of the > core spec can then be distilled from this document. Sure. Procedurally speaking, that works. Nico -- From torsten@lodderstedt.net Tue Nov 9 23:13:25 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E1DD23A69DF for ; Tue, 9 Nov 2010 23:13:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.212 X-Spam-Level: X-Spam-Status: No, score=-2.212 tagged_above=-999 required=5 tests=[AWL=0.038, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id JxGckweLryAM for ; Tue, 9 Nov 2010 23:13:16 -0800 (PST) Received: from smtprelay03.ispgateway.de (smtprelay03.ispgateway.de [80.67.31.26]) by core3.amsl.com (Postfix) with ESMTP id 57AC83A69F9 for ; Tue, 9 Nov 2010 23:13:09 -0800 (PST) Received: from [79.253.41.59] (helo=[192.168.71.43]) by smtprelay03.ispgateway.de with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from ) id 1PG4s8-0006HI-Tn; Wed, 10 Nov 2010 08:13:32 +0100 Message-ID: <4CDA461C.2020301@lodderstedt.net> Date: Wed, 10 Nov 2010 08:13:32 +0100 From: Torsten Lodderstedt User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: oauth@ietf.org References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net> <4CD73075.8050408@lodderstedt.net> <180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> <20101110070037.GT6536@oracle.com> In-Reply-To: <20101110070037.GT6536@oracle.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Df-Sender: torsten@lodderstedt-online.de Cc: "Tschofenig, Hannes" , Nicolas Williams Subject: Re: [OAUTH-WG] [kitten] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 07:13:27 -0000 Am 10.11.2010 08:00, schrieb Nicolas Williams: > [That is some cc list! Do you really need a cc list that large for this > thread? I've set the reply-to to just oauth@ietf.org (note: I'm NOT > subscribed to that list). Please honor the reply-to header. It's a > good idea to set reply-to when making announcements, so that replies > don't flood people who are almost certainly not interested.] > > On Tue, Nov 09, 2010 at 08:07:56AM +0000, torsten@lodderstedt.net wrote: >> We think the security considerations should be based on a threat model >> of OAuth. But a complete threat model would blow up the spec. > Really? I would think that a threat model for OAuth could be described > fairly briefly. What is the typical value of resources protected by > OAuth? What kinds of attackers (active, passive, ...) does OAuth aim to > defeat, and under what assumptions (end-points are secure, trusted third > parties are trustworthy, certain cryptographic algorithms are not broken > with parameters in certain ranges, smartcards are secure, ...)? Which > kinds of attacks does OAuth explicitly not protect against (e.g., DoS)? > What resources do you expect attackers to apply to compromising > resources protected by OAuth? > > A few pages should do for the threat model. An abstract of the OAuth > threat model should also be possible to write. We are open to proposals. Please take a look on our document and propose a way to shorten the threat model. regards, Torsten. >> We therefore aim to produce a separate security document >> (informational I-D/RFC) covering threat model as well as security >> design and considerations. The security considerations section of the >> core spec can then be distilled from this document. > Sure. Procedurally speaking, that works. > > Nico From torsten@lodderstedt.net Wed Nov 10 08:34:26 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 03D7A28C0FE for ; Wed, 10 Nov 2010 08:34:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.216 X-Spam-Level: X-Spam-Status: No, score=-2.216 tagged_above=-999 required=5 tests=[AWL=0.033, BAYES_00=-2.599, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2rRJadllWnJq for ; Wed, 10 Nov 2010 08:33:55 -0800 (PST) Received: from smtprelay01.ispgateway.de (smtprelay01.ispgateway.de [80.67.18.43]) by core3.amsl.com (Postfix) with ESMTP id 883A53A6A66 for ; Wed, 10 Nov 2010 08:33:54 -0800 (PST) Received: from [79.253.41.59] (helo=[192.168.71.26]) by smtprelay01.ispgateway.de with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from ) id 1PGDcg-0007jM-0f; Wed, 10 Nov 2010 17:34:10 +0100 Message-ID: <4CDAC97F.8000209@lodderstedt.net> Date: Wed, 10 Nov 2010 17:34:07 +0100 From: Torsten Lodderstedt User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Hannes Tschofenig References: <5F644EED-8B5F-4FDB-B04A-505917386F9D@gmx.net> In-Reply-To: <5F644EED-8B5F-4FDB-B04A-505917386F9D@gmx.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Df-Sender: torsten@lodderstedt-online.de Cc: oauth@ietf.org Subject: Re: [OAUTH-WG] 2nd OAuth Security Session, Thursday (18:10) X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 16:34:26 -0000 Hannes, will it be possible to dial-in? regards, Torsten. Am 09.11.2010 05:47, schrieb Hannes Tschofenig: > Hi all, > > at yesterday's security session we discussed ways on what to provide in the security consideration for the OAuth specifications. > The plan was to have another session on Thursday, November 11th, starting at 18:10 at the IAB breakout room (Jade 2). > > We plan to go out for dinner together. > > Ciao > Hannes > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From breno@google.com Wed Nov 10 08:53:08 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5B8AB3A67B2 for ; Wed, 10 Nov 2010 08:53:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -109.977 X-Spam-Level: X-Spam-Status: No, score=-109.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622, RCVD_IN_DNSWL_HI=-8, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id myiqoa3AtEAT for ; Wed, 10 Nov 2010 08:53:02 -0800 (PST) Received: from smtp-out.google.com (smtp-out.google.com [74.125.121.35]) by core3.amsl.com (Postfix) with ESMTP id 653A33A6892 for ; Wed, 10 Nov 2010 08:53:00 -0800 (PST) Received: from hpaq6.eem.corp.google.com (hpaq6.eem.corp.google.com [172.25.149.6]) by smtp-out.google.com with ESMTP id oAAGrRMb019867 for ; Wed, 10 Nov 2010 08:53:27 -0800 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=google.com; s=beta; t=1289408007; bh=ZGKU35xqh8GgQirjDpW/i/ElVkA=; h=MIME-Version:In-Reply-To:References:Date:Message-ID:Subject:From: To:Cc:Content-Type:Content-Transfer-Encoding; b=EyJZCUG9k+xyFeQGwIp+8X8vaorfpbka9szshcja+BOJF6wpslOgcdtkb26Y25VT7 fa7oO6IKRcNxT0Hpry9Aw== Received: from gxk9 (gxk9.prod.google.com [10.202.11.9]) by hpaq6.eem.corp.google.com with ESMTP id oAAGqHkm021944 for ; Wed, 10 Nov 2010 08:53:25 -0800 Received: by gxk9 with SMTP id 9so522487gxk.13 for ; Wed, 10 Nov 2010 08:53:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=beta; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=87UQ9+l0pFQkN35FEAflCrvm8NxG8xKHVAc1NsPc1P0=; b=tvyaWhX85kE/jQReAjg5+7vYB8NVxxZnPc9jW6pSR5NKP+rfimYL5/RIfNU71rx2E3 bx9GoO9mfcvi0mwtDeww== DomainKey-Signature: a=rsa-sha1; c=nofws; d=google.com; s=beta; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=S1ILb/ketKFbB0VrdDVL9YavB5ICc9ec/urU5Q41CKK4yxXFhrjS5e9FVoiB5Y3qi7 ZFI54FS9CYcmEmCfA2eQ== MIME-Version: 1.0 Received: by 10.150.157.1 with SMTP id f1mr13377249ybe.159.1289408004723; Wed, 10 Nov 2010 08:53:24 -0800 (PST) Received: by 10.150.96.9 with HTTP; Wed, 10 Nov 2010 08:53:24 -0800 (PST) In-Reply-To: <4E1F6AAD24975D4BA5B1680429673943245DF444@TK5EX14MBXC202.redmond.corp.microsoft.com> References: <4E1F6AAD24975D4BA5B1680429673943245DF444@TK5EX14MBXC202.redmond.corp.microsoft.com> Date: Wed, 10 Nov 2010 08:53:24 -0800 Message-ID: From: Breno de Medeiros To: Mike Jones Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: quoted-printable X-System-Of-Record: true Cc: "openid-specs-ab@lists.openid.net" , "oauth@ietf.org" , "openid-specs-connect@lists.openid.net" Subject: Re: [OAUTH-WG] [Openid-specs-ab] JSON Token spec work at IIW X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 10 Nov 2010 16:53:08 -0000 Thanks for circulating these. --Breno. On Tue, Nov 9, 2010 at 21:59, Mike Jones wrot= e: > I=92ve now finished my series of posts on the JSON token spec work that > occurred at IIW.=A0 For reference, they are: > > =A0 - JSON Token Spec Results at IIW on Tuesday: > http://self-issued.info/?p=3D361 > > =A0 - JSON Token Encryption Spec Results at IIW on Wednesday: > http://self-issued.info/?p=3D378 > > =A0 - JSON Token Naming Spec Results at IIW on Wednesday: > http://self-issued.info/?p=3D386 > > =A0 - JSON Public Key Spec Results at IIW on Thursday: > =A0http://self-issued.info/?p=3D390 > > > > =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0= =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0= =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 Cheers, > > =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0= =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0= =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 -- Mike > > > > _______________________________________________ > Openid-specs-ab mailing list > Openid-specs-ab@lists.openid.net > http://lists.openid.net/mailman/listinfo/openid-specs-ab > > --=20 --Breno From stpeter@stpeter.im Thu Nov 11 02:39:44 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 830003A6933 for ; Thu, 11 Nov 2010 02:39:44 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.558 X-Spam-Level: X-Spam-Status: No, score=-102.558 tagged_above=-999 required=5 tests=[AWL=0.041, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9TsoN7fm2ZJZ for ; Thu, 11 Nov 2010 02:39:43 -0800 (PST) Received: from stpeter.im (stpeter.im [207.210.219.233]) by core3.amsl.com (Postfix) with ESMTP id E13A03A6999 for ; Thu, 11 Nov 2010 02:39:42 -0800 (PST) Received: from dhcp-710a.meeting.ietf.org (dhcp-710a.meeting.ietf.org [130.129.113.10]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id 6AB8540BB9; Thu, 11 Nov 2010 03:49:35 -0700 (MST) Message-ID: <4CDBC808.4040105@stpeter.im> Date: Thu, 11 Nov 2010 18:40:08 +0800 From: Peter Saint-Andre User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: Hannes Tschofenig References: <5F644EED-8B5F-4FDB-B04A-505917386F9D@gmx.net> In-Reply-To: <5F644EED-8B5F-4FDB-B04A-505917386F9D@gmx.net> X-Enigmail-Version: 1.1.1 OpenPGP: url=http://www.saint-andre.com/me/stpeter.asc Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms050105000801000008020307" Cc: oauth@ietf.org Subject: Re: [OAUTH-WG] 2nd OAuth Security Session, Thursday (18:10) X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 10:39:44 -0000 This is a cryptographically signed message in MIME format. --------------ms050105000801000008020307 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable I've been in the room since 18:05 and several other folks are here, but I don't see the WG chairs... On 11/9/10 12:47 PM, Hannes Tschofenig wrote: > Hi all, >=20 > at yesterday's security session we discussed ways on what to provide > in the security consideration for the OAuth specifications. The plan > was to have another session on Thursday, November 11th, starting at > 18:10 at the IAB breakout room (Jade 2). >=20 > We plan to go out for dinner together. --------------ms050105000801000008020307 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIITzjCC BjQwggQcoAMCAQICASMwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3 MTAyNDIxMDMzM1oXDTE3MTAyNDIxMDMzM1owgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1T dGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAzIFByaW1hcnkgSW50ZXJtZWRpYXRlIENs aWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALmjSW4SPiDKlAinvVeL ZOVfItiuP1aRHL530E7QUc9icCwL33+PH+Js1HAh8CgWFl34sOxx1FJyS/C4VLPRsqDfP72j tzCVUAL0DAxZ7wgzQvFz7x61jGxfhYhqYb1+PPOLkYBbkRIrPMg3dLEdKmXIYJYXDH+mB/V/ jLo73/Kb7h/rNoNg/oHHSv5Jolyvp5IY2btfcTBfW/telEFj5rDTX2juTvZ3Qhf3XQX5ca3Q 7A10zrUV/cWJOJ7F5RltbEIaboZmX5JBUb3FhUiAdBotehAX6DbDOuYoJtVxmGof6GuVGcPo 98K4TJf8FHo+UA9EOVDp/W7fCqKT4sXk/XkCAwEAAaOCAa0wggGpMA8GA1UdEwEB/wQFMAMB Af8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBR7iZySlyShhEcCy3T8LvSs3DLl8zAfBgNV HSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jBmBggrBgEFBQcBAQRaMFgwJwYIKwYBBQUH MAGGG2h0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9jYTAtBggrBgEFBQcwAoYhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3J0MFsGA1UdHwRUMFIwJ6AloCOGIWh0dHA6Ly93d3cu c3RhcnRzc2wuY29tL3Nmc2NhLmNybDAnoCWgI4YhaHR0cDovL2NybC5zdGFydHNzbC5jb20v c2ZzY2EuY3JsMIGABgNVHSAEeTB3MHUGCysGAQQBgbU3AQIBMGYwLgYIKwYBBQUHAgEWImh0 dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93 d3cuc3RhcnRzc2wuY29tL2ludGVybWVkaWF0ZS5wZGYwDQYJKoZIhvcNAQELBQADggIBAGpd SbdLFMhirxK37V4gE00+uW74UdAXtDgQI3AsRZWtaRtKHgAxFBSteqz4kDkeAjH/1b+K8tQR 6cxSI2nho7qOaPW/UpzOfSS/MeKK/9vfM2lfs+uItXH7LWtvS9wD1erfH1a+BXHCrCp4LA1l fADDhRIiGTSS3i0Zu5xV3INNRHrCCCl6patltQ8RZTqzDMri7ombgIxjN51Zo7xV77EZcThV 0GA8iIN+7T53uHhUJpjfLIztHs/69OclRvHux9hCflfOm7GY5Sc4nqjfES+5XPArGGWiQSEk ez37QfXqsxO3oCHK4b3DFZysG4uyOuC/WL80ab3muQ3tgwjBhq0D3JZN5kvu5gSuNZPa1WrV hEgXkd6C7s5stqB6/htVpshG08jRz9DEutGM9oKQ1ncTivbfPNx7pILoHWvvT7N5i/puVoNu bPUmLXh/2wA6wzAzuuoONiIL14Xpw6jLSnqpaLWElo2yTIFZ/CU/nCvvpW1Dj1457P3Ci9bD 0RPkWSR+CuucpgxrEmaw4UOLxflzuYYaq1RJwygOO5K0s2bAWOcXpgteyUOnQ3d/EjJAWRri 2v0ubiq+4H3KUOMlbznlPAY/1T8YyyJPM88+Ueahe/AW1zoUwZayNcTnuM7cq6yBV8Wr3GOI LFXhtT0UVuJLChPMJKVKVsa7qNorlLkMMIIGxzCCBa+gAwIBAgICAIswDQYJKoZIhvcNAQEF BQAwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJT ZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBD bGFzcyAzIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQTAeFw0xMDEwMTQwMTM2MzRa Fw0xMjEwMTQxMjAxMDdaMIHAMSAwHgYDVQQNExcyNzQ1ODEtOU5YMDRxeExEYjBvNDY5VDEL MAkGA1UEBhMCVVMxETAPBgNVBAgTCENvbG9yYWRvMQ8wDQYDVQQHEwZEZW52ZXIxLDAqBgNV BAsTI1N0YXJ0Q29tIFRydXN0ZWQgQ2VydGlmaWNhdGUgTWVtYmVyMRowGAYDVQQDExFQZXRl ciBTYWludC1BbmRyZTEhMB8GCSqGSIb3DQEJARYSc3RwZXRlckBzdHBldGVyLmltMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuERvnrkpQTx9wbJfgxbNKEYvt0IilecZRUM6 wrbCzIUPCocuYhaAJcQoqIyHaKybPQ7f+DIGIAolAa3dHnNdlsXP2smTft/ZNpj10PIG5bil NAqLUYwmLJaEaqY7BMW8423U3blW43/luLJk/Pq4OsWcw7AK3LeVh1U/HOgqhin26N3h72X1 nbLEpZFrgcp8egmWtXLCbLBDMqUK3j6wjLldni79muzYEVqU0A5GqSeb8Wc4kIx8VI5yL24J KzinG2iVRP5ZDEbOZETzBXJabUsV56XSxqPG9DK6ke+ybCiL/wKV1HFqdtFB1y25lfvHgOP2 gyEApBKEDNjgLmKyyQIDAQABo4IC+zCCAvcwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYD VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMB0GA1UdDgQWBBS2EW2iNB+g0EibKJLBdv8I eLovVDAfBgNVHSMEGDAWgBR7iZySlyShhEcCy3T8LvSs3DLl8zAdBgNVHREEFjAUgRJzdHBl dGVyQHN0cGV0ZXIuaW0wggFCBgNVHSAEggE5MIIBNTCCATEGCysGAQQBgbU3AQICMIIBIDAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEF BQcCARYoaHR0cDovL3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjCBtwYIKwYB BQUHAgIwgaowFBYNU3RhcnRDb20gTHRkLjADAgEBGoGRTGltaXRlZCBMaWFiaWxpdHksIHNl ZSBzZWN0aW9uICpMZWdhbCBMaW1pdGF0aW9ucyogb2YgdGhlIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5IFBvbGljeSBhdmFpbGFibGUgYXQgaHR0cDovL3d3dy5zdGFydHNz bC5jb20vcG9saWN5LnBkZjBjBgNVHR8EXDBaMCugKaAnhiVodHRwOi8vd3d3LnN0YXJ0c3Ns LmNvbS9jcnR1My1jcmwuY3JsMCugKaAnhiVodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9jcnR1 My1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcC5z dGFydHNzbC5jb20vc3ViL2NsYXNzMy9jbGllbnQvY2EwQgYIKwYBBQUHMAKGNmh0dHA6Ly93 d3cuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczMuY2xpZW50LmNhLmNydDAjBgNVHRIE HDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZIhvcNAQEFBQADggEBADVtbXJG tKAr55xc/OUM546gXUybI72Bank0w739Mv+9BBNtq9rMEvCnLmSKhBi76c1mdXh6zXs8RQDo 6nR/aPabE3llF2T4z80smi9jfnl3y9dpu9TcgDoqDLZ7a2lBlW656XAAQzHjvLp2MC7/mxlg PYH2axa+q40mAYM20GbNsAEGbWQT1IqIh0BcLLsgbaMJHbyG/57zd9JLyMX3Vry1L1fJRQr3 GeLxMV5RtxN+mBgxrwFz/cOc09COiFExlsHgekpB5O43gqsAU16MXypyoSt4MrSfKTMHIGx6 2RF/M6vqUlvhi28gk2ZUvQ/+OX5+gjcZyooEzAAn4RuOKNswggbHMIIFr6ADAgECAgIAizAN BgkqhkiG9w0BAQUFADCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4x KzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMT L1N0YXJ0Q29tIENsYXNzIDMgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBMB4XDTEw MTAxNDAxMzYzNFoXDTEyMTAxNDEyMDEwN1owgcAxIDAeBgNVBA0TFzI3NDU4MS05TlgwNHF4 TERiMG80NjlUMQswCQYDVQQGEwJVUzERMA8GA1UECBMIQ29sb3JhZG8xDzANBgNVBAcTBkRl bnZlcjEsMCoGA1UECxMjU3RhcnRDb20gVHJ1c3RlZCBDZXJ0aWZpY2F0ZSBNZW1iZXIxGjAY BgNVBAMTEVBldGVyIFNhaW50LUFuZHJlMSEwHwYJKoZIhvcNAQkBFhJzdHBldGVyQHN0cGV0 ZXIuaW0wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RG+euSlBPH3Bsl+DFs0o Ri+3QiKV5xlFQzrCtsLMhQ8Khy5iFoAlxCiojIdorJs9Dt/4MgYgCiUBrd0ec12Wxc/ayZN+ 39k2mPXQ8gbluKU0CotRjCYsloRqpjsExbzjbdTduVbjf+W4smT8+rg6xZzDsArct5WHVT8c 6CqGKfbo3eHvZfWdssSlkWuBynx6CZa1csJssEMypQrePrCMuV2eLv2a7NgRWpTQDkapJ5vx ZziQjHxUjnIvbgkrOKcbaJVE/lkMRs5kRPMFclptSxXnpdLGo8b0MrqR77JsKIv/ApXUcWp2 0UHXLbmV+8eA4/aDIQCkEoQM2OAuYrLJAgMBAAGjggL7MIIC9zAJBgNVHRMEAjAAMAsGA1Ud DwQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFLYRbaI0 H6DQSJsoksF2/wh4ui9UMB8GA1UdIwQYMBaAFHuJnJKXJKGERwLLdPwu9KzcMuXzMB0GA1Ud EQQWMBSBEnN0cGV0ZXJAc3RwZXRlci5pbTCCAUIGA1UdIASCATkwggE1MIIBMQYLKwYBBAGB tTcBAgIwggEgMC4GCCsGAQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3ku cGRmMDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUu cGRmMIG3BggrBgEFBQcCAjCBqjAUFg1TdGFydENvbSBMdGQuMAMCAQEagZFMaW1pdGVkIExp YWJpbGl0eSwgc2VlIHNlY3Rpb24gKkxlZ2FsIExpbWl0YXRpb25zKiBvZiB0aGUgU3RhcnRD b20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUG9saWN5IGF2YWlsYWJsZSBhdCBodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMGMGA1UdHwRcMFowK6ApoCeGJWh0dHA6Ly93 d3cuc3RhcnRzc2wuY29tL2NydHUzLWNybC5jcmwwK6ApoCeGJWh0dHA6Ly9jcmwuc3RhcnRz c2wuY29tL2NydHUzLWNybC5jcmwwgY4GCCsGAQUFBwEBBIGBMH8wOQYIKwYBBQUHMAGGLWh0 dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9zdWIvY2xhc3MzL2NsaWVudC9jYTBCBggrBgEFBQcw AoY2aHR0cDovL3d3dy5zdGFydHNzbC5jb20vY2VydHMvc3ViLmNsYXNzMy5jbGllbnQuY2Eu Y3J0MCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzANBgkqhkiG9w0BAQUF AAOCAQEANW1tcka0oCvnnFz85QznjqBdTJsjvYFqeTTDvf0y/70EE22r2swS8KcuZIqEGLvp zWZ1eHrNezxFAOjqdH9o9psTeWUXZPjPzSyaL2N+eXfL12m71NyAOioMtntraUGVbrnpcABD MeO8unYwLv+bGWA9gfZrFr6rjSYBgzbQZs2wAQZtZBPUioiHQFwsuyBtowkdvIb/nvN30kvI xfdWvLUvV8lFCvcZ4vExXlG3E36YGDGvAXP9w5zT0I6IUTGWweB6SkHk7jeCqwBTXoxfKnKh K3gytJ8pMwcgbHrZEX8zq+pSW+GLbyCTZlS9D/45fn6CNxnKigTMACfhG44o2zGCA80wggPJ AgEBMIGTMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UE CxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRD b20gQ2xhc3MgMyBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAgCLMAkGBSsOAwIa BQCgggIOMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEwMTEx MTEwNDAwOFowIwYJKoZIhvcNAQkEMRYEFIwKb/MCMWkMKVWuw4r9F4kZtWEXMF8GCSqGSIb3 DQEJDzFSMFAwCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggq hkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBpAYJKwYBBAGCNxAEMYGWMIGT MIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2Vj dXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xh c3MgMyBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAgCLMIGmBgsqhkiG9w0BCRAC CzGBlqCBkzCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNV BAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0 Q29tIENsYXNzIDMgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgIAizANBgkqhkiG 9w0BAQEFAASCAQB3BDbt5Szg44Faxq0BTOCcvuS2pBMW6Q/2pHyKsmTS6iCB+W1Wh2IujwKW qpuagrTBOvoVXKh19gcacrzC4DX8aiic/7CVMSRhLK8gIg6no782/g1fM8IJVjYaHjh4IhWE kKh09gdTXIWzmi+UYJTbgLbq/+Wx54w5HoHvaNsnqW7yP2AM/YwdBt0lJVZ4rvdoMS9VwIOT Cw7KJOhtcWPEAWaAeYSNHAMsic03usGBOVmu0P+YiE2ylTF025WVhKAUx1qgLLbZzqdlAfgw JLa9uVAFCnwL10VS54wRbtXKXPLkLzdI7lXJkjweaucSGuF+yuwgJRHlCQvkT6bRnPgDAAAA AAAA --------------ms050105000801000008020307-- From tonynad@microsoft.com Thu Nov 11 03:14:24 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id F3C0C3A6A30 for ; Thu, 11 Nov 2010 03:14:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.599 X-Spam-Level: X-Spam-Status: No, score=-10.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id eIvXU55FxhXJ for ; Thu, 11 Nov 2010 03:13:43 -0800 (PST) Received: from smtp.microsoft.com (mailc.microsoft.com [131.107.115.214]) by core3.amsl.com (Postfix) with ESMTP id 1D9133A6A28 for ; Thu, 11 Nov 2010 03:13:36 -0800 (PST) Received: from TK5EX14HUBC107.redmond.corp.microsoft.com (157.54.80.67) by TK5-EXGWY-E803.partners.extranet.microsoft.com (10.251.56.169) with Microsoft SMTP Server (TLS) id 8.2.176.0; Thu, 11 Nov 2010 03:14:03 -0800 Received: from TK5EX14MBXC111.redmond.corp.microsoft.com ([169.254.2.172]) by TK5EX14HUBC107.redmond.corp.microsoft.com ([157.54.80.67]) with mapi id 14.01.0255.003; Thu, 11 Nov 2010 03:14:02 -0800 From: Anthony Nadalin To: Torsten Lodderstedt , "oauth@ietf.org" Thread-Topic: [kitten] [OAUTH-WG] ** OAuth Tutorial & OAuth Security Session ** Thread-Index: AQHLgKWDHr6YaMZAX0GJPkSHNpdGapNq0mEAgAFKDBA= Date: Thu, 11 Nov 2010 11:14:01 +0000 Message-ID: <180155C5EA10854997314CA5E063D18FF26BCA@TK5EX14MBXC111.redmond.corp.microsoft.com> References: <30C8090C-AD0E-4D2A-8F26-6EFC52DCDD9D@gmx.net> <4CD73075.8050408@lodderstedt.net> <180155C5EA10854997314CA5E063D18FECBAC9@TK5EX14MBXC113.redmond.corp.microsoft.com> <1893623701-1289290076-cardhu_decombobulator_blackberry.rim.net-776340369-@bda356.bisx.produk.on.blackberry> <20101110070037.GT6536@oracle.com> <4CDA461C.2020301@lodderstedt.net> In-Reply-To: <4CDA461C.2020301@lodderstedt.net> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.123.12] Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "Tschofenig, Hannes" , Nicolas Williams Subject: Re: [OAUTH-WG] [kitten] ** OAuth Tutorial & OAuth Security Session ** X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 11:14:24 -0000 So my suggestions would be; 1. I think that section 3 is a good starting point and I would stop at sect= ion 3 for the base specification 2. This should be only about implementing the protocol, not about the servi= ces described 3. remove any talk of DoS (as this would be up to the implementer of the se= rvice) section 3.3 4. remove anything about access token "scope" (its opaque) 3.5.3 5. remove anything about tokens (specific format) and authentication 6. remove Phishing attacks 3.5.2 7. remove 3.7.1.1.Security of Bearer tokens 8. remove 3.8.7. Plaintext storage of credentials -----Original Message----- From: Torsten Lodderstedt [mailto:torsten@lodderstedt.net]=20 Sent: Tuesday, November 09, 2010 11:14 PM To: oauth@ietf.org Cc: Nicolas Williams; Anthony Nadalin; Tschofenig, Hannes Subject: Re: [kitten] [OAUTH-WG] ** OAuth Tutorial & OAuth Security Session= ** Am 10.11.2010 08:00, schrieb Nicolas Williams: > [That is some cc list! Do you really need a cc list that large for=20 > this thread? I've set the reply-to to just oauth@ietf.org (note: I'm=20 > NOT subscribed to that list). Please honor the reply-to header. It's=20 > a good idea to set reply-to when making announcements, so that replies=20 > don't flood people who are almost certainly not interested.] > > On Tue, Nov 09, 2010 at 08:07:56AM +0000, torsten@lodderstedt.net wrote: >> We think the security considerations should be based on a threat=20 >> model of OAuth. But a complete threat model would blow up the spec. > Really? I would think that a threat model for OAuth could be=20 > described fairly briefly. What is the typical value of resources=20 > protected by OAuth? What kinds of attackers (active, passive, ...)=20 > does OAuth aim to defeat, and under what assumptions (end-points are=20 > secure, trusted third parties are trustworthy, certain cryptographic=20 > algorithms are not broken with parameters in certain ranges,=20 > smartcards are secure, ...)? Which kinds of attacks does OAuth explicitl= y not protect against (e.g., DoS)? > What resources do you expect attackers to apply to compromising=20 > resources protected by OAuth? > > A few pages should do for the threat model. An abstract of the OAuth=20 > threat model should also be possible to write. We are open to proposals. Please take a look on our document and propose a = way to shorten the threat model. regards, Torsten. >> We therefore aim to produce a separate security document=20 >> (informational I-D/RFC) covering threat model as well as security=20 >> design and considerations. The security considerations section of the=20 >> core spec can then be distilled from this document. > Sure. Procedurally speaking, that works. > > Nico From Hannes.Tschofenig@gmx.net Thu Nov 11 03:18:38 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DD52028C0CF for ; Thu, 11 Nov 2010 03:18:38 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -101.424 X-Spam-Level: X-Spam-Status: No, score=-101.424 tagged_above=-999 required=5 tests=[AWL=-1.044, BAYES_00=-2.599, TVD_SPACE_RATIO=2.219, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Hu+d12U6l5Qu for ; Thu, 11 Nov 2010 03:18:38 -0800 (PST) Received: from mail.gmx.net (mailout-de.gmx.net [213.165.64.22]) by core3.amsl.com (Postfix) with SMTP id DCECA3A68D3 for ; Thu, 11 Nov 2010 03:18:36 -0800 (PST) Received: (qmail invoked by alias); 11 Nov 2010 11:19:01 -0000 Received: from dhcp-7730.meeting.ietf.org (EHLO dhcp-7730.meeting.ietf.org) [130.129.119.48] by mail.gmx.net (mp072) with SMTP; 11 Nov 2010 12:19:01 +0100 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX18X//QuCDMXC0iydChDsgrIYkXbOTfCt+Habob6nM 5lDORlCFlhxIQh From: Hannes Tschofenig Content-Type: multipart/mixed; boundary=Apple-Mail-8--217996627 Date: Thu, 11 Nov 2010 19:18:52 +0800 Message-Id: <52875D50-2EB8-4D87-BD1A-5CA9D1320023@gmx.net> To: oauth@ietf.org Mime-Version: 1.0 (Apple Message framework v1081) X-Mailer: Apple Mail (2.1081) X-Y-GMX-Trusted: 0 Cc: Hannes Tschofenig Subject: [OAUTH-WG] Security Considerations Suggestion X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 11:18:39 -0000 --Apple-Mail-8--217996627 Content-Disposition: attachment; filename=OAuth_v2_security_proposal.docx Content-Type: application/vnd.openxmlformats-officedocument.wordprocessingml.document; name="OAuth_v2_security_proposal.docx" Content-Transfer-Encoding: base64 UEsDBBQABgAIAAAAIQDkXtRFdQEAAFQFAAATAAgCW0NvbnRlbnRfVHlwZXNdLnhtbCCiBAIooAAC AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0 lMlOwzAQhu9IvEPkK0rcckAIJemB5QiVKA/g2pPU4E22u709k7SpqqoLou0lkmPPP9/8nnE+WGiV zMAHaU1B+lmPJGC4FdLUBfkavaWPJAmRGcGUNVCQJQQyKG9v8tHSQUgw2oSCTGJ0T5QGPgHNQmYd GNyprNcs4tLX1DH+w2qg973eA+XWRDAxjY0GKfMXqNhUxeR1gb9XJBhOkufVuSZVQZhzSnIWEZQ2 u7TMPxDcSwHJkPn4zjSeonPrBa0wcMTGCrLjOjMjdmBTW1WSg7B8qhExa+SctxxCQEu0yjbSd2uI PfDfDuodeqmb6tuNY+CbvBfn3ihrJk3HftDAEJcKwuXdW+l26fdY50GFHeu2L37Pha07K8PItjnC RLrQZThY4BzGnxAj3ukVqtwSPwkScWSAtt/+2X63MsdSYhcMvXUBR9D/Yzg6r5voFMfCgY8STrsd rmZ1p/ynorGTzrYYmjdKgNhTPm3fxPIXAAD//wMAUEsDBBQABgAIAAAAIQDHwie8DAEAAN8CAAAL AAgCX3JlbHMvLnJlbHMgogQCKKAAAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAArJLBTsMwDIbvSLxD5PuabiCE0NJdENJuCJUHMInXBtokSjzY 3p6ww0qlUU1ix8TOn+/37+Vq13fik2Ky3imYFyUIctob6xoFr/XT7B5EYnQGO+9IwZ4SrKrrq+UL dcj5UWptSCKruKSgZQ4PUibdUo+p8IFcrmx87JHzMTYyoP7AhuSiLO9k/K0B1UhTrI2CuDY3IOp9 yD//R1v2xGiQUWofaRZiJotssxdRY2yIFRivn/N1OnQUmRrkaaDb84H8ZmM1PXq97cnxCc+SdkzO kJlGwhCmiOaXJBozD/P58tHIPKSDlSmaxfk0fy/DEBi32/7Noe0GlGNUx1rxHqj5CUyO1rL6BgAA //8DAFBLAwQUAAYACAAAACEAE6o+h/sAAAAxAwAAHAAIAXdvcmQvX3JlbHMvZG9jdW1lbnQueG1s LnJlbHMgogQBKKAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACskstOwzAQRfdI/IM1e+Kk PIRQnW4QUrcQPsB1Jg/h2JZneOTvsQqUVFRhk42lO5bvPdbc9eZjsOINI/XeKSiyHAQ64+vetQqe q4eLWxDE2tXaeocKRiTYlOdn60e0mtMj6vpAIrk4UtAxhzspyXQ4aMp8QJduGh8HzUnGVgZtXnSL cpXnNzJOPaA88hTbWkHc1pcgqjGk5P+9fdP0Bu+9eR3Q8YkI+Y67J2ROn6Nkq2OLrGAyzBItyNMg V0uCNN5xpXcWfzEOozmI6yUhOG1pArCXcn8WcwzFkgzEo02VOizjS8/FrxaN/9MG+p78IMijopef AAAA//8DAFBLAwQUAAYACAAAACEA8k7t5/sSAABb5wAAEQAAAHdvcmQvZG9jdW1lbnQueG1s7F3r ctvGFf7fmb7DDn8kdhzeJEtxmIgZXdt06tgjKdP+6EwKAksSYwCLYkHSyng6fY2+Xp+k38GFwlIA CV4AghI4tmlRIHh49jv3s2d//OmzbbEp96QpnLNGt9VpMO7owjCd0Vnj1/ub5rsGk77mGJolHH7W eOCy8VP/j3/4cdYzhD6xueMz3MKRPVucNca+7/babamPua3Jlm3qnpBi6Ld0YbfFcGjqvG1revzf o07nHX42nUZ0jyk+YeEewuUOPmAoPFvzZUt4I7zD+zRxm7inq/nmwLRM/6GNe53Gt7GnZ42J5/Qi OppzOug9PRDQm9pWfDHIzr42pLkXPsXv8PIQGb7lKuJRQF7b4xYIFo4cm66M72ZvejfwYxzfZOkX TnzZmZvn0wxPmwEAthWSPROe4XpC51Li1avwl/Enz7qdHAykW8zfkYcE9TNjSpJYmREcF8AyX+gk 4OhWj18EC98HeAfCeKBnl816AL9xe9bodI6/f/vu+LoRv/QRC93pXJ13Tk9u5i9e8aE2sfzE5cFt Pnr05EVPN8LxJW6jSd00zxqXmj3wTI3uMT53ZOKVNr1L/o5fTDXrrHH0roFX2tGN8OyGNwT3xfDa 83Cd/+Die0uXW9adr3k+vQHX4zfB11Bo3j1J+Pz+h/OJPyYi/ZBU+pR0Aq8do3TySJP0pKvp4JLr ccm9KW/02VGrw8A03YQOCmRQ+QLE6eBrxGyk5b2+OLm6uZgvvMLZ+LoEGqLLg9sUiYZDorVUYKav /LmUE9slrdtTAcB0CClsj2QON/0x99iAax6efPGJO8wRHrOh8bQRZ9IcOdB8LbYaNBVVIamgOb84 vTnNr+6iywsHeAVA022xnx3fE8ZEJ+TU6w6YPK9173dbXUWaE6hL2PZYzyvKnzixW0sPW5quvRZU ToLI4inq/yL8wFRqFrsUzhSuPmRBYdohqZVDorXcdb7xhM3g8w/9psn9YVNocPCa06Nmt/O8VntN 4/yiDN5RtqrZiz7s33PPNh1hidHDahSuubLR5YWbtFSdU1FaS9U56dauyW65FBNP5+yO4jbvcB2v UrnZTzAOlhoBD/cOVmZK5VwWDinFITzz98D/yQ/GOqLKcmSbrNV6YmGeZI1GnmbvKauFVJGvyExK UovIq1BOa/hS/LZarJBrveJS98wBZ8hVMR/OEWuswmudJU7Nq2dG2+yjJ4amxRsLmuqQ3LhDorVU U4+Mz4K8zIsmFOAs0zGFJHz6x5n0FJ/bSfd7VHc7sTr7YdAHRABTk8+UZTskfKfSugxocboxUVYq K1TNcHf25I3Fxk4G1k7TfeFJBQYZ5FbIOxtokhsVkyiUMjT8GUjfA0/n9S3+WR9rDgpdryTnGZlA ZjrsxhxNPM66r1XNlQrzimY5DonWhALel0X4VXKUR2eBvxkl45hhSn0iCdyAxHtNA5hMfewv+EwJ 4vdjPc4Ng2mWFIEGmaAPgHnC4kyTRDb50MMQzQNuicJMTKTQPyZSqDmSjkiBmdyjzoO4XSR6JbU5 ZO7G5AZJnvtnO8kseizo4zkZ2yz3dpRlUVQyY0L+LBCz+1xHTl71v23mIWULy5mXkMKsxnOWslja oudX37BvXivruUOL9oL4yP75RuFihj+5lfubVy6+Zgx2Vs3YZ9ATSWm95kG7ZUbTxILIJH78Wlnz mos5uKhwLAOVpUhJrypmrPn4ALTwwxf8Zezf80dP4VmNshwo6wU1NmwPmAtrezF03p8D9Y85UcF/ 1OXNEIni3amMFN57zUHLKu3LqFEYRFGJmGlVTNOjrk9OqRFq+sSjjb8KGzNWuxQFqMKw2igUw3kr h5q3q7VhDm1YGcj1AoWn/FNt3FH3C21JCx8qrTX0aug1lpXycsZrGYZXkRJWQy/MYa5hfWuttzzj u8p7iQFYQ29t6C3YuTcI6KqDxlykFB9v9N+wSw0llNq2hjt4I2uxhoILUIatZdHjS8DOL9UJMFAa mz9UJZIR9tTZyD6piWgv2PJsJBa/Mirlw4A2vmKtW2pCdPkyJyq65RTUvhr5P3wJEFkhIcF+Yu75 2A0MwmohQcUonnGwC++5SkJyrtPAi4qLCEBIzkqz+aY62uUjplI8BGJbS4gyBWRHEnJP8wlaKBpm PFStVGc9Di/rUW2znAE7ermG3tqhZ2WcQopODhZ4NfQuN4lHKwO+aR5KSshxZFvVUOvVCm5NBfcm V/aqlPpphRpI3oRoSv0X/nyP/PkLMVCEonbkVjpyX84ttJB8+cryfwiCorR/gqQCeMvYF/SC1xxe r0ciTMcoXMtIGpUi0iE57CgPQSVYjxajuQE0JwkzBrE/gh5xAuuWWw/IGimU1iK9UqTD7IbCtX0C 7lFx3/J/TYofGbBdyuCR2jhJFORmFG7WGFyJwUUzHWUGgzzM4fLyoBb+oIgtvVCyCND453i/Zm9l cnj7SRE5NVU504NzEpPRyfNeGNyqlmBvN0B679KzHfmbyNNmn4gWm/4tdy1Mj2bywR4IxBPM0TAH mM0wI3hxK2zFNrRt9p0JHDSveocgybHFtQBa1xysEF1eOK2lojddo3Vbb9mlZVJjbDThRqoWoV77 3c7zjWWqAmsfT9Jg+sTzCAHYR0MzjiTthFeMXBFx1WZiTmp4bI7GzOLTBUucQeQWwf3GJKbLGouH aciFgQi7kLEXpLPuxyYmNVjWhGaV+IArjWwAdn2howdxzmRCscU1A+MdDFOjAX2hqRYTn2Efz0Sz rAc2EtSvYzp+OAxiAfXK4ILOd28vri+pEbek4zTSUWRwdGhZRUCorHlCqXBfxt2Y5YnZR9HlL8FE 33tc8wnjNiHaFT5lETF4HYNLmI5JQpJhS9UCcJ/siNw+ittYGZYT121MXrqU/UAMf2A49QPHffg4 EMR2Le5jRoxjBC+EUohELnfEBOYIh1DhvxIlsFCdcA+nU3laeAJVHnVfUfzXspp2/FLmfguMSqdt 3yvFcY/TbLmvr1IW1Rpm23q07coxTSqTDwmoNa3PNqb6vKDrM4KSrUqgG5u6vuQI9XAk4mEpADqO C+fwwZzmPHGptqVFHCy4R5v1+bAA2+omwtMgOh2YI+aaCDo9XmkFAV/3sFjN7Ik+ZqE3HjrhGn5G QETx0gKra7P7bM1upT1umjB6YFKFhBj3hqh1KXQfkgBVIL9eg3KTo40zY2tGZ89FHXT5Tt6sqB9Y QzP7YGuq7wSn7CqKJyOKqlBph8oPPO+JsDUus8+CyrPue4qeDxGXXtiL2sYZVi4NwJqXxxQ+14Z9 rSxvpQ17dDK5sr7V158RTlmcoTrc5G5t3Zdb93iFDwygVOCD+8kMzdfmSrRGaeDhY9DR0jVPL7FW WoseKErDxBeDtUefM3WqhmfltoPY6fHU0ujlIMqPRtoq4nhI/kAqrdcXJ1c3F+m9OnvtJnnSmLHH rPpjC5Wy+NV3Fvxx0BCDLrAlBeGEHaZjZ5YhgtTXblOjmUkMXeDkOnTsOOg9czENJ2je8amhjTIb 6DYBQAYWWn2ki+xbngT2si+WAvXo8sIbp3YhlmXRmoBK7vFlGxdh043h3WQ0wp5B1aHIkMS9hb9M MwyYFnVrdAaRFcrN+DOBzjkX6ZnggC9bQMyiipE0HVjJeauXTr9KbwV9orjrjro1T9ClFFnQofsK bYxGdGRxcFJcoP8MoeNwesfPc4LgZjov0obBiWsvSLVU2s9+YTm1GriaddY4etfIMxu30sB9MWm2 o++6Nyed3KFUdPl+/MuK0loF/zIqTh2zxl3UBMjux7SzQDbo1NOx77u9dtsXAltLTO4PW8IbtU2j bXja0G/6Uh+LIXfMUVNQGbYpzZGjUTtT0x9TA7wvm51Oy//sM4Qymutid6yGOCZoyVHMex3SUGKi cPGoAOQ+emKKrs3HlL7SxinDbi2EuvD5ZPtx19ajZzh4CDKuaoxv+pJbQ7TZh7vAHN2a4B1MizxK N2gRpTQYjUJFIiwYxfK0/PXcYNjpHl2cvM2tpaPLC4dhahagorRWQGR+lhKTgygCRVxKwF4Yz1Gz c606bff1ynzKPqP4K3G3KvEakFelVErgMrBXknMcyxj2uxy3jqnhNvALjjq/oXJCiv63o0630+12 vnudR9WWrxKQDNDlWePepAkev+Ac+1thaw7FJbPe4FIGz9hOjKpflOboBI/wAvl7/GoYylD16xK7 i9PQSTJLQzQqoF6OnsgDfbsd7WbGncphKLWI3fIhEpFjdk9WXs1HpurINePusszjTjFR5gKkJ7GP S8DXuYe9z7sR09OFLET/zhUYgIENvPA8dTEJeqC56c8PoI08Wm/3gHuW6ch+2pBVek2xeruQ17LY l0prnXTI6ub8gMIKhm9EiX2UOD9jdoERBnVxEiIM94KwLY+zW1Fm7wIYB2l0VrX+9OGDQ20GY4VW i/0zXt3oqxUece/UpVi5uivShh5HRdUQTpQ0nB41DT7FHO4oV1gUICKnNij0vUi+65rtDrhlxcla zbYKZnnhuN6Fhn2WWEh3xRHqBbERu3Z0YZBPW5Sw1SsfTcgMg3x0OYjhtUeBtf/g8rPGHhv8/v7+ r9+yv9x9+OVbhqkv6kjS6rft1IDtFF8nqtVqWs6OUkxIZrxHr5s2QqYTxU6o0BqQJQCyVP813XZe f4b7ZC3WXnZKWJSr+zO3ppyOBElPK0M4o7ZkDD0NC/Sz2eyxPG9jEGRT8/SxOeXtGR+0gxx8Oxrn 2rblqPP26KTTGvt2jqHlhxR8lV8vWBoKkRYtPcfff/ua/WmCCrtlOqhh0AYlg2v4YRROJKexEzTZ NBzkQPVxqLHVOmzNVPleU2+bweDZh4fpaq1J51uxC83zHthUWJTe5h4mWKLaPMNQMDRqCJujVydX rHBz2ul0j3P3G6iXlxqYp3o4Kj23Std/BI/bxLRZ9fJSyd+p2VmqxMjpOYnDRlRAUGMDPtAfv1pn qPypMjtT0bCZ5Xv2amSL+s3hcHSHgCg8E1KqLkg3In8zP5nsIwVFMBvIdQQdfia5y9THFw5obKu5 pgTVtBFvma4gDu58I14/mMRMfYGa6gUnCFMMQCFUpLMTDYpWcB5gvN+4YqyjBL6NlcWud/BPrXtX gX2vFNuUoGg/SCMPKouivUEsGoYYzDK3zE84bJJkdxBsNaW63HwTba5OrWXim+05Fa4aU9V4RWlN wHRfoEhPcVSEiYBROZ1k9H1LD9vTDcGTvU6H2pl34U0QSiIZgX21wqFDKjw6Ja3talLOUAxW1GMN ODVW2sjzKE1cKEBsMhxxipwTfD06ascVOPICCz3EMINwfbEVA8dlhCeKSWQVVq/31Xnn9ORm3VTC NhalNI4VomBKoz5c7ytT6tZ8mWnz1+McGZSWOe0eG3hiRtlGzLHwhaeOl0+V8evj0+/fnS6s+cKL ifxLBJEla75ngxGRnia/5VAWrtWHAc6GchaG/dAiIT3sCZwfpKxeNAWIJloNcI7QakldWKDQeVl4 MbFqCabEZjaytjcCe74iHBfV0JspewmyFmPN0tZqMydgBeVFcZKwFSNL11ETRfxAbfc7wVSq9t8W U3vc1bHHNWqyaJWCyo+O3D7MNLrl97JQO1DZ5pbbcJT+/penDpYKwU55SwrizkftEUVGau9cbUnW lPoXAaadL0kTJ/sKh2YdVXVRit1gt0IVlysfTfYetXndFJP5fIRgqzpGMBgYAhfslMDchP/9578Y jgSPbLUMLRjJ3Xhj5TGlVsj/FwAAAP//zFZRb5swEP4rFu9dyRIxEjVIU5e+bYqS/gEDB1g1GNlO aPbr5zM4K22ylDZI48Vw5s535+++u9vorlnE98qurFsTwYUkzWJP+dLz7ePZH9RvJ/0aOsm9OsoC lN02C7mWaFaT55IvVE0TWHq1BAVyD160AZoSCZkRFESLJ6hIJkVJuEgoJ6ivWytoo5ZCZCuJ3uhD beyoGjjfaip16wDuSMXSzVqir6tpMA8DD1U7L+SDqDT6mKil98hKUOQXNGQjSlq1JsYKP8oYB3VQ Gsp3RbWq0i6BtQ3dRYZxPQS+P5l6TtQL1gl/QEZ3XL9KQ91exuBsfBQEFhgOBGZ15zsve67/F/d0 GqY3F6GYS1qOg8Sr5B7rCMoY0hTSS/jDUDr4mcK53lVdK5DTV0RiKRrDKmSvvhB41iArwyBOmIjK 8AJIqpl562UAYfmmxDrqOBm8Ew4use+SUd6nmY/mpMeuAwrrNWm72jxL0G+QPwwQY4V81t9H20M4 0CeaA9kzerFyP9dERgww4iK3XaMH13Nt8F8NYzqfhdPV5xvGOfQMAGCvA4+ZvBuyLpgqWJX30ueq XUGi10csY5t8R5K2RunFr5Y18i3OQc3Sm0zmvo85Lsx7EM78ttLr/CfFc7SojXxmxMgfLC+MpUnY asRCa1H+3eaQvdgtzIwEZqD55oeomwlhyO34me+0/eyOM4SC8003aKFKO4a18dpZKhbpwb6kItmV UOnoDwAAAP//AwBQSwMEFAAGAAgAAAAhAJ1ci74QBwAAhx0AABUAAAB3b3JkL3RoZW1lL3RoZW1l MS54bWzsWU9vG0UUvyPxHUZ7bxMnTppEdarYsQm0aaPYLepxvDv2TjO7s5oZJ/ENtUckJERBHKjE jQMCKrUSl/JpAkVQpH4F3szsrnficeOUABU0h9Y7+3tv3vu9P/Nnr147Thg6JEJSnjaC2uXFAJE0 5BFNh43gdq9zaS1AUuE0woynpBGMiQyubb77zlW8oWKSEATyqdzAjSBWKttYWJAhDGN5mWckhXcD LhKs4FEMFyKBj0BvwhaWFhdXFxJM0wClOAG1twYDGhLU0yqDzUJ5m8FjqqQeCJnoatXEkTDY6KCm EXIsW0ygQ8waAcwT8aMeOVYBYlgqeNEIFs1fsLB5dQFv5EJMzZCtyHXMXy6XC0QHS2ZOMeyXk9Y6 9fUr26V+A2BqGtdut1vtWqnPAHAYgqfWlqrOemet1ix0VkD257Tu1uLKYt3FV/QvT9m83mw2V9Zz W6xSA7I/61P4tcXV+taSgzcgi1+ZwtebW63WqoM3IItfncJ3rqyv1l28AcWMpgdTaB3QTifXXkIG nO144WsAX1vM4RMUZEOZXXqKAU/VrFxL8D0uOgDQQIYVTZEaZ2SAQ8jiFma0L6ieAG8QXHljh0I5 NaTnQjIUNFON4IMMQ0VM9L189t3LZ0/Qyf2nJ/d/PHnw4OT+D1aRI7WD02FV6sU3n/7x6CP0+5Ov Xzz83I+XVfwv33/880+f+YFQPhNznn/x+Nenj59/+clv3z70wLcE7lfhPZoQiW6SI7TPE3DMsOJa TvrifBK9GNOqxFY6lDjFehaP/raKHfTNMWbYg2sSl8E7AtqHD/je6J5jcDcWI5XH2/Hsepw4wF3O WZMLLwvX9VwVmnujdOifXIyquH2MD31zt3DqxLc9yqBvUp/KVkwcM/cYThUekpQopN/xA0I8fN2l 1OF1l4aCSz5Q6C5FTUy9lPRo38mmidAOTSAuY5+BEG+Hm907qMmZz+ttcugioSow8xjfI8yh8T08 UjjxqezhhFUJv4FV7DOyOxZhFdeWCiI9JIyjdkSk9MncEuBvJejXoXX4w77LxomLFIoe+HTewJxX kdv8oBXjJPNhuzSNq9j35QGkKEZ7XPngu9ytEP0MccDpzHDfocQJ99nd4DYdOiZNEkS/GQkdS2jV TgdOaPqqdpxAN87dubh2DA3w+VePPJn1pjbiLSDBVwk7p9rvLNzpptviIqJvfs/dxqN0j0CaTy88 b1vu25Yb/Odb7qx6nrfRTnortF29vbGbYrNFTmbukAeUsa4aM3JDmk2yhHUi6sCgljOnQ1KemLIY fuZ93cENBTYySHD1IVVxN8YZbLBrgVYylLnqoUQZl3CwM8Ne3RoPm3Rlj4Ur+sBg+4HEapdHdnhZ DxfnglKNWW2G5vBZTLSsFcw72fKVXCm4/TqT1bRRc89WM6aZVufMVroMMZx2DQZLNmEDgmDbAiyv wvlcTw0HE8xIpHm3a28RFhOFvydEudfWkRhHxIbIGa6wWTOxK1LIXBBASnlCdz42S9aAtLONMGkx O3/mJLlQMCFZl92pamJptbZYio4awfrK0kqAQpw1ggEcSeFnkkHQpN6yYTaEe51QCZu1Z9aiKdKJ x+v+rKrBLcOMgnHKOBNSbWMZ2xiaV3moWKpnsvYvrdR1sl2MAzZRX8OK5TVIkX/NCgi1G1oyGJBQ VYNdGdHc2ce8E/KRIqIbR0eoz0ZiH0P4gVPtT0Ql3CyYgtYPcA2m2Tav3N6ad5rq5ZPB2XHMshjn 3VJfoxQVZ+Gm3kobzFPFPPDNa7tx7vyu6Iq/KFeqafw/c0UvB3DQX450BEK4hRUY6XptBFyomEMX ymIadgSs+6Z3QLbAVSq8BvLhLtj8L8ih/t/WnNVhyhrOa2qfDpGgsJyoWBCyB23JZN8Zymr50mNV slyRyaiKuTKzZvfJIWE93QNXdQ8OUAypbrpJ3gYM7nT+uc95BfWHeo9SrTenh5RLp62Bf3rjYosZ nDq1l9D5W/BfmuhZ/ay8ES/WyKoj+sVkl1QvqsJZ/NbX86le04R5FuDKWms71pTHSyuFcRDFaY9h sNzPZHBdg/Q/sP5RETL7YUEvqD2+D70VwXcCyx+CrL6kuxpkkG6Q9lcf9j120CaTVmWpzXc+mrVi sb7gjWo57ymytWXzxPucZJebKHc6pxYvkuycYYdrOzaTaojs6RKFoUFxDjGBMV+kqh+NeP8eBHob rudHzH5Gkhk8mTrI9oTJrj6PxvlPJu2Ca7NOn2E0kqX7ZIBodFycP0ombAnZTxnFFtmgtZhOtFJw 2XdocAVzvBa1q2UpvHS2cClhZoaWXQqbGzKfAviQlTdufbQDvG2y1mtdXAVTLP0rlM1hvJ8y78ln XsrsQfGVgXoNytTxqynLmQLyphMPPkUKDEeTrum/sOjYTDcpu/knAAAA//8DAFBLAwQKAAAAAAAA ACEAXxAvVmzeAABs3gAAFwAAAGRvY1Byb3BzL3RodW1ibmFpbC5qcGVn/9j/4AAQSkZJRgABAQEA SABIAAD/4gVASUNDX1BST0ZJTEUAAQEAAAUwYXBwbAIgAABtbnRyUkdCIFhZWiAH2QACABkACwAa AAthY3NwQVBQTAAAAABhcHBsAAAAAAAAAAAAAAAAAAAAAAAA9tYAAQAAAADTLWFwcGwAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtkc2NtAAABCAAAAvJkZXNj AAAD/AAAAG9nWFlaAAAEbAAAABR3dHB0AAAEgAAAABRyWFlaAAAElAAAABRiWFlaAAAEqAAAABRy VFJDAAAEvAAAAA5jcHJ0AAAEzAAAADhjaGFkAAAFBAAAACxnVFJDAAAEvAAAAA5iVFJDAAAEvAAA AA5tbHVjAAAAAAAAABEAAAAMZW5VUwAAACYAAAJ+ZXNFUwAAACYAAAGCZGFESwAAAC4AAAHqZGVE RQAAACwAAAGoZmlGSQAAACgAAADcZnJGVQAAACgAAAEqaXRJVAAAACgAAAJWbmxOTAAAACgAAAIY bmJOTwAAACYAAAEEcHRCUgAAACYAAAGCc3ZTRQAAACYAAAEEamFKUAAAABoAAAFSa29LUgAAABYA AAJAemhUVwAAABYAAAFsemhDTgAAABYAAAHUcnVSVQAAACIAAAKkcGxQTAAAACwAAALGAFkAbABl AGkAbgBlAG4AIABSAEcAQgAtAHAAcgBvAGYAaQBpAGwAaQBHAGUAbgBlAHIAaQBzAGsAIABSAEcA QgAtAHAAcgBvAGYAaQBsAFAAcgBvAGYAaQBsACAARwDpAG4A6QByAGkAcQB1AGUAIABSAFYAQk4A giwAIABSAEcAQgAgMNcw7TDVMKEwpDDrkBp1KAAgAFIARwBCACCCcl9pY8+P8ABQAGUAcgBmAGkA bAAgAFIARwBCACAARwBlAG4A6QByAGkAYwBvAEEAbABsAGcAZQBtAGUAaQBuAGUAcwAgAFIARwBC AC0AUAByAG8AZgBpAGxmbpAaACAAUgBHAEIAIGPPj/Blh072AEcAZQBuAGUAcgBlAGwAIABSAEcA QgAtAGIAZQBzAGsAcgBpAHYAZQBsAHMAZQBBAGwAZwBlAG0AZQBlAG4AIABSAEcAQgAtAHAAcgBv AGYAaQBlAGzHfLwYACAAUgBHAEIAINUEuFzTDMd8AFAAcgBvAGYAaQBsAG8AIABSAEcAQgAgAEcA ZQBuAGUAcgBpAGMAbwBHAGUAbgBlAHIAaQBjACAAUgBHAEIAIABQAHIAbwBmAGkAbABlBB4EMQRJ BDgEOQAgBD8EQAQ+BEQEOAQ7BEwAIABSAEcAQgBVAG4AaQB3AGUAcgBzAGEAbABuAHkAIABwAHIA bwBmAGkAbAAgAFIARwBCAABkZXNjAAAAAAAAABRHZW5lcmljIFJHQiBQcm9maWxlAAAAAAAAAAAA AAAUR2VuZXJpYyBSR0IgUHJvZmlsZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAWFlaIAAAAAAAAFp1AACscwAAFzRYWVogAAAAAAAA81IAAQAAAAEWz1hZ WiAAAAAAAAB0TQAAPe4AAAPQWFlaIAAAAAAAACgaAAAVnwAAuDZjdXJ2AAAAAAAAAAEBzQAAdGV4 dAAAAABDb3B5cmlnaHQgMjAwNyBBcHBsZSBJbmMuLCBhbGwgcmlnaHRzIHJlc2VydmVkLgBzZjMy AAAAAAABDEIAAAXe///zJgAAB5IAAP2R///7ov///aMAAAPcAADAbP/hAHRFeGlmAABNTQAqAAAA CAAEARoABQAAAAEAAAA+ARsABQAAAAEAAABGASgAAwAAAAEAAgAAh2kABAAAAAEAAABOAAAAAAAA AEgAAAABAAAASAAAAAEAAqACAAQAAAABAAABaaADAAQAAAABAAACAAAAAAD/2wBDAAEBAQEBAQEB AQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQH/ 2wBDAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB AQEBAQEBAQEBAQH/wAARCAIAAWkDAREAAhEBAxEB/8QAHwAAAQUBAQEBAQEAAAAAAAAAAAECAwQF BgcICQoL/8QAtRAAAgEDAwIEAwUFBAQAAAF9AQIDAAQRBRIhMUEGE1FhByJxFDKBkaEII0KxwRVS 0fAkM2JyggkKFhcYGRolJicoKSo0NTY3ODk6Q0RFRkdISUpTVFVWV1hZWmNkZWZnaGlqc3R1dnd4 eXqDhIWGh4iJipKTlJWWl5iZmqKjpKWmp6ipqrKztLW2t7i5usLDxMXGx8jJytLT1NXW19jZ2uHi 4+Tl5ufo6erx8vP09fb3+Pn6/8QAHwEAAwEBAQEBAQEBAQAAAAAAAAECAwQFBgcICQoL/8QAtREA AgECBAQDBAcFBAQAAQJ3AAECAxEEBSExBhJBUQdhcRMiMoEIFEKRobHBCSMzUvAVYnLRChYkNOEl 8RcYGRomJygpKjU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6goOEhYaHiImK kpOUlZaXmJmaoqOkpaanqKmqsrO0tba3uLm6wsPExcbHyMnK0tPU1dbX2Nna4uPk5ebn6Onq8vP0 9fb3+Pn6/9oADAMBAAIRAxEAPwD8hP8AggT/AMEEPhD/AMFgvhJ+0D8RfiR8eviH8IL/AODnxF8L eCtO07wZ4Y8Pa9aaxaeIPDVxrsl7eTazeW0sFxBNAYEjhVo2jIctu4oA/fr/AIgi/wBln/o9r46/ +G58C/8Ay1oAP+IIv9ln/o9r46/+G58C/wDy1oAP+IIv9ln/AKPa+Ov/AIbnwL/8taAD/iCL/ZZ/ 6Pa+Ov8A4bnwL/8ALWgA/wCIIv8AZZ/6Pa+Ov/hufAv/AMtaAD/iCL/ZZ/6Pa+Ov/hufAv8A8taA D/iCL/ZZ/wCj2vjr/wCG58C//LWgA/4gi/2Wf+j2vjr/AOG58C//AC1oAP8AiCL/AGWf+j2vjr/4 bnwL/wDLWgA/4gi/2Wf+j2vjr/4bnwL/APLWgA/4gi/2Wf8Ao9r46/8AhufAv/y1oAP+IIv9ln/o 9r46/wDhufAv/wAtaAD/AIgi/wBln/o9r46/+G58C/8Ay1oAP+IIv9ln/o9r46/+G58C/wDy1oAP +IIv9ln/AKPa+Ov/AIbnwL/8taAD/iCL/ZZ/6Pa+Ov8A4bnwL/8ALWgA/wCIIv8AZZ/6Pa+Ov/hu fAv/AMtaAD/iCL/ZZ/6Pa+Ov/hufAv8A8taAD/iCL/ZZ/wCj2vjr/wCG58C//LWgA/4gi/2Wf+j2 vjr/AOG58C//AC1oAP8AiCL/AGWf+j2vjr/4bnwL/wDLWgA/4gi/2Wf+j2vjr/4bnwL/APLWgA/4 gi/2Wf8Ao9r46/8AhufAv/y1oAP+IIv9ln/o9r46/wDhufAv/wAtaAD/AIgi/wBln/o9r46/+G58 C/8Ay1oAP+IIv9ln/o9r46/+G58C/wDy1oAP+IIv9ln/AKPa+Ov/AIbnwL/8taAD/iCL/ZZ/6Pa+ Ov8A4bnwL/8ALWgA/wCIIv8AZZ/6Pa+Ov/hufAv/AMtaAD/iCL/ZZ/6Pa+Ov/hufAv8A8taAD/iC L/ZZ/wCj2vjr/wCG58C//LWgA/4gi/2Wf+j2vjr/AOG58C//AC1oAP8AiCL/AGWf+j2vjr/4bnwL /wDLWgA/4gi/2Wf+j2vjr/4bnwL/APLWgA/4gi/2Wf8Ao9r46/8AhufAv/y1oAP+IIv9ln/o9r46 /wDhufAv/wAtaAD/AIgi/wBln/o9r46/+G58C/8Ay1oAP+IIv9ln/o9r46/+G58C/wDy1oAP+IIv 9ln/AKPa+Ov/AIbnwL/8taAD/iCL/ZZ/6Pa+Ov8A4bnwL/8ALWgA/wCIIv8AZZ/6Pa+Ov/hufAv/ AMtaAD/iCL/ZZ/6Pa+Ov/hufAv8A8taAD/iCL/ZZ/wCj2vjr/wCG58C//LWgD8lf+C1f/BtF8DP+ CW37D2tftW+A/wBpX4o/FHxDpnxL+HvgWHwp4r8H+F9F0iW28Z3t9bXV9JfaVfz3iz2aWe+CNYyk jviQgc0Afx1UAf6Ov/BkJ/ybD+3N/wBl5+Gv/qvtQoA/uDoAKACgAoAKACgAoAKACgAoAKACgAoA KACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoA/l7/4O 9/8AlDh4s/7OG+Bf/p01ygD/ACi6AP8AR1/4MhP+TYf25v8AsvPw1/8AVfahQB/cHQAUAFABQAUA FABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAU AFABQAUAFABQB/L3/wAHe/8Ayhw8Wf8AZw3wL/8ATprlAH+UXQB/o6/8GQn/ACbD+3N/2Xn4a/8A qvtQoA/uDoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKA CgAoAKACgAoAKACgAoAKACgAoAKACgAoA/l7/wCDvf8A5Q4eLP8As4b4F/8Ap01ygD/KLoA/0df+ DIT/AJNh/bm/7Lz8Nf8A1X2oUAf3B0AFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAB QAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAfy9/wDB3v8A8ocPFn/Zw3wL /wDTprlAH+UXQB/o6/8ABkJ/ybD+3N/2Xn4a/wDqvtQoA/uDoAKACgAoAKAKGq6rpuhaXqWt6zfW ul6Ro9hearqup308dtZadpun28l3fX15cyssVva2lrDLcXE8jLHFFG8jsFUmgD5ak/bl/Zet/h38 Rvire/E+10zwR8J/Dngfxj471PVdB8TaZdaN4Q+JkJuPh54rTR77RoNZ1Lw541iSdvDWtaXY3mn6 ubO/WznlawuxCAe/+JfiR8P/AAboeueJvFfjTwx4f8P+GdK1HXfEGr6rrVhZ2Oj6PpGkJ4g1PUtQ nlnVba0sdDlj1e5mkwsWnSR3jfuHVyAYXgD40fDX4n61488PeC/E9pq+t/DbxZJ4M8W6b5dxaXVl rSeF/CHjMNaR3kUB1bSpvDfjzwpqMGuaX9r0icatHbx3rXUVxDEAcDof7W3wA1/RPiz4it/Hiadp XwO8O6X4v+KM/iPQ/EXhiXwr4U13R9V17QvEtza+INK066u9D1vStD1e60jUrCG6tdRGn3UdrJLL GUoA7zwP8a/hh8RPCV1448MeLLCTw7p/ifxH4L1W61ZLnw7daN4v8I61e+HvEnhnW9M1+DTtS0jX NH1fT7u0vdN1C1t7qMxed5ZgdJGAOuHjTwey6g6+KfDzLpIDaoy6zp7DTgbqexBvsXB+y5vba4tB 52wm6glg/wBbGygAyte+JvgTw3caXZ6r4m0yO81nWNB0Ows7ab7fdyah4mnEGi+ZbWIuJre0vHYM L+4SKyihZZ5riOFlcgHnvwo/ad+Cfxq0C68VeAfGUV94bt4vDt3DrmrabqvhrS9U07xfaT6j4V1b Q73xDZabb63pXiHT4JL7S9Q0uS6trm12yBxuAoA7LxD8ZPhV4UuNPs/EHxB8Kabfavea3p2kWE2t WTX+q6l4b0G68Ua5punWUUz3N5qOm+H7K61a5soI3uVsoWmEZBXIBsab8Q/BOq6ZYavbeJ9HjstS 0PRvEdv9tvYdPuU0bxBFZzaRe3dlfPb3dil6uoWSxpeQwyLLdQQuiyyojAHT2GoWGq2dvqOmXtrq Nhdx+ba3tlcRXVrcRkld8NxA7xSruDKWRyAwKnkEUAXKACgAoAKACgAoAKACgAoAKACgAoAKACgA oAKACgAoAKACgAoAKACgAoAKACgD+Xv/AIO9/wDlDh4s/wCzhvgX/wCnTXKAP8ougD/R1/4MhP8A k2H9ub/svPw1/wDVfahQB/cHQAUAFABQAUAcR8TfAGhfFf4b/EH4W+KRct4Z+JXgjxX4A8RrZTvb XjaF4x0G/wDDuri0uUIe3uTp+o3AgnQh4pdsinKigD865/8AgmlZ+KBYWvxO+LWr+NdIu/Bnwn+F /jvSrbRbTwxB45+GnwF8A/GTwz8KfD+oPo8sb2k9p4w+NfiT4i+Irq3P/Ez1ax0XS41j03TolIB5 pqH/AASWk8R6LL4f8Y/H/WfE+n6x8JdT+Hviu41DwZoc2peIPEWr/sa3X7Gd/wCN7i6lkdftU/hW x8JeNJtNdHtrjxXo880rGKWAwgH0T8HP2D7f4V/tDr+0W/jXTLrxNfXvxHuvEOmaB4K0fwvp+qWf j/4Ufs0fDSDQYv7N2Pa+H/C0/wCzhY+IdC0kB7O0u/FWqxwwwmNZJADmpP2CfHPir4cftEfDf4o/ HseLbX9pW716b4heJ7H4d6Fo/i29gvfDHiXRfDUB1aO5kItfA99d+CpvDekwpDpFrpHgt9LNo0ni jxFfXoBf8af8E9dN8ZfBLUfhhc/EO4tvFHif9orxt+0z4p8dLoVncEfEbx1beKrS7utF8OXTzaD/ AGfo1p4igsbPRNdsdY0PWLDTpbbW9OnfUp7iIA+ZND/4JU6x41Xx14n8e+LbX4e+Kr344fGvxT4a 0Lwlp2nS6B4k8B+KP2wPiB+0D4St/ir/AGZNZ/8ACbG40DxBpenWGm6gx/4QwT3ltp4V1kVgD3fw 7/wTR0Twne6euifEGOTSPD3xt+D3xi8LS6z4TsdZ8Y6Va/DKx8F2N78OJfHOqXV74kv/AAJqsfgT SI9O0m9v7ldItZprYG48pJJQDj/AX/BKnR/h/cfCybTPiXY31j8NfCvwJ8GzeFdW+Hnh2+8EeLdL +EvwX8afBbWtQ8Q+FJANJvPEPifTfGD+JLPV5YHudE120ke3dlv55VAM3Tv+CT1vB4lv/GetfGSL xN4mvvGF34okudU+Gfg+PTUOq/Bb4k/BHXpbbRrK2t9N0/WNY0PxpoOvT6pp9vbzx654TsmLTR+U 8QBV1H/gkT4f1XRJtFv/AIy67eo3hfwnoourvw9p093d3WjeC/2avA+q2esTvMZNV8IyWP7N2la1 4e8LXTPYeH/EfizV9TtEWeytJZAD9Iv2dfgva/s//C62+GFhqiatpth42+LPivTXh0630m10yw+J vxX8a/E628Nafp1p/otnpXhRPGH/AAjOjwW6xwxaVpNkkcMKqI1APcaACgAoAKACgAoAKACgAoAK ACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD+Xv8A4O9/+UOHiz/s4b4F/wDp01ygD/KLoA/0 df8AgyE/5Nh/bm/7Lz8Nf/VfahQB/cHQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAU AFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQB/L3/wd7/8ocPFn/Zw3wL/ APTprlAH+UXQB/o6/wDBkJ/ybD+3N/2Xn4a/+q+1CgD+4OgAoAKACgAoA53xf4s8OeAvCnibxz4w 1ey8P+E/Bvh/WPFPifXdSmW30/RvD/h/T7jVdZ1W+nchYbTT9PtLi6uJGOEiidj0oA/D/wCD/wDw VR+JWnxXXhz4z+EdAuPGuq/tDeEoZoNb1C38Cah8Mv2ev2i/C/gHx98CtT1HwV4c0/xn4z8a2mk6 p451j4JXXjjw54f1GwXWfBVj4z8ey+HfD/iS41zTwDt3/wCCvkGleD7TxT4q+FXg3QLu9f4i2Q8P 3HxiRntvE3gLxX+yVpyeC7LxQvgh/BXjrVPEXgz9p26+IHhzxB8MvEHjLwprfhjwTDqdnqarq3iK 38CgF3wt/wAFV/F+ueM9I8Oaj8EPh1Z6RrfjPSvCFhrOl/Hm61fU5ZPFHxG/bH+EXhe8Hh6T4U6a khn8afsf6rqGs2sGtzNp/hfx/oklhLq+t6TfaVdAHjT/APBXr4seL/DnhzX9A+Gnwd8D6BrXwh+I XxC1HxHc/FzUPFGnXd+f2P8AwT+094B8IeAfGUvw803w1P8AFHQ28S65oPjfwdrXhrWrUf2Hp2qW E9xZ6je2tkAevSf8FYNWtpho2l/BzSPEF4up+GPCFpea78UI/Dt+ut3XxH/ZG+G934n8fWOneANS tPB3g3xrJ+1ZaeJfhdrmnjVovGGm+B7x4NNsIfEtmNFAPp34b/tx3/xC/Zx8dfHO18A+Av7c8EfB +/8AHrfDy0+PHhKG91Pxho3jr4yfDq/8NXmteJ9H8Mad4O8F634k+EksHgX4m+LTp2m+JpNS1qyu tI0S78GaqLoA+Q73/gsXe6S41I/AnTfGnh208EaL4yv9O8CePfEzfFm+i1zwJ+1F4sMegfCXxZ8K /DmsXNr4W1X9mDWfDXji/wBR1SwtNHuvFEV9pE/iPTtBN1rgB0mpf8FQvGOseB/Hz6f8O/hd4F8T eG/2d/id8eNL1bWv2hvB2qab4+8MeG9P+IqaNf8AwIvPD/hPxvpPj/xHotz4Ij1Xx34Y8RW+izeC 7TVNHOtWd3barZtdAHlGl/8ABS34o+DPir8VPE3j7UdG8VfDbTG8eaF4K8G6T4m8IaTomkWvgvTP 2Cre08XePtT/AOFctr+iw6fqP7WniDxh8R/F9j4u1Lw5oPgrQNVuo/BSwaDYzsAd38c/+Cr3ir4f aj4o8BeC/Dn7PPiTx54a8D2firUvE+m/GDxb4q+GGh3eleNv2YYfFKaxqo+Gvg2a58N3fwv/AGiW 8caP4o0G+1Wx0a18MyXmvB4X1Wz0YA6Xw/8A8FPdbsfGMvgTU/Auj+MtSPxv8VeCbnU9P8fWKW9/ ok37Xfh/9l3RdN+EkGl+BbdviHqfgxfFNh8TPGenan/ZGp6N8O7eyu73V9Vu9eg1K1AOn+Ff/BUS fxp+zh8b/j14p+DukaPdfCD4Wfs/fFxPDPg74oDxnpl/4X/aG8E6Z4o0GbxH4mufBPhuTwlB4Pub jVX8eaodC1nTtG8LaTc+JLabUGt7vTYADmfil/wVY1n4Vp8SEufhT8NPGlz8NPDfizULuTwP8cp9 U0zxZcaD+zN8RP2oNL8c+Eb6X4bxG9+BuraF4Ci+FuofEuWAf2F8Y9dbwqNH1a30WTUNTAK97/wV E8W6L8Q59K8X+GPgP4I8G+HNI/aa8O+Kp9b+KnjC9m1T4rfAv9oX4a/BXRbHwL4g0j4a3UutaNr2 nfEjQvEOqaRceCLbX9LOoTSXU9lo+kDVNXAPOtI/4K7+MNY0WTxxoXwt8F6p/b/gnwhrdj4E8Q/G Sz8P6Z4ZvLP4O/t1fFXxpLF4j074W6vreoS6hdfsdXugadBqVnJFLb+KPDepJDoM9trdlfAH0/4a /wCCj6+KdL/ar1qz+HWg2dr+z3+ztc/tDeFrG4+If9p3PxD8OReBLjxdA19rfhzwxrXg/wAIQtq9 lqfg/W9J1HxFP4/8K6ppTahqngeXQ9W0fU7oA8/8Ff8ABUzxD4t+JHgP4Sj4CaEPGXiT4har4V12 40744+Gh4SttDsbv9m2d7rwh4i8W+H/Bh8ZeM9K8J/tK6R4u1zwHaWFrrD23gfW9N0A6zL4j0G8j APlXQv8Agp5+0r4xsPhVd6JL8G7aW78Wfst6laaPq/je30rxF8TfC/xf/Zr+LPxE8a2PjS+i+Hl/ pml+FbXxz4PlsNI8Z/DvwtY3tvqfhldCn04yz6zDAAfQlh/wVz1bxVpWr+IPBf7PelSaLp9h+zgi zeMfjl4U8L3sOuftEzfslyaA99okOh6x4rfwW9j+1OyaR460fwzq+j6hqPww1e3uv7PHirSPsAB6 N8ef2zPjP+z9+1N8KvCPiDw94W8R+GvGPwK+DV344+Eug+MUbVrL4i/EX9prwd8Etb174MXt18O7 fxR8VLrwqnj2PU73QdVXwRZaj4O8Ny6pJbaDrN0I6APLtC/4LD2+p+EPhZ4y1X4PeF/Dln8V/G3w 30/w7ol58atG1bxPceCPHfiz4HeDvEOoS6Z4a8M61a+HPG/wk1j436da/EPwT8QNS8F3yXOjRroT apaatqF94VAOz+Hf/BTr4g+NNd/Z60O7/Z58JWrftEPr2t+F7/S/j3o7adF4I8K/GPwZ8EfFE9vf +MvB3gax17x9omseJdY8e3Pw/wDDV1reozeBvD1nZ2l3ceKfElvp2mAHVW/7dvxm1z9mv9kn9oiD 4ffBDwRp/wC0v8d/g74NktPEHxW8S+JPDnh74VfE7wpqV42san4wtvAfhW20Tx3/AMJrY/8ACL6b p0mna14fP2nS0k1K51fV/wCzNOAPlbxv/wAFd/F7Wfwd+I2heBbTQfDcmqaB4l8V+GbHxbZ+JPD+ reCvir+yv+0f8UtJ8NfFzxJ/wgcviH4U+Kf2dvE/wn0Lxb+0jH4R0jxXqPw58FPJqpsfFNvdPoko B7de/wDBU7xhd6lrOn+EvgZ4C1O2g+Pd/wDADQ9f179oPw9o+l3XiTRtX+OPh+/1TXdK0bwv4r8a +HtJ1o/By18deBL278KPp/jD4eeMbLUbHUI9RsBa6gAeifFD/gpLceBvA37LXxK0f4XeGdV8K/tC /s86P+0drkGvfFZPDut+CPCt/wCP/wBljwVe6No0cHgvWdN8Z6zbRftOWuo2ss9/4V027fwZf20t 1aLqkM9mAcDoX/BUjxh451vwt4V8B/AnwhP4k+IXxD8B+CPCEHjD4x6h4a07Qrn4g3H7Wel2Xhv4 o3Wn/C/xHfeD/il4e1L9lia+8TfD/T9L8RXNpo/xC0owahLd6NIurgHY/tNf8FGfG3wE+Mvjv4Va J8G/h54vtvBeheGr99c1/wCOF74KvrjVfEv7Pf7T/wC0DDZT6JD8LPFK29jZ6X+yz4n8Pve/2o9x d3vjLwveQWCW1pqyxgHlmo/8FedQm0D4n+MfDXwAsZfB3w9vLaxn1TxH8aPBWl+I7JIYfDeqapre rfDOyh1P4katot34T13UfHvhGLwD4Z8X634t8EeGNS1nQ9Lv73UdH0e7AJfin/wV8sPhbpPx0v8A Vvh14DGqfCi4urnwr4bm+KniGa6+KXh3SfB/xg8a3eq+GfEWgfCjX/B9pe6zYfBvxLp1l4Y8R67o HjHwjrlnr2jfETw34b1fR9G07xgAJ4j/AOCt+rad4g+Imn6B8EfCWt6N4V+LbfBHSdYufjjoOiR2 nj9PGPx/8PwW3xFvdX8P2Xhzwdo2s6H8CbPX9H8RWev6/ob6v8YPh54GudRi8TweILe0AP2G8Ga9 eeKfB/hTxPqGiy+HL/xH4a0LXr7w9PqWmaxPoN5q+l2uoXOizavolzeaNqsulzXD2MmpaReXWmXz wNdWFzPayxSuAdLQAUAFABQAUAfy9/8AB3v/AMocPFn/AGcN8C//AE6a5QB/lF0Af6Ov/BkJ/wAm w/tzf9l5+Gv/AKr7UKAP7g6ACgAoAKACgDmvGfiDQvCfg/xX4q8ULI/hrwz4b1zxD4hWLTbnWZjo miaZdanqvlaRZW93e6rL9htZ/L060tbm6vX221vbzTSpGwB+ct1/wUl/ZdsoovGWoaFeL4Zm+Hfg 74h+DdXtPCd7qnijxGmtal8c9NtF0GysNEn0l7Cw8NfAbxrren6rbeKpLieygbTk021ln0waqATa n/wUY/ZpXS9e03RPCGvrqHhSK01OHSfF3w78Q+FfDsj6hrX7P2meJ0stUi8L61ENW0XR/wBqf4Xa 3rFtZabcztaeJbiK5aMWWuyaaAS+Jf8AgoT+x0uhfEWx8Q6T4xsV8OXWs+Fr/Sn+Gev6Tq3iN7Lx X8e/APiF/B13DZWj3yaN4i+AHxotZ9V02/ga3n0H7TYXLT63o734B9lfAvw18KbT4F/B/SPhf4Tj 0T4VWXw68FP8O/Der2F097ovhRvCljb+HbTUItee81cavbeHp4bHUJtYuLjWpHa5TU7me5luXcA9 XOiaMTKTpGmEzx2MU5Nha5mi0xi2mxy/uv3kensS1ij7ltGJMAjJNADl0jSUt57NdL05bS6ga2ub VbK2FvcWztO7288Ij8uaB3ubl2ikVkZridipMshYA4TQPg78OPC/xG8YfFjQvDFtYePvHfh7wX4U 8Sa6tzfzfaPDvw9j1yLwjpGn6dcXUulaFZ6UniTWd0ehWWnf2g14H1M3j2tm1uAdqvh/QUhtbdNE 0hbexhvLaygXTbJYbO31FSmoQWsQhCW8N8hK3kUSolyuVnVwaAFGgaEBIBoukgTR3EMoGnWeJYbu GO2u4pB5Pzx3VvFFBcI2VmhijikDIiqABP7A0L5/+JJpH7y0Wwk/4ltn+8sUtns0sn/c/NaJZySW q2zZhW2keAIInZSASpoujxvDLHpOmxyW09zc28iWNqrwXN7Cbe8uIXWINFPdwM0FzKhWSeFjHKzo StACwaRpNrFPDbaXp1vDdQpbXMUFlbRRXFvFG8MdvPHHEqzQxxSPEkUgZEjd0VQrMCAR/wBhaHtV P7G0rYmnLo6L/Z1ptTSUZXXS1XycLpyuiOtkMWwZFYRZUEADZNA0GVGil0TSJY2N4Wjk02zdGOoR CG/LI0JUm+hVYrwkH7TEBHNvUAUAIfD2gMzM2h6OzOWLMdMsizFlnVixMOSWW6uVYk8rcTg5E0m4 Alh0XR7db1INJ0yBNRRI9QSGwtY1v44oPs0cd6qRAXSR23+jos4dUg/dKBH8tAAuiaMjQMmkaYrW 1019bMthaq1vetbfYmvICIsxXTWf+iNcRlZTbfuC5i+SgCP/AIR/Qf3R/sTSP3EUcEH/ABLbP9zB C9w8UMX7n93FE91dPHGmER7m4ZQDNIWAHHQtEJJOjaUSbaysyTp9oSbTTZWn061J8nm2sJmaaygP 7q1lZpIFRySQCzNp9hcXVrfXFjZz3tiZDZXk1tDLdWZljeKU2tw6NLbmSKR45DE6F43dGyrEEAqt oGhN97RdJb/S7u/+bTrM/wCnX+ft97zCf9Lvdzfa7n/XXO4+c75NAEq6PpKrZIul6cqabLLcacq2 VsFsJ50mjnmslEWLWWaO4uElkgEbyJPMrswlcMAP/szTfsaad/Z9j/Z8TRNFY/ZIPscbW86XMDJb eX5KNDcxpcRFUBjnRJUxIoYAEP8AYeikODpGl4kuby8kH9n2mHvNRR49QunHlfNc30cjx3k7Zluk d1nZ1YggDRoOhjeRo2kgyyWssmNOsx5ktlaixs5H/c/PJaWQFnau2WgtQLeIpF8lAD5dE0aeOCGb SNMmitoPsttFLYWkkdvbBonFvAjxFYoA8MLeTGFj3RRNtzGpAA8aRpSu0i6Zp6u9/wD2q7iytg7a oY1hOpMwjy1/5KrF9sJNx5aqnmbQBQA240bSLuV7i60rTbmeUKJJrixtZpZAkUsCB5JImdwsE88K hmO2KaWMYSRwQCF/Dvh+USrLoejyLcCwE4fTLJxMNKyNLEoaAiQaaCRYB8/Y8n7P5dADn0HQ5DOZ NF0mQ3V4NRuS+nWbG41BYjAt9PuhPnXghJhF1JunERMYfYSKAPDvh/8Aso/s+/C/xX4l8beC/hrp Gm+JPFltrNjrF/d3Oq62rad4i8Z3PxE13TLG012/1K00zTdV8c3lx4pu7HT4Le2OqGB4o47eysYL YA+h6ACgAoAKACgAoA/l7/4O9/8AlDh4s/7OG+Bf/p01ygD/ACi6AP8AR1/4MhP+TYf25v8AsvPw 1/8AVfahQB/cHQAUAFABQAUAZet6Np/iLRdX8P6tFNPpWu6XqGjanDb3l7p882n6naTWV7FDqGnX FpqNjNJbTypHeWF1bXts5E9rcQzokigHwB8Y/wDgmd+zx8S9C0LSvDOlSfDi80jX4Nb1DUdLvPFG ojxRHBf/ABc8Sx2niGOPxbo99czx/ED40+M/iKur2+q22pzeKriKS/nvtMU6cQD0nTP2C/2bU0Cx 0zxV4PvvHut/2cYfE3jPxP4n8UP4j8ba3fWPwdtvEnirxHNYa1ZWkut+Krv4B/CnVdYe0trW1Ooe ErKS0trZJ75LsA8/+Nn/AATZ/Z/+K+k6ZZ6Jp1x4A1Gz8WSeKNS1Cw1DxZqkPiJZ/Efxg8eS6Xq9 qvi/SLsW6/E343eN/iRbXGm6pYXMHia6hR2n0WMaTQB9f/CH4X6T8HvAGgeA9J1bxD4h/smzg/tX xN4s1nUNd8R+Ktee2gTWvFGtX1/cXGNT8QX8Uuq39tYLaaVb3d1MmnWFna7IFAPS6ACgAoAKACgA oAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoA/l7/wCDvf8A 5Q4eLP8As4b4F/8Ap01ygD/KLoA/0df+DIT/AJNh/bm/7Lz8Nf8A1X2oUAf3B0AFABQAUAFABQBi WniXw5qGk3mvWGv6Le6Hp82tW9/rVpqtjc6TZXHhq/vtL8RQXeowzvZ202ganpmpadrUU0yPpd/p 99Z3ywXFrPHGAJ4Z8T+GvGvh7RvFvg7xDofi3wr4j0611jw94m8M6tYa94f17Sb6JZ7LVNG1rS7i 607VNOvIXWa1vrG5ntriJlkhldGDEA3KAOc1Lxh4V0bxD4a8Jat4i0bTfE/jNdabwloF9qNrbav4 lHhyzh1DX/7DsJpEuNTOjWFxDe6ktpHK1paSC4mCRZcAHR0AZtnrOkajeavp+n6rpt/qHh+8g07X rGzvrW6vNE1C602x1m1sdXtoJZJtNvLnSNT03VYLa9SGebTdQsb6NGtbuCWQA0qACgAoAKACgAoA KACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAP5e/8Ag73/AOUOHiz/ ALOG+Bf/AKdNcoA/yi6AP9HX/gyE/wCTYf25v+y8/DX/ANV9qFAH9wdABQAUAFABQBBdRJPa3MMi SSxzQTRSRwyGGWRJI2RkilWSFopHUlUkWaIoxDCRCNwAPz8/Yn+HHxB+DH7PC/A/WPgRr3w90+38 Z/tk+JdKtZvE3w01LTtG0Lxz+0l4++Inwo8OpD4c8d+I5bi88XeBfiXBcpL58ltoOoeFte0zxPeW FzcaLNq4B8B+Fv2b/wDgpL4a+Cnw8+D/AIUuvHfgPw94f/Y8+DnwHXwlpXxD+Dtl4Z8K+MLX9gn4 9+AfH2rWGrabqV94rs9S8NftR2H7OT6V4j0PUblYYDrGveHILvQD4klIB7jpPwz/AOChFvHqOsDx H8ebTw5a+P8A4A6IPhzqfxG+AupeNL74Fz/Bz4dt8cb/AMMeIo7/AFDT4/ivpXxs0PXY11HxF430 +G+8Han4sj8LTTXGr6JcxAHg/iv4Hf8ABVXxhrHgjxl4vg1DVfjV8K/hT8UU8B+O/C3jf4N6N8Nt N8deLf2GvB/hzSPsnh27vLPVpfHWoftV23xI0/xBr2o+HF8HxeHtf8PT2ci+EA8HhwA9c8beAv8A gpR8U/D/AMa/C+rJ8WfAuk+MvAn7WEHwWm8J/E34FaDrfg7xr4l8dfFG5+Cmn/FbWdL1zVb+bwpJ 8LNZ+GXh7wzP4Fudc1jwj4k0fxPN4ivLKddG8UygGVqPwt/4KN6I/wASrr4TaN408Jjxnf6l4h0D UfEHjH4B3nxAuviTY/slfs0eCvhBr3xa1+LVNetvFXw48LfGPwj8Y9L+KOmR3ur+K9W0geEj4fsd d8KQ2cFoAfXX7Mfhz9szQfj38Rrv43ar4t1b4O6/Y/Ga68OQ+JNe+GGqadoGqWf7UfxIk+DFl4Yt PCc7eKrGz1L9mzVfBU2ojW/t2250+3stcu7XxNZXVrIAfoZQAUAFABQAUAFABQAUAFABQAUAFABQ AUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAH8vf/B3v/wAocPFn/Zw3wL/9OmuUAf5RdAH+ jr/wZCf8mw/tzf8AZefhr/6r7UKAP7g6ACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAC gAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAP5e/+Dvf/AJQ4eLP+zhvg X/6dNcoA/wAougD/AEdf+DIT/k2H9ub/ALLz8Nf/AFX2oUAf3B0AFABQAUAFAEVw8scE0kMJuJo4 pHit1dI2nlVGZIVklZI0MrAIHkdUUtudgoJoA+Ebb9sHxZP+xH8Xf2q2+FlgvjL4UWX7Utze/Cxf GVoba8k/Zj+J/wAUPh7rQ/4Sp7NIhBqUPw2n1eSa3sbn7M1+llbreSLE8wB6N+0D+0L4p+FP7LGt fHzwH8Prf4keNLTQfh1qeg/DBtfXRZPEOsfEDxD4S0Sy8Nw621pdJZ6hO3idI9Nlu7ZLa4vFtkup LW2mkuIgD5z+G/8AwVI+Bfi/S7jXNfN9o2mah471rRtAbTdO1nVbzSfBOi618F/AuoeKPiTZtptt N4G1HQfip8atA+HPizQ74ST6Dr9rqSXThdK1b7EAPtP+CpfwTHwx8J/ELXvBnxN8N33jjRfiVq3h jwfqfh9TrGpzfDvRvi1riaatzbXE2mw3Him1+C3jiHQ5pbpbU3tlDa3k1vLcxKwBPpv/AAU++C9t puvaz440bxX4Qi03w/4d8XW3hx9A1rU/GcHhS5+Alv8AtD+M/EOtaTZ6c1rDpfgnwFJLqWoXmlah qsM0a29urpqN7bWUgB2S/wDBSL9nWS4+IFpE3jl7jwCvitzv8GazBbeLE8EfFHUfhD4pl8HX08Ed pr8GkeMbGK3uJrOV4zZ6jY30bPBKzKAc5D+3/Yal8NPjV8UfDfhay8TeH/DPxm/Zb+FXwZli1K70 iHx5b/tb+A/2XvEXwz1/xVNqVir+E7O11v8AaU06HxAwgvXsdC0aS9SGW/l+wAA7jWP25PAfwu1r /hXvxuFrpXxP0xlXxPafDtNa8Z+DdIm8S3Hxeu/hXpsviOTSdNkg1/4j+HPg14svNP0S9s4Luw1u 1Og3X7+50+W8AOe0L/gpd+zv4istCutPs/iWlx4onm0/w5pV98PvEOn6truty+F/gb460Dw5pVjd 2sU174i8XeBf2h/hv4w8L6LAr6hq+g3GvX1tA0fhnXDYgGHqP/BVL9lqx8Op4ut5viNrPhi4g8Va tY67onw68U6jpupeE/BvgbW/iVrvjTT7qDT2ivfDNr4H8L+KNfbULdpAtvoVzDIi3NxZxXAA28/4 KWfC/R/Fuv6N4o8K+K/CGg+GPiJ8f/hld61rel3803ibxJ8DvGPw88Axp4HttItNRttXXxd4q+I+ haXpNtfXmmahJPe2UcFrcySzLAAd9ov/AAUM+AOt+PvCHw6hXx5ba94t1/SPCEk154H1+HSvDHjL WfiX8aPg1beFfFeptafZdF1gfFP4B/EXwW8N1IqHUtOtJUdrPULW4kAPumgAoAKACgAoAKACgAoA KACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD+Xv/AIO9/wDlDh4s/wCzhvgX/wCnTXKAP8ou gD/R1/4MhP8Ak2H9ub/svPw1/wDVfahQB/cHQAUAFABQAUANdFkR0bJV1ZGwSCVYEHBHIOCeQcjr QB84Wn7Iv7O9l4H134b2/wANtNXwR4l0z4laNr3h5tR1uSw1TTPjFr+n+KPihZ3aPqbNJH428Qab b6rrjbvNnupL1o5Il1C9WcA60fs//CEeFtT8FN4Ns5fDGsSeBZdS0qe91S4guZfhmNB/4QaQtNfP JE/h4+GNBe0MDxeZLpsMtz58pkdwDmbr9kr9m+81iLXpvg/4OGqReM/EnxBe5isHgF14v8YeJPDP jLxPrF/BDMkF/Lrni/wZ4U8UahBdxTWtxr2gadqTQfaI3aQA5yP9h79lGPWtP8Qr8E/CJ1bSrvUb 3Trl01CRbSfVdU8Z6xeiC3kvmtkgkvviN49dLUQ/ZoovF+vW8USQ3zoABo/Yc/ZTGmHSG+DHheWw MOjWrRTtqc8j2Wg+CLn4a6fp8lxNfvcPp/8AwgF3c+ELyyaU21/ocv2O8jnWOIxgFjWf2Jv2WfEF 3Pfax8GvCt7dXOq67rcksg1BCNU8T+PR8T9fu4livUWF9V8dg+IrsQhEa9dwipCxioA6bSP2V/2f dB8C+KfhppXwv8OWngXxongxfEvhtEu2sNSPw68MeEfBvgWY+ZcvNb3PhPw14C8GaXod1aSwXFhF 4a0iWGVbm0SagDJj/Y7/AGa0u7XUH+E/h651C00/UNNW/vX1K9vLiHU7nxxeXE99cXV9LJfX0dz8 S/iBLY3900t3pp8Xayuny2yTxrEAbHh79ln9n3wrJ4el0P4WeGbOXwl4w8NeP/DMhguLh9E8ZeD/ AIW2HwU8M+ItPa5uJTBqOj/CvS9N8FWkgyq6RYWYZGuLaGdADmZf2Kf2XZ9AHhWX4P8AhyTw2ieP 4bfRGl1Q6bZWnxS8Mal4L8e6fYWh1DyrDTfEXhbWdV0O70+zWG0isL+4itYoN4IALWsfsbfsy+IN T1jWNa+EXhnUtR1+/wDFGqatcXX2+T7VqnjS08M2fijUvK+2iGDUNaXwb4Yury8to4bhtS0Wy1NJ Ev4/tBAL9n+yT+zrYapoWt2vws8Pxav4bv8AwpqukagDfG5g1XwR408afEXwzqkkjXZN1qOm+Ofi L458Ui8uvOnudZ8Uavd3bzvcnAB9GUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAB QAUAFABQAUAfy9/8He//AChw8Wf9nDfAv/06a5QB/lF0Af6Ov/BkJ/ybD+3N/wBl5+Gv/qvtQoA/ uDoAKACgAoAKAEJCgsxCqoJZicAAckkngADkk9OpoAjhnguFLwTRTqrtGzQyJIqyL95CyMwDrkbl JyM8igCWgCG5ubezt5ru7uIbW1tonnuLm5lSC3ghiUvLNNNKyxxRRoC7ySMqIoLMQATQBKrKyhlY MrAMrKQVZSMhgRkEEHIIOCOaAK0V9ZT3V3ZQ3lrNe2It2vrSK4ikurMXaPJam7gRzLbi5jR3tzMi CZEdo9wUkAFqgCs97ZxXdvYS3dtHfXcVxPa2bzxJd3MNqYhdTW9uziaaK2NxALiSNGSEzxCQqZE3 AFmgAoAgtbq1vreK7srmC8tbhBJBc2s0dxbzRnOHimiZ45EODhkZgeeaAJHkjjKCSREMr+XGHdVM khVn8tAxBdyiO+1cttRmxhSQAPoAYkkchcI6OY3McmxgxSQAMUfBO1wGUlWwwDAkYIoAfQAUAFAB QAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAH8vf/B3v/wAocPFn/Zw3wL/9OmuU Af5RdAH+jr/wZCf8mw/tzf8AZefhr/6r7UKAP7g6ACgAoAKACgDjfiLpl3rfw+8d6NYWR1O/1fwb 4n0yy00PbRnULu/0S+tbayD3ssFmhu5pUgD3c8NsvmZnljiDuAD8Xfgl+x1+2j8EfhF+z94W+G3i 678B+NI/2YvGes/FJfD+i/BLwl4YT9pfwT8K/wBm7w5+z58Pvi62m2niy9+I/hq11/wb8WNJ8YeP vCQ/tbxN4e1Z4Nc15GOg3oALur+BP+CqN7BZy6F4w+MOiadYxXF/oFldeJf2aLzxkb9td/YdGoaZ 8Rbmez1Dwzq9m09t+3LqnhUaBI0cfhG+8G6bq91DfHwpodkAdb+0D8L/ANv/AOIn7Fug/B+G28Xe K/Fniqz/AGv/AIa/F+C18VfBnRviX4m8F674U+Ofhb9lvUdX8TXt5pfgJ9F1Ca6+Et18VZNBks/F FxBdPPdaVNBH4s0ecAwPF/w6/wCClei/Bj4tn4Zaj8W5/iZq3jfX/C/wX8Kt8Qv2e9K8LfDX4d6J 8Bf7T+HHiVLPUdKmuddt7r48Y8La7pusfECDV7fRvsOpalY614P0i90TxAAXPgn+zJ+114G/aQ8R /F+zm8Z+Fn+I3ib9ty91KXxj4n8H+NPhxY6n40+KPwr8S/s46z8TPh94W8e+FfFfi3wXp3w9034i 6J4V0nRfFt14h+H+tz22leV4d8P6vqEl4AbOm/C//gova/GO40+y1+68C/CHX/jz8YvFes+IfBeh /CC/vtVstT8cfCC+8P6jr+m6h470TVtO+H/ib4b2nxZ8M6Dex/8ACdfErwlqV1Z6hrvh/Uta0zwZ q8IAn7G37Nf7W/gnxb4a8dfES51qy8d+Hf2V/wBjz4Rax4m/aO1Xw58dJtS8S+AdW+Ob/tK2/gnU PAHxG07xBoGs+JJ9d8CXnhrx9q+qXdnrOiX6N4p8L+IdW06Wy0UA851zRv8AgsBB8Lr610SHxZqf xG1DRPh9qK6hL46/Z7tP7B+N3h7wN4lvfi1dabp72Vnpmr/s8+O/Hi+ErH4beHrzXdJ8ReHoLfWp vE3h660XUbfTYgDp/Fnw7/4KQeLvGiWGtTfGK1+H/gX43eCPE1peeDfib8GPDeq+O/A2hftm/HXW 7mPRZbHXrC/ubFP2UvGXwUstX8P+O/7Bh8QXPgTVtKuLK78TaebjxQAdr+w/8Bf22PhP4IvfhT4k 8RzfDzwG3hzwFd2cHjW08DeO5/CF9rPxF/aRPxf8MfBy6+HPivRZ/Ceq2/gu8+AGt+E9b8eQ/ELw tpusvrzDQtbuptZs7QA8w8U/s/ftgePPhf8ABXQv2jvhN4o+OnxEvPiDo0fjrxp4J8c/BW28QfBn wV8GpvhNa2mqfDnWvEXif4aN4d1z9rHx58KrL4weN/FHhl/EPiL4Y+EfEfiXwVo+jWniGDQ4IAD7 N+Mvwx+Nuv8AxZ/Yu8bav4csfiRq3wo/ag8d+LPFHij4Y2yeAvD/AIK+CfiT4DfGn4daZb694Z8d /F/VLrxT4gHivxx4Dl1q+8PQajcXVppOqatpmg6JHYppmogHnP8AwTm/Zz+OfwNvvHF/8YdJbQrr VPg98B/AXiSZvEul+Iv+Fp/HD4d+K/j9qXxY+PyvpeoX77Pido/j/wCG8Cat4iXTPGerL4a+w+It IsofD+kecAfqPQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAH8vf/B3v /wAocPFn/Zw3wL/9OmuUAf5RdAH+jr/wZCf8mw/tzf8AZefhr/6r7UKAP7g6ACgAoAKACgAoAKAC gAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKA CgAoAKAP5e/+Dvf/AJQ4eLP+zhvgX/6dNcoA/wAougD/AEdf+DIT/k2H9ub/ALLz8Nf/AFX2oUAf 3B0AFABQAUAFAEU7SpDM8EXnzJFI0MJcRCaVUJjiMjZWPzHATewITO48CgD4g8HftReMvFf7J2s/ tA6tovgPwDr/AIa+Ivxj8G+KbPxDrGr6h4S0LS/g5+0L48+DGt6rHdaVA+s65qN9pvgiTVNH0bS7 aW81nXtQs9G0+CaS4gicA6rWvjH8d7P9kPRPjkfhZ4c8LfF6L4Z6N8RfHvww8Ya3d/2Z4QS20EeI vHGjtqGkmW6u9S0izgvbfTrZHJe+8qG6kISYkA+dvBH/AAUi0XTfBPh3UPjb4O1O08bax8D/AA1+ 0dqumfCXw94n8YeHPCvwr8feA/HHjzwHeeJdYntimkanrVv8MfH+jTC8njsrTVNI08zzwQa3ZMQD r9d/4KTfCrw1qFtpOs/Dj4v2mpX3h7wz4nsbP/hHtIlkn0rxz4J+OHxF8ESO0OvPFBL4l8Hfs9fE rWYIpXDWCafp1rqYtbzVLaAgGZqX/BTP4N+HR4i1PW9I8W3/AIatNQ1rUdG1Tw5oEtzLH8P/AA18 Bf2dvj7rvizXre+vLaSH7L4N/aE0PVY7SySW5mt7WXTUtW1aCaJwDH+I/wDwUz+GOiat4R0/wXDN dWlz8WdI0LxPrHiXTr+z027+E9h8UPiR8F/iT468Ky2nnT3Fz4O+Inw51jT1sdQgt59QsYrfULS2 uLbUIGQA177/AIKmfs52cXh22+wePJPE3ivW/CWjeH/CL6FBb61rD+P/AA78IfF3gn+yvtF9HZ6t qfiTwz8cfAeuWfhzTbm78RJpqeLr2bTVs/Bmv3FsAfTX7PP7Tfgf9pWx8Qal4D0rxNaWXhZtP0/X 5tf05LD+y/Fk13rdlrnga7RZ5mi8WeD59GVfFGmkY07+1dJxNKboiMA+jqACgAoAKACgAoAKACgA oAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD+Xv/g73/wCUOHiz/s4b4F/+nTXK AP8AKLoA/wBHX/gyE/5Nh/bm/wCy8/DX/wBV9qFAH9wdABQAUAFABQA113o6FmXerKWRirruBG5G HKsM5VhyDgjmgD40uf2DvgLd/DofCyWT4oL4QXxX4p8cR28Hxd+INtqEXizxj8ZfDv7QGt67Hq0G vR3637/Fvw1Z+LrKbz92m3V7rdvY+RZ61qEE4B674f8A2fPh/wCHPAHi/wCGtvN4x1Twv458Kr4O 8RJ4i8ceKPEOqXOj/wDCKf8ACHXBt9Z1bUrrUbHUb/STJNqWp2lxFe3+rzT6xdTS6jM9wQDzuf8A Ym+Ac1hBpUej+KLHTV/Z90b9mDUbLTfHPiqwtvEfwc8NaD4t8N+GPDvimK11SNfEV34Z0zx34u/s DWtVFzqul3mvX99a3SXUglABW8R/sNfs8eK9Wstb1rw/4jn1LT/DvgDwtbTxeNfE9sF0f4ZfD34w fC7wjA0cGpIkktl4N+O/xP0+5uXBn1CfxD9vvXmvLGymgAOUv/8AgnL+yxqekXuhXnhXxRJpuoeH tf8AC13CPiB4wRpNE8T/AAe+E/wH1i081NWEim5+GPwS+HGgrKrCWF9DfUYnW/v764nANaT/AIJ+ fstz6rc6vceBL24nuPGcXjdbefxP4gk0+01FfiB47+Kl5pNjYNfm1tPC2sfEH4l+NfFOueGIY10f VtT1uWS9tZVht0iAPFPGH/BM/wAL2t/8P9R/Z++LHj34CX3gaw12zXV9G1fxDruv3k174X+DngDw 1fNrFz4ksZ7xfBHw6+DOgeBvD+geJF8ReEf7BubiG/8AD13IiSUAfXP7NnwA0b9njwT4k0GyvLXV /EvxD+J/xD+NXxM8Q2GlnQ9P8SfE74peIJ/EXi3WNN0L7bqX9i6W1xJBY6XpZ1HUJbTTrG1S5v76 78+7nAPoSgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoA /l7/AODvf/lDh4s/7OG+Bf8A6dNcoA/yi6AP9HX/AIMhP+TYf25v+y8/DX/1X2oUAf3B0AFABQAU AFABQByviDx14J8JXujab4q8Y+FfDOo+I53tfD1h4g8Q6To17rtzHLawSW+jWupXltPqk8c99ZQv DZRzyLLeWsbKHuIg4B1VABQAUAISACSQAASSTgADkkk9AO5oA57wz4v8J+NbCbVfB3ijw74t0y3v rjTLjUvDOt6br1hBqVoIzd6fNeaXc3dvFfWomiNxaPItxCJYzLGu9cgHRUAFABQAUAFABQAUAFAB QAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAfy9/wDB3v8A8ocPFn/Zw3wL /wDTprlAH+UXQB/o6/8ABkJ/ybD+3N/2Xn4a/wDqvtQoA/uDoAKACgAoAKAM3WbbUb3SNVs9H1JN G1e702+ttL1iSxTU49K1Ge1lisdSfTZZraPUEsbl4rprGS4gS7ERgeaJZC6gH5K/t7fsR/H39pux +CenaH4n8HeK9U8C/Aj9pfwL8QvEnibStH8NaV8RNb+Jem/CT+z/AAjeaClr4h1Pwh4Z+JkfgXX/ AAxr/irwRq1p4v8AhumrWHifwxqU+padFE4BynjL9m3/AIKG+ILP47arZfFvxpp3ifxT8Q73Wvhp oGn/ABfTT/hvb+CrjxV4s8XeCPC+rWWjr4f8a+H7Twn4Y1Pw98IPiDc/D7xn4G1bXVsH+IOk3niz UtMhstaANmf9nj/goZZeOT4vg+Jtzqth4e+KcPiTWfCkfxp8S22ifFrwjN+0rJ4t8O6L4ftrzTvs /wAObDwD+zTqN78LfEmmzW8MfxH8RWtnr2pJe6rY2XiRwDmfCn7LH7fdh4Qi1vxZ8TvHOv8AjnRt K/Y20PVvCUH7R/i+y0n4g+F/BHw2+HWhftWaVpOrW721r4S8YePPHnhG+8R6V48eC01zUrO+1u2t 9U8Mz+MvEFywB7z8HP2df2ndE8R/tKp8a/GPiL4peBfFngjx54L+Gvw+1v4uX934J8ReE/Ethosf gjw7rV++jSeL/DPi/wAI6HY6p4A8VfEXT0tbrxRNrereOL+18Uaze2MugAHz/wDCn9j39tzwLrvw f0S3+Ieo+Ffgf4P8Qak0fhbwv4v8I6L8UbXQNCvvgYfBSfG7xZ4Y8MaJ4Y+N18fA/gDx18HJNebR rjxF/wAK81DwhJqM8njf7b448PAHU+Ef2M/209D8M/AqLT/2j/iFpvie8/Z9tNO/aHvfG/xv+IXj 9NN/aR+HmiaNqnw78XeBobq4urC98IeMfiC2px/FzQ1t9N0vxD4G0u10j+y5pdXv0oA7T9nP9mP9 qzSPGPwD1n46/FP4s6poXhHwv8UNZ+IOjj49axe20vxSuNR/Zsf4fW1zb6EdPbxz4CaX4ffG3W20 zxRdakLVPibd6Rd2sGiXVj4Y8LgH6vUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFA BQAUAFABQAUAFABQAUAFAH8vf/B3v/yhw8Wf9nDfAv8A9OmuUAf5RdAH+jr/AMGQn/JsP7c3/Zef hr/6r7UKAP7g6ACgAoAKACgCnqM91a6ff3VjYvqd7bWd1PZ6bHPBbSahdQwSSW9ilzdPHbW73cyp As9xIkETSCSZ1jVmAB+P3/BRz4lftX6DN8D7z4HWvxJ8Iave/BD9qHxn4z0HwYdE19/DvifwZp3w g1DwjqmrBNE8Qab4yvvCFvqHjPVtO8Dadf6Y/wAQYrXVNC0/UEvZLS4gAGeMv28v2nrKw+OuveGf gpojaF4A8eal4Y8JWd9b+KJ/G+raBo2veLk07xJp3hqPTILPxG/xJ8BaDpXjzwfp/wDbOkeV/bK+ G7m4bVvsi3QBoTft3ftK2Xjea11P4DtZ+BbD4oWPhbxjqX9h+LZNV+HHhU/tETfBSx1fWYU08xa3 ceOvBNzpnxu0RtFNxb6F4cjvNJ1llkaK9oA5jwx+3b+1zr3hNfHupfB7w54d8Lw6L+yFYeJftnh7 x7PrPgrXv2jfh58NfE/jzxbf6WmmLNq3hP4OeJNW8aeGtc07T92rPef2QL0afFY6jNQB7n8Kv2nP 2q/iPqX7Svh6f4ReGdK1v4WfD/x1H8PreWbXbW78XfEnw/o+jyeANSgttR0+2hu/AnxZn1G813SZ vtdtqfh/T7Sz0vUbaW+urxrAA+b9A/a1+Ofw3+G3w61DwNpvxU+PHjzxd8MdN8afFS1+KPhjUdMt tP8Ajbovg34S3Vx8B/AsOg+FtOGga/8AFC98aeLr5LrVZNS8OeDtT8B6lp5vZYrtViANPxN+35+1 n4dT4px/8KW0PUjoWoeLrzwXcafoXjV7698M+Cf2hP2lPhNeQRaVcafb22v+MPEng74ReAfH3hvR INW062vrHxtLFBqM0r6MupgHS337dv7TU/jTXvh9pnwe0+w1vR/Htp4Mm1XWPDfjcaNa22q/txeD /gHpWtzTQac6XFtJ+z944sPjZci1mmW1j0q8jmkWzeeayAPPPD3/AAUQ/bK1HwTodzf/ALO3h638 WeJh8J7u31KaDxrp3g/ww/j34Q/GTxVN4e8Uy32hLqkNzN8RvhNo/g5tUs7S5i0SD4k6VNeW091p 9vb6sAfpH+y18S/jP8Vrb4r+IfinoXhjwxouhfF/4o/DnwHo2k22vwa9JpPw1+Kfj/wdF4i199Yt LW1ubXxZ4b0rwhr2iT6SZ7WSO7v5hM8M1tgA+rKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAC gAoAKACgAoAKACgAoAKACgAoA/l7/wCDvf8A5Q4eLP8As4b4F/8Ap01ygD/KLoA/0df+DIT/AJNh /bm/7Lz8Nf8A1X2oUAf3B0AFABQAUAFAGdq+radoOk6prur3SWWk6Lp17q2qXsiyPHaadp1tLeXt 1IsSSSslvbQyyssaPIVQhEZiAQD4T/ay/b28B/s4/C74QfFbRV0zxv4c+J/i/wANXUty15eaath8 ErW80y8+KvxRsopbVbm7/wCEJ8LalbahbabcRWv23UdQ020nkhSZ2ABR8e/8FG/hb4TvNR0PQPh9 8UPHPivTviPd/DY+H9LsfC2ltfapon7VXwj/AGSvFFxp2paz4otrKVdO8dfGbwlrOlw3T2Y1nQpX Mk+l3cd1FaAHJfDP/gpT4P1iTVfB3xF8A+N9K+LUXxb8a/DPwf4V8M6JpMtj8Tzp/wC0h+0B8CvC T+Cr7VPGRtotQWD4B+ItW8bDxXqHhuw0ya2vLjR7jU9NlsWcAv2n/BTD4XeMI/DV78MvAvxQ8ReH Nb8Zfs5eGpfHF94Z0i08Jf8AGSOg/C/xj4I0qyI8XJ4jk8Ual4V+KmimC0k8P/YNP1qy1Wy1a7gh tYJ70A3bH/gpN8Fryx8F38/gv4r6RH4++K178GvDMer2Hw/im1HxnZ+KtG+HxayisfiNqEuseHH+ JOs/8K+bxR4ej1rRbTxJpOtm+u7bRrOHV7sA5LwJ/wAFNfA3ifR/CWua98LfiT4evPiL8H/gJ8Vf Afw7tbPwxrfjrWYfjR8M/wBoP4xTW8F3beLofClxZ6H8Of2efGmvia51bSL+aPT3tW0/+1dT0zS2 APYvgx+3p8Ffjx8TbP4ZeBdN8fm51nQtY8Q+FvGGsaBpth4K8WWOifD34E/FS6TRb+LXrvW0uH8B /tHfC/XoF1jw/pUTrqGq2DTJqWj3dnQB86/D7/gqB4dtUm0f49eDdb8H/FS48U6loE/wK8FeEvFm v/Ff4bjw1pHhrVPGTeP9Gvkhs/EGjaPB4w8L6j4Z8cfDS88S6L8SdD1y21Dwhps89nqljZAHqekf 8FJfhHq194csj8Mfjppo8daj400T4b3mp+G/AtvZ/ErxH8PvjD4P+B/irw54MaP4jzz3mtWHjTxn bXMVtqdvpSX3hXRPE/iizmm0vRpJZQBng3/gpf8AA74kap4D0r4c+Bvjj43k+J3iV9B8B3uj+BdK s9J8S6evhjU/Ga+MdM1bxD4r0SwufC58L6HrmsTtHcN4h0+LTPsuqeH7HUdW0Cz1cA/RGgAoAKAC gAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAP5e/+Dvf/AJQ4eLP+zhvg X/6dNcoA/wAougD/AEdf+DIT/k2H9ub/ALLz8Nf/AFX2oUAf3B0AFABQAUAFACMqsrKwDKwKsrAF WUjBDA5BBBIIPBHWgDyH4hfAL4PfFafU5/iH4C0TxU+s/C7xx8FtTTU0uHgvPhb8SZNIl8d+Cpba KeO3OjeKH0DRv7WiEQkuV020RpNkKqADwPXv2WP2E9M8UeI7XxJ4D+EGleMvHOiyya9Zatrlppni HWNJg1Pwx4+n1ZbK51iC/jMWu/BLw946m1yziiuE1vwBL4qe9GoabqN+ADmPG3wo/wCCc/gHQZ/G PjuL4E+FtEm0ZPGEXibWPGem2Bj0bUvizrnxOh8Y6Jqra6t3bwXPxd8f+IfEcHifRpo2PiDxXqSx X4GpzwygEGtWP7Angn4i6L8ELjw58OtG1zxLpnwm/aDa0sZbLRvCPh7R/hFptn4C+A/xC1HU21XT dF0mw0yD4e6f4P8Ah5JpJniafw5p1qbeGJbCeUAuaJ+y3/wTt8IT6Druj+DvgZpc3wwn8AX2i6o3 ivTWHhF7K68LeJfhezXN1r8iWMEF14L8Na14Ghu2W3B04XuhRlbq8kuADo/D/wCyj+wtqXhXUIPD Hw/+Eup+EvD2l+FNKvrrRdbt9Q03wvo3gjRfGl/4S05dUs9ZmXw3p2h+Evi945i0+2gurC3i8FeP tY04IfDWtSW0wBhfBK5/YM1zWV+Lnwwg+FnhnxHp/jb40eENM1K41TSPD17PrPhiXTfgZ8Tbjw1p 8urix1LwzfaR+zfoOhWWq6LDcaFqHhX4c6VdabItjpbNEAeW6q3/AATD+GnxK+GXw1vLD4S6V4qm Pgb4g+C/FC6taNpumDxhHrPwx+Ftu/j6fWw1xpnjWH4ca54L8KeF7a/1PQrm08HjTb3T7KzTRxdA H1Evgb9lT4e6n4P8D3XhbwP4Yf4D3Os/HrwbPrtibTQ/htqvxO1nxz4a1rxlp3irWsaRo+teKdW8 XeOLSeJtUS+uG1m8mS3CSQSKAeF2eqf8E9fg38QvAHhjwJY/Dy4+Knh348+IPAPgbwN8ObuLXPFP gz4u+O/hre+JvGGmWfh221UQ+F7SH4T6jqmv6lYeXaaVYaFdXVvo9i+rX0Wn3IB95X3jnwTpd/q2 l6n4w8Ladqeg6QviHXNOvvEGk2l/o2gtIsS65q1pcXcdxp2kNKyxrqV5HDZGRlQTliBQBzutfGf4 ReHvDmqeL9b+J/gHTvDGi6BceKdU1248W6H/AGbZ+HLXwvfeN59bluUvnQ6avg7TNR8VLdIXjl8P WN1rETPYQSTqAcn8L/2lvgv8Y/FnjfwV8PfHGja/r/gS60OO/tra/sJI9c03xF4F8FfETS/EvhCW G7mXxR4Wfw78QPDIude0oTWFlqt3LpF5JDfwPDQB0Xiz41fDnwjY3lzNrw8S6jaarJoI8KeArS78 feNrvXLfVtF0TUNLs/B/hKLV/EEtxouoeItFHiWVrGOz8KWWoRat4nutI0lJr6MA8+1H9r39n/S/ 2bbD9re98bXS/AbUvC9j4wtfGFt4S8ZajeHQ9QbZFPP4U03QLvxdazW0oki1S3udDil0Y293Lqws razup4gDbi/aZ+Dc3xtb9nxPE9x/wsz7VqWkx2L6DryaFceKNG8FeHfiVrHgm28WPpw8NXHjbS/h x4t8NePb3wvFqbatH4T1i31cW7QRXn2YA97oAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACg AoAKACgD+Xv/AIO9/wDlDh4s/wCzhvgX/wCnTXKAP8ougD/R1/4MhP8Ak2H9ub/svPw1/wDVfahQ B/cHQAUAFABQAUAZ+raZa63pWp6NfNepZavp97pl4+m6nqWi6ilrf20trcNYaxo13YavpN6sUrm1 1PSr6z1KwnCXVjd291FFMgB4vr3wv+I1honhrwz8HvjBcfDvQfDXhmXQIo/F/hvUPjVr1/dx3mlP pms6n4w8e+NH8U6rc2Wm2mp6fctreq6rfarNqiaje6kZ7BEnAPmn9oz/AIJ9eGP2lfEnxI8W+MvG 8dl4i8efs5/Dz4Gafrun+B9MOu+ENb+HvxE8Y/EWLx3o2tNq8eoRWPie78Y3nh3xV4MsJdKTVPCv 27Rx4jgTVJ5IwDxXxX/wSY8I+JbTXbTT/iXZeCIfEPwo1bwDrFj4S+HuoT6NrviS+8Za18SdM8Y+ JNI8cfErxrDq0fhn4heJfEviHRYYJNN8c/YPFHiTwnqXxN1Dwrqg0q3APdfjR+wdpPxu+JenfEbx R4y8PFofDP7Kfh3VvDk/ws0vVNH1OP8AZi/aKuP2hdsMd74kIsNI8fahct4UvtDeK+g0PSY4rqK4 1WdDCwB5Xc/8EsvBUviybX4viDaLpFl8T7fx74b8Lz/DHQJrC30W6/bK8G/tpa94M8WSw6zaL4zt IPGfgrTvAPw91Ce00pPh18Nrm+0Sz0vWLqdr4gFb4e/8Er/DPw//AGf/AI1/APT/AIsSwab8YPg5 8DPhadc8PfDnRvDP9i6l8DLHWbbTPFupaFb69e6f4rTxZNf6dF4u8P30ljDquhabN4en1KS01Dzb QANL/wCCX8Nje+PPEM/xg0C48a+LPA/x58NeH/E6fAbwbKPAHiH48ftD+KP2hNY8UeG9I17X/ENn BDo2oeMNc8HWmlQvZ39xoNwt8viOy1xW1BwDK8Kf8EptN8KQabJD8ZbXVNY8PeK/hT4x8NalrPwp s9WSx1L4ZftS/tI/tLtZ6omqeN77Uda0rxA37S/ijwLcQPrFnf2lp4d8N+IZNS1G/jvbO6AOz+On /BMbwj8XfGWjeLNI+Kfi3w3b+HNC8DadpeheLb3x/wDFX+09Q8H/ABK+IPj+6PjPxd4l+Kdl8Q/E 3hbV4PiX4g0i08IxeL9Gi8L3dp4f1bQNVtbXRodDkALnhT/gml4M8I/ETQfEWleN4bLwB4e+Id18 QNP8CaP4Qu/D3iCxk1L9jzTv2P77QtG+Kmi+NrPxboVlZ6BpGm+M/C2saakXirwxrsdxHba9dXEt vq1mAYfij/gmBpF/458U+NvB/wAb/FXha51HXNZ8UeFX17QG+JPiXRdX8TeC/gD8PfEWmeK/HfjL xTeeLPiF4RufCvwD0tNIsNT1HTfF/h/xH4ju/GOn+O/+El8PeEdR0QA808Pf8EfNF0LRtC8KP8et S1DwjaeDJfCfiTT7j4Z6Q2sa/L/wpX9rT4BWmq2WvXHii7Oim08A/tXamRZXGn62Jdc8D6PevcjT tUvtHhAPU/BP/BMrRtC+JuhfE3xT8Uk1rVLO6c+ID4H8DXvwg13V9Kl/ZW8IfswyaHonjjwX8QE8 Z+CbAQ+D7T4g27+H9ZS6stfuprWyngMcWpAA63xN/wAE9rSLWf2hvE/wi+MOvfC3xP8AHHSPD2k6 Hqdx4ebxi3wt+3af8OfD3x21Tw/qEvifQPF+p+If2ifCvwj+HOmePPFV34utPFdlrHhxfGWka6ni q+vNTlAOm8c/sQDxp+y/45+AcfxMfw54r+InwW034Ha5420Tw/4ktvhpovhTTIWsLX/hX37N0fxK j+GPw/ls9FYaTYSeH2h1B7e3szr2qeIBb+XIAa/h/wDYs03S/wBpJP2h9U8f3mqPH8Qdc+NUXgm0 8NwaXp8Hxq8V/s7eBv2YfE/imDWZNZ1PUB4VvPhr4HifTPBU8M82l+Ita1TU5vE2pW62On2gB9wU AFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQB/L3/AMHe/wDyhw8Wf9nDfAv/ANOm uUAf5RdAH+jr/wAGQn/JsP7c3/Zefhr/AOq+1CgD+4OgAoAKACgAoAKACgAoAKACgAoAKACgAoAK ACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD+Xv8A4O9/ +UOHiz/s4b4F/wDp01ygD/KLoA/0df8AgyE/5Nh/bm/7Lz8Nf/VfahQB/cHQAUAFABQAUAcb8Rrq /sfh747vdKmvLfVLPwb4outNuNPjkm1CC/t9EvprOaxihjmmlvI7hI3to4oZZHnVFSN2IUgH4U/C j9rT9tP4f+APA2q2nhPx18YtG8d/Cn9k6z1zxj8Z/DHjfRl+HX7Rnif4FfG/xl8cNCu4NE8HXvi+ +8HXPjTwP8GPCU2oReG30rwn4u+J+qWcF7eS2c0FuAfS+n/twftGXfxHvfAeufCKLwppNx8Yrv4f Q/Eu38DfEzxb4E8P6X/wj/xL1XwtJO1roukeI9Z1XxRrXgrS/COus2i6XoXhHVNUt76HXdb0zxP4 bnQA8M+OH7Tn7YniT4aeD/E2naFrvhG88UD4zX1hY+BvAvxCN54aj+B/7Z/7Ovw+0u68Y2c2n31x qa+OPhlL498X2lvBaaZPP4Ul8QHRF1G2jbUEAPpf4LftiftNfEP44eCvhj4l+B2l+G/CF63iGe9+ IOpWPxA0a2+IPhPTPiR+0P4JsvHHgi0n8L39j4flm0L4V/Crxw/hTxprOk350f4wQrFcyta6WbwA +ffEH7U/7W3hT4sL4puNL1XxPB4C8Vftn+DPE/w9t/hZ4/03RtT8DeH/ANtT9l74ffBK4jv7Gxu7 TUvFl18DPGPizx34Z8UafLeafqGgxa/Lc2EzWeozWAB67D+13+1v42/ZE/aa+MGnfCbT/h58Tfh3 p2n3ngPwl/wjvjfxV4m0rU7HxHf2vjvw14i8K6h4c0NfEl/4b0DTI77Tb7wbfa9a6+dVeWzXbbWK agAZ0P7bf7V2t+KNb8P6J8HfD2m6dF8f/B3wQ0rWdZ8MfFOa/j0XxP8AENPB+l/FvUNFXw1punv4 M8TeDJ1+Kdq9v4mZ/DVtHD4b8Qtazy3l5YgC2n7b37U9n8U5PCmr/B/SrzwrY/FmfwVealYeBvib BeXXhrTv20/B/wCy/da3aXr2lxpi/bvh943l+OVrefv7CLw34K1CQvPo1/NrNiAewftO6F8Y/hPr 2mfEPwt8TvilrHgH4vftDfBvwz8WNM0TTF1R/gh8F4tL8Tr4m13wPa6RY3msxx6/4vtPA+i+J9VF rfz6HoOt6zq6QiC0neMA+PvB37TX7ZNn4j/ZVm17RPiTqngz4cfElfC37Qd5f+D9YsNU+Ifw7/aQ +NPxi+Dv7OfirXNJGgSXMur/AA7+HXh/4T/Gr4jtpUwbQovFeof8JVFo81tPCgBt6f8Atz/tQ/FO D4e2c/w41j4V6Lfaj8PvDnxeuz8KfiVf3+nar8Qv2Wv2hPE/ifw3pUt3pFtdWEng/wCO/wAN/DHg q18V2VtqGkwaj4h0m31G4+z3ME18AV9L/aO/a11z/gmx8W72/wBL8baN+0D8JvBH7Jmn+HPFuheF fF+m+MPGlz8QvhV+zf498XajJpl/od7eya9peveOfHXgjxhd6Rp97BZ3WhatNc2Gn3dtd2UAB6zq Pxt/bU/Z+i+IPgvW9C0/4zT/AA1+HegfGE6v/wAI94x1vWdS0X4wftFfGTwhp/ga08SaZaWdl4r1 L9n34X2HgDxR4ruLTS/+El8Y6Zpl+tvoWkTa7pssYB4/rn7Q37T/AI4+NXhPxFq2l+OPDPgPQtT+ CHhG20Hwz4T8babo/jHR/HP7b/x3+BXi/wCLEs76Tc3VtpeufAnwL8PvipceF9Vj8/wxo3iOyur6 eCxu47uUA679lf4yftUftF+DPAP7P3jrTfFPwoFh+z58Ar/xP8Y9SsPFmlfFnWvEL/Bj4EfEnWvG djDqvg+LwcV1/wAf658RPhR4u0C+1mw1/R7zw1qV4LAzTSQRAH6yfC69s/8AhE7Twxb674g8UX3w 6+y/DnxB4l8TaRqGk6r4g8Q+FNJ0y01PW5je2VlBqZ1WR0v5dW0hbjRru7uLlbG6lEMioAei0AFA BQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQB/L3/wAHe/8Ayhw8Wf8AZw3wL/8ATprl AH+UXQB/o6/8GQn/ACbD+3N/2Xn4a/8AqvtQoA/uDoAKACgAoAKADr1oATauNu0YznGBjIO4HHTI PP1560AG1eflHLbjwOW67j/tZA568daADav90d+w/iOT+Z5PqetABtXjgfKCF4HAOMgegOBkD0Hp QAm1SSSqknqcDJ6dfyH5D0oAXavIwPmJLcD5iepPqT3z1oATavXavY9B1Xofw7enagA2r/dX16Dr nOfz5+vNACkBgQQCDwQRkEHsQetABtX+6OcZ4Hbp+Xb0oATavPyrycngcnJOT75JOfUk9TQAbVwR tXB6jAwceo70ALgcnAyRg8dR6H1HJ4oATav91eAAOBwB0H0Hb0oAUKoOQADjGQADjrj6ZJOPegBa ACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAP5e/8Ag73/AOUOHiz/ALOG+Bf/ AKdNcoA/yi6AP9HX/gyE/wCTYf25v+y8/DX/ANV9qFAH9wdABQAUAFABQBFPMtvDNO4lZIYpJnWG GW4mZY1LsIreBJJ55SAQkMMcksr4SNHdgpAPm7wx+1J4L8afAx/j74W8JfEnVPC8Xi3xv4NuPD11 4c0/w14z0/VPh18UvEvwj8Y3eu6b4u13w/pXhbRtB8SeEtdv9V1fxVrmiWeleHbJ9W1V7Ha9sgA9 v2qvhan7NvhD9qWePxdbfDvx7oPw11nwppF34aurbx3q9/8AF/WfDnhn4c+EofC88qSJ4q8UeKfF 3h3w3YWct2mn/wBpanBLLqkel79RUAyfh7+2h+zz8QJvE+kSePdJ8B+N/A/jS++H3jf4bfEXVNC8 N+PPCniu18c6T8ObKx1LSY9Y1Gzu7PxH4t8ReGNL8J63oep6voXiefxT4ei0bUru51SCAgGxq37Y v7KGhWFvqmtftH/BPStOvLnV7O0vb/4leErW2urnQV8Ny61DbzTaqqTvplv4x8JXl55RfybDxNoN +3+h6tYzzgFn/hq79n1vE0/hqD4qeCLt7DwXqHj3WtZtfF3heXRPD+hWbfDBrQ6zcHWlvbW412y+ MPw/1XQjHYT2d9pviHSp3vIH1nQYtWANCL9qT9myazvdQh+PfwhlsdPtru8vbuP4heFngt7Ww8AR fFa/uJJF1Qr5Vj8MpoviBeuCRaeDZF8R3Hl6SftVAHukM0VxFFPDIssM8aTRSoQySRSKHjkRhwyu rBlI4IINAElABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAB QAUAfy9/8He//KHDxZ/2cN8C/wD06a5QB/lF0Af6Ov8AwZCf8mw/tzf9l5+Gv/qvtQoA/uDoAKAC gAoAKAGuGZHVX2MysFfAYoxBAfa3DbTzg8HGDxQB8W+Ff2P7/wAI/Cu9+Emn/HTxveeGdU8U/GHx drdlrngj4P6/pXiW++Nnxcl+MXi3TvE2ha14Cv8ATdT0BdZ1rxvoFnpMKWEf/CMeNdQtruW61XSt A1fTQCW1/Yn8E237Odh+zFJ8QfiXffD3wpD8GJPhle3+oeHrjxT8Nda+A2seDfF3gHXtC1r/AIRx W1O7tfH3gbRfGN1ZeJYNZ0jzvP8ADthp9h4SFtoduAc3pP8AwTz+C9n458LfEvVtY8a69450vxp8 YPiD401e41LT7C2+Kfif4yReEDqcnjPTdN0y2gbSfBOo/D7wHrHwy0rSX05PCGq+DtD1GOe+1GO9 vL0Ay/gX/wAE5Pg38B7/AOFl1oOqalrtt8K/A3xC+G1pY614Z+H1uvjDwd458K/CPwLbWvj260Pw npN34p1fw14Q+C3g7Q7PX7+U6hqNqdQg1JpbF7Cx08A425/4JYfBN/h/4B+Hlt46+J8enfDfwZq3 hfw/q9/f+G9a1+71KX4zfAT42+F/E/iS+1Pw7NF4gvPBWt/s1/Cbwno2mX1qdIuPh9oH/CM6ja3O ba+tQDQ1f/glj+zVrXivwn4wnHiXTL/wnbfCmKDSfCw8MeE/Cd7c/Di58T23iK7k8LaB4bsdIsf+ Fx+CvE8/wv8Aita6VBY2uv8Aw803StEtItOngnv7gA/SmgAoAKACgAoAKACgAoAKACgAoAKACgAo AKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD+Xv/g73/wCUOHiz/s4b4F/+nTXKAP8AKLoA /wBHX/gyE/5Nh/bm/wCy8/DX/wBV9qFAH9wdABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAU AFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAH8vf/AAd7/wDKHDxZ /wBnDfAv/wBOmuUAf5RdAH+jr/wZCf8AJsP7c3/Zefhr/wCq+1CgD+4OgAoAKACgAoA4v4kXF9a/ Dvx7daXLfwanbeC/FNxp02lrcvqcN9Dod9JaS6clmkl29/HcLG9mtrG9y1wIxAjSlQQD8Hfhj+0x +3V8OPh34B1Lwv4U+JPxQ0bxz8If2StN8TeMP2iPBnxYvYvhz+0trnwM+O/if45WUtlpfhpviVde CNR8d+DfgH4J1e+j0u/8PeD/ABx8RtfsdIuTffaNP08A+krH9s39rm8+Iuo+BNa+F2neEdHufjNe /D+H4p2fwS+M/jv4e+FtH/sD4o6p4QSeOzvvDvjHxFrXifXfCPhjwd4puLrw34V8P+DdU1GPU9O1 nxHo3xD8D3WnAHhXxo/aD/bq8T/Dbwp4mWx1nw3qHiiP43Xmlaf8MPhL8atD1LwbF8Fv20P2dPA3 h678c2cXiDW7rxInjr4UJ498ZLZJp3h+XVfBsvihPDX2vSDe30wB6lafts/t13WsX+iL8DvAmnW+ ieA/iX4l0jxp4u+Hnx/0bw38W7Pw74w/aZ8L+E/GfhrTPDGg+OdX8I2N3pfwy+A/jjWPBXiCebxH J4Y+MV3PpU1xLJ4ZSQA7T4m/tBftS6/8Df2WfGel6T4q8BP8Vta+PHhf446dD8GPE934m0a1034V /Gef4cR6fb+HNf8AEWr+C11nxh4T8NWvhf4iwXsuleILrWPDXiKO20iw1228NMAeM/CH9sX9vHTv CfwM+HGs/CjTvEfiSceBfD/iD4p+N/hx8b9D03W3m+AP7InxEj8O+IzYWHi3VNN8d67rnxg+Ofhu 98cXsMfhv/hJvgnqdjqem6Rqzatp0IB7v8fP22f2ivhx8dvib8P/AIf/AAU8Q+L/AAL4N8I3cx8S 3HwZ+Jk8Gj63beIP2ZFuPEdjrehapqVn8TfD+neA/i98W/Gs+jeHtN0HWtam+D2r+F9BE+paNrN5 fgHlfiX9r/8Aba8Can8XLe20Gz+J1pD4605fh7rtp+y/8Z9E8P2XgST9jW3+LfhHUINKt9Zn17WU +L37Qekap8GoY7rVJtS8E+I7i/s9SEUmp+FrC2AOj1f9sP8Abf07SdZ8X3Pwn8P2emQftGr8IYvh vYfBn4reIPifp/hO38H6N4i1DxRo13H4p0/wj8Q7iz8ReKLPw1KI7rwPomsaR4W8Ual4V17VvERt fD6gC/E79ov9qb4I/tW/tJJ4e8KeMviL8Jn1Hw3qmm+Fj8J/id47uvDfhbR/2PfFvjXVPiB8N9T0 nXNC8Malo0Hxn8FeEvAPiD4fadMuseI/EvxAlW11fRtVMEkgBxkP7f8A+20ui3mp2v7Ntx4r1TS/ h5+0nq9j4X0X4R/Few1rxD4u+Evi3496b8O5Neh1a9tYvDvhP4leDfAfwy8S+G77wlc+PtT13xB4 j1DwiNJ0YeNPh7rKgDdY/af/AGxPHfxT/Zq8H6z4W1Hwf4eX45fAvxNqHij4YfDb42Nofxc+Gni/ 4hftB+DPEn9ua7rWk6TYeAtG8IeGPDXwl1Hx74b8WafcwXGs+P7bU9OvzoD6DfoAenfED9sf9sPS fHnxL8OeF/gpaQ6Z4d+I2oeDdMm1b4U/FHW4/DXh60/aT/Zr+FXg/wAcarrWkatY6Z470z4tfCj4 q/Fr4r6bB4VNgPBdj8LLj+3LqW20vxE4AJfiV+25+054L/ZK+EfxX0r4K6vr/wAb/FOp/Euw8ReC dJ+CXxR1fQ75/hX4j8Q6XIrafba3D4m+HqfEDR9AGu+FTq0XimS8hvmj003tvbf2k4B2Pwu/a2/a N1LWv2kU+Ifw2ebw78O/hh8cfiJ8Mbvwl8F/ihFrerTfCv8AaI/aC+FPhzw9LpOq6/5fxD17x18P Phz8NviToug+Gb3wtqmsQeMwdID6PrOi6nAAfImj/tf/ALcerfFnwP8AEC0+GviV7e807xN8NdR+ Gl78JPjDZ+EPiFp+k/tm+DPBOmeNdDtf7Rex8BeNP+Gd/FWsfFM+I9WuvEGl6joPh69msrS60RJl sQDV1n9uL9vK28JWPxDj+HsFje6f8J/2nrqTwTb/ALOPxc8Q+D/Hfxb+HM/7OGpfDXS/C+v2Orx+ ND4a8UaJ40+Ktz4c1TXtJ8F6tqY8M+JPC2q+FY/F3hG5uGAPYfir+2p+1p8Kvizr/wAM7b4VyfEv S/C3hdY/FPxE8P8A7Pnxb0rwxpOsS+Jv2cpJvG2gLY+LfGb+OPC+i/Dj4sfFPxXfeHNLurPW9V1L 4Pa74d0W6nvdG1iW6AOrtv2jP2sPDngT9vvxXf8A9n/ELxL8G/h/4Y8ffs1+HrT9nX4peEdJ8e29 /wDs9+C/F8E2n2dxq134h8UWviX4qnxl4YuPCFpqMnjbw9qdje2c7ww/2dbRgHk+o/tzftu+GtQ8 d6XqHwX0LxZa6P4m8UeHdM8U6D8GfjRomm6D4d8Jftc+Gfgjd/E3WrWXVfFM3iPSdU+EPitvipZa N4dUTxWfhm+8RQT6t4VOovp4AzxR+3J+3H4ds/HMd38FfDF5rnhfwd8MNfhTwX8K/jX4i0DUbrWv D3hS/wDiDoOiaj4ii8IalcfEi21a68VSfD7wTrukaJ4T8Y6Eug2Vx8TvD/i611nSpADj/jB/wU1/ aY+H+sfEHTNP+Ex0/TI9a0Twz8PPEHjv4FfFTwxcXPihE/aWTxLpA8PnxXeweKrawHwi+G3iS+1H TvEemS6X8PPHGseOVsLy1/sDTHAPpv8AZ2/a7/ag+K0/xr1XV/hV4K1zw38Pvhb4i8R/DuHwbZeP 7K4+MPiLT/DfhDXvhr4i8BeLNY0y48BeI/hz8dbPVvEOreGLzS/EE+raFaQ6DYXNtf3SeIbixAPI PC/7cn7ad3D8D9V1r4OeHtS0z4m3WoReKdP8M/CL462+s+Bg2n+BNR8JW/iF/FFnosOkXnjDx3N8 RPgJdIbbUrPwHqS+E/i34m1OXwrpXi/RowDlbH9qX9sK6+KHwD+LkOlatqnhzxh8Ifh6nxT+F8fw I+O/h3QPDV98Qf2nP2aPh34v8Nrpetao0lp8UPg/oXj/AOL+uyeN7i2u7K+8JeDLpL7w8un6Vrms xgGXqH/BRH9t290PxTq/hT4EsqaCnxU8UaMniz9nD44aZqfizw54M/Zx8B/GLw14YTw5Z+K7ifQv FPiD4k3vjf4OGT+2ddK6tZxWVvp114i0S8ttTAC7/wCCmP7S/iHxl8UtB+G3hH4W69b+HfirrXw8 0a0bwb8UtU1Lw14f0X4j/tMeCk+LOr23hq41vXPGvwtvZ/hZ8EPCGoeLPDnhvT7fRfiN8YdcsLmF dJ8PaTc6iAfRfx1+PX7Qnhj42RW2gW+lxeJfB/7Dem/GPQfhrcT+OG8BeJPi/wCLvjH4b+HvjVdV XQdDk8Ua3YeBtCuLay0G51XQoLHwzdeLIPEHiy30awlu72wAPJX/AG8/23XsvFGr2X7Nxh0vw34S +D+ovpviz4W/F/w94+n0j4i6b+z/AHfiL4uQ+GtDg8Z6BdaJ8Prv4ifF+x8X/DrTvGOo+KtNk+Es 8lvPfY1CJwD9YfgX4l8e+MfhD4A8UfE/TNA0jx7rnh+3v/Elj4Wi8SW/h9LyWSbyrjSrXxhpmjeJ rK2vrNba++wa1p0F7YSXL2cj3IgW6mAPWKACgAoAKACgAoAKAP5e/wDg73/5Q4eLP+zhvgX/AOnT XKAP8ougD/R1/wCDIT/k2H9ub/svPw1/9V9qFAH9wdABQAUAFABQBynjvxt4Z+Gngfxl8RvGupLo 3g7wB4U8ReNvFusSQ3FymleGfCukXmu69qT29pFPdXC2Ol2F3dNDbQzXEoiKQxSSMqEA/PH4ff8A BRuy1zxx4q8EeLvgl8WrTU7r4reIvDfw10jw94W0C71yP4beFvgb+yx8ZNb8afEyCXx/cab4em02 0/aVs7x4tM1G9nuPD2iy/wDEotPE8cvh+UA8o+I3/BWnRLHUfDN98Ifg74w+IHhOwm8er8UA7+CR 4gsNU8GfFv8AZx+EEPhjw1c2vxHj8KXN3qt7+0r4Q8XW/im11vxPpA0uyTQJdPt9V1LUr3wqAfTf xU/4KDfA/wCFXiHQ7TWdWS70NrD4mab4u/stI9U17w58T/Anjz4BfDeD4TyxWN3JokHjC88YfH/w rot9HqGr2ujWk9zFeNrY0u31G+tgDwPXP+CoZ8T6lb+Gvg78DfHsd1q3xX+Afwt03x18TdO0bR/D OlP8avBnijxzqOsa54OPjDQvGf8AxQ2meDtZstTsUksrTVyg1zw/rWraSdNGtAH0LqH/AAUW/Zlt /E1j4d0XX9a8Z6fexaFBH428IaVaan4Fi8R+KvAfxO+JXhDwe+s3WqWFwdf8T+EvhD4yvtNkh06X w/Z3Eejafr2u6Pfa9pUFyAYfhP8A4KVfs8+M7nTbHRdL+I0t/qHiTw34T+zJoPhy/htPEHif9pHX P2VNPtJNX0bxdqmgXsMXxX0RYZ9V0XVtU0h/Der6Tr9hf3tu2oRacAeV/CL/AIKfaH458afDeL4g fCfxr8Lfh58bPgl+zX8TfAWvatZ6Jq8/hPXvjza/tN6smifE3V9B8Warp1toV/on7PhuvButaJp0 9w82p3kXi7T/AA9GLOVgD3Ff27Phv428T+Ifhr8GLZvFfjy30f8Atzw54h8TT23h/wCD114Vufhk vxK0v4ra34y0+41rXLD4OZc+C7rxlZ+FL14viFb3XhUWKSQzahEAZXhT9s3VtV/Z/wDEnjfVvC/g u2+OVn8PfjX8W/AHwpvPFOueF7H4pfCX4aeL/FGh+Cvi/p0+qeFtS8VeFfBfxR8MaPofjbTbbVPD Wp63o9j4ls9Plh1CVVu5gDyjSv8Ago5q+qfEr4DeFR8LtOTw/wDEXRf2OYvH1+NfvX1zQPFP7aHg n4xeKfB0fhSzOlpaaz4c8D3vwli0/wAT3Woz2V3qVp4rk1CwispPCV1aa4Aegap/wUd+Fvg7x/4l 8BeNfCPj4XWj/Fzxd8NRrnhTw5Bq2haHpnhPx/8As8fC668R+MLq91nTry0tT4x/aX+GjEaBp+ut JoWqzajDA8+ja7Z6eAcP8ev29vHvwg+O/wAfvhtYeAfDGp+D/gD8FNH+NeravdaX8ULzUdW8O3fw q+OnxA11Dr/h3wrqfgLw1qOg3vwfsodP0LxLrem6l4z0zW9QHh0vq+jxWWoAHpOn/wDBSL4E6n8T Ln4V2Xh34oahrVr480j4ZT6/Y+GdEk8LN441fx78RvhjZ6O8s/imDxFpkkvjX4U+MrG2XxD4d0ee 70m30vxXZw3HhPW9L1y6AOYX/gqh+ztJpVtryeEPjUfD+o2XwXbRNdl8F6Ba6TrfiX4//DTwH8Xv hl4E0+6vPGVuI/F+r+APHi67fRaithoeix+FfF0Oqa9bTWukJrYB7r4y/aX1DTr/APYy1DwV4Ki1 fwB+1n47tPCcuv8Aiq81zwf4u8E2Gu/AT4nfHDwxdv8AD6+8MtfXOpXkHw8bSPEGk6/q3ha+8NS3 jpNa318ktrbgHV/szfGnVPjZ4R8dXfiPR9M0fxZ8L/jZ8X/gh4oTRHum0LU9V+FvjPUfDtv4j0WO +kmvrKx8TaEmj68dKvLm9uNGutQutHbUdUWxXUrsA+jNq4xtGBnjAxz1/PnPrQAEA5yAc8HI6j39 aADA9ByMdOwzx9OTx7n1oANo54HOc8dc9c+ue/r3oACoPUA5wTkdSOh/Dt6UAcb42+HPgH4ladaa R8QfBvhnxppmn6gNWsLHxNothrNvY6oLK90w6hZR38E4tb1tM1LUtNkuYPLmk07Ub+xd2tby4ikA Om07TdP0ewsdK0mxs9M0vTLO107TdO0+2hs7Gw0+xgS2srGztbdI4La0tLaOOC2t4USGCFEiiRUU AAFzaPQfl75/nz9eetABtHoPy98/z5+vPWgA2j0H5CgDgPCfwo+GPgPVda1zwV8PvBvhPWfEck8u vap4e8OaTpF/qz3OpXes3P2+6sbWCa4W51i/v9XuEkcpNqt/fajIrXl5cTSAHQ3/AIU8Marr2g+K dS8PaLf+JvC8OrW/hvxBd6bZ3GtaDb69BBba5b6RqcsTXmn2+sQW1tFqcFtNHFfJbWwuUk+zwlAD ewOeByMHjqPQ+o5PFAC0AFABQAUAFABQAUAFAH8vf/B3v/yhw8Wf9nDfAv8A9OmuUAf5RdAH+jr/ AMGQn/JsP7c3/Zefhr/6r7UKAP7g6ACgAoAKACgDM1vRdH8S6Nq/h3xDplhrega/pl/ouuaNqtrD faZq+j6ray2Op6ZqVlcpJb3lhf2U89reWtxHJDcW8skMqMjspAPmjwv+xF+yn4NUp4e+C3hi1jbS /F+iTxXVzrurxXmk+PvAng74YeM9P1CLWdX1CPUrbxH8P/h74I8Jaol+tz9o0bwvo1rkCzjYAFGx /YP/AGRtN0nV9DtPgf4XXS9f8P6/4Y1i2mu/EN2dQ0fxTcfD6816Oe4u9anuTf6hf/Cj4b6k+tLM utQan4L0DU7XUIL+xjuKAPTPiN+zj8Evi5HokfxK+Huj+MB4a8K654L0B9Xn1OSbSfDniO+8I6rq 1pZXEV/FPDdTav4B8E61a6wsn9taZrnhbQ9a0vULPVNOt7tADB/4ZL/Z2/4SzQfHR+F+jv4v8NXX gHUNJ8QSahr8mopqfwvt9fs/AWsX8smrsNZ1rw7ZeKNfsrbWdZW/1S5stSmtL+7u7dIYowC58Qf2 Wf2efit4j1nxZ8RvhH4P8Ya/4i8MT+D9fvtZsHuF1vQJ/D3i3wkLfVbJZksNQvbXwt498a+G9M1q 6tZdb0jQvFfiDStL1GzsdVvIJgDjrT9hr9k+x1PwtrVr8FfDMeseC/EknjDw5qpvPEEupWfiiXx5 pHxRbXbi+l1l7nVdS/4WNolj42S51eW/eLxM2o6vHsvNZ1mS/ANDw1+xh+zB4PvfDuoeGfhB4e0e 58I6j4L1Xwu1rea8YdAu/hxqPj/VfASaVay6vJa2dj4Pvfin8Qm8O6VDCul6Vb+KtTsbSzisWhto QDuvHn7PXwU+Jt7451Px38N/DfiPVPiX8Lv+FKeO9Wu7aWHVvEvwn/tHWNXPgHUNVsprbUD4cOp+ INZvWsoLmENcajcOzHK7QCPw9+zx8HfCnwj1b4FaB4NjsPhXr1r4ksta8Lf234lujqlt4wuby78T R32uXus3PiS5OszX92LySTWGlaGdrZHS2CxKAZfh39lv9n7wprXw98RaD8LvDtlrnwp8M6J4O+H+ qOdRvrvw54b8MWXiPTfCumwS6hfXRvR4U03xh4t07wpd6n9tvvDNh4p8RWWhXOn22t6nFdAGHrX7 G/7MviLWvEPiHWvhH4fv9a8V61rHiLxDfy3mupLqmta/4q+GXjfWNRnSLVo4lnv/ABZ8GfhZrs/k xxp9t8DaAyIkdqY3AO38Qfs//B3xVdfGC88QeBNK1S5+P3gjSvhv8Y5J59SX/hP/AANommeItF0r w1raRX0cf9nWWleLvE1jEtmlrKYNc1FZJXNwxoA+UfA3/BNT4E+FvFnxG17xFqPjL4haD8Q/FWo+ NrrwL4n8R61/wi9p4xu/ijcfFfSvGR0+z1SK1Txn4P1ef/hG/CHiXQbXw3e2fglr3QdaXX5dV1LU LkA9xsf2MP2X9M8IX/gTTfg/4dsPC2oXHwxvJNOsrvXbWWyvvgx4d0Xwj8K9R0TVIdXTV/Dup+Bf C/h3RdA8P6noF/pt/aaTp0Fl9oeDejgHo3i/4G/C7x3c/C+88T+Fo9Ru/grr1v4q+Fko1XXrFPBv iS00S88N2ms2EGmarZQ3N5B4f1HUtEV9RS8zpOqarpzZtdUv47gA5f4I/s3+Afgedc1fRvt+u+Ov F+teNfEXjXx5rMiJq/iTVvH/AI+1/wCJOv8Amafp62ui6fp0PiTxHfR6NZWdgsunaPBp+myXl79k +0SgH0DQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAH8vf/AAd7/wDKHDxZ/wBn DfAv/wBOmuUAf5RdAH+jr/wZCf8AJsP7c3/Zefhr/wCq+1CgD+4OgAoAKACgAoArXt5aadZ3eoX9 zBZWNjbT3l7eXUqQW1paWsTz3NzczysscMEEKPLNLIypHGrO7BQTQBjaJ4v8K+JpZIfDviTQ9dmh 0zRNblj0jVLLUXj0fxLbTXnh7VXW1mlZdP1y0t57nSbwgW+oQQyy2skqRuwAOioAKACgBkciSoks TpJHIiyRyRsHSRHAZHR1JV0dSGVlJDAggkGgB9AFO01Cw1A3Ysb20vTY3k2n3otbiK4Nnf24Rp7K 68p38i7hWWNpbeXbNGJELoA65AKWo+IdC0jUdA0nVNWsLDU/FN9d6Z4csbu5jgudc1Gx0q/128sd MikYNd3dto2l6lqksEIaRLGxu7kr5UEjKAbNABQBzfhvxj4U8Y2VtqXhTxHoviKxvLC31W2udI1G 1v45tNvLrULG1v1+zyu32S5vdK1S0hnIEclzp19AjGW1nVADpKACgDI1/X9F8K6Jq3iXxJqllonh /QdPu9W1rWNSuEtdP0vTLGF7i9v766lKxW1paQRyT3FxKyxwxI8kjKikgAtJqWnyXv8AZqX9m+o/ Yo9SNgtzC15/Z80rwQ35tQ5n+xyzxSQx3OzyXljeNXLqwABUvfEWgabq+i6BqGt6VY654k/tH/hH tHvNQtbbU9dOkWy3uqjSLGaVLnUm02zdbu+FnHMbW1P2icJEC4AF0LxBoXinS7fXPDWtaV4h0W7e 6jtdW0XULXVNNuZLG7nsLxbe+spZ7ac2t9a3NpP5creVcwTQviSNlABqSSJEjyyukccaNJJJIwRI 0QFnd3YhVRVBZmYgKASSBQBWu9QsLA2gvr20szf3kWn2IuriG3N5fzrI8NlaiV0NxdzJDK8VvFvm kWKRlQhGIAKA8SaAfEbeEBrGnf8ACUroieJG8P8A2qL+1hoEl++lrrH2Ld55046jG9l9qCGIXI8o sHIBANhJI5Y0ljdJIpEWSORGDxyRuAyujqSrIykMrKSGBBBIOaAOWm8eeCbfwzZeNJfFnh7/AIRD UZtIg0/xOmrWU2g3suv6paaJoiWurQzSWU/9q6xf2Wm2LRTstxe3UNvGTJIqkA1LbxDod5ruq+Gb XVrGfxDodhpGq6xosdxG2pabpuvy6pDol/d2gbzobTVZtD1iGxuHURXEumX0cbM9tKFAGx+I9Bl8 RXXhKPWNPfxPZaPZeIbvQVuojqtvoepXt/p1hq0tlu89NPu7/TNRtILop5UlxZ3EQbfGwoA2SQoL MQqqCWYnAAHJJJ4AA5JPTqaAMTTfE3h7WdT1zRdJ1rTNR1fwzJpsXiDTrO8huLzRpNY06HV9KXUY I3aS2/tHTLiG/sjIALi1kWWIsuTQBuUAFABQBjeIfEWheEtD1XxN4m1aw0Lw/odlPqWsazqlzHZ6 dplhbKXuL2+u5mWK3toEBeaaVljjQF3YKCaANnrzQAUAFABQAUAFABQB/L3/AMHe/wDyhw8Wf9nD fAv/ANOmuUAf5RdAH+jr/wAGQn/JsP7c3/Zefhr/AOq+1CgD+4OgAoAKACgAoA434jeFD48+Hvjv wOLlbI+M/Bvijwp9ski89LQ+ItEvtI+0vBuXzlg+2ea0W5fMCFNwzmgD8afD37Cf7Wvhzw14LufD fiPwp4N8ZaB4V/Y/+GWrWPh7x9rdr4Z8R+FP2Zfhf408Ca5e+LnsvD1jqut6P40vPH2qajovhzS7 zQtZ8JajoHhnW7XxTNdw3FuwB614d/ZS/bKsv2Zv2k/AfiH42a/r3xy+JMuiWngrxnN8UtXtNGtr jQ/Hus6zN400CTSvDOn6v8NdR8SeGNS06w1fRbS58RLG/h/TLCDU/scKsQDEs/2L/wBrfWvGml6P 4s+O/jnR/g9BafGTQ9Ot/B/xk16DxT4T0jxL8c/2i/EHg2a7v9Q8O3eqeL5rj4H/ABK+EngiVBre g3vhPU/hZZy2OqapCtm8IB6l+yZ+zH+1h4K13xPrf7Tvxubx8mr/AAxsrTR9I0LxH4ln0vQviP43 8NeE/C/xSgtba9e3X/hEvD1v8KvCGr/DhsfbrHWfiD8Urwi1m1XzJwD5K8PfsI/t6aN8Lv8AhBrf 4z6lod14e/Y90f4R/D2Hw98b/E0GkaN8YdG+DPxI+G2r69rt1deELjxBq2m+MPHfiHwn8YLPWrXV bDU/CmsaFpWl/Z9YHhrTrucA7z41fsK/tZa14v8Aidd/B34t+LPDnhXV7DxFB8OrTUP2ifijDc6J Jqf7KXxC8Laal/GIb4btP/ak1L4eePRd+dcyjRvCwu4wsiJpUwBev/2Pf21H+JWpeNdK+IdvpGnj 4weJviVpul6X8X/F+mWN1Brf7RH7JvjyOz1vSLLRItN1JU+FPw7/AGg/CLWV9Fd2UY8fWmjqh07U ryWzAOcm/Yh/bt1Gfw5qN98atHbxb4UXxTcaR4z1Lxl4i1+ex+KWqfAL9u34VxfH3QNM1HTWHhrV dX1T9ob4FLe+A9MuotP0zTPhfevb6vcmDSIEAPJfiH8K/wBtDwB8avhpp/iaH45+LfgxP4p0bx3r fhP4U/Evxz4l/wCEL8PL4y+BtlqnhPSPFj6K8/im7mfwR8TfG3jXTfE03hZbnwD8Q9R8I+CLm88R MhAB9ZfCH4BftWS/sdWdrdfELxTqHxj8Q/E34MavLa+OfFPifwrqfiH9nn4NeOfBHh2y8Ia9fyvr WreA/HXxr+Bngq58R/FC6jspr5fiJ8QvEen61bSpFMiAHgPg39gX9s7wB8NvCHg/wf4u8OeGL7w3 4A+DXhwQaL8U/E1t4cvtX8BfEL9sbXvE1n4ktU8NR6rrXhLXfDfxz+GsbDTtV0LxRD4j8LReIbDW rLU/DthcXoB6F46/ZL/b0v8AwBq9v4V+Jdr/AMLUupf2o/DGr+Lbv43eP9M0vxrpHxS8G/FzTPgr 8RI9GtdFuLPwRrvwt13xL8PZY/C+kw3Mca+HluLDXoV0fSrYAG14m/ZT/bg1Pxl4w1vR/ic9tpOr fHjQ/iP4d03V/i54kvLe38ItrHxEfxT4I8TW+m+HtL/tbwRDovirSG8BaVpcujeMPCOr6bp8B8ba novhzQ7KEA8X+IH7A37e3jX4LeOvh74k+M//AAsa/wDiF4Q+PngTxvoviz4t69pvg7xPq3jj4Y+O vCXw2+LFhBo3g+K80FNK1vxBp114k+Gd4+t6bdotnd2+uCbw5YJOAfX37Q/7MH7Q3xN+OPg/xl4L 8TQ+Hfh+PCX7Nfhzxvp+lfEnxL4Q1u5tPh58ZPGXi34raTZyaFpYaWz8S+AvEkOgwyJeWi6xKhtr +G2htoJqAOA+JX7En7SPxb+G/wCwNbat8UdO8K/HX9mL4cvbeL/jVDrOpeJddtviddeHfhh4R8Va 1pL3VlYXniq28feENK+KPh7WL3UrzTLiKXxXZavc21/NBJCADxL4a/sPft0/Brwt8IPA3ww1/wCH Xhrwf8JPCvxu0qw8PWnxU8f2Gl683xB0/wDa5k8K6L4htdL0q0Z7fRvFHxL+BHiJ9e0SfR9Xju/C +r3Ez3+oaJoF8AB+tfsMft5eL/A3ivwX4g+L0fk+I/hx+1j4Gjivvi94s1HSNNt/iu/7QOp/Bi40 yHS9A0LVNO8ReBrv4gfDnw1q2rJqVxod34Q8PvbJ4bGoeF/Cd7agHsur/sb/ALTWsanfeL9I8ZS+ DPFX/DSngjxt4Msrn4xeNfG/hr4c/Bqw/Zo8N+A9Y0jT9G1fTbfSdW1/SPjXZa94ytoX060/t2y1 Ke5n1Sznvbm1oA4jSf2Hf2pG8efBD4oXWsWmg+N/A/w9+DPhTx7q1t8ePH2v3niPV9C/aP8Agv4x +Nly19e6JbTan4c+Inwh8G/Ee1tfDF+Bptr4j8aSQyR/aL3UdacA+iPhT8FP2rfhr+wtJ+zdpcfg /Tfir4b+DPhL4XeFPiK3xP8AE3iG51LxDd29z4U8e/ES61TWPDkuoaPqOmaMsPjTwhpzDVo2165T RLu4htLH7bcAHxvqH/BPD9rnTPB2g/BDRfEXgXXfgN8Ofil4k1X4ZeFbjxtq/hODTPCMf7WnwN/a U8E61q+g6H4XOjX+q6B4e0D4s/CnQvCzRjSPDOiTeFZ7K7lhu9Ws1APoj4Ffst/tbfDdP2pfFXir WfBviT4ufFD9mvwZ8L/Cnji9+IvjS9bxj8T/AIfePP2qfEGn+MPErQafp2q+ANG1rSvjP4JS20zw pqV1J4Vk0nUrTTZ5Y7SwlIB8+yfsKft2SQeK9ZX4haPb+PL/AMI6t4X8N+J7f4ra2uoJptp+0j+0 F8X/AAN4P8W3g8HC51r4faR4O+JngvwbqujWM2l3qQ6LcTeG73RbzStFuowD6z+Hf7MH7UsfiD47 R/En4sNd+HPiF8Lv2hvAmnG08Z+K9Yh1nXPiX8Udd8Q/B/xTDod+YV8Av8FvhTqNr8LrePRtQvr3 X0j/ALWnvreS0tYwAfIXhn/gnz+2t4St9U1vwB8Q9H+FnxC1v4TeD/h1eeI9I+LfjLxBAb7wt+xH 8Vfg1Hrmp2V3oVlF4h1C3/aE1f4ZePdI1PUVOqaXo/h7zrW7judNtrS5APr3xN+zp+1TD+zp8M/C 3gXx5qZ+KHh/4t+P/GXiez8XfFrVriGXwX8QPh38ZPBsXgy38d6F4T0ie+0bwT4g+IPhXxj4d0ub wzFFb/8ACHWGnWs9tdWlhqduAfOl7+x1/wAFCbu0K/8AC7bpLe8s/gQPFmnf8Lf15tc8Qv4R8B2/ hD4oaL4X8VzeE57fwp4f17W7XSfiDarrGgeKdUl8U6Xq0FtqOmaT4pvrSAA+gNI/ZN/aL0n4D/tp eH2+KnirV/jb8WtA8aeEfgL4x1r4v+MbqHwzpd38IPBvh3wfrt7PFawWnhDxPB8UdO8U+MdV1Pwz ozXAfVWuLZ83LWcIB47+0T+wt+1R49tPjR4K+HfxKL/Drx14E8Z+H/CWleOPij4z1iG00Lxp+zD8 UfhtrPwn8S6Xqdpq9tqul3n7QHjTw/8AGePx9cS3WradZ6DB4fs9LVNO0uWEA+w/2avgn8f/AAF8 Zvjr49+MXxH1zxXofjHxN40k8B6QvjR9V8LW3hDW/iJrfizwPaL4Ml8O2LeGdd+H3g7UdP8Ah19v h1/V4Nb0/SheLb6eskVtEAfctABQAUAFABQAUAfy9/8AB3v/AMocPFn/AGcN8C//AE6a5QB/lF0A f6Ov/BkJ/wAmw/tzf9l5+Gv/AKr7UKAP7g6ACgAoAKACgDiviV4nu/BXw68feMtP07U9Yv8Awl4K 8VeJ7LSdF8P6j4s1jVLvQdCv9VttO0nwrpFzZ6t4m1O+mtEtrHw/pd3a6jrN1LFp1lcwXNzFKoB+ V37Pv7cH7VHxO+K3wm8IeMvhD/Yvg3xT8QPih4T8Ra9afBz4naRrz6JoR17V/h542vdO8ReIINA8 J+BPEvheysobvxfpHib4kNp/i1tMsdQ8OWOheNdB1y2AMnTf2u/2tPD/AMTbHwrbeAV1fwMPjf43 0vxTfeI/hR8ZdU1288J6p/wUcb9nDS28LeJY9ah0XQNM0j4CeKLT4z6fPdaXr2kxeG/CMmq2cEHg i/a70gA479pv4/ftoeC/jP8AEmTwNqGs6kfg/wDHz4ga38NPAy/Az4rXvg/xP8GLL/gmf41+J+j6 b4r1rwVrOmaV8UNG8XftI6dc+DtAdb+PW/DPxM0+1tYftlzJoHhdQD6M+Ff7VH7T3xU1b9qGDW/h bpnwx8PfDfwB8Rbz4exXfhL4mS+Pjr+madpt78M/EZXVNAh8HeN/D3xD0W91DxPaadoeoWmvaTca fZ+GJtL1G/8A7em0kA/Onwn+3X+1J+zt4O8F+DvF+oWUnifxpY/DHxLq3xH/AGiNA+MZ0TSor/8A Z8/ZX8cfEzXtcj8VeMbQeCvBmieNPix8Tbfxrr+na1Lo3gfxT4f0vwpH4Ls3vNTj0QA+s9O/bf8A 2yvFPiKy+H+j/CvQ/Cviqb4m/Dj4Yat4g8WfAH45XXhnQLvxP8bP2wPhv4q8QyRR+JdCtNY0nw74 J+EfwC+IDX2neKf7AtY/ic7XuvtpXiTw9caWAaGs/tDftifGL9kn9vzUtW+Hd98LPiF8O/hj8UbH 4QaP8PNC+Lmk/FrSPiP4W1L4s6XplpCj6YY/FkupaP4V+Gvjfwlqvw41fVZtaPjG/s1059Im8N3m sAHOj9sv9tTxX4u1L4ZXnwf0fTfBd/F8VYdG+NNj4B+OHhCP4t+B9F8ReM9AfxH8LbK0g8V3vw/8 Z+EvDFhofiOz0/xjq/keOby9g1Xwxqek6FeW19bAHGfD79tX9vLRPhj4bsbf4C694y1H4efAnwZ4 t8YR+LPhj8VL/wCJPiDw54F+CX7MnxJ8W+ORrMuraTp/jH4gfGS48a/Hf4feC/h7YWMfim1+KXgW xttTg1O60fxro9AH6J/se/GT9pH4yr8Srz4+fCvTvhGPA3iB/A1jokWheJNPm8QeIbfW/E3iCTxP oWra/qcy694IufhXr/wdtob+y06KNPiRF8UNKF/NDpFvp+mgH2tQAUAFABQAUAFABQAUAFABQAUA FABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAH8vf/B3v/yhw8Wf9nDfAv8A9OmuUAf5RdAH+jr/ AMGQn/JsP7c3/Zefhr/6r7UKAP7g6ACgAoAKACgAoAKACgAoAKAOB8a/Cr4Z/EmfSLn4g+APB/jW 40AXyaNP4o8O6Vrc2mwanJp82qWdpJqNrcPFYarNpOkz6pp4b7DqU2k6XLe288mnWbQAHfUAFABQ AUAFABQAUAFAHm3xE+K/hD4X3Hw7s/FUurC9+KnxI0P4VeC7PRtC1fX7rUfF2vabretwx3MWkWd4 2maRp+heGtf13W9e1L7Lo+jaTpN5eaheQRou8A4CL46+I9H0zxjrnxJ+Afxg+H2i+HfFvhLwr4fu be08JfFbU/Hq+MPFsPhCy8Q+H/DHwR8VfEjxRpnh/TLq+0vVvEd94t0fw6fD/h29n1zVYraw0bXZ tNAPoigAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgD+Xv/g73/wCUOHiz/s4b 4F/+nTXKAP8AKLoA/wBHX/gyE/5Nh/bm/wCy8/DX/wBV9qFAH9wdABQAUAFABQAUAFABQAUAFABQ AUAFABQAUAFABQAUAFAHwVp/7R37Q/jjwB4O8c/CP4KeHfGx1n9rD4m/Bvxno9/4pl8PXngD4Q/D T4w+PvhTqfxD1D7VbSnUNdVfA669daFaJ5iR65aWtpDeGGWUgHvf7R3jX42+Avh1Dr3wB+Fem/GL x6fF3hHT5/B2q+I08LW48JX2tW8Xi/Wo9UlhmjN3o2hi7u7S0cA3U4SOJbifyrO5AG+Bfi5rHiX4 +fHX4M6no+nwW3ws8KfBPxlpOuadczzi+tPizaeP7W70PVUlRUh1nQtX+G+pagfJISbw/wCJPDsz xRzPI0gB75QAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFAH8vf8Awd7/APKHDxZ/ 2cN8C/8A06a5QB/lF0Af6Ov/AAZCf8mw/tzf9l5+Gv8A6r7UKAP7g6ACgAoAKACgAoAKACgAoAKA CgAoAKACgAoAKACgAoAKAONu/DuoWN5pUvg260bw3YyeJ7vXvGVh/YcU48Tw6lbXC6iUnhntW0/V 7jUHttSl1ULcPdTW7pdxyi4kegDwf4bfFb42/Fe7+M+h3nwkv/gndfDj4teG/C3hHxF4ymstf0z4 h+CYV8G+IPFGs6baabcxSRTX2h3+v6Pp10JZLOz1GfT5XM91p+p2UYB9NWuk6XY3mqajZ6fZ2t/r c9tc6xewW8UV1qdxZ2UGnWkt9OiiW6e2sLa3tIDMz+TBEsce1QQQD80/jl+3V48+C3xN+Kvhb/hX Wn+LdN+Geo6vqR0Oyg8Rad4i1f4cp8GPhj4q0HxomuzWl14dtrHUfi3431v4cGdkktjL4buo2e3u Yb2a2AOL8Lf8FQ9Z8TeK/h/4Yb9mjxjott4y+E1x8SNQ8T634gbTtB0SePw78Utce2tzceGk1DXN A0q4+GkWka/4g02ykFpceKtLvLGy1HT0s7jWgD70/Zk+MWufH74LeCvjBrfhDTfAw8eaXaeINI8O 6f4nuPFc1hpF/Z2s8VrrV/c+HPC72niHT72S+0nWtLTTpIrK+0+URXtysg2AHvlABQAUAFABQAUA FABQAUAFABQAUAFABQAUAFABQAUAfy9/8He//KHDxZ/2cN8C/wD06a5QB/lF0Af6Ov8AwZCf8mw/ tzf9l5+Gv/qvtQoA/uDoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAOX8OWHiqyvP F0viXxBZ65Z6j4okv/B9ta6RHpcnhvwq2haDaR+H76eOaU61eJr1pr+rHV5Vgka21e208w7NPSWU A6igCF7e3kZ2kghkaSPynZ4kdni3bvLcspLR7vm2HK7ucZ5oAabS1O3NtbnZGYUzDH8kTAhol+X5 Y2BIKDCkEgjBoAljjjiQRxIkca52pGqoi5JJwqgAZJJOByST1NAD6ACgAoAKACgAoAKACgAoAKAC gAoAKACgAoAKACgAoA/l7/4O9/8AlDh4s/7OG+Bf/p01ygD/ACi6AP8AR1/4MhP+TYf25v8AsvPw 1/8AVfahQB/cHQAUAFABQAUAFABQAUAFAHkvx6+I2s/CH4KfFb4p+HvCp8da78PfAPijxhpHg1Zf EsLeKNR0DSLrUrXQxL4N8G/ETxZGdSmt1tQ/h3wL4t1gGTNjoGp3Gy2kAOe1P4yeNdP1rU9Ks/2b vjV4nsbDwfH4ntPF3hu/+C8fhbxJqb6Taal/whvh+Lxj8XfB3jWPxC1zcyaRDL4r8FeFNE+32s7X mrWVmYrmQAzrf45eP5pfDUcn7J37Q1quveHtW1vUZ7jUv2cTF4Rv9Nk19LXwt4j+z/tB3Esuv64u jWMulSeG4vEXh9I/E+hf2tr2lSR6/HoYA7S/jj4/1F/BK3P7KH7QujDxZq91pusPqmpfs5Mvw7tb e+s7SPXfGf8AZf7QWpvPpN7DdS6lap4KXxlq4srC8W50q2vms7K7AKEXx9+IsukWmpt+x7+0nBd3 PieTQJdCl1T9mQ6tY6clra3C+Mbt4f2j5dIPhqSS4ls0is9Vu/E/2myujJ4bS2Npc3QBLqnx4+Ie np4qa2/ZE/aO1o+HfEsGg6Ymman+zSj+NdOmfW0fxf4X/tX9ovTFi8OWw0mzkni8VN4Z8TFPEWi+ R4dnePXE0YAuan8b/HthceMoLb9lP9oPWI/C0GnzaRdabqX7Oq2/j+S91DTrK4tvB41P9oDTriGf S4L641S/PjKDwjA1hpWoLp81/qD6dYX4B0Hhb4q+L/EPi/TfDOpfs9/GTwZpV/4ZsNfuPHfie9+C svhLSNRvNKtNRn8H6jD4W+MXibxg3iTTLq5l0S/l03wnqPhltVsbp7DxHfaS1pql0Ae0UAeYeMvi D4k8L+K/B/hzSfg18TfH+meJ7lYNV8beD7v4XQeFvAcbXkFsbvxdF4z+JfhDxXNbpFM9+w8IeF/F lwbS2nVIHvDBaTAHmkXx9+IsukWept+x7+0pBdXXiaXQJdCl1T9mM6tp+nR2tncL4wvHh/aQl0hv Dc0l1LZxRWWq3nib7TYXhl8ORWxsrm8AOf0r4u+PfDsvx7vrT4cfE746S+H/ANodvBmheE/h3dfD O21rw74ab4QfDPxCZhJ8TfH/AMMtCOh22s6lqLzJDrt7rBv9cRobCazFxNZgHZap8b/Hun3HjOC2 /ZT/AGg9ZTwrFp8mkXWm6l+zqsHxAa91Gwsp4vBw1P8AaA064hk0yC8n1W/PjODwhG2n6ZfLYSX2 otY2F6Ae3eHNVvNd0DRda1Dw9rPhK+1XS7HULzwv4ifRZNe8PXN3bxzzaNrMnhvWPEPh99T06R2t b19F13WNLa4ikNjqV7bmO4kAPPPFPi74taV4wTR/C/wetPFnhB/D99ff8JnJ8SNG8PzReIrfT9Vu rTQJ/DN5o91eiz1C9tdJ0yPXIL24FvNqs1zc6bHZ6a010AcxpvxC/aAuH8HDU/2dLDTY9Y1G6s/G TRfGbw3qD+DbSK+gt7bV7RF8PWy+KbO7sxe6gILaTTNSgRdOtpbH7ReXq6SAUbT4k/tHS2mly3n7 M2mWl3P4jk0vWLSL45eGbpNN0Dy9NMHiiyuf+EXgXVY2mvLxLnR5Y9M1KCHSbuaBbyS40+3vACS+ +I/7RNvZeIJ7P9mrT9QvdN8R29jotivxu8MWw8SeGZV1iSbxDBdT+GxHpeo2y2ujQyeHtSSFZLrV 7lYdZktdKN5fAFzUfiB+0BbT+L4tO/Z40zU4tIFjJ4RuW+M/h+yj8ZJNf2lvfxTJL4Zkn8NXdlYn UdRhjvIr21vfI060+2202oXjaQAZWt/Fr43eHtH8ca/rH7P1rY6P4V+FOuePNPvYvifFr9xqvizR fCaa6/gC48P+EvBPiDxQks+s/atCh1nw1o3i6W6hsZdQ07Q7+8utN0W9APXvhf4s1Dx78NPh5461 bRD4Z1Xxp4G8JeLNT8OF9YkPh/UPEegafrF7ohfxF4f8JeIHOlXN5JYF9d8K+GdYYwZ1Pw/o16Z9 OtgDuaACgAoAKACgAoAKACgAoAKACgAoAKAP5e/+Dvf/AJQ4eLP+zhvgX/6dNcoA/wAougD/AEdf +DIT/k2H9ub/ALLz8Nf/AFX2oUAf3B0AFABQAUAFABQAUAFABQB5R8dvipa/A34MfFP4yX2i3XiO z+GHgPxP45udAsdR0fSbzWYfDWk3Wqyaba6p4hv9L0OwnvFtjBHd6tqNnYws4e4uI4wWoA5v4/8A xhvfhH+zz8QPjPo+l6VqOqeGfBJ8RaNo/iDWrXRdJutUvEtYtKsdT1xnksbOB76+t4pLp7iKyY4E moWlu7XsIB+fXgv/AIKiahc6z8NPA/ib4Oa1qviHxd4R8TeI9d8a6SZfCfgDTJdP8UfGjQtJS2k8 V/v7uw0+H4Qs/j7VdNvtX03Qn8R6VqHhe98baBL/AGuAD07wT+3/AOMvGEH7N94v7OOt21l+1HDa XXw2uLHx/wCGNfjhSDW/CzeLtN8T3GjR3djoWveCfh/q/ir4ha1YXF29vNZfD/xLommX99rccFpK Ac4f+CkQsvC2j31l4K0jx74l1z4xftA+Bja6f418KeCvDGjaP8JPH0egeH9MHivxHrM2l61428ce HdZ8Pax4K0kSaU/i6xg8Sax5OhWmkTQ0Ae8/sr/tnWv7T3jv4zeDLX4U+OPh/F8KNXn0+DVvFgs7 c69Db+MfGfgyRLnSt8epaJq/2rwZNrS6fcQXNs2g61o041E6i2o6bp4B9uUAFABQAUAeF/HT4ieJ PBun+BvDPgC3s7z4k/FT4g+H/A3hKPUrSa+0vS7DfL4g8f8Ai7V7eC5s3fT/AAd8OtF8Ua5FC13b JqWuQaJoQnSfV4MgGP8AGbXLz4EeE9Q+Kfg/RrOXQYviVoPjX47QSpquo6hdeAL3T7Dwb408W6Kq 3U32G/8AA+jWvh/xrfW1tbSW174d8Ga3p9rp/wDa2rR3YAPopWV1V0YMjqGVlOVZWGVYEcEEHII6 g5oAdQAUAFABQAUAFAHG/EbxjD8O/h747+IFzYTapb+BfBvijxjcaZb3VhY3Gow+GdEvtblsIL3V bmy0yzmvEsmt4rrUry0sLd5FlvLmC3SSVQDxH4hftAahon7G/in9qDwtoFh/a1r+zte/Gzwz4T8S 6rbnT5dVm+Hx8Z6F4Y1rXPDr6xaeTcXstpo95quiSara/vHvNOa/g8oygHwl4I/4Kq6lN418FeBP ih8CtX8GeI/Hnx78RfCeTRYNaFxqHw40Ev4C0rwJrnjeS50+30251DW9f8ZEeJbDQ9Quj4U0mBb2 b7aQFmAJ7L/grj4Zj8M/C7W/EnwW8TaHqXxA8f8Aw98P6poUHiPSNYk8LeB/iP4S+DXi/TPHc+qW ELaTePo9j8bfDkXiDw015aapZvo3iqa1N9baLPMwBQ8V/wDBXrSfDkvj23tf2d/H2t3Xg3xh4d8L fYrDxB4bmvbd9esfjjqv2bxrb289y3gDxMll8EL+0tfDfiExT3GteLfDNlc3VlaSajqNgAZWp/8A BYWPSdX8caZefsx/EIQ6Fr+peHPC+pWviLQdTtNYvNM+KNr8Nbq88TDSkvrjwfpNrJNc6xeX0sOq BIrYWNrHd3dxCrAHa3//AAVA1++8N/EvUvCn7OPiJ9a8L/BTXfil4N0XxD418LWd74j1rwt8JfgV 8YvE/hLWLTTrjUX0N9F8MfHOyUajHNqFvquo+EPEtlpwldbF7oA/Tr4Y+OrH4meAfC3jvTxYpbeJ dLjvjDpusaf4gsrW5WSW2vrKDWtJln03UxZX0FxaPd2M0ttLJC5idl5IB3dABQAUAFABQAUAFAH8 vf8Awd7/APKHDxZ/2cN8C/8A06a5QB/lF0Af6Ov/AAZCf8mw/tzf9l5+Gv8A6r7UKAP7g6ACgAoA KACgAoAKACgAoA8p+OnxPsPgp8Gfil8XtU0W68R6b8NPAfifxvf6BZTQW95rNp4c0m61S4022nuU kt4p7yO2aCN5o3jV3BdWXIoAvfEDxU2jfCfxZ41gHh62fTfA+p+JYE8YyyR+GonttHk1KKPxBNAP NTTVZVjvZIRvEe5kGcUAfnr4V/b9e+0z4H6XqPwZ0jxD4o+JvwL8BePbC88E67YDwtpXij4r+FPj brXhb4W6bYaravrgka7+Bmq+EPEN0Nltpur6po8Vzb+XNHEQCHwr/wAFMfC93/wyrol58E/Eia7+ 0BpXhq+1L/hFb7SdV8L/AA21bxJ4q0LwhfaLLrCxW0Gqa/oN14jGveLfD2nka14Y8OxXM+swrMXW gDL1D/gpx8P/AA38J/Avxa1j4G6lbeHPHfxcvvA2jWeha74Z8QX1rD4S1P8AsbxX42vo9NtFhsn8 PzzWN/p+kuw13VvD1/DrmnR/YIbt4ADb1f8A4KMXNjb65r/hr4CTnQNG+M/hD4eeMNZ1rxt4e0C6 0LSfEPir4ieCLjxN46sJLRbvwRqFhf8AgHT7iLTfFBWSTSPFmgXHmiKaMygHoPjD9vHQvA/j344+ GptNsvE8fw+1n4D6L4ZstL1vTbOB7b4tQXUWoeLPF+v3CNaeEvC/h7VTa2euahrCCHR2m0oXUkR1 +xoAvfA39vrQfjb8VvDPw0i+FnjDwbF4t8OWuq6Nr3iK+sUlfW5Phh4O+K11oF14fEEWp2kcPh3x W4tNalP2LU30x5bVRHeQBQD9AqACgDwn4HePdY+Len+LfiDf6bY23g648feItK+Dl19lI1LVPh/o MNj4bl8WzTyoHNp418T6V4j13w9LBthvfBl14bvAZBc7iAe5TQw3EMtvcRRzwTxyQzwTIssM0Mql JYpY3DJJHIjMkiOCrqSrAgkUAeIfD74ia9e/FP4u/CbxjaWtlqnhG60Hxd4AurSB7e28S/CbxZpy QaffJu+STVfDXjHSfFfhfXYoSfIhtvD9/MsY1u3DgHudABQAUAFABQAUAcd8RPFtv4A+H/jrx3eW E2q2ngrwd4n8W3WmW7xxz6lb+G9EvtZnsIJJVeKOa8js2t43kVo1eQM6lQQQDzfUPjZo9r+zPJ+0 RP4R13UtCHwWg+MDeBtJsxrXiO502fwZF4vXw1ZWdrC66hqhgkXTkWGBo5ZxvSIphaAPiiz/AG5N Z+IHxZ/Zt8AeBPhr4Q0ay+JfxP8Ail4b8deJ/EfiXR9T04aR8MtO8A6jqM3wv1awt47Dxyvi0eMr O0sdZ0yQ2ya14X1zQt0+oaNciMA9E/bJ/an8Qfs0eO/gL4X8LfDDw945034m3PiO48SyT2t+t54V 0fw54n+FfhW+8QPPp8T2OjaFp2hfETVtU1zxDq0b2OkaZoUz3Srp5vJoAD5Jsv8AgpZ8DfA/h/41 /FHQ/wBlT4g6fqOpfFvQNF8WDVF0+28QeNdan034tanp97rEertd3+janoMHwp1V4/Bdzbx3OiTe K9GlsLBZtSuvNAPpXVf+CgvgWw8XeLPCt98INbj0nQ/FWo+F9Y16/udKtLPSLO1+LOg/CK48Q/ES wurFZ/Auia/4i8T6X4j8JTeItq+MPAw1PxhppfTdNuZAAYWlf8FIPC+u6d4s8RaF8E9RvdJ8JfC3 4E/EXV7xvFXhm3v7RP2g9G8DTeH9N1TTmtDfaXpXhG58WpY/EzxReomj+DtI0eXWtVEdgyxwgGeP +CoXhnSfFel+B734CeP7Jz8KvEnxKn1LR9Q0PU/C0emeHfCvxR8WWsXhnV7VYLPxRoV/pfwwktR4 l0VJNJ0/UvE+g2NztcykgH2j+y1+0Jp37T/wf0r4t6Z4X1bwdb6lrnirQjoWszw3V5DL4X8QX+hP drd20aWtza6iLJb+1ltWmiENwsXnySRyEAH0TQAUAFABQAUAFAH8vf8Awd7/APKHDxZ/2cN8C/8A 06a5QB/lF0Af6Ov/AAZCf8mw/tzf9l5+Gv8A6r7UKAP7g6ACgAoAKACgAoAKACgAoA8e/aE+JSfB v4F/F34sSeGE8ax/Dj4d+LPGj+EZLm6s08Sp4d0a71NtEe7stC8UXduupLbm1M1v4d1uaMSbk0y8 I8lwD06xlh1jR7Ke4tIhBqem2081jKvnwrHeWySPbSJPDF5saiQxsJbeIuB88KElAAEWi6NCYGh0 nTImtRELVorC1jNsIWnaEQFYgYRE11ctEI9uxricrgzSFgBE0PRIxbiPR9LjFnLJPaBNPtFFrPMV aWa32xDyZZSimSSPa7lVLEkCgCP/AIR7QDbx2h0PR/ssUz3EVt/Zll9njnkTy5J44fJ8tJpE+R5V UOyfKzEcUASvoujOt4j6TpjpqMqzagj2Fqy30yNvSW8UxEXUqP8AOsk4d1b5gQeaAGtoWiO1076N pTvfRrFeu2nWjNeRIyMkd0xhJuI0aONlSUuqtGhABVSACaPS9MhnS5i06wiuYwBHcR2luk6BYEtV CSrGJFAtY47YAMAIESEfu1CgAv0AFAEUMENtDHb28MUEEKLHDBDGsUMUaDakccaBURFAAVVAVQMA AUAeM/CD4vy/FTWvjhpEvhl/Do+Dnxm1X4SxXLX9/ejxRFpvgvwN4vHiRI77w9oSaes7eM2037DY XHiKxQ6W1xHr881xPYaeAfBmtftz/Ebwp4w+Jt9rHhr4c3tp4O+I3iz4U3Pw4u9C+IvhDxt8LNMt fi3pvgj4ffGP4u/FGSz8WeHofg78QPCS3fxFivtF8CIIYfEXgqx0+/1C0g8V69pQBztx/wAFTdfs 7HX9W1P9mvWNGsrH4dWninRdO1Txnqdl4nvfFM3w2+F3xKn0DWdI1D4dadY6BoH9mfEW5t9M8U3O tSXGoPoBk1DQNDa+vIdFAM+P/gq34oe78NWzfsoeM4Yta+AniD4zXWo33ixtKsWutG8G/FnxWdJ8 Ox6j4Pg1bxToFtd/C628Oaz4p0fS7j7Lf+NtEv8ATdK1fSksbvxAAevfD/8Aby8a+L/iJ8F/Dmu/ Cjwj4M8KePtc+Mnw/wDGWu3njzxZqbaP8TfAPiX4V2Xg/QPBF3H8L7G18WDxh4Z+IF5rdta6ta+G Jb06RrstrfW2meD9RvdYAP0yoAKACgDh/id4rHgT4a/ELxw2krr6+DfA/izxW2hPLNAutjw7oOoa udJae307WLiFdSFn9jaWDSdUmjExeLTr5wttKAQfCzxZH8RPhZ8OfHR0WPQIvHXgDwh4sPhzzJbq LRY/E/h3T9Y/sXzrrTNGnuI9OW++w+ZcaNpUsyw7ptMsXZrWIA6uPRNFiNmYtI0uM6cZG08x6faI bFpW3ymzKxA2xlf55DDsLt8zZPNAFm4sLG7dZLuytLqRIp4Ee4t4ZnSC5Crcwq0iMyxXCognjBCS hVEgYKMAFR9A0KXzRJoukyCe5F7OH06zfzrwCRRdy7oT5lyFllUTvmUCWQb8O2QCSTR9IlN40ula bK2o+V/aBksbZzfeQQ0P2wtETc+SVUxedv8ALKgrggUAMTQtEiE4j0bSoxdW62l0E0+0QXNoiqi2 s4WECa3VFVFhk3RhVVQuABQAp0TRT5WdI0s+RavYwZ0+0Pk2UiuklnF+6/d2siSyI9umImWR1ZCH YEAuWtpa2MCW1lbW9nbR7vLt7WGO3gTcxdtkUSpGu5mZmwoyxLHkk0AWKACgAoAKACgAoA/l7/4O 9/8AlDh4s/7OG+Bf/p01ygD/ACi6AP8AR1/4MhP+TYf25v8AsvPw1/8AVfahQB/cHQAUAFABQAUA FABQAUAFAHkH7QHxNu/gt8D/AItfFyw8Mjxpe/Db4feKvGtr4SN1rVkPEk/hzR7rVI9FN54c8KeO 9etf7Ra2Fr5+keDPFGoReZvttD1KULbSAHqOl3bahpunX7w/Z3vbG0u3t8zHyGubeOZoc3FvaTny y5TM9rbTHbmS3hfdGoBeoAKACgAoAKACgAoAKACgDxH4O/Fq9+KGtfHPSrzwkPC6fCH406t8KrG7 F34guv8AhL7PTvBXgXxYnisprvgvwhBZm5m8YTaV9k8P3njXQl/sfz7fxjeXk99pOjgHtRiiYuWj jJkADkopLgdA5I+YDAwDnGOKAAwxN96KM9uUU8YC45H90BfoAOgoAPKi4/dR/KpQfIvCHIKDjhSC QVHByeOaAF8qLj92nytvHyLw/wDeHHDf7XX3oAfQAUAFAHE/EzxbP4B+HHxA8dW2k/2/c+C/BPiv xbb6EZtQtxrU/hzQr/WItJM+k6L4k1WH+0pLNbPztN8O69qEfnb7PRdUuRHYzgEXwt8Yz/ET4Y/D n4gXWj/8I7deOfAnhDxjc+HxNqNyNCn8TeH9P1qbRxcaxofhjV5/7MkvWsvO1Tw14e1GXyN99oek 3LS2FuAd3QAUAFABQAUAFABQAUAFABQAUAFABQB/L3/wd7/8ocPFn/Zw3wL/APTprlAH+UXQB/o6 /wDBkJ/ybD+3N/2Xn4a/+q+1CgD+4OgAoAKACgAoAKACgAoAKAPK/jl8VtK+Bfwc+J/xm1zTrjV9 G+F3gbxL461TS7XVfDmhXOo2PhrSrnVbmzt9Z8X6x4f8L6ZNcRWzRx3uv65pWlQOwkvL63hDSAA9 H02+TU9OsNSiUpHqFla30aGSCYol3BHOima2lntpSqyAGS3mmgcjdFLJGVcgF2gAoAKACgAoAKAC gAoAKAPHPhP8ZtG+LWr/ABm0fSNLudNm+C3xe1T4P61Lcaz4V1ddV1jSvCPgzxfNqdrD4a13WrnR raS08aWdqNI8VQ6F4mhltJbq50WHT7vTbu9APY6ACgAoAKACgAoAKAOO+InjKz+HPw/8dfELUbWW +0/wJ4O8TeMr+yhvdL06a8s/DGi32t3VrFqGuX2maJYS3EFjJFHe6xqWn6Xau4n1C+tLRJriMAi+ Gvjex+Jvw58AfEjTLSWw034g+CfCvjfT7Ge+0nU5rKx8V6FYa9aWk2paBqGraFqEtvBfxwyX2i6r qek3bobjTdQvLOSG5kAO2oAKACgAoAKACgAoAKACgAoAKACgAoA/l7/4O9/+UOHiz/s4b4F/+nTX KAP8ougD/R1/4MhP+TYf25v+y8/DX/1X2oUAf3B0AFABQAUAFABQAUAFABQB5Z8cPiT4e+Dnwc+J /wAV/Fmk3mv+GPh14F8TeMvEGiafDY3F9q2keH9KutSv9PtINTntdPmuLu2t5IYo725gtndws0qI WYAHo+nXcWoafY38CNHDe2drdwxuFDxxXMCTRo4QsoZVcKwVioIOCRzQBcoAKACgAoAKACgDO1jU DpGk6nqosNQ1Q6bp95fjTNItxd6rqJtLeS4FjptqZIhc392Y/ItIDLGJriSOMyIG3AA+Qvhj+2l4 V8deGPg7q/iH4Y/GP4f658ZZpbbRPDniDwHqMk2kyxanBpYuNevbF7q00rTp5rmOSC8vJIg8KXEp jVYSSAa0P7aPwon0PT/ECeH/AItCx1LxhN4Jt4n+GHiVL5NXhs7C9a4uLMwedBpBi1GBU1SQC1aZ J4g26F6AHXP7W3wx8P2XxZ1W88LeOILf4afHS7+CfiL/AIR7wmfEV9rXjCDwL4Y8aya7bWPh6W7u 30Z9H1+xsDqOppbXS3lmbeWBYWtJJQDrfhp+0AfiP8YPiz8Kk+GPxI8MW3wxsPCeoW/jnxNoI07w n4vj8UWkt0segXv2qWSaWBUDokkKNNAs8reS0XlsAfP/AI//AG6I/h58QPjTpus+EdDj8A/Au/l0 HxO114wi0/4ra/rNx4A8FeM9B1Pwd4Du9PTT9U8Fa/qvj3RfBdr4mu/ElhFba7bavJfQ29hYPckA 57w//wAFOfhR4o0C08UaH8O/iTfaKP2etd/aO14xJ4WbWPD/AIS8M6z4+8Oa5oMvh9PEL6tqviuz 134fanZJp2jW17BcQXlpqEd39jE8kYB2fhn9t7RvGnxI+DnhfR9K0rRdH8e/Fj4n/BfxLH4k8QWH 9tW/izwV8LoviZo2q+CLrRJdU8N+MvDOppLaeHLvUbPV4zb+INTi0mGOfULK8t4wD73oAKACgDkP iF4q0zwL4B8ceN9asp9S0fwd4Q8S+KtW061jt5bm/wBM8PaLe6vf2VvFdyQ2ss91a2ksEMdzNFbv JIqzSJGWYAEXw38XaV8QPh34C8e6HY3GmaJ428F+FvF2j6bdx28V1p+leJNDsdZ0+xuYrOWa0juL S0vYYJo7WaW3SSNlglkiCsQDtKACgAoAKACgAoAKACgAoAKACgAoAKAP5e/+Dvf/AJQ4eLP+zhvg X/6dNcoA/wAougD/AEdf+DIT/k2H9ub/ALLz8Nf/AFX2oUAf3B0AFABQAUAFABQAUAFABQB4x+0Z 8Q9F+EvwE+MfxP8AEnha28caB4A+G/i/xdrPg68ks4rXxPpug6JeajeaHcS6jZ6hYpFqcFu9o7Xd jeW4WUmW2mXKMAer6TdR32l6bexQrbxXmn2d1FbqVKwR3FvHKkKlFVCsSuEBVVUhflUDigDQoA+b PjF8arv4Z/GP9lvwJ/anhG10f44/EDxv4I1uz1oXS+I3/sj4VeL/ABnoGo+GbmPUILOGMeKdA0Xw 1qcd/YXwvJ/FekWlnLaXssK3QB674F+I3gz4mafreq+CNbTXbDw54x8X+ANauI7PUbIWXi/wHr17 4Z8WaO0ep2dlLM+ka5p95YPd2yTafdtCZ7C7urZ453AO2oAKACgAoA/LPw9+2J8S7fUf2cvBV3L8 ONEl+IPgHwf411fxP8QtP8SW4+JMusfF7/hB/FfgT4Sw+FBbaePH3g3whBL4su9PurbVmu217wqg 0mDS21rVrMAwPh5/wVS0j4qad4SPg74RWsXiHxp8fJvgdoui+L/itpXhO1nF38IoPi94a8ZjVLnw peyDT9as5x4Ku9El02HW9D+IbW/hG/gOryXNtZAFSb/golpEnhXxl4p8N+CfDvwcfQPit8BZvF13 4vaK7i1zS/il8Zr/AOE/i/w144S0sPDc3gj45eHvCHhDUfGWteHdSuPEV74d8LWui6nqN3c6XtIA P0B+H/jXVfEPxk+OHh2W9trvw74Y0/4S3nhsW8FsNsfinw5rOo6hM15EgmvY7qW2t5YDNJIsUfEG 1HbIB8MftDft5/Bv4UfHv4u/CrxJ8A7Lxr4h8D/CG+8RX/i+8PhqzbxNc2Fn4A1xvh5fN4g0MXNv pF3oPj6y1fTtfnv9Q8NahPoPiXSrVJdU8P6xb6cAfYX7NHiH4dfG/wCDnw8+Nui/CTw54Dk8beGN Qii0RtA03+0NG0xtY1ew1DQ11I+H9DmvdIvLuK+u1e3sYNJ1eG+OoWYvbK9ivLkA9qg+HngC1Oim 28DeD7c+G7ia78OmDwzosR0C7uJhcXF1ovl2S/2VcT3CrPNNY+RJLMoldmcBqAOwoAKACgDhPil4 msPBXwy+I3jLVdHi8Q6Z4S8CeL/E2paBO0CQ65YaD4f1DVbzR5nuoLm2WLU7e1kspGuLa4gVJyZo JY90bAEPwl8Vaf46+FXwy8b6RosXhvSvGPw+8GeKtM8OwNA8Gg6f4h8Oabq9losL2sFravFpdteR 2MbW1rbQMkAMMEMZWNQD0GgAoAKACgAoAKACgAoAKACgAoAKACgD+Xv/AIO9/wDlDh4s/wCzhvgX /wCnTXKAP8ougD/R1/4MhP8Ak2H9ub/svPw1/wDVfahQB/cHQAUAFABQAUAFABQAUAFAHj37QnxR HwS+Bfxd+MDeHF8Xr8Mvh34s8cN4We/m0tfEK+G9Gu9VbR21GDR/EM9iNQFsbY3UWhau8PmeYun3 ZXyXAPU9LvP7R0zTtQ8ryPt1jaXnkbi/k/abeOfyt5jiL+Xv2bjFGWxkxoTtAB+VX7av7bvxu+Af jv4g+Evh/wCFfCsy+GfhlpHiTwlouteEPGXiPxl8S5td8L/FnVvFPj7wbf6Jq1n4fg8JfAa48D+H tQ+IGhajpOqX+radqd1Zyax4Wvta8FtrgBY+Gv8AwUM8S/ELxf8AApNa+Evgbw98OviFqPxF8I6t 8RpfHfi/V9Lu/iB4YtvgjqHh7T/g9dv8I9Ol8cTaxb/EzxPoF9ol7p3hu/8A+E0+HXj7RrHUpbHw Bqmq6wAct4H/AOCoWlfEbwb4e8WL4Q0/4PWp/a0+Hfwd12HxH4hXUJ9a+Hvjjw9o/i3/AITbSIZv COntFdR/28mgeONH1RNH1PwLquh+LItU1FNd0SfQiAfXH7Mv7WN7+0B45+K/gjV/h/YeCLj4fT6h daFfad4yu/Fsfinw7p/xm+N3wVfUb+G88F+ED4d1SbWPgne+JI9Ht5vEUK+GfGHhe5fVvOnkRgD7 MoA86u/iP4XufH+rfBrTNca3+KVv8OofiPFplxoOvTafaeF9V1rVPCuk65NrX9nx+G7pv+Ei0u8t 5tBh1v8At4QW/wBrm0+GwuLe7lAPE9G+KXx00b4y+Bvg7rfw3b4laDc+AtDu/iT8Z/C2l634H8P+ BPFlt4fnk1a/vo/F1rH4U8YaV4w1+3ii0Tw38NvF2veN/BqX8TeKvDR0UjX0AN/9kwxal+zl8Hr2 5tLHzx4Z82PyLG1t4rdzqN6CbWCCJIrbdtUkQJGC3zEZoA+hV03TkKlLCyQpIJUK2sClJR0kUhBt k9HGG96AHNp9g6yK9laOssgmlVraFllmGcSyAoQ8g3Nh2y3zHnk0AfPvw3uGf9of9pS18q2RLWw+ CXlvFawRTyCbwt4hYi4uI41nuRGVxAJ5JBAhZIdisQQD4V+OP/BRXVvgt+0P8cPBWqfCnTPGnwu8 DeBY9M8GeJbfTb3w3f658ftD0Dwn478WfDHWvG2p6hrPh9tGb4b+NLHxDpuunw1otjpep+Htf8OX 2o6jfy2YiAKFv/wVU1JLjwBYW37LnjLVZfFn7OnjD46T6H4S1/UtY8TwXvhbwx8avENp4H8N+Fz8 PtP1HW11+f4OppOk+Mb6Pw94Sv5/G2gTaTqOpmfRbfxOAdx8JP8Agov4t+L3iH4HeFNL+CHg3w/r PxivfinGsniP492Q0yDTPhXrPgO0u9T8JXfh34c+JF8YS+LNL8YatP4Y0q8/4Ra+bWfAnizTb8Qa bY/28QCj4N/4KDa/rngL9nzXviPp/wAOvhf408Z/tJH4MfFnwfpPi3Wtfn8IwWuj+IzcWl1F4j8B 6FPp+rw+ILfQbLxHps1zDJ4btdQ02+/tq9l1aLSQAcn4j/4Kra54X+HfxL8c3/7OizzeALnUdQEG nfEfxRqXh0+DrC5/aP0y11fxZ4i0v4J6hqXhDW/EOu/s4ajo2gaMPCuu6LJe/Ef4dR6p4t0sarO8 IB+tfhfV5/EHhnw7r1zZx6fc63oWkavcWEV0b6Kxn1LT7e9ls471reza8jtpJmhS6Npam4VBKbeA v5agGJ8TvFw+H/w2+IXjxtLGuDwT4H8WeLjorXD2i6uPDeg3+snS2u4rHVJLYagLL7IbiPTdReET eYljdsot5ACL4VeMx8Rvhf8ADf4hLpI0EePPAXg/xmNCW5kvF0UeKPD2na2NJF5LYaVLdDThffYx cyaXpsk4h817CzZjbxgHe0AFABQAUAFABQAUAFABQAUAFABQAUAfy9/8He//AChw8Wf9nDfAv/06 a5QB/lF0Af6Ov/BkJ/ybD+3N/wBl5+Gv/qvtQoA/uDoAKACgAoAKACgAoAKACgDzH41fFTRPgb8I viX8ZPElhf6poHwv8E+I/HWs6bpd94b03Ur/AE3w1pdzqt5aWOoeMNe8L+FbO7nhtnjguPEPiPRN IikZWvtTtIA8ygHoWnXsepafY6jCrJFf2dtexI7wyOkd1Ck6K8ltNcW7sqyAM9vPPCxBaKaRCrsA fnb+0t/wUU8G/sv/ALQOl/Czxp4WuNY8Bp8Ita8e+M/G3hu41bUde8H+L30n4heI/h34FutBTw// AMI3Jd/FLSfhX4107wr/AGh430bWLnxRHoGmQaJd2WtrqdoAQ6X/AMFHvDV74i8HeFLv4OeMLPXP EV9D/ayWnxK/Z71/TNI8P3fi/RfBdt4g0LWdA+Luo6d8SJo9U1eS41Twf8PJ/Efj7RbHS511Pwtb 6nrHhPTPEIB5RpX/AAWL+DGr+BfCvj6L4P8AxrsNK8XePNH8J6dHrekeHNHli0TXPDmh+KrXxfeN eeIlW306y0nxBYprsEmBoOpR3Fpqd1BHNpNzqoB9ifs6ftf+C/2kPiF8ePh34a8MeKPDupfAfxNH 4d1W88R/2Qlt4mSTxX8QfBv9r6AmnanfzyaZ/bHw41spdTpHBLBc2USy/wBqQazpulAHtWu+O4dY i+KXg34UeJPh9r/xp8A+G7a5l8G6zrwlh8M+IfFOi6lqPw7HxF07Q5Z/EWgaD4mlsJLmCc2sV3qG k21/c6UJ2gJAB6aM4GevfHTPfHX+dAGXrepnRdG1bWRp+p6sdK02+1L+ytFtTf6xqRsraW5+waVZ B4zeajeeX9nsrUSIZ7mSOIOpfIAPh39mv9qL4Yz/AAi+BGmx/CX48fCQfECCbSfB3gjXvhF8WvF7 aIkOrJZCXxN408O+FNf0Dw5pVxdX4mttY8a6xoEMlsLq5JSzsp5owD1KD9sP4O3Oj2Gux6X8dfsO peK5fBtskv7Ln7S8GorrUVrZXjy3ekTfCaPVrDQTDqFuI/FV9ZW/hmWdbq2j1ZrmyvIoACXUP2vf hBplj4n1G60z45NbeEfFVr4N1cWn7MH7SWoXUutXi640Uuh2Fj8Kbi+8T6Eo8Pah9o8U+HLfVfDN qZNLW51aJtc0YX4BhfBv4s6B4z/aQ/aK8I6X8Hvin4O1TQNL+Gt3rHxL8W6LqmmeEPiDB/ZV9Dos Xh5NQZFsp9OtLmby4Vt4bnUrf7Tc3sVtNZ+UwB4P8Tf+CgusfCn49fHj4c638JIvEHw1+BXhjw1r niLx14U8Saxc67YXvjTwZaaz4K0rXtL1Pwdp3gvT77xn40vLX4feH9ItfiDfeJZr/VNK16XQl8PN q1/pABZ8Df8ABSXwz8V4PDX/AAqz4L/EHxfe+IvgFqnx7eyfxR8JtDutG03R9T+Ivhi+8J6hpuse P7XXrvxJF40+Hs+gY0XR9T0zyNUt9XfUI7O2uxEAafg7/godofim1/Zjhf4OeN11/wDag0XSp/Cm naB4p+F/i+w0vxWmreGD438G6jrHh3xtf2qav4C+HniOf4za1FMLa5Pw38PeIZUtF8VaTe+GIQD9 GKAPIPjf8BfhP+0d4Jh+HXxn8Kf8Jl4Nt/FPhLxrFo/9u+JPD2zxN4F16y8T+FdT/tDwrrGh6q39 l65p9nffY2vm0++8n7NqNreWkktu4B6/QByPj/xjp/w78B+NviBq1vcXmleBfCPiTxjqdpZ3GlWl 3daf4Z0a91u8t7W717UtG0O1uJ7eykjguNZ1fStKhlZZdR1Kxs1muogCP4deNtO+Jfw+8CfEbSLa 5stJ8f8Ag3wx420uzvbnSLy8tNO8VaJY67ZW13eeH9T1rQbu5gtr+KKe50TWdW0ieVHl03U7+zeG 6lAOyoAKACgAoAKACgAoAKACgAoAKACgAoA/l7/4O9/+UOHiz/s4b4F/+nTXKAP8ougD/R1/4MhP +TYf25v+y8/DX/1X2oUAf3B0AFABQAUAFABQAUAFABQB5f8AG3x34X+F/wAIPib8RvG2i3niTwf4 H8D+JfFPifQLDSU1691nQ9E0q5v9T0210WRXj1Se8tIJYI7GRGS5ZxE4KsaAPRNPuYb2wsby3jaK C7s7a5giePynjhnhSWON4v8AlmyI4Vo/4CCvagD86/2l/wBp5/gV8b7TR/Ef7OWieKPh4Ph3rfxh 8VfFc3/h6fxTb+GPg4+iv4z1vR/Cj2F1rmvy/DrTvHOn39kqTx37xS69FosTSwstwAcHYfty/A7T Pi98FPhR/wAKMtPDcepa38UPC2kWbeH/AA5DrPwm+JHgkfCnxB4gMA0y3m8J2Hh3V/h38WdN8Tjx B4a8RPfavqVtN4Vs7HUNeeSyiAOT8Nf8FIv2QPFHhXw3420T4CeJ5PDt94x1LxLFqMvww8MWcehw QeEdA+IV58XHM7REN/wi+rxanqFxp/neLbK806bTNSs4NVNraygH6VtcaPp1t4zHwS0H4fan4zsf HnhnT/H+l2E+maD5WoanqnhrUvFl14pu9KtXuH8UWHgHxBdeKdOttSja71SeXTIJJY4dTFwAD1CH TdOtr2+1K3sLK31HUxarqV/DawRXuoLYo8Vkt9dIiz3Ys4pZI7UXEkgt0kdItiuwIBdoAKACgAoA KAD+tAHNXPgzwfeya/NeeFPDV3N4rtItP8Uy3OhaXPJ4lsIITbQ2WvvLau2s2kNuzQRW2om5hjhJ iRAhK0AQ6b4D8DaPqNtrGkeDPCmlatZ2k1haappvh3SLHUbWxuJprieytr21s4rmC0mnuLiea3il WGSaeaR0Z5XZgDk0+B3wpg8b+D/iJaeDrLTvFHgHT/E2m+D5NJvNV0jQ9Dh8ZEf8JRc23hDTL+08 ISavrSjyrzXrrQp9bMDPbx6gkEjxsAer0AFABQByPxA8R6R4P8B+NvFviCwn1XQfC3hHxJ4j1vTL WzXUbnUtI0TRr3U9SsLfT3DLfz3lnbTW8NmwK3UkiwEESEUAR/DnxNo3jT4e+BPGPhzT7jSPD3iz wb4Y8TaFpV3Yrpl1pmja9oljqml6fc6agVdPuLKyuoLaaxVVW0kjaAACPFAHZUAFABQAUAFABQAU AFABQAUAFABQAUAfy9/8He//AChw8Wf9nDfAv/06a5QB/lF0Af6Ov/BkJ/ybD+3N/wBl5+Gv/qvt QoA/uDoAKACgAoAKACgAoAKACgDxj9ov4geHPhT8BfjF8TPGHhe28beFvAXw48XeLfEPhC8fSI7X xNpGhaLd6jf6JcP4gzoiQ6lbwPayNqoNgFkJuQYtwIB6vpNzDe6Xpt5bwi2gu9Ps7mC3XyytvDPb xyxwr5P7rESOEHlfu8L8ny4oAz9R8J+FtY1O11vVvDeg6prFjYX+l2Wq6hpNhe6jaaZqsTwanp1t eXMElxDY6jBI8N/aRyLBdxO0dxHIpIoAx7T4ZfDiwt7O0svAPgy0tdPeGWwt7fwxosMNlLBqlvrk EtrGlkq28sWtWdpq0ckQR01K1tr5WFzBFKgB5Hp+jfCf4h6MJ/g74Y+DviPSdD+KviHwZ49+1eFb B7GxuPD2t3XhT4taNaxR6bEv/CU2d5pcmjT+aj2U8lmYJ5J7VI6APoGw0XR9KuNVu9M0nTNNutdv l1TW7mwsLWzuNY1NLO105dR1Wa3ijk1C+XT7GxsVu7tprgWdna2ok8i3iRADToAKACgAoAKACgAo AKACgAoAKACgAoA4T4peJdK8GfDL4jeMNd0iLxBonhTwJ4v8S6xoM7WKwa3pWheH9Q1TUNImbU/+ JasWpWlrNZyNqH+ghJmN3+48ygCH4S+KNJ8cfCr4ZeNdA0aHw5oXi/4feDPFGi+HrdrB7fQdJ8Qe HNN1bTdGgbSv+JY0Ol2d3DYxNp3+gFIFNn/o5joA9BoAKACgAoAKACgAoAKACgAoAKACgAoA/l7/ AODvf/lDh4s/7OG+Bf8A6dNcoA/yi6AP9HX/AIMhP+TYf25v+y8/DX/1X2oUAf3B0AFABQAUAFAB QAUAFABQB4/+0F8U7L4H/A34ufGPUtCXxPYfDD4eeLPHN54dbUrLR11y28NaNd6rNpbatqUU2n6c L1LY25vLyGW2t9/mSxuilSAepaXerqWmadqKR+Sl/Y2l6sO9ZPKW6t451j8xPkfYJNu9PlbG5eCK AL1AHj3hD4h2/wAZdD+FvxO+C/i/w5r3wn8QX+t3+uancaTrK3nibw5BpPiPR7GPww14umT6TfWf jm20ue+n1XT5Y7jSLDUrWCFZbq2ukAPXYoYoQywxRxB5JJnESLGHllYvLKwUANJK5LyOcs7EsxJJ NAElABQAUAFABQAUAFABQAUAFABQAUAFABQBxHxN8YW/w9+G/wAQfH13pw1e18D+CPFfjC50k3Vv YjVLfw1oN/rU2nG+u0ktbMXsdk1sbq5R7e383zpkaNGBAIfhX41t/iT8MPhx8RbPTRo1p4+8BeD/ ABra6OLy21AaVb+KfD2na5Bpov7NI7S+FjFfrai8tY0trnyvOgRYnUAA72gAoAKACgAoAKACgAoA KACgAoAKACgD+Xv/AIO9/wDlDh4s/wCzhvgX/wCnTXKAP8ougD/R1/4MhP8Ak2H9ub/svPw1/wDV fahQB/cHQAUAFABQAUAFABQAUAFAHmXxo+KPh74I/CT4k/GHxbY6lqfhf4ZeCvEfjjxBp2jNoa6t e6R4a0u51W/tdNbxNrPh3w8L2a2tpI7b+2te0fTfNZftmo2kO+ZQCr8U/izp/wAKvg94r+M114Y8 VeLNE8HeE38a6n4e8IQ6Jd+KJvD9pBFf6tc2FvquuaRo9zJo2kNdavewjWkaaz0+6TTTfXjWtrcg HM/CL4xav8cdI8B/EjwT4YXTvhB4s0/4jTPq/ii/sV8T6suieJ9L0X4beK/Btp4c1DxBoWr/AA/+ I2jW3ijxdpetXesWmozeHZ/Bl/HpkR1m8gsgD3tESNQiKqKOiooVRk5OAMAckn6mgB1ABQAUAFAB QAUAFABQAUAFABQAUAFABQAUAcl4+8X6Z8PvAvjXx9rdvd3ejeCPCXiPxfq9rYHTxfXWmeGtHvNa v7ezbV7/AErShdzWtlLHbnU9U07TxMyG9v7O2824jAI/h54z0r4j+APA3xD0K2vLPQ/Hng7wz4z0 a01A6cb+10rxRotlrmnW18dH1DVtIN5BaX0MVydL1XU9OMyubHUL228q5kAOxoAKACgAoAKACgAo AKACgAoAKACgAoA/l7/4O9/+UOHiz/s4b4F/+nTXKAP8ougD/R1/4MhP+TYf25v+y8/DX/1X2oUA f3B0AFABQAUAFABQAUAFAHiH7Qnx68J/s3/Di4+JvjPS/Fms6NB4g8LeHfsPgzwzrPivWGvPFWvW OhWs7afotpeTw2VrJe/aLm6nWOHEa2kTyX93Z21wAcD4x/an/Zuu/C3xp0/WtZtvG9v8LPhxrvjL 4s/DhPCWqeIdei8G2emR3Gr6fqXgq80p59VuZ7W8isrjw7JZz3U09z9hntPM8yNQDp/EH7TX7Pnh zWte8BeJvH3h/Stc8PeCW8Y+I/C+pWt2s2l+DDo1tqst7f2ZsngFmuj3tvLNa/O4hl8pochkABh6 H+1f+zFDB4F8N+FfH/h54/E3hO71f4deGPDGj6nLJq3hbwx/bumPB4X0LSdKZ3hsD4S1nTbDSLG1 WZm0v7HY2jkwRuAdv+z38dfC37R/wq8O/FvwbpfirRtC8R/a1g07xl4c1XwvrdvLZztBMJdO1e2t pZYWYBory18+ynyyRXDvFKqAHtdABQAUAFABQAUAFABQAUAFABQAUAFABQB8k3P7anwT0bxv8bfB vi688TeCYfgPL4Qh8X+LfFfg/wAT6R4Pu5vGTpBpseh6/caULHVG+2zQ2yfZZZPtqyG9sDdWEU1y gBt3P7VP7OXiGDxf4et/Gmj+MrnSPhVqXxO8QeD7DSr7XL/VPhw3hW28TXF1HorWEiaxBqvhzVbK SLSlSefUE1GK0+zO8rRUALpX7Uv7OmkweBfDQ8X6T4Ou/EXwn0v4neFvBV9pF7oOoab8Nh4SvPFF rO+hrYRJosOk+GtGv3l0h47efTk0yaz+yo8SxUAc+v7bPwO1LxN8EfD3hLUPEvju1+O/ifxH4U8K +KPB/g7xRrfhbTtS8M6Pquq358Qa3a6U1lpUayaU9nJ9okV7UTpqN4sGlRXN9CAc3+13+2po/wCy T4g+Emm694A17xhpHxJPiq61XWNCv7CGTwlo/hHV/AGl6pqlzY3hT7VBDF49h1Oe4lubDTrOw0i/ e91C3ke1ScA8p8Rf8FQ/g7p2o+DU0Dwj498SaV4l19Y7iaLRLqy1mbwDqPw++OPjfw58TvC+jTQv /bnh7VZvgJ4006503Ub3QPEum28drqUujSrqGlW2ogH6L+F/Eui+M/DXh3xh4cvBqPh7xXoWkeJd B1ART24v9F12wt9U0u8EF1HDcwi6sbqCcRXEMU8e/ZLGkgZQAbtABQAUAFABQAUAFABQAUAfy9/8 He//AChw8Wf9nDfAv/06a5QB/lF0Af6Ov/BkJ/ybD+3N/wBl5+Gv/qvtQoA/uDoAKACgAoAKACgA oAKAK13Z2l/A1rfWtte2zvFI9vdwRXMDSW80dxA7RTK8bPDcRRTxMVJjmjjlQh0VgAZnibwz4c8a eHta8JeL9B0fxR4W8SaZeaL4h8OeINNtNY0PXNI1CB7a/wBL1bStQhuLLULC9t5JILq0uoZYJ4nZ JEZWIoA2IYYreKK3gijgggjSGGGJFjihiiUJHFFGgCRxxooREUBVUBVAAoAkoArWdnZ6fbRWdha2 1jZ267ILSzgitraFCxYrFBCqRRruZm2ooG4k4yTQBZoAKACgAoAKACgAoAKACgAoAKACgAoAKAK0 dnaQ3Fzdw2ttFd3vk/bLqOCJLi7+zI0dv9pmVRJP9njZkh81n8pGZU2qSKAINX0nS9f0rU9C1zTb HWdE1rT73SdY0jVLSC/0zVdL1K2ls9Q03UbG6SW2vbG+tJpra7tLiOSC4t5ZIZkeN2UgDdG0fSfD ukaV4f0DTLDRNC0LTbHR9F0bSrSDT9L0jSdMtYrLTtM02wtY4rWysLCzghtbO0too4La3ijhhjSN FUAFqaztLia1uZ7W3nuLGSWWyuJoIpJrOWaCS2mltZXVpLeSW2mlt5XiZGkglkiYmN2UgHDeNPhP 8MPiPf8Ah/VfiB8PvB3jXUfCktzN4avPFPh3S9dn0KS9msLi8bS5NStrk2f2ufStMmuVh2rPLp9l JKHa1hKAHGal+zB+zjrEF/bar8CfhJqVvqniA+K9RgvvAHhi5ivPEht9RtDrc6Taa6vqJtdY1m3+ 043+TrWsx52atqIuQD2+CCG2hhtraGK3t7eKOCCCCNIoYIYkEcUMMUYVI4o0VUjjRVREAVQAAKAJ aACgAoAKACgAoAKACgAoA/l7/wCDvf8A5Q4eLP8As4b4F/8Ap01ygD/KLoA/0df+DIT/AJNh/bm/ 7Lz8Nf8A1X2oUAf3B0AFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAF ABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAfy9/wDB3v8A8ocPFn/Zw3wL/wDTprlAH+UX QB/o6/8ABkJ/ybD+3N/2Xn4a/wDqvtQoA/uDoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKAC gAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoA/l7/AODvf/lDh4s/ 7OG+Bf8A6dNcoA/yi6AP9HX/AIMhP+TYf25v+y8/DX/1X2oUAf3B0AFABQAUAFABQAUAFABQAUAF ABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUAFABQAUA fy9/8He//KHDxZ/2cN8C/wD06a5QB/lF0Af6Ov8AwZCf8mw/tzf9l5+Gv/qvtQoA/uDoAKACgAoA KACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAoAKACgAo AKACgAoAKACgAoA/l7/4O9/+UOHiz/s4b4F/+nTXKAP8ougD+oj/AIID/wDBfD4Nf8EfPhJ+0D8O vib8Bfib8X9Q+MnxG8LeNdM1LwJ4g8K6PZ6PZ+H/AAzcaHLZX8XiBknmuZ55zPHJbkxCIbWAccgH 7+f8Ru/7Jv8A0ZN+0R/4XPw2/wDj1AB/xG7/ALJv/Rk37RH/AIXPw2/+PUAH/Ebv+yb/ANGTftEf +Fz8Nv8A49QAf8Ru/wCyb/0ZN+0R/wCFz8Nv/j1AB/xG7/sm/wDRk37RH/hc/Db/AOPUAH/Ebv8A sm/9GTftEf8Ahc/Db/49QAf8Ru/7Jv8A0ZN+0R/4XPw2/wDj1AB/xG7/ALJv/Rk37RH/AIXPw2/+ PUAH/Ebv+yb/ANGTftEf+Fz8Nv8A49QAf8Ru/wCyb/0ZN+0R/wCFz8Nv/j1AB/xG7/sm/wDRk37R H/hc/Db/AOPUAH/Ebv8Asm/9GTftEf8Ahc/Db/49QAf8Ru/7Jv8A0ZN+0R/4XPw2/wDj1AB/xG7/ ALJv/Rk37RH/AIXPw2/+PUAH/Ebv+yb/ANGTftEf+Fz8Nv8A49QAf8Ru/wCyb/0ZN+0R/wCFz8Nv /j1AB/xG7/sm/wDRk37RH/hc/Db/AOPUAH/Ebv8Asm/9GTftEf8Ahc/Db/49QAf8Ru/7Jv8A0ZN+ 0R/4XPw2/wDj1AB/xG7/ALJv/Rk37RH/AIXPw2/+PUAH/Ebv+yb/ANGTftEf+Fz8Nv8A49QAf8Ru /wCyb/0ZN+0R/wCFz8Nv/j1AB/xG7/sm/wDRk37RH/hc/Db/AOPUAH/Ebv8Asm/9GTftEf8Ahc/D b/49QAf8Ru/7Jv8A0ZN+0R/4XPw2/wDj1AB/xG7/ALJv/Rk37RH/AIXPw2/+PUAH/Ebv+yb/ANGT ftEf+Fz8Nv8A49QAf8Ru/wCyb/0ZN+0R/wCFz8Nv/j1AB/xG7/sm/wDRk37RH/hc/Db/AOPUAH/E bv8Asm/9GTftEf8Ahc/Db/49QAf8Ru/7Jv8A0ZN+0R/4XPw2/wDj1AB/xG7/ALJv/Rk37RH/AIXP w2/+PUAH/Ebv+yb/ANGTftEf+Fz8Nv8A49QAf8Ru/wCyb/0ZN+0R/wCFz8Nv/j1AB/xG7/sm/wDR k37RH/hc/Db/AOPUAH/Ebv8Asm/9GTftEf8Ahc/Db/49QAf8Ru/7Jv8A0ZN+0R/4XPw2/wDj1AB/ xG7/ALJv/Rk37RH/AIXPw2/+PUAH/Ebv+yb/ANGTftEf+Fz8Nv8A49QAf8Ru/wCyb/0ZN+0R/wCF z8Nv/j1AB/xG7/sm/wDRk37RH/hc/Db/AOPUAH/Ebv8Asm/9GTftEf8Ahc/Db/49QAf8Ru/7Jv8A 0ZN+0R/4XPw2/wDj1AH5J/8ABa3/AIOX/gJ/wVK/Yd1r9lL4ffs1fF74X+JNT+Jfw98dQ+K/GXij wZqmiRWvgy9vrm7sZLTRHe/a4vUvAlu6gRo6lpDjggH8c9AH/9kAUEsDBBQABgAIAAAAIQDE4nIf rQMAAJAIAAARAAAAd29yZC9zZXR0aW5ncy54bWycVttu4zYQfS/QfxD0XMfyTUmEOAvf1AU2WRhR tn2mpLFFmDeQtBXv13coiVWy8aaLPpk8M3M4nBke+e7TC2fBCbShUszD0VUUBiAKWVKxn4ffntPB TRgYS0RJmBQwD89gwk/3v/92VycGrEU3EyCFMImch0ctElNUwIkZcFpoaeTODgrJE7nb0QK6n7CL 0POwslYlw2EXdCUVCGTbSc2JNVdS74dt5FoWRw7CDsdRFA81MGIxYVNRZTwb/79seFTlSU4fXeLE mferR9FHnt11a6nLfyN+JT0XoLQswBisLGftdTmhwtMY9is8bT0faK6JPr8iuce2fZeSB3WiQBdY UOx5FIVDZwCeQ5mdjQWeSmFNA2I2cpdZYgFjjALGmskoGBDMqU72mnBOsJMt0sSU8qu0z5oUh0d5 gpanhB05MvtM8sxKhYEngje5Hndnl5rUSPynpuVnqel3PJ+wTJECQe88id87/wXa0uIDV2oUI+ee c90ftMGxP3tyT936e9r/8C4qgre0oLtMV5i2lsxzNnVYSa409rOtsSEn2Go4Uai3tLBHDU3F8Iko Yl0TmpjF0codtUhnrMbmQ4l1Y10l8ULUbvdLDeSwEOUWU3gk+tBX3iW/YHQvVtitv6mtMtUbm7BX xKnEMWjpG6ejgYUw9AtogaXfEqrb/hUE33W5kmxJGBGFS3tYJ33eKCClcRdwiycprS9CFE1upzeT TXt/Z+0t0Wi8nE0vWq6ny83qoiWdbW7jS5bx9SiddX18e87PM1gs4zS+mNt6EcWz9NI5m0l8e3Mx g81ytk6Xl2LSOIpGE2fBqnW14olTnq2+v2tX7tEFvH0Yz5SDCb5CHTxJji8NA3mS68OSCu+SA8ok vLZkx9wbB4PWYDhhLMUh9QZUptZS4qSvYfcOZzhM+/6Upp480RfRWhP1RPeVbdKjwj5Q7gnNMc+O qj1LoApdNA37GtSJxQ8HuCI8kP7Rgxh8yxwLDhvTmfu4wCNRqtWFfD+ahzjqlR05MbK4K/EtNJt8 P+5s48aGO2drNqRw2ofe3cI5tEv06hY9NvHYpMemHpv22Mxjsx6LPRY7rDqj7KKCHlDE/dLhO8mY rKH87MF5+A5qi2AqogD75sQU35tMGqBTVxOcEnhBTYeSWvxuK1py8uIkftzMa+eNgiiP9o2vY3LO 6g0alMQSDHdHD98EN3P8Qy4oXlBQHLjszPNeBa/axBk1NgOFamWlxis3+v9Hw9z/lbj/BwAA//8D AFBLAwQUAAYACAAAACEAATYS+HgBAAAfBwAAEgAAAHdvcmQvZm9udFRhYmxlLnhtbNxUy27CMBC8 V+o/RL6XmKcqREAtFeqph4p+wGI2xJIfkdeQ8vddMKAiitRzHEXRztqzq8l4J7Nva7IdBtLeFaLb kSJDp/xau00hvpaLp2eRUQS3BuMdFmKPJGbTx4dJMy69i5TxeUfjUIgqxnqc56QqtEAdX6PjXOmD hchh2OS+LLXCN6+2Fl3Me1KO8oAGItemStckTmzNf9gaH9Z18AqJuFlrEp8F7cT01F3WjB1Y7noO dhU0HBM1OE/Y5dwOTCFkTw7kUPb5HcgRfzkW+YFBVRAI42WjTHAJVpv9GYVt9AmvdVTVGd4Bl1sZ TCnSG05saSW5Xlp9kZDuBWHlj3t6N0j/GlG/ebqHU4z85uHu8/R7boRYaouUfWCTfXoLSalbQXpH IQ6CDFmOfpsFmftt0BjuOEOyAFervc54YcOaOzK8sh8G7ITz0+IL8o5mh1Grv2fFlRdS0F5HzMFo npp3PLE4zoaDIwatG5qn6UnTHwAAAP//AwBQSwMEFAAGAAgAAAAhAGJBPhBGAQAAtQIAABQAAAB3 b3JkL3dlYlNldHRpbmdzLnhtbJRSTU/DMAy9I/EfqtxZyqYBq9ZOTNO4oAmx8QPSxl0jJXGVZC3j 1+O1A8bHgZ3i+D07z8+Zzl6NjhpwXqFN2fUgZhHYAqWy25S9bJZXdyzyQVgpNFpI2R48m2WXF9M2 aSFfQwjE9BF1sT5xKatCqBPOfVGBEX6ANVjCSnRGBLq6LceyVAUssNgZsIEP4/iGO9AikAJfqdqz Y7f2P91adLJ2WID3JMTovp8RyrKMNErV+OMZtYmSNOJoPJpMhrfjUUfIUe4XqiGwEZpQxg90I9wj lOEjG39mn9W2+iO9wfo3d44hoPmRJ0Fz6Q5vhK8aS9YyIvq3lNECKKhFQWZ3cYEayVixC9jL0CfK zqvMvyk6r9adTn5OKe+20A3dh9m0P7vFCK2xfVo9dLZLXGFYiwbu/Zq2qWGpNBBC/JPPlr0DAAD/ /wMAUEsDBBQABgAIAAAAIQAttfdPbwEAAMcCAAARAAgBZG9jUHJvcHMvY29yZS54bWwgogQBKKAA AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACMUtFKwzAUfRf8h5L3LskGTsragcrwwYHgRPEt JnddXJuUJFvt33vbbt0mPgh9yMk5OZx7bmfz77KI9uC8tiYlfMRIBEZapU2ektfVIr4lkQ/CKFFY AylpwJN5dn01k1UirYNnZytwQYOP0Mn4RFYp2YRQJZR6uYFS+BEqDJJr60oRELqcVkJuRQ50zNgN LSEIJYKgrWFcDY7kYKnkYFntXNEZKEmhgBJM8JSPOD1pA7jS//mgY86UpQ5NhTMd4p57K9mTg/rb 60FY1/WonnQxMD+n78unl27UWJu2KwkkmymZBB0KyGb0dMST331+gQz99QCQkA5EsK4nBoA1b6Gp rVMemQuEoBA+LHFZaw3qrskehTG4iBUWb9dgdN69+CVqN+dgr9uNZ5NOMUBM3ZXUhwEV4dhJX9KR eZvcP6wWJBszzmLO8VuxacJZwthHO+rF+7aG/qI8pPyfI0fH6aXj0aBv4fLXy34AAAD//wMAUEsD BBQABgAIAAAAIQB1kKuuPgIAAJsFAAAPAAAAd29yZC9zdHlsZXMueG1slFTvb9owEP0+af9D5O80 AVVsQg0VbYWK1CEmQP1snAux5tiZz5Syv35n50dhLWz7lNy7y7vndxff3L6WKnoBi9LolPWvEhaB FiaTepuy9Wra+8oidFxnXBkNKTsAstvx5083+xG6gwKMiEDjyKascK4axTGKAkqOV6YCTbnc2JI7 Cu02NnkuBTwYsStBu3iQJMPYguKOmmMhK2QN2/5f2PbGZpU1AhBJbalqvpJLzcYkLzPiAXK+Uw59 aBe2CZsoPKZGO4z2I45CyhUJpyOWUhv7ONEoGWWAo5ug5B8mC1/1YUagO2K7k5lkse+Iv4jzhauU Da5b5N4rOMEU19sWA91bL4+VpKyDNsSbMm57y4kni8Mx2+fRcavu8HXVH97QBGgey3qe5BzkT0b8 gGzpKJEy2okArmcLK42V7vCGLaGUjzLLgLanq9OFzOC5AL1GyN7w79OwCw0gzE47suHLsPHBt6dG 7lBRz4pbvrW8Kprefo60nz4Kezcj3rmnU2HYmpf+22BiAwe7f9YtwzvteNbWJMmgP7ye3DWuBcow nhMRoiAVwoG9IKJxedHq9Rv1TlJTFHVVUSgLsrBzMIS7E/MIoqGekef4RsEFaSufv2hSFEoa//+i Yz86NtNt1MJ6x+hlpr2v9M+GBajnl73ympby96DUN15Xm+p8qYLc1dl+QtdOuwod1cY4Z8rz31u5 LS4QkJHHYurQH+K8w3pXbsDS7XLB5bl5kvh+5HMTBfw/Z9xqwfFvAAAA//8DAFBLAwQUAAYACAAA ACEAPXCB4KoBAAACAwAAEAAIAWRvY1Byb3BzL2FwcC54bWwgogQBKKAAAQAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAACcktFP2zAQxt8n7X+w8t46LSsMdDVCLdOQBlRLgGfLuSRWE9uyD0b/+10o LZn2Rp7uvnM+f/7ZcPnad+IFY7LeLbPZNM8EOuMr65pl9lD+mHzPRCLtKt15h8tshym7VF+/wCb6 gJEsJsEWLi2zlihcSJlMi71OUx47ntQ+9pq4jY30dW0Nrr157tGRnOf5qcRXQldhNQlHw2zvePFC nzWtvBnypcdyFziwghL70GlCdTfE6aaVpx7kUYXSk+5K26NanLJ+7GCjG0zqG8h9AU8+VkktznKQ +xJWrY7aECNUJ/MF6yMBrkLorNHEdNWtNdEnX5O41cY68qkVgwfI8SpgPAWa52hpp9ht3MIv6zjN /AzkvuJ4UTdRhzYpzj3qoDC6wxVDULXuEoL8EGDl+6DdjmFsrRaFRb6OJO6Q/vi4TWIiVvf34ne5 ETfX4sbx0RySKNbXfLb3P4ck2/QQSr8eqL5v8a84IvNkqS2CNhz+5Px8NmY0GkHBKLHiEx8MPwT4 yTcZu2FX5usarA5r/h8M1B/3T1rN5tOcvzfGB41BHd+a+gsAAP//AwBQSwECLQAUAAYACAAAACEA 5F7URXUBAABUBQAAEwAAAAAAAAAAAAAAAAAAAAAAW0NvbnRlbnRfVHlwZXNdLnhtbFBLAQItABQA BgAIAAAAIQDHwie8DAEAAN8CAAALAAAAAAAAAAAAAAAAAK4DAABfcmVscy8ucmVsc1BLAQItABQA BgAIAAAAIQATqj6H+wAAADEDAAAcAAAAAAAAAAAAAAAAAOsGAAB3b3JkL19yZWxzL2RvY3VtZW50 LnhtbC5yZWxzUEsBAi0AFAAGAAgAAAAhAPJO7ef7EgAAW+cAABEAAAAAAAAAAAAAAAAAKAkAAHdv cmQvZG9jdW1lbnQueG1sUEsBAi0AFAAGAAgAAAAhAJ1ci74QBwAAhx0AABUAAAAAAAAAAAAAAAAA UhwAAHdvcmQvdGhlbWUvdGhlbWUxLnhtbFBLAQItAAoAAAAAAAAAIQBfEC9WbN4AAGzeAAAXAAAA AAAAAAAAAAAAAJUjAABkb2NQcm9wcy90aHVtYm5haWwuanBlZ1BLAQItABQABgAIAAAAIQDE4nIf rQMAAJAIAAARAAAAAAAAAAAAAAAAADYCAQB3b3JkL3NldHRpbmdzLnhtbFBLAQItABQABgAIAAAA IQABNhL4eAEAAB8HAAASAAAAAAAAAAAAAAAAABIGAQB3b3JkL2ZvbnRUYWJsZS54bWxQSwECLQAU AAYACAAAACEAYkE+EEYBAAC1AgAAFAAAAAAAAAAAAAAAAAC6BwEAd29yZC93ZWJTZXR0aW5ncy54 bWxQSwECLQAUAAYACAAAACEALbX3T28BAADHAgAAEQAAAAAAAAAAAAAAAAAyCQEAZG9jUHJvcHMv Y29yZS54bWxQSwECLQAUAAYACAAAACEAdZCrrj4CAACbBQAADwAAAAAAAAAAAAAAAADYCwEAd29y ZC9zdHlsZXMueG1sUEsBAi0AFAAGAAgAAAAhAD1wgeCqAQAAAgMAABAAAAAAAAAAAAAAAAAAQw4B AGRvY1Byb3BzL2FwcC54bWxQSwUGAAAAAAwADAAGAwAAIxEBAAAA --Apple-Mail-8--217996627-- From Hannes.Tschofenig@gmx.net Thu Nov 11 03:29:32 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6818C3A6962 for ; Thu, 11 Nov 2010 03:29:32 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.49 X-Spam-Level: X-Spam-Status: No, score=-102.49 tagged_above=-999 required=5 tests=[AWL=0.109, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id g4r-ZXxAeme6 for ; Thu, 11 Nov 2010 03:29:31 -0800 (PST) Received: from mail.gmx.net (mailout-de.gmx.net [213.165.64.23]) by core3.amsl.com (Postfix) with SMTP id EA35F3A6961 for ; Thu, 11 Nov 2010 03:29:30 -0800 (PST) Received: (qmail invoked by alias); 11 Nov 2010 11:29:59 -0000 Received: from dhcp-7730.meeting.ietf.org (EHLO dhcp-7730.meeting.ietf.org) [130.129.119.48] by mail.gmx.net (mp055) with SMTP; 11 Nov 2010 12:29:59 +0100 X-Authenticated: #29516787 X-Provags-ID: V01U2FsdGVkX19GwlwqQjxGTrfQIiLDaRsI+EMvNvArmpVYNLPpCa ylrfOAwfkRbhbR From: Hannes Tschofenig Content-Type: text/plain Content-Transfer-Encoding: 7bit Date: Thu, 11 Nov 2010 19:29:45 +0800 Message-Id: To: oauth@ietf.org Mime-Version: 1.0 (Apple Message framework v1081) X-Mailer: Apple Mail (2.1081) X-Y-GMX-Trusted: 0 Cc: Hannes Tschofenig Subject: [OAUTH-WG] We are in the Jade 2 room right now. X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 11:29:33 -0000 From AMair@mgtplc.com Thu Nov 11 04:21:57 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 96D713A6A6E for ; Thu, 11 Nov 2010 04:21:55 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.162 X-Spam-Level: X-Spam-Status: No, score=-0.162 tagged_above=-999 required=5 tests=[BAYES_05=-1.11, SARE_UNSUB22=0.948] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 6jj9NZ7bQb3K for ; Thu, 11 Nov 2010 04:21:48 -0800 (PST) Received: from mta0.mgtplc.com (mta0.mgtplc.com [80.195.74.37]) by core3.amsl.com (Postfix) with ESMTP id 319F23A6A3F for ; Thu, 11 Nov 2010 04:21:48 -0800 (PST) Received: from cetus.iona.mgtlimited.com (cetus.iona.mgtlimited.com [192.168.102.77]) by mta0.mgtplc.com (8.13.8+Sun/8.13.8) with ESMTP id oABCM552014630 for ; Thu, 11 Nov 2010 12:22:05 GMT Received: from mgt_dom-MTA by cetus.iona.mgtlimited.com with Novell_GroupWise; Thu, 11 Nov 2010 12:22:05 +0000 Message-Id: <4CDBDFEC020000500002793C@cetus.iona.mgtlimited.com> X-Mailer: Novell GroupWise Internet Agent 8.0.0 Date: Thu, 11 Nov 2010 12:22:04 +0000 From: "Alastair Mair" To: Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Content-Disposition: inline X-MGt-MailScanner-Information: Please contact the ISP for more information X-MGt-MailScanner-ID: oABCM552014630 X-MGt-MailScanner: Found to be clean X-MGt-MailScanner-From: amair@mgtplc.com Subject: [OAUTH-WG] Definition of resource owner versus end-user X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 12:23:15 -0000 In the current draft spec section 1.2 on terminology the definition of reso= urce owner is "An entity capable of granting access to a protected resource= " and end user is "A human resource owner" In section 4.1.2 "Resource owner Password credentials" it talks of supplyin= g the resource owner's username and password. However the text below talks = of the server validating the end-user credentials which is slightly confusi= ng. I note that the initial draft (draft 1) defined resource owner as "an entit= y (generally an end-user)..." So, is the intention that resource owner and = end-user are effectively synonymous? --=20 Please consider the environment before printing this email ********************************************************************* This e-mail and any attachments are confidential. If it is not for you, pl= ease inform us and delete it immediately without disclosing, copying, or di= stributing it. If the content is not about the business of the MGt Group or its clients, t= hen it is neither from nor sanctioned by the MGt Group. Use of this or any= other MGt Group e-mail facility signifies consent to interception by the M= Gt Group. The views expressed in this email or any attachments may not refl= ect the views and opinions of the MGt Group. This message has been scanned for viruses and dangerous content by MailScan= ner, but the MGt Group accepts no liability for any damage caused by the tr= ansmission of any viruses. MGt plc is a public limited company registered in Scotland (SC175703) with = its registered office at Cluny Court, John Smith Business Park, Kirkcaldy, = Fife, KY2 6QJ. ********************************************************************** --=20 This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From mark.mcgloin@ie.ibm.com Thu Nov 11 05:51:09 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 76F2B3A689B; Thu, 11 Nov 2010 05:51:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ylaE3NJOlWVs; Thu, 11 Nov 2010 05:51:08 -0800 (PST) Received: from mtagate6.uk.ibm.com (mtagate6.uk.ibm.com [194.196.100.166]) by core3.amsl.com (Postfix) with ESMTP id 21C783A68EE; Thu, 11 Nov 2010 05:51:07 -0800 (PST) Received: from d06nrmr1806.portsmouth.uk.ibm.com (d06nrmr1806.portsmouth.uk.ibm.com [9.149.39.193]) by mtagate6.uk.ibm.com (8.13.1/8.13.1) with ESMTP id oABDpaq3016025; Thu, 11 Nov 2010 13:51:36 GMT Received: from d06av04.portsmouth.uk.ibm.com (d06av04.portsmouth.uk.ibm.com [9.149.37.216]) by d06nrmr1806.portsmouth.uk.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id oABDpV7a2531444; Thu, 11 Nov 2010 13:51:38 GMT Received: from d06av04.portsmouth.uk.ibm.com (loopback [127.0.0.1]) by d06av04.portsmouth.uk.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id oABDpTG7023749; Thu, 11 Nov 2010 06:51:29 -0700 Received: from d06ml093.portsmouth.uk.ibm.com (d06ml093.portsmouth.uk.ibm.com [9.149.104.171]) by d06av04.portsmouth.uk.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id oABDpTRu023744; Thu, 11 Nov 2010 06:51:29 -0700 In-Reply-To: <52875D50-2EB8-4D87-BD1A-5CA9D1320023@gmx.net> References: <52875D50-2EB8-4D87-BD1A-5CA9D1320023@gmx.net> X-KeepSent: E24A327E:BFDE1048-802577D8:004B5034; type=4; name=$KeepSent To: Hannes Tschofenig X-Mailer: Lotus Notes Release 8.5.1 September 28, 2009 Message-ID: From: Mark Mcgloin Date: Thu, 11 Nov 2010 13:50:54 +0000 X-MIMETrack: Serialize by Router on D06ML093/06/M/IBM(Release 8.0.2FP6|July 15, 2010) at 11/11/2010 13:50:56 MIME-Version: 1.0 Content-type: text/plain; charset=US-ASCII Cc: Hannes Tschofenig , oauth@ietf.org, oauth-bounces@ietf.org Subject: Re: [OAUTH-WG] Security Considerations Suggestion X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 11 Nov 2010 13:51:09 -0000 Hannes Can you provide some context for this? How was that doc produced and what was the input - I don't understand some of the format and it seems to duplicate content from the core oauth spec. Also, is the intention to have a separate security considerations doc just like saml? http://docs.oasis-open.org/security/saml/v2.0/saml-sec-consider-2.0-os.pdf Torsten and I have have spent a good bit of time trawling through all the security considerations, taking input from other docs like wrap and feedback from this forum to create the content for our doc -the first version was very rough as we just wanted to add something before China. Based on feedback from people like Richard Barnes and Anthony Nadalin, we intend to rework it but I just wanted to make sure I am not duplicating effort Regards Mark McGloin oauth-bounces@ietf.org wrote on 11/11/2010 11:18:52: > Hannes Tschofenig > Sent by: oauth-bounces@ietf.org > > 11/11/2010 11:18 > > To > > oauth@ietf.org > > cc > > Hannes Tschofenig > > Subject > > [OAUTH-WG] Security Considerations Suggestion > > [attachment "OAuth_v2_security_proposal.docx" deleted by Mark > Mcgloin/Ireland/IBM] > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From igor.faynberg@alcatel-lucent.com Thu Nov 11 21:07:06 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id DCC513A6984 for ; Thu, 11 Nov 2010 21:07:06 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id odj5jREwtW9A for ; Thu, 11 Nov 2010 21:07:06 -0800 (PST) Received: from ihemail2.lucent.com (ihemail2.lucent.com [135.245.0.35]) by core3.amsl.com (Postfix) with ESMTP id 41BE23A69B2 for ; Thu, 11 Nov 2010 21:06:58 -0800 (PST) Received: from umail.lucent.com (h135-3-40-63.lucent.com [135.3.40.63]) by ihemail2.lucent.com (8.13.8/IER-o) with ESMTP id oAC57T7U015139 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Thu, 11 Nov 2010 23:07:29 -0600 (CST) Received: from [135.244.80.14] (faynberg.lra.lucent.com [135.244.80.14]) by umail.lucent.com (8.13.8/TPES) with ESMTP id oAC57QYl013334; Thu, 11 Nov 2010 23:07:27 -0600 (CST) Message-ID: <4CDCCB8C.6030807@alcatel-lucent.com> Date: Fri, 12 Nov 2010 00:07:24 -0500 From: Igor Faynberg Organization: Alcatel-Lucent User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: Alastair Mair References: <4CDBDFEC020000500002793C@cetus.iona.mgtlimited.com> In-Reply-To: <4CDBDFEC020000500002793C@cetus.iona.mgtlimited.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Scanned-By: MIMEDefang 2.57 on 135.245.2.35 Cc: oauth@ietf.org Subject: Re: [OAUTH-WG] Definition of resource owner versus end-user X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: igor.faynberg@alcatel-lucent.com List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Nov 2010 05:07:07 -0000 Alastair, My (strong) opinion is that the terms "resource owner" and "end user" are not interchangeable. In the interest of extensibility, we should foresee a situation that will involve more than one end users, of which some may not necessarily be resource owners. In fact, I would prefer not define end user as a "human resource owner." But given that end user is defined so, it implies that there are non-human resource owners, and so end users, as defined, form a subset of resource owners. I think that it is the common understanding that there ought to be non-human resource owners. For instance, a process can create and, subsequently, grant access to its resources. (I think this will be the standard practice in cloud computing.) Igor Alastair Mair wrote: > In the current draft spec section 1.2 on terminology the definition of resource owner is "An entity capable of granting access to a protected resource" and end user is "A human resource owner" > > In section 4.1.2 "Resource owner Password credentials" it talks of supplying the resource owner's username and password. However the text below talks of the server validating the end-user credentials which is slightly confusing. > > I note that the initial draft (draft 1) defined resource owner as "an entity (generally an end-user)..." So, is the intention that resource owner and end-user are effectively synonymous? > > From eran@hueniverse.com Thu Nov 11 22:29:40 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1A8963A6AB5 for ; Thu, 11 Nov 2010 22:29:40 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CqTUX5UL+3bo for ; Thu, 11 Nov 2010 22:29:33 -0800 (PST) Received: from p3plex1out02.prod.phx3.secureserver.net (p3plex1out02.prod.phx3.secureserver.net [72.167.180.18]) by core3.amsl.com (Postfix) with SMTP id 40C9F3A67DF for ; Thu, 11 Nov 2010 22:29:32 -0800 (PST) Received: (qmail 4315 invoked from network); 12 Nov 2010 06:30:04 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.20) by p3plex1out02.prod.phx3.secureserver.net with SMTP; 12 Nov 2010 06:30:04 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT002.EX1.SECURESERVER.NET ([72.167.180.20]) with mapi; Thu, 11 Nov 2010 23:30:04 -0700 From: Eran Hammer-Lahav To: "Manger, James H" Date: Thu, 11 Nov 2010 23:30:05 -0700 Thread-Topic: [OAUTH-WG] Call for Consensus on Document Split Thread-Index: ActrN3SADdtlmDJIRsyK9ERucPk/wgAuEXqQAAys2oAAACbDIAABCygQBYLpqRA= Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D470CBF28@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <255B9BB34FB7D647A506DC292726F6E1127056337B@WSMSG3153V.srv.dir.telstra.com> <90C41DD21FB7C64BB94121FBBC2E72343D4691FDFA@P3PW5EX1MB01.EX1.SECURESERVER.NET> <255B9BB34FB7D647A506DC292726F6E1127062CA94@WSMSG3153V.srv.dir.telstra.com> In-Reply-To: <255B9BB34FB7D647A506DC292726F6E1127062CA94@WSMSG3153V.srv.dir.telstra.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "oauth@ietf.org" Subject: Re: [OAUTH-WG] Call for Consensus on Document Split X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Nov 2010 06:29:40 -0000 If the challenge uses the OAuth2 scheme, and the client tries OAuth2-Bearer= to authenticate and fails, which scheme should the server use in its reply= to include an error message? OAuth2, OAuth2-Bearer, both? EHL > -----Original Message----- > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > Of Manger, James H > Sent: Thursday, October 14, 2010 10:10 PM > To: oauth@ietf.org > Subject: Re: [OAUTH-WG] Call for Consensus on Document Split >=20 > Eran, >=20 > > How would you suggest we define a general purpose www-authenticate > > header that does not have a matching request header? >=20 > Why would that be a problem? > We define what a "WWW-Authenticate: OAuth2 ..." response header > means, but don't define any meaning for a "Authorization: OAuth2 ..." > request header. > No other scheme should define a meaning for "Authorization: OAuth2 ...". > Consequently, the bearer token spec need to choose a different scheme > name (eg "BEARER" or "TOKEN" or "EXTERNAL") so it can define request & > response headers. >=20 > There is even some precedent for this. draft-broyer-http-cookie-auth > defines "WWW-Authenticate: COOKIE ...", without any matching request > header. > I think there have also been ideas to define something like "WWW- > Authenticate: TLS ..." to indicate when authentication at a lower layer (= TLS, > IPsec) is required. Again there was no matching "Authorization: TLS ..." > header. >=20 > -- > James Manger >=20 > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From Michael.Jones@microsoft.com Fri Nov 12 00:53:52 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 419C028C116 for ; Fri, 12 Nov 2010 00:53:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, FUZZY_CPILL=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id i0cEQSm4al5s for ; Fri, 12 Nov 2010 00:53:46 -0800 (PST) Received: from smtp.microsoft.com (mail1.microsoft.com [131.107.115.212]) by core3.amsl.com (Postfix) with ESMTP id 3622728C105 for ; Fri, 12 Nov 2010 00:53:46 -0800 (PST) Received: from TK5EX14HUBC101.redmond.corp.microsoft.com (157.54.7.153) by TK5-EXGWY-E801.partners.extranet.microsoft.com (10.251.56.50) with Microsoft SMTP Server (TLS) id 8.2.176.0; Fri, 12 Nov 2010 00:54:18 -0800 Received: from TK5EX14MBXC202.redmond.corp.microsoft.com ([169.254.2.127]) by TK5EX14HUBC101.redmond.corp.microsoft.com ([157.54.7.153]) with mapi id 14.01.0255.003; Fri, 12 Nov 2010 00:54:18 -0800 From: Mike Jones To: hideki nara Thread-Topic: [Openid-specs-ab] JSON Token spec work at IIW Thread-Index: AcuAnHngxqllPP84QQuaDfx3hl7ZjwB63wmAABBKAcA= Date: Fri, 12 Nov 2010 08:54:17 +0000 Message-ID: <4E1F6AAD24975D4BA5B1680429673943245E520D@TK5EX14MBXC202.redmond.corp.microsoft.com> References: <4E1F6AAD24975D4BA5B1680429673943245DF444@TK5EX14MBXC202.redmond.corp.microsoft.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.123.12] Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "openid-specs-ab@lists.openid.net" , "oauth@ietf.org" , "openid-specs-connect@lists.openid.net" Subject: Re: [OAUTH-WG] [Openid-specs-ab] JSON Token spec work at IIW X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 12 Nov 2010 08:53:52 -0000 Yes, as described at the end of http://self-issued.info/?p=3D361, the parti= cipants decided to not support multiple signatures for the compact serializ= ation but to support them for the JSON serialization, just as Nat and John'= s earlier specification did. -- Mike -----Original Message----- From: hideki nara [mailto:hdknr@ic-tact.co.jp]=20 Sent: Friday, November 12, 2010 12:38 AM To: Mike Jones Cc: oauth@ietf.org; openid-specs-ab@lists.openid.net; openid-specs-connect@= lists.openid.net Subject: Re: [Openid-specs-ab] JSON Token spec work at IIW Hi, experts. I'd like to know if token expression for multiple keys(signatures) was disc= ussed or is to be discussed. JSS by =3Dnat and John.B describes multiples signatures for JSON serializat= ion, but not for Token serialization in their spec. Best regards. --- hideki 2010/11/10 Mike Jones : > I've now finished my series of posts on the JSON token spec work that=20 > occurred at IIW.=A0 For reference, they are: > > =A0 - JSON Token Spec Results at IIW on Tuesday: > http://self-issued.info/?p=3D361 > > =A0 - JSON Token Encryption Spec Results at IIW on Wednesday: > http://self-issued.info/?p=3D378 > > =A0 - JSON Token Naming Spec Results at IIW on Wednesday: > http://self-issued.info/?p=3D386 > > =A0 - JSON Public Key Spec Results at IIW on Thursday: > =A0http://self-issued.info/?p=3D390 > > > > =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0= =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0= =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 Cheers, > > =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0= =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0= =A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 -- Mike > > > > _______________________________________________ > Openid-specs-ab mailing list > Openid-specs-ab@lists.openid.net > http://lists.openid.net/mailman/listinfo/openid-specs-ab > > From James.H.Manger@team.telstra.com Mon Nov 15 22:51:41 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 162673A6C8B for ; Mon, 15 Nov 2010 22:51:41 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.901 X-Spam-Level: X-Spam-Status: No, score=-0.901 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, RELAY_IS_203=0.994] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YVMlu8EezMBt for ; Mon, 15 Nov 2010 22:51:38 -0800 (PST) Received: from ipxcvo.tcif.telstra.com.au (ipxcvo.tcif.telstra.com.au [203.35.135.208]) by core3.amsl.com (Postfix) with ESMTP id 775943A6DA8 for ; Mon, 15 Nov 2010 22:51:26 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.59,204,1288530000"; d="scan'208";a="18936472" Received: from unknown (HELO ipcavi.tcif.telstra.com.au) ([10.97.217.200]) by ipocvi.tcif.telstra.com.au with ESMTP; 16 Nov 2010 17:51:38 +1100 X-IronPort-AV: E=McAfee;i="5400,1158,6168"; a="13275754" Received: from wsmsg3704.srv.dir.telstra.com ([172.49.40.197]) by ipcavi.tcif.telstra.com.au with ESMTP; 16 Nov 2010 17:51:38 +1100 Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by WSMSG3704.srv.dir.telstra.com ([172.49.40.197]) with mapi; Tue, 16 Nov 2010 17:51:37 +1100 From: "Manger, James H" To: "oauth@ietf.org" Date: Tue, 16 Nov 2010 17:51:36 +1100 Thread-Topic: [OAUTH-WG] Call for Consensus on Document Split Thread-Index: ActrN3SADdtlmDJIRsyK9ERucPk/wgAuEXqQAAys2oAAACbDIAABCygQBYLpqRAAyVUlUA== Message-ID: <255B9BB34FB7D647A506DC292726F6E11276DACEF1@WSMSG3153V.srv.dir.telstra.com> References: <255B9BB34FB7D647A506DC292726F6E1127056337B@WSMSG3153V.srv.dir.telstra.com> <90C41DD21FB7C64BB94121FBBC2E72343D4691FDFA@P3PW5EX1MB01.EX1.SECURESERVER.NET> <255B9BB34FB7D647A506DC292726F6E1127062CA94@WSMSG3153V.srv.dir.telstra.com> <90C41DD21FB7C64BB94121FBBC2E72343D470CBF28@P3PW5EX1MB01.EX1.SECURESERVER.NET> In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343D470CBF28@P3PW5EX1MB01.EX1.SECURESERVER.NET> Accept-Language: en-US, en-AU Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, en-AU Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [OAUTH-WG] Call for Consensus on Document Split X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 06:51:42 -0000 Eran, > If the challenge uses the OAuth2 scheme, > and the client tries OAuth2-Bearer to authenticate and fails, > which scheme should the server use in its reply to include an error messa= ge? > OAuth2, OAuth2-Bearer, both? "WWW-Authenticate: OAuth2..." should be included in the response when an au= th error occurs. "WWW-Authenticate: Bearer..." could be included if it might help, but proba= bly isn't necessary. The Bearer scheme by itself probably doesn't have any error that the client= app can correct. Either the opaque bearer token works or you need a new on= e. Getting a new one is an OAuth2 flow so the "WWW-Authenticate: OAuth2..."= response is appropriate. > ...to include an error message Are you asking about which response header to include auth error info in, a= s opposed to which response header to return? I don't think it makes sense to include error messages that are specific to= the OAuth2 delegation flow in a "WWW-Authenticate: Bearer..." response hea= der -- just like it wouldn't make sense to include those details in a "WWW-= Authenticate: BASIC..." response header. -- James Manger > -----Original Message----- > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > Of Manger, James H > Sent: Thursday, October 14, 2010 10:10 PM > To: oauth@ietf.org > Subject: Re: [OAUTH-WG] Call for Consensus on Document Split >=20 > Eran, >=20 > > How would you suggest we define a general purpose www-authenticate > > header that does not have a matching request header? >=20 > Why would that be a problem? > We define what a "WWW-Authenticate: OAuth2 ..." response header > means, but don't define any meaning for a "Authorization: OAuth2 ..." > request header. > No other scheme should define a meaning for "Authorization: OAuth2 ...". > Consequently, the bearer token spec need to choose a different scheme > name (eg "BEARER" or "TOKEN" or "EXTERNAL") so it can define request & > response headers. >=20 > There is even some precedent for this. draft-broyer-http-cookie-auth > defines "WWW-Authenticate: COOKIE ...", without any matching request > header. > I think there have also been ideas to define something like "WWW- > Authenticate: TLS ..." to indicate when authentication at a lower layer (= TLS, > IPsec) is required. Again there was no matching "Authorization: TLS ..." > header. >=20 > -- > James Manger >=20 > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From eran@hueniverse.com Mon Nov 15 23:19:13 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D23303A6B92 for ; Mon, 15 Nov 2010 23:19:13 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3BaMa+w73fGu for ; Mon, 15 Nov 2010 23:19:12 -0800 (PST) Received: from p3plex1out01.prod.phx3.secureserver.net (p3plex1out01.prod.phx3.secureserver.net [72.167.180.17]) by core3.amsl.com (Postfix) with SMTP id 64D5A3A6C65 for ; Mon, 15 Nov 2010 23:06:30 -0800 (PST) Received: (qmail 5934 invoked from network); 16 Nov 2010 07:06:57 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.21) by p3plex1out01.prod.phx3.secureserver.net with SMTP; 16 Nov 2010 07:06:56 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT003.EX1.SECURESERVER.NET ([72.167.180.21]) with mapi; Tue, 16 Nov 2010 00:06:55 -0700 From: Eran Hammer-Lahav To: "Manger, James H" , "oauth@ietf.org" Date: Tue, 16 Nov 2010 00:07:00 -0700 Thread-Topic: [OAUTH-WG] Call for Consensus on Document Split Thread-Index: ActrN3SADdtlmDJIRsyK9ERucPk/wgAuEXqQAAys2oAAACbDIAABCygQBYLpqRAAyVUlUAABAuag Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D470CC507@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <255B9BB34FB7D647A506DC292726F6E1127056337B@WSMSG3153V.srv.dir.telstra.com> <90C41DD21FB7C64BB94121FBBC2E72343D4691FDFA@P3PW5EX1MB01.EX1.SECURESERVER.NET> <255B9BB34FB7D647A506DC292726F6E1127062CA94@WSMSG3153V.srv.dir.telstra.com> <90C41DD21FB7C64BB94121FBBC2E72343D470CBF28@P3PW5EX1MB01.EX1.SECURESERVER.NET> <255B9BB34FB7D647A506DC292726F6E11276DACEF1@WSMSG3153V.srv.dir.telstra.com> In-Reply-To: <255B9BB34FB7D647A506DC292726F6E11276DACEF1@WSMSG3153V.srv.dir.telstra.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [OAUTH-WG] Call for Consensus on Document Split X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 07:19:14 -0000 Bearer token can fail for more than one reason [1]. Clients are allowed to = try more than one authentication scheme. So if we allow clients to try more= than one OAuth-related scheme, we need to provide an error that identifies= which of the schemes provided by the client the server choked on. Or we ca= n only allow a single scheme per request (which is fine by me but somewhat = of a departure from HTTP). We can say that an OAuth2 challenge is always included (fail or first time)= . Do we keep the current error reporting setup? EHL [1] http://tools.ietf.org/html/draft-ietf-oauth-v2-10#section-5.2.1 > -----Original Message----- > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > Of Manger, James H > Sent: Monday, November 15, 2010 10:52 PM > To: oauth@ietf.org > Subject: Re: [OAUTH-WG] Call for Consensus on Document Split >=20 > Eran, >=20 > > If the challenge uses the OAuth2 scheme, and the client tries > > OAuth2-Bearer to authenticate and fails, which scheme should the > > server use in its reply to include an error message? > > OAuth2, OAuth2-Bearer, both? >=20 > "WWW-Authenticate: OAuth2..." should be included in the response when > an auth error occurs. > "WWW-Authenticate: Bearer..." could be included if it might help, but > probably isn't necessary. >=20 > The Bearer scheme by itself probably doesn't have any error that the clie= nt > app can correct. Either the opaque bearer token works or you need a new > one. Getting a new one is an OAuth2 flow so the "WWW-Authenticate: > OAuth2..." response is appropriate. >=20 >=20 > > ...to include an error message >=20 > Are you asking about which response header to include auth error info in,= as > opposed to which response header to return? > I don't think it makes sense to include error messages that are specific = to the > OAuth2 delegation flow in a "WWW-Authenticate: Bearer..." response > header -- just like it wouldn't make sense to include those details in a > "WWW-Authenticate: BASIC..." response header. >=20 >=20 > -- > James Manger >=20 >=20 > > -----Original Message----- > > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > > Of Manger, James H > > Sent: Thursday, October 14, 2010 10:10 PM > > To: oauth@ietf.org > > Subject: Re: [OAUTH-WG] Call for Consensus on Document Split > > > > Eran, > > > > > How would you suggest we define a general purpose www-authenticate > > > header that does not have a matching request header? > > > > Why would that be a problem? > > We define what a "WWW-Authenticate: OAuth2 ..." response header > means, > > but don't define any meaning for a "Authorization: OAuth2 ..." > > request header. > > No other scheme should define a meaning for "Authorization: OAuth2 ..."= . > > Consequently, the bearer token spec need to choose a different scheme > > name (eg "BEARER" or "TOKEN" or "EXTERNAL") so it can define request & > > response headers. > > > > There is even some precedent for this. draft-broyer-http-cookie-auth > > defines "WWW-Authenticate: COOKIE ...", without any matching request > > header. > > I think there have also been ideas to define something like "WWW- > > Authenticate: TLS ..." to indicate when authentication at a lower > > layer (TLS, > > IPsec) is required. Again there was no matching "Authorization: TLS ...= " > > header. > > > > -- > > James Manger > > > > _______________________________________________ > > OAuth mailing list > > OAuth@ietf.org > > https://www.ietf.org/mailman/listinfo/oauth > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From eran@hueniverse.com Tue Nov 16 08:35:25 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E69313A6D79 for ; Tue, 16 Nov 2010 08:35:25 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 0XgYaZxn0ycy for ; Tue, 16 Nov 2010 08:35:25 -0800 (PST) Received: from p3plex1out01.prod.phx3.secureserver.net (p3plex1out01.prod.phx3.secureserver.net [72.167.180.17]) by core3.amsl.com (Postfix) with SMTP id 0932E3A6D68 for ; Tue, 16 Nov 2010 08:35:25 -0800 (PST) Received: (qmail 28677 invoked from network); 16 Nov 2010 16:36:09 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.19) by p3plex1out01.prod.phx3.secureserver.net with SMTP; 16 Nov 2010 16:36:09 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT001.EX1.SECURESERVER.NET ([72.167.180.19]) with mapi; Tue, 16 Nov 2010 09:36:02 -0700 From: Eran Hammer-Lahav To: OAuth WG Date: Tue, 16 Nov 2010 09:36:09 -0700 Thread-Topic: OAuth2 WWW-Authenticate scheme Thread-Index: AcuFrF9JDL/bVYuHRYGeZ28ZaJLRPQ== Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D470CC5A5@P3PW5EX1MB01.EX1.SECURESERVER.NET> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [OAUTH-WG] OAuth2 WWW-Authenticate scheme X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 16:35:26 -0000 Bearer token can fail for more than one reason (section 5.2.1). Clients are= allowed to try more than one authentication scheme. So if we allow clients= to try more than one OAuth-related scheme, we need to provide an error tha= t identifies which of the schemes provided by the client the server choked = on. Or we can only allow a single scheme per request (which is fine by me b= ut somewhat of a departure from HTTP). We can say that an OAuth2 challenge is always included (fail or first time)= . Do we keep the current error reporting setup? EHL > -----Original Message----- > From: Manger, James H > Sent: Monday, November 15, 2010 10:52 PM > > If the challenge uses the OAuth2 scheme, and the client tries > > OAuth2-Bearer to authenticate and fails, which scheme should the > > server use in its reply to include an error message? > > OAuth2, OAuth2-Bearer, both? > > "WWW-Authenticate: OAuth2..." should be included in the response when > an auth error occurs. > "WWW-Authenticate: Bearer..." could be included if it might help, but > probably isn't necessary. > > The Bearer scheme by itself probably doesn't have any error that the clie= nt > app can correct. Either the opaque bearer token works or you need a new > one. Getting a new one is an OAuth2 flow so the "WWW-Authenticate: > OAuth2..." response is appropriate. > > > > ...to include an error message > > Are you asking about which response header to include auth error info in,= as > opposed to which response header to return? > I don't think it makes sense to include error messages that are specific = to the > OAuth2 delegation flow in a "WWW-Authenticate: Bearer..." response > header -- just like it wouldn't make sense to include those details in a > "WWW-Authenticate: BASIC..." response header. From nick@concentricsky.com Tue Nov 16 15:44:42 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id CE7893A6881 for ; Tue, 16 Nov 2010 15:44:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.265 X-Spam-Level: X-Spam-Status: No, score=-2.265 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kKkuHlUryk8D for ; Tue, 16 Nov 2010 15:44:42 -0800 (PST) Received: from locust.concentricsky.com (locust.concentricsky.com [69.30.54.148]) by core3.amsl.com (Postfix) with ESMTP id 36D173A6880 for ; Tue, 16 Nov 2010 15:44:42 -0800 (PST) Received: from localhost (localhost.localdomain [127.0.0.1]) by locust.concentricsky.com (Postfix) with ESMTP id 90AED9E89BB for ; Tue, 16 Nov 2010 15:45:21 -0800 (PST) Received: from locust.concentricsky.com ([127.0.0.1]) by localhost (locust.concentricsky.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 7OP5yjuQHV14 for ; Tue, 16 Nov 2010 15:45:16 -0800 (PST) Received: from horizon.concentricsky.com (caterpillar.concentricsky.com [74.95.42.1]) by locust.concentricsky.com (Postfix) with ESMTP id 9E62E9E89BA for ; Tue, 16 Nov 2010 15:45:15 -0800 (PST) Received: by horizon.concentricsky.com (sSMTP sendmail emulation); Tue, 16 Nov 2010 15:45:14 -0800 From: "Nick Walker" Date: Tue, 16 Nov 2010 15:45:14 -0800 To: oauth@ietf.org Message-ID: <20101116234514.GE31381@concentricsky.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.5.21 (2010-09-15) Subject: [OAUTH-WG] section 3.2 error in draft-ietf-oauth-v2-10 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 16 Nov 2010 23:50:26 -0000 In section 3.2 of draft-ietf-oauth-v2-10: "... if the request is invalid, the authorization server informs the client by adding the following parameters to the redirection URI query component ..." This leads to issuing an HTTP 302 response with an invalid Location header if the redirect_uri parameter is missing or invalid. I believe the correct behavior in this case is the same as in section 4.3. Nick From James.H.Manger@team.telstra.com Tue Nov 16 16:12:39 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 931FD3A6891 for ; Tue, 16 Nov 2010 16:12:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.326 X-Spam-Level: X-Spam-Status: No, score=-1.326 tagged_above=-999 required=5 tests=[AWL=-0.424, BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, RELAY_IS_203=0.994] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LHcyhJm7CFg2 for ; Tue, 16 Nov 2010 16:12:38 -0800 (PST) Received: from ipxcvo.tcif.telstra.com.au (ipxcvo.tcif.telstra.com.au [203.35.135.208]) by core3.amsl.com (Postfix) with ESMTP id 13BD03A6888 for ; Tue, 16 Nov 2010 16:12:34 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.59,208,1288530000"; d="scan'208";a="19006103" Received: from unknown (HELO ipcdvi.tcif.telstra.com.au) ([10.97.217.212]) by ipocvi.tcif.telstra.com.au with ESMTP; 17 Nov 2010 11:13:17 +1100 X-IronPort-AV: E=McAfee;i="5400,1158,6169"; a="13276881" Received: from wsmsg3702.srv.dir.telstra.com ([172.49.40.170]) by ipcdvi.tcif.telstra.com.au with ESMTP; 17 Nov 2010 11:13:17 +1100 Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by WSMSG3702.srv.dir.telstra.com ([172.49.40.170]) with mapi; Wed, 17 Nov 2010 11:13:17 +1100 From: "Manger, James H" To: OAuth WG Date: Wed, 17 Nov 2010 11:13:15 +1100 Thread-Topic: OAuth2 WWW-Authenticate scheme Thread-Index: AcuFrF9JDL/bVYuHRYGeZ28ZaJLRPQAN3thQ Message-ID: <255B9BB34FB7D647A506DC292726F6E11276DAD39C@WSMSG3153V.srv.dir.telstra.com> References: <90C41DD21FB7C64BB94121FBBC2E72343D470CC5A5@P3PW5EX1MB01.EX1.SECURESERVER.NET> In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343D470CC5A5@P3PW5EX1MB01.EX1.SECURESERVER.NET> Accept-Language: en-US, en-AU Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, en-AU Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [OAUTH-WG] OAuth2 WWW-Authenticate scheme X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Nov 2010 00:12:40 -0000 Eran, > Clients are allowed to try more than one authentication scheme. I don't think so -- at least not in a single request. HTTP certainly allows a server to advertise multiple schemes in a *response= * (via "WWW-Authenticate" headers). This is widely used. However, HTTP does not allow multiple schemes in a request (ie it does not = allow multiple "Authorization" headers). The current httpbis draft says (draft-ietf-httpbis-p7-auth-12, section 2): "The user agent MUST choose to use *one* of the challenges with the strongest auth-scheme it understands" > Or we can only allow a single scheme per request > (which is fine by me but somewhat of a departure from HTTP). I don't think this is a departure. I can't think of any current systems that use multiple HTTP auth schemes in= a single request. > We can say that an OAuth2 challenge is always included (fail or first tim= e). > Do we keep the current error reporting setup? It is clear (in my mind) that a server should use a "WWW-Authenticate: OAut= h2..." response header to say to the client: "Hey, you can get access to this resource (or better access) if you first run an OAuth flow: with these endpoints & parameters" But there are a number of OAuth flows: * user delegation * swapping client credentials for a token (or swapping an assertion for a t= oken) * refreshing an existing token/delegation The server needs to give the client enough information for it to know what = it can do next, eg which OAuth flow to perform. A good approach would be for the "WWW-Authenticate: OAuth2..." response to explicitly indicate which flows are possible *at this point*. If a "WWW-Authenticate: OAuth2..." response includes a refresh=3D para= meter, for instance, then the client knows they can refresh their existing token. If the "WWW-Authenticate: OAuth2..." response includes a user=3D param= eter, but no refresh parameter, then the client knows they can run a user-delegat= ion flow, but they cannot refresh their existing token. -- James Manger From pflam@cs.stanford.edu Fri Nov 12 17:47:12 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 2BE373A6813 for ; Fri, 12 Nov 2010 17:47:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.999 X-Spam-Level: X-Spam-Status: No, score=-5.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_42=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oH0cVnwEK7+J for ; Fri, 12 Nov 2010 17:47:05 -0800 (PST) Received: from cs-smtp-2.Stanford.EDU (cs-smtp-2.Stanford.EDU [171.64.64.26]) by core3.amsl.com (Postfix) with ESMTP id 63AD43A6810 for ; Fri, 12 Nov 2010 17:47:05 -0800 (PST) Received: from xenon.stanford.edu ([171.64.66.201]) by cs-smtp-2.Stanford.EDU with esmtps (TLSv1:AES256-SHA:256) (Exim 4.60) (envelope-from ) id 1PH5DM-0002hd-AO; Fri, 12 Nov 2010 17:47:39 -0800 Received: from localhost.stanford.edu ([127.0.0.1] helo=xenon.stanford.edu) by Xenon.Stanford.EDU with esmtp (Exim 4.63) (envelope-from ) id 1PH5DL-0006NT-BN; Fri, 12 Nov 2010 17:47:35 -0800 Received: from 222.166.181.166 (SquirrelMail authenticated user pflam) by xenon.stanford.edu with HTTP; Fri, 12 Nov 2010 17:47:35 -0800 (PST) Message-ID: <10670.222.166.181.166.1289612855.squirrel@xenon.stanford.edu> Date: Fri, 12 Nov 2010 17:47:35 -0800 (PST) From: pflam@cs.stanford.edu To: oauth@ietf.org User-Agent: SquirrelMail/1.4.8-5.el5.centos.10 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-Scan-Signature: 8ae29cfe0e7acab0c1a6d8f3d15a0178 X-Mailman-Approved-At: Tue, 16 Nov 2010 16:14:26 -0800 Cc: Dawn Song , John Mitchell , Peifung Eric Lam , Devdatta Akhawe , Adam Barth Subject: Re: [OAUTH-WG] vulnerability in OAuth 2.0/ 1.0/ WRAP leading to DDOS attacks X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Nov 2010 01:51:40 -0000 Hi, We are a group of university researchers and have been applying a formal approach to analyze web security protocols. Devdatta gave a talk at IIW at Mountain View last week about our work, and a summary of our earlier results can be found at http://theory.stanford.edu/~jcm/papers/browsermodel-csf-2010.pdf . While analyzing OAuth specifications (2.0/1.0/WRAP), we found that a vulnerability exists that can be exploited to carry out DDOS attacks. Under the current specifications, such attacks are difficult to differentiate from legitimate and non-malicious connections, so rate-limiting based on user identities or machine fingerprinting are likely to be ineffective. A tentative solution is proposed at the end of this email. Any feedback is welcome! Best, Peifung Eric Lam ===== In the OAuth 2.0 and the OAuth WRAP specifications, we found that in the Web Server/Web App profile, an attacker can send an HTTP request to the redirect URI of a client web application (with an arbitrary authorization code), causing the client to issue an HTTPS request to the OAuth Authorization Server. The revelant sections in OAuth 2.0 Draft 10 are 1.4.1(C), and sections 3 and 4. A slightly modified attack can be mounted against OAuth 1.0 as specified in RFC 5849. >From our initial analysis, this feature of OAuth can be exploited by attackers to launder requests through trusted OAuth clients and launch a DDOS attack on the Authorization Server. Under the current specifications such attacks are difficult to differentiate from legitimate and non-malicious connections, so rate-limiting based on user identities or machine fingerprinting are likely to be ineffective. Specifically, an attacker can bombard the redirect URIs of the web application clients, causing a flood of HTTPS connections to the OAuth Authz Server. This can lead to depletion of resources on the Authz Server and prevent HTTPS connections carrying legitimate payload from reaching the Authz Server. During such an attack, all that the Authz Server learns (based on the 1.0, 2.0, and WRAP specs), is that a) each request comes from a registered web site which may have legitimate business making such a request, and b) the tokens conveyed in each request. However, as the attacker can issue authorization codes that are just (pseudo-) random bit strings not tied to any end-user identity, the Authz Server has learned little information regarding the attacker or its machines causing such frivolous connections. A large number of web application clients integrated with the Authz Server can help the attacker obfuscate its sources of attack and make information collection for DDOS defense more difficult. From statistics released by popular websites (such as Facebook), we expect the number of clients can be as high as a million. It seems that if we require the authorization code to be signed by the Authz Server (or HMAC'ed using a shared key between the Authz Server and the Client), and the client verifies the signature or HMAC code first before connecting to the Authz Server, then the above DDOS attack can be largely foiled. Please let us know if you would like to discuss this issue further so that we can devise a clean solution to this problem. Eran Hammer-Lahav wrote: > > The right place to bring this up for discussion is the IETF OAuth mailing list: oauth@ietf.org. > > Thanks! > > EHL From eran@hueniverse.com Tue Nov 16 17:24:18 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 4692C3A680E for ; Tue, 16 Nov 2010 17:24:18 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ioQjT9-I3k6B for ; Tue, 16 Nov 2010 17:24:16 -0800 (PST) Received: from p3plex1out01.prod.phx3.secureserver.net (p3plex1out01.prod.phx3.secureserver.net [72.167.180.17]) by core3.amsl.com (Postfix) with SMTP id BBDF23A67A3 for ; Tue, 16 Nov 2010 17:24:16 -0800 (PST) Received: (qmail 11358 invoked from network); 17 Nov 2010 01:25:00 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.19) by p3plex1out01.prod.phx3.secureserver.net with SMTP; 17 Nov 2010 01:24:59 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT001.EX1.SECURESERVER.NET ([72.167.180.19]) with mapi; Tue, 16 Nov 2010 18:24:59 -0700 From: Eran Hammer-Lahav To: "Manger, James H" , OAuth WG Date: Tue, 16 Nov 2010 18:25:08 -0700 Thread-Topic: OAuth2 WWW-Authenticate scheme Thread-Index: AcuFrF9JDL/bVYuHRYGeZ28ZaJLRPQAN3thQAASC5lA= Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D470CC774@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <90C41DD21FB7C64BB94121FBBC2E72343D470CC5A5@P3PW5EX1MB01.EX1.SECURESERVER.NET> <255B9BB34FB7D647A506DC292726F6E11276DAD39C@WSMSG3153V.srv.dir.telstra.com> In-Reply-To: <255B9BB34FB7D647A506DC292726F6E11276DAD39C@WSMSG3153V.srv.dir.telstra.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [OAUTH-WG] OAuth2 WWW-Authenticate scheme X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Nov 2010 01:24:18 -0000 WFM. I'll apply this to -11 and publish it shortly. This was the last open = issue I had with the split. Looks like OAuth2 has consensus as the auth sch= eme name (I find it gross but lost all interest in any further discussions)= . EHL > -----Original Message----- > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > Of Manger, James H > Sent: Tuesday, November 16, 2010 4:13 PM > To: OAuth WG > Subject: Re: [OAUTH-WG] OAuth2 WWW-Authenticate scheme >=20 > Eran, >=20 > > Clients are allowed to try more than one authentication scheme. >=20 > I don't think so -- at least not in a single request. > HTTP certainly allows a server to advertise multiple schemes in a *respon= se* > (via "WWW-Authenticate" headers). This is widely used. > However, HTTP does not allow multiple schemes in a request (ie it does no= t > allow multiple "Authorization" headers). > The current httpbis draft says (draft-ietf-httpbis-p7-auth-12, section 2)= : > "The user agent MUST choose to use *one* of the challenges > with the strongest auth-scheme it understands" >=20 >=20 > > Or we can only allow a single scheme per request (which is fine by me > > but somewhat of a departure from HTTP). >=20 > I don't think this is a departure. > I can't think of any current systems that use multiple HTTP auth schemes = in a > single request. >=20 >=20 > > We can say that an OAuth2 challenge is always included (fail or first t= ime). > > Do we keep the current error reporting setup? >=20 > It is clear (in my mind) that a server should use a "WWW-Authenticate: > OAuth2..." > response header to say to the client: > "Hey, you can get access to this resource (or better access) > if you first run an OAuth flow: with these endpoints & parameters" >=20 > But there are a number of OAuth flows: > * user delegation > * swapping client credentials for a token (or swapping an assertion for a > token) > * refreshing an existing token/delegation >=20 > The server needs to give the client enough information for it to know wha= t it > can do next, eg which OAuth flow to perform. > A good approach would be for the "WWW-Authenticate: OAuth2..." > response to explicitly indicate which flows are possible *at this point*. > If a "WWW-Authenticate: OAuth2..." response includes a refresh=3D > parameter, for instance, then the client knows they can refresh their exi= sting > token. > If the "WWW-Authenticate: OAuth2..." response includes a user=3D > parameter, but no refresh parameter, then the client knows they can run a > user-delegation flow, but they cannot refresh their existing token. >=20 >=20 > -- > James Manger > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From eran@hueniverse.com Tue Nov 16 17:31:57 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 036C03A689C for ; Tue, 16 Nov 2010 17:31:57 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pJZSdn20Tc1U for ; Tue, 16 Nov 2010 17:31:55 -0800 (PST) Received: from p3plex1out02.prod.phx3.secureserver.net (p3plex1out02.prod.phx3.secureserver.net [72.167.180.18]) by core3.amsl.com (Postfix) with SMTP id A838B3A67A3 for ; Tue, 16 Nov 2010 17:31:54 -0800 (PST) Received: (qmail 30822 invoked from network); 17 Nov 2010 01:32:39 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.20) by p3plex1out02.prod.phx3.secureserver.net with SMTP; 17 Nov 2010 01:32:39 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT002.EX1.SECURESERVER.NET ([72.167.180.20]) with mapi; Tue, 16 Nov 2010 18:32:38 -0700 From: Eran Hammer-Lahav To: OAuth WG Date: Tue, 16 Nov 2010 18:32:46 -0700 Thread-Topic: VOTE: Token type response parameter Thread-Index: AcuF91YzLDBa77AUQuGpqVexemxX7A== Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D470CC778@P3PW5EX1MB01.EX1.SECURESERVER.NET> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [OAUTH-WG] VOTE: Token type response parameter X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Nov 2010 01:31:57 -0000 The new draft will include a new token_type response parameter. In my origi= nal proposal I suggested making this an optional response parameter with a = default value of 'bearer' or 'plain' to keep existing -10 implementation co= mpliant with -11. Options are: 1. Missing type response parameter means bearer token 2. Missing type response parameter means whatever the service default token= type is 3. Servers must include an explicit token type with each response, where ea= ch token spec (bearer, signed, etc.) register their own type name 4. No token type. Type is determined by other attributes (such as secret an= d hash algorithm name). #1 and #3 are the most consistent with current design and best for interop.= #1 requires no changes to -10 code, but leads to ugly spec organization (i= t links the bearer token spec with the framework spec). I'm strongly in favor of #3 as existing clients will ignore this and just a= ssume bearer. Any server introducing a new token type will need to change c= lients anyway. Servers will need to be changed to add the new parameter but= that's a trivial change (and -11 includes some normative changes already -= all minor). So +1 on #3 for me. Please register your preference. EHL From oleg_gryb@yahoo.com Wed Nov 17 09:31:59 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B72DA3A6940 for ; Wed, 17 Nov 2010 09:31:59 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_42=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id AlTFj5wA3YFM for ; Wed, 17 Nov 2010 09:31:58 -0800 (PST) Received: from web37604.mail.mud.yahoo.com (web37604.mail.mud.yahoo.com [209.191.87.87]) by core3.amsl.com (Postfix) with SMTP id 67FA53A694A for ; Wed, 17 Nov 2010 09:31:58 -0800 (PST) Received: (qmail 18772 invoked by uid 60001); 17 Nov 2010 17:32:41 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1290015161; bh=QxGZi9e7K7hHxedg+aYHT921lxD8yTB8/Lr5SJjlkE0=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=wZYyXO5a5uXp70LOYXaxtd+OdAo/QSY1yMe3ixEbjBe/QxbESVH0IAjnwe/sR6bkgRMQoVoKUIe1OHU90HEABexSsSGj++pnXnu6T7gQpqzsxS1rik+EruIYb+gV8QaVgocbggXEQoHkJgTXjffple0nitZC8qCXYWrY6nFMJYQ= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=1u97YLByImUF/eVwpLu7imcdWen4E4zrdf/+xTA99x35qBYTM5VzXZ9a/Ykg4xP2btMxLY3Ruysvirv1WRXiZ/CEIyeDBhNilcT+AzWzT+YKqAYCf1n8pAq5LePzWMXkj4dfEiujf/fdRCho/uEqFAlVGqQCdwpFqyGNjUKQTe4=; Message-ID: <537202.18396.qm@web37604.mail.mud.yahoo.com> X-YMail-OSG: kVOjsksVM1kcCzJzH1PGsx3r4DFZHylXCsSPKJFUU5baO7W LtEbBEjXI0NpQgzevP.EYuFIihhj6yFKJH3sygJuEiKha3sYp3cpyo5SDkaB cwDDUNyPdhV6xpcu3nQh0lcQOZ998cvPqS9RYB_R7BE958W6_t8KnVFcF2j. 4t1Dgf_o3JJhQgmYdN1UYYGaDZWadWpj8eU1263twGKqOWeoOADxbwqGoNV1 cArvvBiKR0HEtJgplerZczH5Ax5y9J866RftJuUtdhsg4l1jSRhnCV.GGCPL yf4Qb28n1mYm5b8n3zNUd_nWmj9YcR1OEdiUey5YA4pQf6k0Q2KTQopqJV4f SL_wDqsF9YdiomhI9 Received: from [208.240.243.170] by web37604.mail.mud.yahoo.com via HTTP; Wed, 17 Nov 2010 09:32:41 PST X-Mailer: YahooMailRC/504.5 YahooMailWebService/0.8.107.285259 References: <10670.222.166.181.166.1289612855.squirrel@xenon.stanford.edu> Date: Wed, 17 Nov 2010 09:32:41 -0800 (PST) From: Oleg Gryb To: pflam@cs.stanford.edu, oauth@ietf.org In-Reply-To: <10670.222.166.181.166.1289612855.squirrel@xenon.stanford.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Dawn Song , John Mitchell , Devdatta Akhawe , Peifung Eric Lam , Adam Barth Subject: Re: [OAUTH-WG] vulnerability in OAuth 2.0/ 1.0/ WRAP leading to DDOS attacks X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: Oleg Gryb List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 17 Nov 2010 17:31:59 -0000 The concern is valid, but proposed solution would be hard to implement: everybody who has implemented at least one crypto system where symmetric keys need to be distributed between external parties would tell you that, let alone OAuth use cases where you can have many web server clients dynamically added to existing service providers. If you add a requirement of periodic key rotation that is very common nowadays then implementation will become even more difficult. PKI would be a better approach in my view: Authz Server would need to sign using a a private key and web client will use a public key to verify the signature, but again in case of key rotation, an automatic key exchange mechanism would need to be involved. I think there is some kind of automatic client registration protocol under way. It will handle new clients registration and initial key distribution, but AFAIK it's not governed by IETF's OAuth group. ----- Original Message ---- > From: "pflam@cs.stanford.edu" > To: oauth@ietf.org > Cc: Dawn Song ; John Mitchell >; Peifung Eric Lam ; Devdatta >Akhawe ; Adam Barth > Sent: Fri, November 12, 2010 5:47:35 PM > Subject: Re: [OAUTH-WG] vulnerability in OAuth 2.0/ 1.0/ WRAP leading to DDOS >attacks > > Hi, > > We are a group of university researchers and have been applying a formal > approach to analyze web security protocols. Devdatta gave a talk at IIW at > Mountain View last week about our work, and a summary of our earlier > results can be found at > http://theory.stanford.edu/~jcm/papers/browsermodel-csf-2010.pdf . > > While analyzing OAuth specifications (2.0/1.0/WRAP), we found that a > vulnerability exists that can be exploited to carry out DDOS > attacks. Under the current specifications, such attacks are difficult to > differentiate from legitimate and non-malicious connections, so > rate-limiting based on user identities or machine fingerprinting are > likely to be ineffective. A tentative solution is proposed at the end of > this email. Any feedback is welcome! > > Best, > > Peifung Eric Lam > > ===== > > In the OAuth 2.0 and the OAuth WRAP specifications, we found that in the > Web Server/Web App profile, an attacker can send an HTTP request to the > redirect URI of a client web application (with an arbitrary authorization > code), causing the client to issue an HTTPS request to the OAuth > Authorization Server. The revelant sections in OAuth 2.0 Draft 10 are > 1.4.1(C), and sections 3 and 4. A slightly modified attack can be mounted > against OAuth 1.0 as specified in RFC 5849. > > From our initial analysis, this feature of OAuth can be exploited by > attackers to launder requests through trusted OAuth clients and launch a > DDOS attack on the Authorization Server. Under the current specifications > such attacks are difficult to differentiate from legitimate and > non-malicious connections, so rate-limiting based on user identities or > machine fingerprinting are likely to be ineffective. > > Specifically, an attacker can bombard the redirect URIs of the web > application clients, causing a flood of HTTPS connections to the OAuth > Authz Server. This can lead to depletion of resources on the Authz Server > and prevent HTTPS connections carrying legitimate payload from reaching > the Authz Server. During such an attack, all that the Authz Server learns > (based on the 1.0, 2.0, and WRAP specs), is that a) each request comes > from a registered web site which may have legitimate business making such > a request, and b) the tokens conveyed in each request. However, as the > attacker can issue authorization codes that are just (pseudo-) random bit > strings not tied to any end-user identity, the Authz Server has learned > little information regarding the attacker or its machines causing such > frivolous connections. > > A large number of web application clients integrated with the Authz Server > can help the attacker obfuscate its sources of attack and make information > collection for DDOS defense more difficult. From statistics released by > popular websites (such as Facebook), we expect the number of clients can > be as high as a million. > > It seems that if we require the authorization code to be signed by the > Authz Server (or HMAC'ed using a shared key between the Authz Server and > the Client), and the client verifies the signature or HMAC code first > before connecting to the Authz Server, then the above DDOS attack can be > largely foiled. > > Please let us know if you would like to discuss this issue further so that > we can devise a clean solution to this problem. > > > Eran Hammer-Lahav wrote: > > > > The right place to bring this up for discussion is the IETF OAuth > mailing list: oauth@ietf.org. > > > > Thanks! > > > > EHL > > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > From eran@hueniverse.com Wed Nov 17 23:49:07 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8B0A03A67F0 for ; Wed, 17 Nov 2010 23:49:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id npl1DfXEFWQA for ; Wed, 17 Nov 2010 23:49:06 -0800 (PST) Received: from p3plex1out02.prod.phx3.secureserver.net (p3plex1out02.prod.phx3.secureserver.net [72.167.180.18]) by core3.amsl.com (Postfix) with SMTP id 977403A67E9 for ; Wed, 17 Nov 2010 23:49:06 -0800 (PST) Received: (qmail 12592 invoked from network); 18 Nov 2010 07:49:51 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.21) by p3plex1out02.prod.phx3.secureserver.net with SMTP; 18 Nov 2010 07:49:51 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT003.EX1.SECURESERVER.NET ([72.167.180.21]) with mapi; Thu, 18 Nov 2010 00:49:51 -0700 From: Eran Hammer-Lahav To: OAuth WG Date: Thu, 18 Nov 2010 00:50:03 -0700 Thread-Topic: VOTE: Token type response parameter Thread-Index: AcuF91YzLDBa77AUQuGpqVexemxX7AA/dMsw Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3A525@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <90C41DD21FB7C64BB94121FBBC2E72343D470CC778@P3PW5EX1MB01.EX1.SECURESERVER.NET> In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343D470CC778@P3PW5EX1MB01.EX1.SECURESERVER.NET> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [OAUTH-WG] VOTE: Token type response parameter X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 07:49:07 -0000 Nothing? No one cares? EHL > -----Original Message----- > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > Of Eran Hammer-Lahav > Sent: Tuesday, November 16, 2010 5:33 PM > To: OAuth WG > Subject: [OAUTH-WG] VOTE: Token type response parameter >=20 > The new draft will include a new token_type response parameter. In my > original proposal I suggested making this an optional response parameter > with a default value of 'bearer' or 'plain' to keep existing -10 implemen= tation > compliant with -11. >=20 > Options are: >=20 > 1. Missing type response parameter means bearer token 2. Missing type > response parameter means whatever the service default token type is 3. > Servers must include an explicit token type with each response, where eac= h > token spec (bearer, signed, etc.) register their own type name 4. No toke= n > type. Type is determined by other attributes (such as secret and hash > algorithm name). >=20 > #1 and #3 are the most consistent with current design and best for intero= p. > #1 requires no changes to -10 code, but leads to ugly spec organization (= it > links the bearer token spec with the framework spec). >=20 > I'm strongly in favor of #3 as existing clients will ignore this and just= assume > bearer. Any server introducing a new token type will need to change clien= ts > anyway. Servers will need to be changed to add the new parameter but > that's a trivial change (and -11 includes some normative changes already = - all > minor). >=20 > So +1 on #3 for me. >=20 > Please register your preference. >=20 > EHL > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From prateek.mishra@oracle.com Thu Nov 18 06:32:12 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id C507C3A680C for ; Thu, 18 Nov 2010 06:32:12 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 5ce5g7ihnp20 for ; Thu, 18 Nov 2010 06:32:11 -0800 (PST) Received: from rcsinet10.oracle.com (rcsinet10.oracle.com [148.87.113.121]) by core3.amsl.com (Postfix) with ESMTP id C42703A6808 for ; Thu, 18 Nov 2010 06:32:11 -0800 (PST) Received: from rcsinet13.oracle.com (rcsinet13.oracle.com [148.87.113.125]) by rcsinet10.oracle.com (Switch-3.4.2/Switch-3.4.2) with ESMTP id oAIEWuQd004078 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=OK); Thu, 18 Nov 2010 14:32:58 GMT Received: from acsmt355.oracle.com (acsmt355.oracle.com [141.146.40.155]) by rcsinet13.oracle.com (Switch-3.4.2/Switch-3.4.1) with ESMTP id oAIAecrU020215; Thu, 18 Nov 2010 14:32:55 GMT Received: from abhmt008.oracle.com by acsmt354.oracle.com with ESMTP id 788999041290090714; Thu, 18 Nov 2010 06:31:54 -0800 Received: from [10.159.24.245] (/10.159.24.245) by default (Oracle Beehive Gateway v4.0) with ESMTP ; Thu, 18 Nov 2010 06:31:53 -0800 Message-ID: <4CE538D8.3060001@oracle.com> Date: Thu, 18 Nov 2010 09:31:52 -0500 From: prateek mishra Organization: Oracle Corporation User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: Eran Hammer-Lahav References: <90C41DD21FB7C64BB94121FBBC2E72343D470CC778@P3PW5EX1MB01.EX1.SECURESERVER.NET> In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343D470CC778@P3PW5EX1MB01.EX1.SECURESERVER.NET> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: OAuth WG Subject: Re: [OAUTH-WG] VOTE: Token type response parameter X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 14:32:12 -0000 +1 on #3 from an enterprise perspective, we really dont want applications/clients to have embedded knowledge of the security model for any target resource. As I understand this proposal, this would allow a security component at the client site/device to discover and create the right type of token (bearer/hok, SAML,/JSON) and then bind it appropriately to the resource request. - prateek > The new draft will include a new token_type response parameter. In my original proposal I suggested making this an optional response parameter with a default value of 'bearer' or 'plain' to keep existing -10 implementation compliant with -11. > > Options are: > > 1. Missing type response parameter means bearer token > 2. Missing type response parameter means whatever the service default token type is > 3. Servers must include an explicit token type with each response, where each token spec (bearer, signed, etc.) register their own type name > 4. No token type. Type is determined by other attributes (such as secret and hash algorithm name). > > #1 and #3 are the most consistent with current design and best for interop. #1 requires no changes to -10 code, but leads to ugly spec organization (it links the bearer token spec with the framework spec). > > I'm strongly in favor of #3 as existing clients will ignore this and just assume bearer. Any server introducing a new token type will need to change clients anyway. Servers will need to be changed to add the new parameter but that's a trivial change (and -11 includes some normative changes already - all minor). > > So +1 on #3 for me. > > Please register your preference. > > EHL > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > > From jricher@mitre.org Thu Nov 18 06:37:36 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 78DB83A681F for ; Thu, 18 Nov 2010 06:37:36 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.599 X-Spam-Level: X-Spam-Status: No, score=-6.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hEA1Lz-CvDBm for ; Thu, 18 Nov 2010 06:37:35 -0800 (PST) Received: from smtp-bedford.mitre.org (smtp-bedford.mitre.org [129.83.20.191]) by core3.amsl.com (Postfix) with ESMTP id 6E1303A681A for ; Thu, 18 Nov 2010 06:37:35 -0800 (PST) Received: from smtp-bedford.mitre.org (localhost.localdomain [127.0.0.1]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id oAIEcM1A004501 for ; Thu, 18 Nov 2010 09:38:22 -0500 Received: from imchub1.MITRE.ORG (imchub1.mitre.org [129.83.29.73]) by smtp-bedford.mitre.org (8.13.1/8.13.1) with ESMTP id oAIEcMRw004494; Thu, 18 Nov 2010 09:38:22 -0500 Received: from [129.83.50.65] (129.83.50.65) by imchub1.MITRE.ORG (129.83.29.73) with Microsoft SMTP Server id 8.2.254.0; Thu, 18 Nov 2010 09:38:21 -0500 From: Justin Richer To: Eran Hammer-Lahav In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3A525@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <90C41DD21FB7C64BB94121FBBC2E72343D470CC778@P3PW5EX1MB01.EX1.SECURESERVER.NET> <90C41DD21FB7C64BB94121FBBC2E72343D4AE3A525@P3PW5EX1MB01.EX1.SECURESERVER.NET> Content-Type: text/plain; charset="UTF-8" Date: Thu, 18 Nov 2010 09:38:20 -0500 Message-ID: <1290091100.14671.13.camel@pulse> MIME-Version: 1.0 X-Mailer: Evolution 2.30.3 Content-Transfer-Encoding: 7bit Cc: OAuth WG Subject: Re: [OAUTH-WG] VOTE: Token type response parameter X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 14:37:36 -0000 I would prefer something like #3, but I think #2 is the most practical as it keeps the spec mostly hands-off and doesn't put the weight of one token type above another -- it keeps the kind of token opaque to the "get a token" part of the scheme. #4 is a major fail though. -- justin On Thu, 2010-11-18 at 02:50 -0500, Eran Hammer-Lahav wrote: > Nothing? No one cares? > > EHL > > > -----Original Message----- > > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > > Of Eran Hammer-Lahav > > Sent: Tuesday, November 16, 2010 5:33 PM > > To: OAuth WG > > Subject: [OAUTH-WG] VOTE: Token type response parameter > > > > The new draft will include a new token_type response parameter. In my > > original proposal I suggested making this an optional response parameter > > with a default value of 'bearer' or 'plain' to keep existing -10 implementation > > compliant with -11. > > > > Options are: > > > > 1. Missing type response parameter means bearer token 2. Missing type > > response parameter means whatever the service default token type is 3. > > Servers must include an explicit token type with each response, where each > > token spec (bearer, signed, etc.) register their own type name 4. No token > > type. Type is determined by other attributes (such as secret and hash > > algorithm name). > > > > #1 and #3 are the most consistent with current design and best for interop. > > #1 requires no changes to -10 code, but leads to ugly spec organization (it > > links the bearer token spec with the framework spec). > > > > I'm strongly in favor of #3 as existing clients will ignore this and just assume > > bearer. Any server introducing a new token type will need to change clients > > anyway. Servers will need to be changed to add the new parameter but > > that's a trivial change (and -11 includes some normative changes already - all > > minor). > > > > So +1 on #3 for me. > > > > Please register your preference. > > > > EHL > > _______________________________________________ > > OAuth mailing list > > OAuth@ietf.org > > https://www.ietf.org/mailman/listinfo/oauth > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From wmills@yahoo-inc.com Thu Nov 18 07:27:33 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 765513A6870 for ; Thu, 18 Nov 2010 07:27:33 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -17.431 X-Spam-Level: X-Spam-Status: No, score=-17.431 tagged_above=-999 required=5 tests=[AWL=-0.167, BAYES_00=-2.599, IP_NOT_FRIENDLY=0.334, NO_RDNS_DOTCOM_HELO=0.001, USER_IN_DEF_WHITELIST=-15] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iRSonp5Nv9Dq for ; Thu, 18 Nov 2010 07:27:32 -0800 (PST) Received: from mrout1-b.corp.re1.yahoo.com (mrout1-b.corp.re1.yahoo.com [69.147.107.20]) by core3.amsl.com (Postfix) with ESMTP id 775EC3A6877 for ; Thu, 18 Nov 2010 07:27:32 -0800 (PST) Received: from SP2-EX07CAS01.ds.corp.yahoo.com (sp2-ex07cas01.corp.sp2.yahoo.com [98.137.59.37]) by mrout1-b.corp.re1.yahoo.com (8.14.4/8.14.4/y.out) with ESMTP id oAIFRbD5080427; Thu, 18 Nov 2010 07:27:38 -0800 (PST) Received: from SP2-EX07VS06.ds.corp.yahoo.com ([98.137.59.25]) by SP2-EX07CAS01.ds.corp.yahoo.com ([98.137.59.37]) with mapi; Thu, 18 Nov 2010 07:27:37 -0800 From: William Mills To: prateek mishra , Eran Hammer-Lahav Date: Thu, 18 Nov 2010 07:27:36 -0800 Thread-Topic: [OAUTH-WG] VOTE: Token type response parameter Thread-Index: AcuHLY8P2yLBAdexSc6Y/9ApWJcUqAAB2uXA Message-ID: References: <90C41DD21FB7C64BB94121FBBC2E72343D470CC778@P3PW5EX1MB01.EX1.SECURESERVER.NET> <4CE538D8.3060001@oracle.com> In-Reply-To: <4CE538D8.3060001@oracle.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: OAuth WG Subject: Re: [OAUTH-WG] VOTE: Token type response parameter X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 15:27:33 -0000 #3. It's clear and well defined. No chance of confusion. > > 1. Missing type response parameter means bearer token > > 2. Missing type response parameter means whatever the service default > token type is > > 3. Servers must include an explicit token type with each response, > where each token spec (bearer, signed, etc.) register their own type > name > > 4. No token type. Type is determined by other attributes (such as > secret and hash algorithm name). From gffletch@aol.com Thu Nov 18 08:07:07 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 151A028C0E3 for ; Thu, 18 Nov 2010 08:07:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -0.739 X-Spam-Level: X-Spam-Status: No, score=-0.739 tagged_above=-999 required=5 tests=[BAYES_20=-0.74, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id h3C5RMB1gjUa for ; Thu, 18 Nov 2010 08:07:05 -0800 (PST) Received: from imr-db03.mx.aol.com (imr-db03.mx.aol.com [205.188.91.97]) by core3.amsl.com (Postfix) with ESMTP id 9190B3A6879 for ; Thu, 18 Nov 2010 08:07:05 -0800 (PST) Received: from mtaout-da01.r1000.mx.aol.com (mtaout-da01.r1000.mx.aol.com [172.29.51.129]) by imr-db03.mx.aol.com (8.14.1/8.14.1) with ESMTP id oAIG7IU9006169; Thu, 18 Nov 2010 11:07:24 -0500 Received: from palantir.local (unknown [10.181.183.161]) (using TLSv1 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by mtaout-da01.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id 35D2AE0001F1; Thu, 18 Nov 2010 11:07:24 -0500 (EST) Message-ID: <4CE54F3B.7060309@aol.com> Date: Thu, 18 Nov 2010 11:07:23 -0500 From: George Fletcher Organization: AOL LLC User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.6; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: William Mills References: <90C41DD21FB7C64BB94121FBBC2E72343D470CC778@P3PW5EX1MB01.EX1.SECURESERVER.NET> <4CE538D8.3060001@oracle.com> In-Reply-To: Content-Type: multipart/alternative; boundary="------------080609000805060406030301" x-aol-global-disposition: G X-AOL-SCOLL-SCORE: 0:2:410096352:93952408 X-AOL-SCOLL-URL_COUNT: 0 x-aol-sid: 3039ac1d33814ce54f3c53c2 X-AOL-IP: 10.181.183.161 Cc: prateek mishra , OAuth WG Subject: Re: [OAUTH-WG] VOTE: Token type response parameter X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 16:07:07 -0000 This is a multi-part message in MIME format. --------------080609000805060406030301 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit +1 for #3 for me as well On 11/18/10 10:27 AM, William Mills wrote: > #3. It's clear and well defined. No chance of confusion. > >>> 1. Missing type response parameter means bearer token >>> 2. Missing type response parameter means whatever the service default >> token type is >>> 3. Servers must include an explicit token type with each response, >> where each token spec (bearer, signed, etc.) register their own type >> name >>> 4. No token type. Type is determined by other attributes (such as >> secret and hash algorithm name). > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth --------------080609000805060406030301 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit +1 for #3 for me as well

On 11/18/10 10:27 AM, William Mills wrote: 
#3.  It's clear and well defined.  No chance of confusion.


1. Missing type response parameter means bearer token
2. Missing type response parameter means whatever the service default

token type is

3. Servers must include an explicit token type with each response,

where each token spec (bearer, signed, etc.) register their own type
name

4. No token type. Type is determined by other attributes (such as

secret and hash algorithm name).

_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth
--------------080609000805060406030301-- From lainhart@us.ibm.com Thu Nov 18 08:16:42 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id B3DCF3A6884; Thu, 18 Nov 2010 08:16:42 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -6.598 X-Spam-Level: X-Spam-Status: No, score=-6.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id teGLlmeA-w5M; Thu, 18 Nov 2010 08:16:37 -0800 (PST) Received: from e7.ny.us.ibm.com (e7.ny.us.ibm.com [32.97.182.137]) by core3.amsl.com (Postfix) with ESMTP id 289D13A6879; Thu, 18 Nov 2010 08:16:37 -0800 (PST) Received: from d01relay05.pok.ibm.com (d01relay05.pok.ibm.com [9.56.227.237]) by e7.ny.us.ibm.com (8.14.4/8.13.1) with ESMTP id oAIG0WCb001100; Thu, 18 Nov 2010 11:00:32 -0500 Received: from d01av02.pok.ibm.com (d01av02.pok.ibm.com [9.56.224.216]) by d01relay05.pok.ibm.com (8.13.8/8.13.8/NCO v10.0) with ESMTP id oAIGHOsm124514; Thu, 18 Nov 2010 11:17:24 -0500 Received: from d01av02.pok.ibm.com (loopback [127.0.0.1]) by d01av02.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVout) with ESMTP id oAIGHOdp009444; Thu, 18 Nov 2010 14:17:24 -0200 Received: from d01ml255.pok.ibm.com (d01ml255.pok.ibm.com [9.56.227.128]) by d01av02.pok.ibm.com (8.14.4/8.13.1/NCO v10.0 AVin) with ESMTP id oAIGHNSD009429; Thu, 18 Nov 2010 14:17:23 -0200 In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3A525@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <90C41DD21FB7C64BB94121FBBC2E72343D470CC778@P3PW5EX1MB01.EX1.SECURESERVER.NET> <90C41DD21FB7C64BB94121FBBC2E72343D4AE3A525@P3PW5EX1MB01.EX1.SECURESERVER.NET> To: OAuth WG Cc: oauth-bounces@ietf.org MIME-Version: 1.0 X-KeepSent: AFED3135:A5230486-852577DF:005974A1; type=4; name=$KeepSent X-Mailer: Lotus Notes Release 8.0.2 HF88 September 24, 2008 From: Todd W Lainhart Message-ID: Date: Thu, 18 Nov 2010 11:17:22 -0500 X-MIMETrack: Serialize by Router on D01ML255/01/M/IBM(Release 8.5.1FP2|March 17, 2010) at 11/18/2010 11:17:22, Serialize complete at 11/18/2010 11:17:22 Content-Type: multipart/alternative; boundary="=_alternative 00597B25852577DF_=" Subject: Re: [OAUTH-WG] VOTE: Token type response parameter X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 18 Nov 2010 16:16:42 -0000 This is a multipart message in MIME format. --=_alternative 00597B25852577DF_= Content-Type: text/plain; charset="US-ASCII" #3 Todd Lainhart Rational software IBM Corporation 550 King Street, Littleton, MA 01460-1250 1-978-899-4705 2-276-4705 (T/L) lainhart@us.ibm.com From: Eran Hammer-Lahav To: OAuth WG Date: 11/18/2010 02:50 AM Subject: Re: [OAUTH-WG] VOTE: Token type response parameter Sent by: oauth-bounces@ietf.org Nothing? No one cares? EHL > -----Original Message----- > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > Of Eran Hammer-Lahav > Sent: Tuesday, November 16, 2010 5:33 PM > To: OAuth WG > Subject: [OAUTH-WG] VOTE: Token type response parameter > > The new draft will include a new token_type response parameter. In my > original proposal I suggested making this an optional response parameter > with a default value of 'bearer' or 'plain' to keep existing -10 implementation > compliant with -11. > > Options are: > > 1. Missing type response parameter means bearer token 2. Missing type > response parameter means whatever the service default token type is 3. > Servers must include an explicit token type with each response, where each > token spec (bearer, signed, etc.) register their own type name 4. No token > type. Type is determined by other attributes (such as secret and hash > algorithm name). > > #1 and #3 are the most consistent with current design and best for interop. > #1 requires no changes to -10 code, but leads to ugly spec organization (it > links the bearer token spec with the framework spec). > > I'm strongly in favor of #3 as existing clients will ignore this and just assume > bearer. Any server introducing a new token type will need to change clients > anyway. Servers will need to be changed to add the new parameter but > that's a trivial change (and -11 includes some normative changes already - all > minor). > > So +1 on #3 for me. > > Please register your preference. > > EHL > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth _______________________________________________ OAuth mailing list OAuth@ietf.org https://www.ietf.org/mailman/listinfo/oauth --=_alternative 00597B25852577DF_= Content-Type: text/html; charset="US-ASCII"
#3



Todd Lainhart
Rational software
IBM Corporation
550 King Street, Littleton, MA 01460-1250
1-978-899-4705
2-276-4705 (T/L)
lainhart@us.ibm.com




From: Eran Hammer-Lahav <eran@hueniverse.com>
To: OAuth WG <oauth@ietf.org>
Date: 11/18/2010 02:50 AM
Subject: Re: [OAUTH-WG] VOTE: Token type response parameter
Sent by: oauth-bounces@ietf.org




Nothing? No one cares?

EHL

> -----Original Message-----
> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf
> Of Eran Hammer-Lahav
> Sent: Tuesday, November 16, 2010 5:33 PM
> To: OAuth WG
> Subject: [OAUTH-WG] VOTE: Token type response parameter
>
> The new draft will include a new token_type response parameter. In my
> original proposal I suggested making this an optional response parameter
> with a default value of 'bearer' or 'plain' to keep existing -10 implementation
> compliant with -11.
>
> Options are:
>
> 1. Missing type response parameter means bearer token 2. Missing type
> response parameter means whatever the service default token type is 3.
> Servers must include an explicit token type with each response, where each
> token spec (bearer, signed, etc.) register their own type name 4. No token
> type. Type is determined by other attributes (such as secret and hash
> algorithm name).
>
> #1 and #3 are the most consistent with current design and best for interop.
> #1 requires no changes to -10 code, but leads to ugly spec organization (it
> links the bearer token spec with the framework spec).
>
> I'm strongly in favor of #3 as existing clients will ignore this and just assume
> bearer. Any server introducing a new token type will need to change clients
> anyway. Servers will need to be changed to add the new parameter but
> that's a trivial change (and -11 includes some normative changes already - all
> minor).
>
> So +1 on #3 for me.
>
> Please register your preference.
>
> EHL
> _______________________________________________
> OAuth mailing list
> OAuth@ietf.org
> https://www.ietf.org/mailman/listinfo/oauth
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth

--=_alternative 00597B25852577DF_=-- From stpeter@stpeter.im Thu Nov 18 18:24:49 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 84B6B28C0EC for ; Thu, 18 Nov 2010 18:24:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.465 X-Spam-Level: X-Spam-Status: No, score=-102.465 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, HTTP_ESCAPED_HOST=0.134, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 08tCKablQngT for ; Thu, 18 Nov 2010 18:24:48 -0800 (PST) Received: from stpeter.im (stpeter.im [207.210.219.233]) by core3.amsl.com (Postfix) with ESMTP id 8594028C0D9 for ; Thu, 18 Nov 2010 18:24:48 -0800 (PST) Received: from squire.local (ip-216-17-182-51.rev.frii.com [216.17.182.51]) (Authenticated sender: stpeter) by stpeter.im (Postfix) with ESMTPSA id E889540393 for ; Thu, 18 Nov 2010 19:35:41 -0700 (MST) Message-ID: <4CE5E01F.1020207@stpeter.im> Date: Thu, 18 Nov 2010 19:25:35 -0700 From: Peter Saint-Andre User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.2.12) Gecko/20101027 Thunderbird/3.1.6 MIME-Version: 1.0 To: OAuth WG X-Enigmail-Version: 1.1.1 OpenPGP: url=http://www.saint-andre.com/me/stpeter.asc Content-Type: multipart/signed; protocol="application/pkcs7-signature"; micalg=sha1; boundary="------------ms030406030904000601010000" Subject: [OAUTH-WG] Fwd: [Technical Errata Reported] RFC5849 (2550) X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 02:24:49 -0000 This is a cryptographically signed message in MIME format. --------------ms030406030904000601010000 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Folks, is this erratum accurate? -------- Original Message -------- Subject: [Technical Errata Reported] RFC5849 (2550) Date: Tue, 12 Oct 2010 09:42:17 -0700 (PDT) From: RFC Errata System To: eran@hueniverse.com, iesg@iesg.org CC: alasdair@lovefilm.com, rfc-editor@rfc-editor.org The following errata report has been submitted for RFC5849, "The OAuth 1.0 Protocol". -------------------------------------- You may review the report below and at: http://www.rfc-editor.org/errata_search.php?rfc=3D5849&eid=3D2550 -------------------------------------- Type: Technical Reported by: Alasdair McIntyre Section: GLOBAL Original Text ------------- Section 3.1 oauth_signature=3D"bYT5CMsGcbgUdFHObYMEfcx6bsw%3D" Section 3.4.1.1 oauth_signature=3D"bYT5CMsGcbgUdFHObYMEfcx6bsw%3D" Section 3.4.1.3.1 oauth_signature=3D"djosJKDKJSD8743243%2Fjdk33klY%3D" Corrected Text -------------- Section 3.1 oauth_signature=3D"r6%2FTJjbCOr97%2F%2BUU0NsvSne7s5g%3D" Section 3.4.1.1 oauth_signature=3D"r6%2FTJjbCOr97%2F%2BUU0NsvSne7s5g%3D" Section 3.4.1.3.1 oauth_signature=3D"r6%2FTJjbCOr97%2F%2BUU0NsvSne7s5g%3D" Notes ----- (Apologies - this supercedes Errata ID 2549). The signatures in sections 3.1, 3.4.1.1, and 3.4.1.3.1 of the RFC have mistakenly been calculated as if with "GET". I have supplied the correct "POST" signatures in the corrected text. For reference, here is the perl script I used to calculate the signatures= : #!/usr/bin/perl use strict; use warnings; use Digest::HMAC_SHA1; use URI::Escape; use MIME::Base64; my $unsafe =3D '^-._~A-Za-z0-9'; my $client_secret =3D 'j49sk3j29djd'; my $token_secret =3D 'dh893hdasih9'; my $key =3D join('&', $client_secret, $token_secret); my $uri_base =3D 'http%3A%2F%2Fexample.com%2Frequest'; my $params =3D join('', qw( a2%3Dr%2520b%26a3%3D2%2520q%26a3%3Da%26b5%3D %253D%25253D%26c%2540%3D%26c2%3D%26oauth_con sumer_key%3D9djdj82h48djs9d2%26oauth_nonce%3 D7d8f3e4a%26oauth_signature_method%3DHMAC-SH A1%26oauth_timestamp%3D137131201%26oauth_tok en%3Dkkk9d7dh3k39sjv7 )); foreach my $method ('GET', 'POST') { my $base_sig =3D join('&', $method, $uri_base, $params); my $bin_sig =3D Digest::HMAC_SHA1::hmac_sha1($base_sig, $key); my $b64_sig =3D MIME::Base64::encode_base64($bin_sig, ''); my $enc_sig =3D URI::Escape::uri_escape($b64_sig, $unsafe); printf "%-8s %s\n", $method, $enc_sig; } Instructions: ------------- This errata is currently posted as "Reported". If necessary, please use "Reply All" to discuss whether it should be verified or rejected. When a decision is reached, the verifying party (IESG) can log in to change the status and edit the report, if necessary. -------------------------------------- RFC5849 (draft-hammer-oauth-10) -------------------------------------- Title : The OAuth 1.0 Protocol Publication Date : April 2010 Author(s) : E. Hammer-Lahav, Ed. Category : INFORMATIONAL Source : IETF - NON WORKING GROUP Area : N/A Stream : IETF Verifying Party : IESG --------------ms030406030904000601010000 Content-Type: application/pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEHAQAAoIITzjCC BjQwggQcoAMCAQICASMwDQYJKoZIhvcNAQELBQAwfTELMAkGA1UEBhMCSUwxFjAUBgNVBAoT DVN0YXJ0Q29tIEx0ZC4xKzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNp Z25pbmcxKTAnBgNVBAMTIFN0YXJ0Q29tIENlcnRpZmljYXRpb24gQXV0aG9yaXR5MB4XDTA3 MTAyNDIxMDMzM1oXDTE3MTAyNDIxMDMzM1owgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1T dGFydENvbSBMdGQuMSswKQYDVQQLEyJTZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWdu aW5nMTgwNgYDVQQDEy9TdGFydENvbSBDbGFzcyAzIFByaW1hcnkgSW50ZXJtZWRpYXRlIENs aWVudCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALmjSW4SPiDKlAinvVeL ZOVfItiuP1aRHL530E7QUc9icCwL33+PH+Js1HAh8CgWFl34sOxx1FJyS/C4VLPRsqDfP72j tzCVUAL0DAxZ7wgzQvFz7x61jGxfhYhqYb1+PPOLkYBbkRIrPMg3dLEdKmXIYJYXDH+mB/V/ jLo73/Kb7h/rNoNg/oHHSv5Jolyvp5IY2btfcTBfW/telEFj5rDTX2juTvZ3Qhf3XQX5ca3Q 7A10zrUV/cWJOJ7F5RltbEIaboZmX5JBUb3FhUiAdBotehAX6DbDOuYoJtVxmGof6GuVGcPo 98K4TJf8FHo+UA9EOVDp/W7fCqKT4sXk/XkCAwEAAaOCAa0wggGpMA8GA1UdEwEB/wQFMAMB Af8wDgYDVR0PAQH/BAQDAgEGMB0GA1UdDgQWBBR7iZySlyShhEcCy3T8LvSs3DLl8zAfBgNV HSMEGDAWgBROC+8apEBbpRdphzDKNGhD0EGu8jBmBggrBgEFBQcBAQRaMFgwJwYIKwYBBQUH MAGGG2h0dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9jYTAtBggrBgEFBQcwAoYhaHR0cDovL3d3 dy5zdGFydHNzbC5jb20vc2ZzY2EuY3J0MFsGA1UdHwRUMFIwJ6AloCOGIWh0dHA6Ly93d3cu c3RhcnRzc2wuY29tL3Nmc2NhLmNybDAnoCWgI4YhaHR0cDovL2NybC5zdGFydHNzbC5jb20v c2ZzY2EuY3JsMIGABgNVHSAEeTB3MHUGCysGAQQBgbU3AQIBMGYwLgYIKwYBBQUHAgEWImh0 dHA6Ly93d3cuc3RhcnRzc2wuY29tL3BvbGljeS5wZGYwNAYIKwYBBQUHAgEWKGh0dHA6Ly93 d3cuc3RhcnRzc2wuY29tL2ludGVybWVkaWF0ZS5wZGYwDQYJKoZIhvcNAQELBQADggIBAGpd SbdLFMhirxK37V4gE00+uW74UdAXtDgQI3AsRZWtaRtKHgAxFBSteqz4kDkeAjH/1b+K8tQR 6cxSI2nho7qOaPW/UpzOfSS/MeKK/9vfM2lfs+uItXH7LWtvS9wD1erfH1a+BXHCrCp4LA1l fADDhRIiGTSS3i0Zu5xV3INNRHrCCCl6patltQ8RZTqzDMri7ombgIxjN51Zo7xV77EZcThV 0GA8iIN+7T53uHhUJpjfLIztHs/69OclRvHux9hCflfOm7GY5Sc4nqjfES+5XPArGGWiQSEk ez37QfXqsxO3oCHK4b3DFZysG4uyOuC/WL80ab3muQ3tgwjBhq0D3JZN5kvu5gSuNZPa1WrV hEgXkd6C7s5stqB6/htVpshG08jRz9DEutGM9oKQ1ncTivbfPNx7pILoHWvvT7N5i/puVoNu bPUmLXh/2wA6wzAzuuoONiIL14Xpw6jLSnqpaLWElo2yTIFZ/CU/nCvvpW1Dj1457P3Ci9bD 0RPkWSR+CuucpgxrEmaw4UOLxflzuYYaq1RJwygOO5K0s2bAWOcXpgteyUOnQ3d/EjJAWRri 2v0ubiq+4H3KUOMlbznlPAY/1T8YyyJPM88+Ueahe/AW1zoUwZayNcTnuM7cq6yBV8Wr3GOI LFXhtT0UVuJLChPMJKVKVsa7qNorlLkMMIIGxzCCBa+gAwIBAgICAIswDQYJKoZIhvcNAQEF BQAwgYwxCzAJBgNVBAYTAklMMRYwFAYDVQQKEw1TdGFydENvbSBMdGQuMSswKQYDVQQLEyJT ZWN1cmUgRGlnaXRhbCBDZXJ0aWZpY2F0ZSBTaWduaW5nMTgwNgYDVQQDEy9TdGFydENvbSBD bGFzcyAzIFByaW1hcnkgSW50ZXJtZWRpYXRlIENsaWVudCBDQTAeFw0xMDEwMTQwMTM2MzRa Fw0xMjEwMTQxMjAxMDdaMIHAMSAwHgYDVQQNExcyNzQ1ODEtOU5YMDRxeExEYjBvNDY5VDEL MAkGA1UEBhMCVVMxETAPBgNVBAgTCENvbG9yYWRvMQ8wDQYDVQQHEwZEZW52ZXIxLDAqBgNV BAsTI1N0YXJ0Q29tIFRydXN0ZWQgQ2VydGlmaWNhdGUgTWVtYmVyMRowGAYDVQQDExFQZXRl ciBTYWludC1BbmRyZTEhMB8GCSqGSIb3DQEJARYSc3RwZXRlckBzdHBldGVyLmltMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuERvnrkpQTx9wbJfgxbNKEYvt0IilecZRUM6 wrbCzIUPCocuYhaAJcQoqIyHaKybPQ7f+DIGIAolAa3dHnNdlsXP2smTft/ZNpj10PIG5bil NAqLUYwmLJaEaqY7BMW8423U3blW43/luLJk/Pq4OsWcw7AK3LeVh1U/HOgqhin26N3h72X1 nbLEpZFrgcp8egmWtXLCbLBDMqUK3j6wjLldni79muzYEVqU0A5GqSeb8Wc4kIx8VI5yL24J KzinG2iVRP5ZDEbOZETzBXJabUsV56XSxqPG9DK6ke+ybCiL/wKV1HFqdtFB1y25lfvHgOP2 gyEApBKEDNjgLmKyyQIDAQABo4IC+zCCAvcwCQYDVR0TBAIwADALBgNVHQ8EBAMCBLAwHQYD VR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMEMB0GA1UdDgQWBBS2EW2iNB+g0EibKJLBdv8I eLovVDAfBgNVHSMEGDAWgBR7iZySlyShhEcCy3T8LvSs3DLl8zAdBgNVHREEFjAUgRJzdHBl dGVyQHN0cGV0ZXIuaW0wggFCBgNVHSAEggE5MIIBNTCCATEGCysGAQQBgbU3AQICMIIBIDAu BggrBgEFBQcCARYiaHR0cDovL3d3dy5zdGFydHNzbC5jb20vcG9saWN5LnBkZjA0BggrBgEF BQcCARYoaHR0cDovL3d3dy5zdGFydHNzbC5jb20vaW50ZXJtZWRpYXRlLnBkZjCBtwYIKwYB BQUHAgIwgaowFBYNU3RhcnRDb20gTHRkLjADAgEBGoGRTGltaXRlZCBMaWFiaWxpdHksIHNl ZSBzZWN0aW9uICpMZWdhbCBMaW1pdGF0aW9ucyogb2YgdGhlIFN0YXJ0Q29tIENlcnRpZmlj YXRpb24gQXV0aG9yaXR5IFBvbGljeSBhdmFpbGFibGUgYXQgaHR0cDovL3d3dy5zdGFydHNz bC5jb20vcG9saWN5LnBkZjBjBgNVHR8EXDBaMCugKaAnhiVodHRwOi8vd3d3LnN0YXJ0c3Ns LmNvbS9jcnR1My1jcmwuY3JsMCugKaAnhiVodHRwOi8vY3JsLnN0YXJ0c3NsLmNvbS9jcnR1 My1jcmwuY3JsMIGOBggrBgEFBQcBAQSBgTB/MDkGCCsGAQUFBzABhi1odHRwOi8vb2NzcC5z dGFydHNzbC5jb20vc3ViL2NsYXNzMy9jbGllbnQvY2EwQgYIKwYBBQUHMAKGNmh0dHA6Ly93 d3cuc3RhcnRzc2wuY29tL2NlcnRzL3N1Yi5jbGFzczMuY2xpZW50LmNhLmNydDAjBgNVHRIE HDAahhhodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS8wDQYJKoZIhvcNAQEFBQADggEBADVtbXJG tKAr55xc/OUM546gXUybI72Bank0w739Mv+9BBNtq9rMEvCnLmSKhBi76c1mdXh6zXs8RQDo 6nR/aPabE3llF2T4z80smi9jfnl3y9dpu9TcgDoqDLZ7a2lBlW656XAAQzHjvLp2MC7/mxlg PYH2axa+q40mAYM20GbNsAEGbWQT1IqIh0BcLLsgbaMJHbyG/57zd9JLyMX3Vry1L1fJRQr3 GeLxMV5RtxN+mBgxrwFz/cOc09COiFExlsHgekpB5O43gqsAU16MXypyoSt4MrSfKTMHIGx6 2RF/M6vqUlvhi28gk2ZUvQ/+OX5+gjcZyooEzAAn4RuOKNswggbHMIIFr6ADAgECAgIAizAN BgkqhkiG9w0BAQUFADCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4x KzApBgNVBAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMT L1N0YXJ0Q29tIENsYXNzIDMgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBMB4XDTEw MTAxNDAxMzYzNFoXDTEyMTAxNDEyMDEwN1owgcAxIDAeBgNVBA0TFzI3NDU4MS05TlgwNHF4 TERiMG80NjlUMQswCQYDVQQGEwJVUzERMA8GA1UECBMIQ29sb3JhZG8xDzANBgNVBAcTBkRl bnZlcjEsMCoGA1UECxMjU3RhcnRDb20gVHJ1c3RlZCBDZXJ0aWZpY2F0ZSBNZW1iZXIxGjAY BgNVBAMTEVBldGVyIFNhaW50LUFuZHJlMSEwHwYJKoZIhvcNAQkBFhJzdHBldGVyQHN0cGV0 ZXIuaW0wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4RG+euSlBPH3Bsl+DFs0o Ri+3QiKV5xlFQzrCtsLMhQ8Khy5iFoAlxCiojIdorJs9Dt/4MgYgCiUBrd0ec12Wxc/ayZN+ 39k2mPXQ8gbluKU0CotRjCYsloRqpjsExbzjbdTduVbjf+W4smT8+rg6xZzDsArct5WHVT8c 6CqGKfbo3eHvZfWdssSlkWuBynx6CZa1csJssEMypQrePrCMuV2eLv2a7NgRWpTQDkapJ5vx ZziQjHxUjnIvbgkrOKcbaJVE/lkMRs5kRPMFclptSxXnpdLGo8b0MrqR77JsKIv/ApXUcWp2 0UHXLbmV+8eA4/aDIQCkEoQM2OAuYrLJAgMBAAGjggL7MIIC9zAJBgNVHRMEAjAAMAsGA1Ud DwQEAwIEsDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwQwHQYDVR0OBBYEFLYRbaI0 H6DQSJsoksF2/wh4ui9UMB8GA1UdIwQYMBaAFHuJnJKXJKGERwLLdPwu9KzcMuXzMB0GA1Ud EQQWMBSBEnN0cGV0ZXJAc3RwZXRlci5pbTCCAUIGA1UdIASCATkwggE1MIIBMQYLKwYBBAGB tTcBAgIwggEgMC4GCCsGAQUFBwIBFiJodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3ku cGRmMDQGCCsGAQUFBwIBFihodHRwOi8vd3d3LnN0YXJ0c3NsLmNvbS9pbnRlcm1lZGlhdGUu cGRmMIG3BggrBgEFBQcCAjCBqjAUFg1TdGFydENvbSBMdGQuMAMCAQEagZFMaW1pdGVkIExp YWJpbGl0eSwgc2VlIHNlY3Rpb24gKkxlZ2FsIExpbWl0YXRpb25zKiBvZiB0aGUgU3RhcnRD b20gQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgUG9saWN5IGF2YWlsYWJsZSBhdCBodHRwOi8v d3d3LnN0YXJ0c3NsLmNvbS9wb2xpY3kucGRmMGMGA1UdHwRcMFowK6ApoCeGJWh0dHA6Ly93 d3cuc3RhcnRzc2wuY29tL2NydHUzLWNybC5jcmwwK6ApoCeGJWh0dHA6Ly9jcmwuc3RhcnRz c2wuY29tL2NydHUzLWNybC5jcmwwgY4GCCsGAQUFBwEBBIGBMH8wOQYIKwYBBQUHMAGGLWh0 dHA6Ly9vY3NwLnN0YXJ0c3NsLmNvbS9zdWIvY2xhc3MzL2NsaWVudC9jYTBCBggrBgEFBQcw AoY2aHR0cDovL3d3dy5zdGFydHNzbC5jb20vY2VydHMvc3ViLmNsYXNzMy5jbGllbnQuY2Eu Y3J0MCMGA1UdEgQcMBqGGGh0dHA6Ly93d3cuc3RhcnRzc2wuY29tLzANBgkqhkiG9w0BAQUF AAOCAQEANW1tcka0oCvnnFz85QznjqBdTJsjvYFqeTTDvf0y/70EE22r2swS8KcuZIqEGLvp zWZ1eHrNezxFAOjqdH9o9psTeWUXZPjPzSyaL2N+eXfL12m71NyAOioMtntraUGVbrnpcABD MeO8unYwLv+bGWA9gfZrFr6rjSYBgzbQZs2wAQZtZBPUioiHQFwsuyBtowkdvIb/nvN30kvI xfdWvLUvV8lFCvcZ4vExXlG3E36YGDGvAXP9w5zT0I6IUTGWweB6SkHk7jeCqwBTXoxfKnKh K3gytJ8pMwcgbHrZEX8zq+pSW+GLbyCTZlS9D/45fn6CNxnKigTMACfhG44o2zGCA80wggPJ AgEBMIGTMIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UE CxMiU2VjdXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRD b20gQ2xhc3MgMyBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAgCLMAkGBSsOAwIa BQCgggIOMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTEwMTEx OTAyMjUzNVowIwYJKoZIhvcNAQkEMRYEFIEExlCDOFVzv1MDwwpQZ2S6v5/ZMF8GCSqGSIb3 DQEJDzFSMFAwCwYJYIZIAWUDBAECMAoGCCqGSIb3DQMHMA4GCCqGSIb3DQMCAgIAgDANBggq hkiG9w0DAgIBQDAHBgUrDgMCBzANBggqhkiG9w0DAgIBKDCBpAYJKwYBBAGCNxAEMYGWMIGT MIGMMQswCQYDVQQGEwJJTDEWMBQGA1UEChMNU3RhcnRDb20gTHRkLjErMCkGA1UECxMiU2Vj dXJlIERpZ2l0YWwgQ2VydGlmaWNhdGUgU2lnbmluZzE4MDYGA1UEAxMvU3RhcnRDb20gQ2xh c3MgMyBQcmltYXJ5IEludGVybWVkaWF0ZSBDbGllbnQgQ0ECAgCLMIGmBgsqhkiG9w0BCRAC CzGBlqCBkzCBjDELMAkGA1UEBhMCSUwxFjAUBgNVBAoTDVN0YXJ0Q29tIEx0ZC4xKzApBgNV BAsTIlNlY3VyZSBEaWdpdGFsIENlcnRpZmljYXRlIFNpZ25pbmcxODA2BgNVBAMTL1N0YXJ0 Q29tIENsYXNzIDMgUHJpbWFyeSBJbnRlcm1lZGlhdGUgQ2xpZW50IENBAgIAizANBgkqhkiG 9w0BAQEFAASCAQB0auLP2i4bN7viJNhxT/8eym9jGTXhcpOjV2DmQkdnwjzzsvWcJzNV5BC4 M+rzau5YhsiYMC5ep/od9cJvstFsfPEUQnhm3fU3nOSx2g3sgmcS5QQTXDR72T/lR91ly9BA MaAzM65BiiRqRSnKStRtEwTMLyL4HfdGwDecG0dWsZPj9aK/FUMNQ9HQtX4YlfhQub51Cflq uJg0bcNQmU+BdzqDULhXiyrEDoxPFjc9REQsxfSszaGnt2rQFeyJfKkl5i6SwobjK0DU+6fU sNzY09Xi6CQUk+ORs+qC9Sm+7L0/pshgm9FynOPMezhKvX5TmYed9YDfqY9+DvvyMCnIAAAA AAAA --------------ms030406030904000601010000-- From pflam@cs.stanford.edu Fri Nov 19 04:26:52 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 5754428B56A for ; Fri, 19 Nov 2010 04:26:52 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.802 X-Spam-Level: X-Spam-Status: No, score=-5.802 tagged_above=-999 required=5 tests=[AWL=0.197, BAYES_00=-2.599, J_CHICKENPOX_42=0.6, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LGlqXBGKB3eu for ; Fri, 19 Nov 2010 04:26:50 -0800 (PST) Received: from cs-smtp-1.Stanford.EDU (cs-smtp-1.Stanford.EDU [171.64.64.25]) by core3.amsl.com (Postfix) with ESMTP id E92663A6828 for ; Fri, 19 Nov 2010 04:26:50 -0800 (PST) Received: from xenon.stanford.edu ([171.64.66.201]) by cs-smtp-1.Stanford.EDU with esmtps (TLSv1:AES256-SHA:256) (Exim 4.60) (envelope-from ) id 1PJQ44-0004S1-5R; Fri, 19 Nov 2010 04:27:40 -0800 Received: from localhost.stanford.edu ([127.0.0.1] helo=xenon.stanford.edu) by Xenon.Stanford.EDU with esmtp (Exim 4.63) (envelope-from ) id 1PJQ41-0007LC-8C; Fri, 19 Nov 2010 04:27:37 -0800 Received: from 222.166.181.213 (SquirrelMail authenticated user pflam) by xenon.stanford.edu with HTTP; Fri, 19 Nov 2010 04:27:37 -0800 (PST) Message-ID: <45454.222.166.181.213.1290169657.squirrel@xenon.stanford.edu> Date: Fri, 19 Nov 2010 04:27:37 -0800 (PST) From: pflam@cs.stanford.edu To: "Oleg Gryb" User-Agent: SquirrelMail/1.4.8-5.el5.centos.10 MIME-Version: 1.0 Content-Type: text/plain;charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal References: In-Reply-To: X-Scan-Signature: 8702cc1dda9699d4c426511d87241f5c Cc: Dawn Song , John Mitchell , pflam@cs.stanford.edu, Devdatta Akhawe , oauth@ietf.org, Adam Barth Subject: Re: [OAUTH-WG] vulnerability in OAuth 2.0/ 1.0/ WRAP leading to DDOS attacks X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 12:26:52 -0000 Thanks, Oleg, for the note. I agree that key distribution has been a difficult problem. Since the OAuth draft 10 section 2.1 provides a mechanism for the client to authenticate to the Authz Server using some shared symmetric secret, I think the MAC scheme can be built on the presumably available shared secret. It appears that the DDoS vulnerability stated below could be addressed if we require the authorization code to be accompanied by a MAC (using a key derived from some secret shared between the Authz Server and the client), and the client validates the MAC and the freshness of the authorization code before sending it to the Authz Server. > I think there is some kind of automatic client registration protocol > under way. It will handle new clients registration and initial key > distribution, but AFAIK it's not governed by IETF's OAuth group. Do you have a link to the current draft of the registration protocol? I would be very interested to read it as this is a non-trivial problem. As an aside, I have received some very good critique in private from a few other people. I will summarize the discussion in a separate posting, later. Best, Eric On Thu, Nov 18, 2010 at 1:32 AM, Oleg Gryb wrote: The concern is valid, but proposed solution would be hard to implement: everybody who has implemented at least one crypto system where symmetric keys need to be distributed between external parties would tell you that, let alone OAuth use cases where you can have many web server clients dynamically added to existing service providers. If you add a requirement of periodic key rotation that is very common nowadays then implementation will become even more difficult. PKI would be a better approach in my view: Authz Server would need to sign using a a private key and web client will use a public key to verify the signature, but again in case of key rotation, an automatic key exchange mechanism would need to be involved. I think there is some kind of automatic client registration protocol under way. It will handle new clients registration and initial key distribution, but AFAIK it's not governed by IETF's OAuth group. ----- Original Message ---- > From: "pflam@cs.stanford.edu" > To: oauth@ietf.org > Cc: Dawn Song ; John Mitchell >; Peifung Eric Lam ; Devdatta >Akhawe ; Adam Barth > Sent: Fri, November 12, 2010 5:47:35 PM > Subject: Re: [OAUTH-WG] vulnerability in OAuth 2.0/ 1.0/ WRAP leading to DDOS >attacks > Hi, > We are a group of university researchers and have been applying a formal > approach to analyze web security protocols. Devdatta gave a talk at IIW at > Mountain View last week about our work, and a summary of our earlier results can be found at > http://theory.stanford.edu/~jcm/papers/browsermodel-csf-2010.pdf . While analyzing OAuth specifications (2.0/1.0/WRAP), we found that a vulnerability exists that can be exploited to carry out DDOS > attacks. Under the current specifications, such attacks are difficult to > differentiate from legitimate and non-malicious connections, so rate-limiting based on user identities or machine fingerprinting are likely to be ineffective. A tentative solution is proposed at the end of > this email. Any feedback is welcome! > Best, > Peifung Eric Lam > ===== > In the OAuth 2.0 and the OAuth WRAP specifications, we found that in the > Web Server/Web App profile, an attacker can send an HTTP request to the redirect URI of a client web application (with an arbitrary authorization > code), causing the client to issue an HTTPS request to the OAuth Authorization Server. The revelant sections in OAuth 2.0 Draft 10 are 1.4.1(C), and sections 3 and 4. A slightly modified attack can be mounted > against OAuth 1.0 as specified in RFC 5849. > From our initial analysis, this feature of OAuth can be exploited by attackers to launder requests through trusted OAuth clients and launch a > DDOS attack on the Authorization Server. Under the current specifications > such attacks are difficult to differentiate from legitimate and non-malicious connections, so rate-limiting based on user identities or machine fingerprinting are likely to be ineffective. > Specifically, an attacker can bombard the redirect URIs of the web application clients, causing a flood of HTTPS connections to the OAuth Authz Server. This can lead to depletion of resources on the Authz Server > and prevent HTTPS connections carrying legitimate payload from reaching the Authz Server. During such an attack, all that the Authz Server learns > (based on the 1.0, 2.0, and WRAP specs), is that a) each request comes from a registered web site which may have legitimate business making such > a request, and b) the tokens conveyed in each request. However, as the attacker can issue authorization codes that are just (pseudo-) random bit > strings not tied to any end-user identity, the Authz Server has learned little information regarding the attacker or its machines causing such frivolous connections. > A large number of web application clients integrated with the Authz Server > can help the attacker obfuscate its sources of attack and make information > collection for DDOS defense more difficult. From statistics released by popular websites (such as Facebook), we expect the number of clients can > be as high as a million. > It seems that if we require the authorization code to be signed by the Authz Server (or HMAC'ed using a shared key between the Authz Server and > the Client), and the client verifies the signature or HMAC code first before connecting to the Authz Server, then the above DDOS attack can be > largely foiled. > Please let us know if you would like to discuss this issue further so that > we can devise a clean solution to this problem. > Eran Hammer-Lahav wrote: > > > > The right place to bring this up for discussion is the IETF OAuth > mailing list: oauth@ietf.org. > > > > Thanks! > > > > EHL > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From oleg_gryb@yahoo.com Fri Nov 19 10:24:03 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1601328C0F8 for ; Fri, 19 Nov 2010 10:24:02 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.999 X-Spam-Level: X-Spam-Status: No, score=-1.999 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, J_CHICKENPOX_42=0.6] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id EbgFKLka8S3Q for ; Fri, 19 Nov 2010 10:24:00 -0800 (PST) Received: from web37602.mail.mud.yahoo.com (web37602.mail.mud.yahoo.com [209.191.87.85]) by core3.amsl.com (Postfix) with SMTP id 263043A6863 for ; Fri, 19 Nov 2010 10:24:00 -0800 (PST) Received: (qmail 7231 invoked by uid 60001); 19 Nov 2010 18:24:47 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1290191087; bh=bkUy9mPWmWivqfOQr4kn/VdK2YMuoz4LroDv+YnIxLU=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=Y28SQLjHuo+fscr6v45LDclUVrFbl+yq+dw8fSN4qs0dDx+DdqdV6wbvzwI/qJfSOf2gbmxLni0dvef5VutoctKDKwU4FlO+MAHZ6c7qPsWOn3kPwIqwEVXoTyGC4epBCQhe9nKTHTdCW4fUtvcraPC+RGtLJ4Ew7498x2cgC6k= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:X-YMail-OSG:Received:X-Mailer:References:Date:From:Reply-To:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type; b=oWilZ6CR8X6XquEP1qCOlnZB+TAohlgR2YDmnGDd8LrTlIO4lsCEM5/GD60SqNo6Osq+5XlDnKQZCfgk8NDh03SW3+iAQ3GUMhl1lWlBzk6uzVyEdWR2bnuhTqVQLcduo09kKkyF1i+grfUcVTWriHGoiHPk5jpSXdRBTUdZM5A=; Message-ID: <431046.7158.qm@web37602.mail.mud.yahoo.com> X-YMail-OSG: Vum33YwVM1nDTzu2B6TaW5zHz9lDmUf6ziPPblJi_C6qwjw GYbrAtFN9qPTvpewJAICVW5uEJzBoTgr_UEPFXq2eLzd2NxpBZD.3.CsFix0 SZmI1FiJ7jOxnLy47SXlVUe3.EmxL4jE4y5w8W_ROthvfH1YWxWjG._R4Zuz LxuVOPuggat4JBLIg1ocC_FCyvXKsl1WYxgu36EEOEpOLm_N9KlkHZt63PuE Knuk3TsFIYenxQ4wfh.kCEYZgpbfex3zl.oBbwo4Vf5xanKSbTlECv_TPGYV kpiler_jKV3AGpFzFDFSESu6ZEh.ryrKhCns6f892gdoB6t0IwsKsJ4o7har R9NJ5pOp.jC1CG9Bzl7_3XXtkRMOqrr956uzjVpPNepjckQY- Received: from [208.240.243.170] by web37602.mail.mud.yahoo.com via HTTP; Fri, 19 Nov 2010 10:24:47 PST X-Mailer: YahooMailRC/553 YahooMailWebService/0.8.107.285259 References: <45454.222.166.181.213.1290169657.squirrel@xenon.stanford.edu> Date: Fri, 19 Nov 2010 10:24:47 -0800 (PST) From: Oleg Gryb To: pflam@cs.stanford.edu In-Reply-To: <45454.222.166.181.213.1290169657.squirrel@xenon.stanford.edu> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Dawn Song , John Mitchell , pflam@cs.stanford.edu, Devdatta Akhawe , oauth@ietf.org, Adam Barth Subject: Re: [OAUTH-WG] vulnerability in OAuth 2.0/ 1.0/ WRAP leading to DDOS attacks X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: Oleg Gryb List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Nov 2010 18:24:03 -0000 I agree that there should be mitigation controls in place on web server clients: it would alleviate Authz Server task of blocking fraudulent traffic and make the whole solution more scalable. Using signatures looks like a good idea, but key distribution needs to be automated in this case. Here is a link to the protocol that I've mentioned before: https://github.com/mrtopf/UMA-Specifications/blob/master/draft-oauth-client-registration.txt It looks like the ownership has moved from UMA to IETF. The main purpose is to dynamically register Authz Server clients (both resource servers and "enhanced" OAuth clients). I'm not sure if "enhanced" clients include web server clients that we've discussed here. It would be great if somebody can clarify. It would be great also if somebody can comment on key distribution and key rotation: will it be covered by the protocol? Is the secret that initially given to an enhanced OAuth client a key? What kind of key? I didn't see too many details in the current draft. Probably it was made this way on purpose to keep all options open. ----- Original Message ---- > From: "pflam@cs.stanford.edu" > To: Oleg Gryb > Cc: Dawn Song ; John Mitchell >; pflam@cs.stanford.edu; Devdatta Akhawe >; oauth@ietf.org; Adam Barth > Sent: Fri, November 19, 2010 4:27:37 AM > Subject: Re: [OAUTH-WG] vulnerability in OAuth 2.0/ 1.0/ WRAP leading to DDOS >attacks > > Thanks, Oleg, for the note. > > I agree that key distribution has been a difficult problem. Since the > OAuth draft 10 section 2.1 provides a mechanism for the client to > authenticate to the Authz Server using some shared symmetric secret, I > think the MAC scheme can be built on the presumably available shared > secret. It appears that the DDoS vulnerability stated below could be > addressed if we require the authorization code to be accompanied by a MAC > (using a key derived from some secret shared between the Authz Server and > the client), and the client validates the MAC and the freshness of the > authorization code before sending it to the Authz Server. > > > I think there is some kind of automatic client registration protocol > > under way. It will handle new clients registration and initial key > > distribution, but AFAIK it's not governed by IETF's OAuth group. > > Do you have a link to the current draft of the registration protocol? I > would be very interested to read it as this is a non-trivial problem. > > As an aside, I have received some very good critique in private from a few > other people. I will summarize the discussion in a separate posting, > later. > > Best, > > Eric > > > > On Thu, Nov 18, 2010 at 1:32 AM, Oleg Gryb wrote: > > The concern is valid, but proposed solution would be hard to implement: > everybody who has implemented at least one crypto system where symmetric > keys > need to be distributed between external parties would tell you that, let > alone > OAuth use cases where you can have many web server clients dynamically > added to > existing service providers. If you add a requirement of periodic key > rotation > that is very common nowadays then implementation will become even more > difficult. > > > PKI would be a better approach in my view: Authz Server would need to sign > using > a a private key and web client will use a public key to verify the signature, > but again in case of key rotation, an automatic key exchange mechanism would > need to be involved. > > I think there is some kind of automatic client registration protocol under > way. > It will handle new clients registration and initial key distribution, but > AFAIK > it's not governed by IETF's OAuth group. > > > > ----- Original Message ---- > > From: "pflam@cs.stanford.edu" > > To: oauth@ietf.org > > Cc: Dawn Song ; John Mitchell > >; Peifung Eric Lam ; > Devdatta > >Akhawe ; Adam Barth > > Sent: Fri, November 12, 2010 5:47:35 PM > > Subject: Re: [OAUTH-WG] vulnerability in OAuth 2.0/ 1.0/ WRAP leading to > DDOS > >attacks > > Hi, > > We are a group of university researchers and have been applying a > formal > > approach to analyze web security protocols. Devdatta gave a talk at IIW > at > > Mountain View last week about our work, and a summary of our earlier > results can be found at > > http://theory.stanford.edu/~jcm/papers/browsermodel-csf-2010.pdf . > While analyzing OAuth specifications (2.0/1.0/WRAP), we found that a > vulnerability exists that can be exploited to carry out DDOS > > attacks. Under the current specifications, such attacks are difficult > to > > differentiate from legitimate and non-malicious connections, so > rate-limiting based on user identities or machine fingerprinting are > likely to be ineffective. A tentative solution is proposed at the end > of > > this email. Any feedback is welcome! > > Best, > > Peifung Eric Lam > > ===== > > In the OAuth 2.0 and the OAuth WRAP specifications, we found that in > the > > Web Server/Web App profile, an attacker can send an HTTP request to the > redirect URI of a client web application (with an arbitrary > authorization > > code), causing the client to issue an HTTPS request to the OAuth > Authorization Server. The revelant sections in OAuth 2.0 Draft 10 are > 1.4.1(C), and sections 3 and 4. A slightly modified attack can be > mounted > > against OAuth 1.0 as specified in RFC 5849. > > From our initial analysis, this feature of OAuth can be exploited by > attackers to launder requests through trusted OAuth clients and launch > a > > DDOS attack on the Authorization Server. Under the current > specifications > > such attacks are difficult to differentiate from legitimate and > non-malicious connections, so rate-limiting based on user identities or > machine fingerprinting are likely to be ineffective. > > Specifically, an attacker can bombard the redirect URIs of the web > application clients, causing a flood of HTTPS connections to the OAuth > Authz Server. This can lead to depletion of resources on the Authz > Server > > and prevent HTTPS connections carrying legitimate payload from reaching > the Authz Server. During such an attack, all that the Authz Server > learns > > (based on the 1.0, 2.0, and WRAP specs), is that a) each request comes > from a registered web site which may have legitimate business making > such > > a request, and b) the tokens conveyed in each request. However, as the > attacker can issue authorization codes that are just (pseudo-) random > bit > > strings not tied to any end-user identity, the Authz Server has learned > little information regarding the attacker or its machines causing such > frivolous connections. > > A large number of web application clients integrated with the Authz > Server > > can help the attacker obfuscate its sources of attack and make > information > > collection for DDOS defense more difficult. From statistics released by > popular websites (such as Facebook), we expect the number of clients > can > > be as high as a million. > > It seems that if we require the authorization code to be signed by the > Authz Server (or HMAC'ed using a shared key between the Authz Server > and > > the Client), and the client verifies the signature or HMAC code first > before connecting to the Authz Server, then the above DDOS attack can > be > > largely foiled. > > Please let us know if you would like to discuss this issue further so > that > > we can devise a clean solution to this problem. > > Eran Hammer-Lahav wrote: > > > > > > The right place to bring this up for discussion is the IETF OAuth > > mailing list: oauth@ietf.org. > > > > > > Thanks! > > > > > > EHL > > _______________________________________________ > > OAuth mailing list > > OAuth@ietf.org > > https://www.ietf.org/mailman/listinfo/oauth > > > > > > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > From lr@lukasrosenstock.net Mon Nov 22 06:25:51 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 8D5DE3A6A98 for ; Mon, 22 Nov 2010 06:25:51 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, FM_FORGED_GMAIL=0.622] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id kIM+9wJGJwYg for ; Mon, 22 Nov 2010 06:25:50 -0800 (PST) Received: from mail-wy0-f172.google.com (mail-wy0-f172.google.com [74.125.82.172]) by core3.amsl.com (Postfix) with ESMTP id 6965F3A6A8F for ; Mon, 22 Nov 2010 06:25:50 -0800 (PST) Received: by wyb29 with SMTP id 29so7103782wyb.31 for ; Mon, 22 Nov 2010 06:26:45 -0800 (PST) MIME-Version: 1.0 Received: by 10.216.174.204 with SMTP id x54mr588351wel.101.1290436000234; Mon, 22 Nov 2010 06:26:40 -0800 (PST) Received: by 10.216.235.15 with HTTP; Mon, 22 Nov 2010 06:26:40 -0800 (PST) X-Originating-IP: [91.34.39.242] In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343D470CC778@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <90C41DD21FB7C64BB94121FBBC2E72343D470CC778@P3PW5EX1MB01.EX1.SECURESERVER.NET> Date: Mon, 22 Nov 2010 15:26:40 +0100 Message-ID: From: Lukas Rosenstock To: Eran Hammer-Lahav Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: OAuth WG Subject: Re: [OAUTH-WG] VOTE: Token type response parameter X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 22 Nov 2010 14:25:51 -0000 I'm all for #3. #1 will just restart the discussions about "OAuth preferring bearer" so better drop it. #2 and #4 are bad for interoperability and extensibility. 2010/11/17 Eran Hammer-Lahav : > The new draft will include a new token_type response parameter. In my ori= ginal proposal I suggested making this an optional response parameter with = a default value of 'bearer' or 'plain' to keep existing -10 implementation = compliant with -11. > > Options are: > > 1. Missing type response parameter means bearer token > 2. Missing type response parameter means whatever the service default tok= en type is > 3. Servers must include an explicit token type with each response, where = each token spec (bearer, signed, etc.) register their own type name > 4. No token type. Type is determined by other attributes (such as secret = and hash algorithm name). > > #1 and #3 are the most consistent with current design and best for intero= p. #1 requires no changes to -10 code, but leads to ugly spec organization = (it links the bearer token spec with the framework spec). > > I'm strongly in favor of #3 as existing clients will ignore this and just= assume bearer. Any server introducing a new token type will need to change= clients anyway. Servers will need to be changed to add the new parameter b= ut that's a trivial change (and -11 includes some normative changes already= - all minor). > > So +1 on #3 for me. > > Please register your preference. > > EHL > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > From dervla@kantarainitiative.org Tue Nov 23 12:52:19 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 844603A69B9 for ; Tue, 23 Nov 2010 12:52:19 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.886 X-Spam-Level: X-Spam-Status: No, score=0.886 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HTML_FONT_FACE_BAD=0.884, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id oicrmMKZPvAB for ; Tue, 23 Nov 2010 12:52:18 -0800 (PST) Received: from bernie.kantarainitiative.org (bernie.kantarainitiative.org [204.232.242.182]) by core3.amsl.com (Postfix) with ESMTP id 4422E3A695C for ; Tue, 23 Nov 2010 12:52:15 -0800 (PST) Received: by bernie.kantarainitiative.org (Postfix, from userid 506) id 0FB2769E90A; Tue, 23 Nov 2010 15:53:13 -0500 (EST) Received: from [192.168.2.103] (c-69-181-183-29.hsd1.ca.comcast.net [69.181.183.29]) by bernie.kantarainitiative.org (Postfix) with ESMTP id EF30669E903 for ; Tue, 23 Nov 2010 15:53:11 -0500 (EST) Message-Id: <6AA60C87-8A30-4B95-B2D8-6C52A2D2FF13@kantarainitiative.org> From: Dervla O'Reilly To: OAuth@ietf.org Content-Type: multipart/alternative; boundary=Apple-Mail-32-853261963 Mime-Version: 1.0 (Apple Message framework v936) Date: Tue, 23 Nov 2010 12:53:10 -0800 X-Mailer: Apple Mail (2.936) Subject: [OAUTH-WG] Call for nominations for the Kantara Initiative 2011 IDDY (IDentity Deployment of the Year) Awards X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Nov 2010 20:52:19 -0000 --Apple-Mail-32-853261963 Content-Type: text/plain; charset=WINDOWS-1252; format=flowed; delsp=yes Content-Transfer-Encoding: quoted-printable The call for nominations for the 2011 IDDY (IDentity Deployment of the =20= Year) Awards is open! Kantara Initiative is excited to continue this =20 awards program for the fifth year. We encourage you to refer partners and organizations that could be =20 good candidates for the award program. Past winners are among the best and brightest in the identity =20 marketplace, and we look forward to honoring this year's recipients at =20= the RSA Conference, February 2011. This fifth year of IDDY Awards will honor deployments and proofs of =20 concept of all identity specifications anyone that utilizes any open/=20 standard identity technology, including ID-WSF, Identity services from =20= the Cloud, IGF, Information Cards, OATH, OAuth, OpenID, OpenSocial, =20 OPML, PKI, RDF, RSS, SAML, WS-Security, WS-Trust, WS, XACML, XDI, XMPP =20= extensions, XRD, XRI, etc., is encouraged to participate. Below you will find documents that outline the judging criteria for =20 the proof of concept (POC) and the deployment categories. The =20 application forms are available as well. IDDYAwards 2011 Identity Deployment Category Judging Criteria final.pdf IDDYAwards 2011 Identity Deployment Nomination Form final.pdf IDDYAwards 2011 POC Emerging Applications Category Criteria final.pdf IDDYAwards 2011 POC Emerging Nomination Form final.pdf Key dates to remember: Applications due: January 5, 2011 by midnight PT---submit to = iddy@kantarainiative.org Award winners notified by January 17, 2011 IDDY Award presentation February 14, 2011 2009 IDDY Award winners: IDDY Deployment award winners: Google and Plaxo, Signicat, The U.S. =20 Department of Defense. IDDY Proof of Concept (POC) awards: fun communications, Gemalto and =20 Vodafone, NRI and NTT and Oracle. Have questions? Contact =96 iddy@kantarainitiative.org Good luck! ________________________ Dervla O=92Reilly Program Manager Kantara Initiative +1 415 731 4487 business +1 415 948 3650 mobile +1 415 202 5212 Skype +1 509 757 4487 fax dervla[at]kantarainitiative[dot]org http://www.kantarainitiative.org --Apple-Mail-32-853261963 Content-Type: text/html; charset=WINDOWS-1252 Content-Transfer-Encoding: quoted-printable
The call for nominations for = the 2011 IDDY (IDentity Deployment of the Year) = Awards is = open! Kantara Initiative is excited to continue this awards = program for the fifth year. 

We encourage you to refer partners and = organizations that could be good candidates for the award = program. 

This fifth year of IDDY Awards will honor = deployments and proofs of concept of all identity specifications anyone = that utilizes any open/standard identity technology, including ID-WSF, = Identity services from the Cloud, IGF, Information Cards, OATH, OAuth, = OpenID, OpenSocial, OPML, PKI, RDF, RSS, SAML, WS-Security, WS-Trust, = WS, XACML, XDI, XMPP extensions, XRD, XRI, etc., is encouraged to = participate.

Applications due: January 5, 2011 by = midnight PT---submit to Award winners notified by January 17, = 2011


= --Apple-Mail-32-853261963-- From Michael.Jones@microsoft.com Tue Nov 23 15:38:08 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 069D43A6987 for ; Tue, 23 Nov 2010 15:38:08 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -10.598 X-Spam-Level: X-Spam-Status: No, score=-10.598 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_HI=-8] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id tliYMugOryWu for ; Tue, 23 Nov 2010 15:37:59 -0800 (PST) Received: from smtp.microsoft.com (smtp.microsoft.com [131.107.115.212]) by core3.amsl.com (Postfix) with ESMTP id 0214E3A68F5 for ; Tue, 23 Nov 2010 15:37:58 -0800 (PST) Received: from TK5EX14CASC131.redmond.corp.microsoft.com (157.54.52.38) by TK5-EXGWY-E801.partners.extranet.microsoft.com (10.251.56.50) with Microsoft SMTP Server (TLS) id 8.2.176.0; Tue, 23 Nov 2010 15:38:57 -0800 Received: from TK5EX14MBXC201.redmond.corp.microsoft.com ([169.254.8.228]) by TK5EX14CASC131.redmond.corp.microsoft.com ([157.54.52.38]) with mapi id 14.01.0255.003; Tue, 23 Nov 2010 15:38:57 -0800 From: Mike Jones To: Eran Hammer-Lahav Thread-Topic: Feedback on preliminary draft 11 from implementers of draft 10 Thread-Index: AcuLZ4S/L+jcb4bQTGW5Vy1JIsr0hQ== Date: Tue, 23 Nov 2010 23:38:56 +0000 Message-ID: <4E1F6AAD24975D4BA5B16804296739432461C3F9@TK5EX14MBXC201.redmond.corp.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [157.54.51.75] Content-Type: multipart/alternative; boundary="_000_4E1F6AAD24975D4BA5B16804296739432461C3F9TK5EX14MBXC201r_" MIME-Version: 1.0 Cc: "oauth@ietf.org" Subject: [OAUTH-WG] Feedback on preliminary draft 11 from implementers of draft 10 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 23 Nov 2010 23:38:08 -0000 --_000_4E1F6AAD24975D4BA5B16804296739432461C3F9TK5EX14MBXC201r_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hi Eran, As promised, here's some feedback on your preliminary draft 11 of September 3rd from those here who= implemented draft 10. -- Mike Normative Issues 4.1, 4.2, 4.3.1, 5, 5.2, 5.3.1, 6.2, 6.2.1 "Scope" parameter should be pair= ed with complimentary "resource" parameter It is desirable to be able to have a single service protecting multiple res= ources. To achieve that, there needs to be a parameter specifying what the= desired resource being accessed is. This is different than scope. At lea= st as we're using it, "scope" would be a space-separated list of kinds of a= ccess requested. For instance you might be requesting read access to someo= ne's calendar free/busy times and the right to post new calendar requests. = Those would be scope statements and would use URIs specifying those rights= . Therefore, we request that an additional optional "resource" parameter be a= dded to the specification in the same places that "scope" appears. "Resour= ce" would be the URI (probably a URL) of the resource being protected by th= e service. 4.1, 5 Parameters without a value These sections say that "Parameters sent without a value MUST be treated as= if they were omitted from the request." This excludes the possibility of = the semantics of a value which is supplied as the empty string being differ= ent from an omitted parameter. 6.2 "Error" result should be required unless the request lacks any authent= ication information For the error response from the protected resource, the error code is prese= ntly optional. By making it required, clients can programmatically detect = this condition and request a new access token using the refresh token. 5.2, 6.1, 6.2 Type information only communicated in early legs of the prot= ocol While a grant_type is required in 5 and 5.1, no facility is present for com= municating token/grant types in the subsequent legs of the protocol. Pleas= e add an optional parameter enabling a token/grant type to be communicated = in 5.2, 6.1, and 6.2. 6.1.3 Restriction to POST, PUT, and DELETE verbs overly restrictive The more logical restriction would be to verbs containing a body (i.e. - no= t GET). (Yes, I realize that this comment actually applies to my spec afte= r the split, but I'm including it here for completeness.) 6.2 error_uri simplification We should mandate that the error_uri is fully qualified. (Relative URLs ar= e unnecessarily difficult to manage for this context.) 6.2 Other response parameters Shouldn't there be language in 6.2 that explicitly allows for other argumen= ts to be added to the response and mandates that they be ignored if not rec= ognized? Also, possibly some language about how to add new values such as r= egistering them with IANA? (many) Unifying treatment of tokens And finally, as we discussed, it would be desirable to be able use the same= protocol flow to obtain an authorization code as to obtain access and refr= esh tokens. One way to achieve this would be, for instance, to use tokens = that represent username/password and then present those through the OAuth s= cheme in the HTTP Authorization header. Other kinds of tokens could be use= d as well. Then the authorization server could be simply another instance = of a protected resource. I realize that this isn't fully fleshed out but I wanted to raise this issu= e now and follow up with a concrete proposal soon. Editorial Issues 1.2 Terminology * "authorization endpoint" and "authorization server" are both used= in the draft. The draft doesn't make it clear whether these terms are equ= ivalent or not. If not, they should both be defined. If so, you should ch= oose one. * 3.0 uses term "client operator". This should either be just "cli= ent" or you should define "client operator". * The term "Authorization code" is underspecified. In practice, th= e working definition of the term "authorization code" appears to be scatter= ed throughout the document, including 1.2, 1.4.1, 3.2 , and 5.1.1. Nowher= e, for instance, does it say what the syntax of a code can be. (I'm pretty= sure I know, but the document should make this explicit.) 3.0 Security considerations statement in Client Credentials section This section says "Authorization servers SHOULD NOT issue client secrets to= clients incapable of keeping their secrets confidential." This should go = in the security considerations section, issue is there is, in general, no w= ay to figure this out at runtime. 3.1 Statement about shared symmetric secrets This section says that "client password credentials use a shared symmetric = secret". In fact, these could be OTPs values based upon an asymmetric secr= et. 3.2 Security considerations statement in Client Assertion Credentials sect= ion This section says "The client assertion credentials are used in cases where= a password (clear-text shared symetric secret) is unsuitable or does not p= rovide sufficient security for client authentication. In such cases it is c= ommon to use other mechanisms such as HMAC or digital signatures that do no= t require sending clear-text secrets." This is a security considerations s= tatement - not a normative statement. 4, 5 "service documentation" and relationship to discovery underspecified The term "service documentation" is used twice without being defined. The = possibility of these endpoints being obtained through discovery, rather tha= n service documentation, should also likely be explicitly acknowledged. --_000_4E1F6AAD24975D4BA5B16804296739432461C3F9TK5EX14MBXC201r_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

Hi Eran,

 

As promised, here’s some feedback on your preliminary draft 11 of September 3rd from those here who im= plemented draft 10.

 

        &nbs= p;            &= nbsp;           &nbs= p;            &= nbsp;           &nbs= p;     -- Mike

 

Normative Issues=

 

4.1, 4.2, 4.3.1, 5, 5.2, 5.3.1, 6.2, 6.2.1 “= ;Scope” parameter should be paired with complimentary “resource= ” parameter

 

It is desirable to be able to have a single service = protecting multiple resources.  To achieve that, there needs to be a p= arameter specifying what the desired resource being accessed is.  This= is different than scope.  At least as we’re using it, “scope” would be a space-separated list of kinds of = access requested.  For instance you might be requesting read access to= someone’s calendar free/busy times and the right to post new calenda= r requests.  Those would be scope statements and would use URIs specifying those rights.

 

Therefore, we request that an additional optional &#= 8220;resource” parameter be added to the specification in the same pl= aces that “scope” appears.  “Resource” would b= e the URI (probably a URL) of the resource being protected by the service.<= o:p>

 

4.1, 5 Parameters without a value<= /p>

 

These sections say that “Parameters sent witho= ut a value MUST be treated as if they were omitted from the request.”=   This excludes the possibility of the semantics of a value which is s= upplied as the empty string being different from an omitted parameter.

 

6.2  “Error” result should be re= quired unless the request lacks any authentication information

 

For the error response from the protected resource, = the error code is presently optional.  By making it required, clients = can programmatically detect this condition and request a new access token u= sing the refresh token.

 

5.2, 6.1, 6.2  Type information only communi= cated in early legs of the protocol

 

While a grant_type is required in 5 and 5.1, no faci= lity is present for communicating token/grant types in the subsequent legs = of the protocol.  Please add an optional parameter enabling a token/gr= ant type to be communicated in 5.2, 6.1, and 6.2.

 

6.1.3  Restriction to POST, PUT, and DELETE = verbs overly restrictive

 

The more logical restriction would be to verbs conta= ining a body (i.e. – not GET).  (Yes, I realize that this commen= t actually applies to my spec after the split, but I’m including it h= ere for completeness.)

 

6.2  error_uri simplification=

 

We should mandate that the error_uri is fully qualif= ied.  (Relative URLs are unnecessarily difficult to manage for this co= ntext.)

 

6.2  Other response parameters

 

Shouldn’t there be language in 6.2 that explic= itly allows for other arguments to be added to the response and mandates th= at they be ignored if not recognized? Also, possibly some language about ho= w to add new values such as registering them with IANA?

 

 

(many) Unifying treatment of tokens

 

And finally, as we discussed, it would be desirable = to be able use the same protocol flow to obtain an authorization code as to= obtain access and refresh tokens.  One way to achieve this would be, = for instance, to use tokens that represent username/password and then present those through the OAuth scheme in the H= TTP Authorization header.  Other kinds of tokens could be used as well= .  Then the authorization server could be simply another instance of a= protected resource.

 

I realize that this isn’t fully fleshed out bu= t I wanted to raise this issue now and follow up with a concrete proposal s= oon.

 

Editorial Issues=

 

1.2  Terminology

 

·         “authorization endpoint” and = 220;authorization server” are both used in the draft.  The draft= doesn’t make it clear whether these terms are equivalent or not.&nbs= p; If not, they should both be defined.  If so, you should choose one.=

·         3.0 uses term “client operator”.=   This should either be just “client” or you should define= “client operator”.

·         The term “Authorization code” is= underspecified.  In practice, the working definition of the term R= 20;authorization code” appears to be scattered throughout the documen= t, including 1.2, 1.4.1, 3.2 , and  5.1.1.  Nowhere, for instance= , does it say what the syntax of a code can be.  (I’m pretty sure= I know, but the document should make this explicit.)

 

3.0 Security considerations statement in Client C= redentials section

 

This section says “Authorization servers SHOUL= D NOT issue client secrets to clients incapable of keeping their secrets co= nfidential.”  This should go in the security considerations sect= ion, issue is there is, in general, no way to figure this out at runtime.

 

3.1  Statement about shared symmetric secret= s

 

This section says that “client password creden= tials use a shared symmetric secret”.  In fact, these could be O= TPs values based upon an asymmetric secret.

 

3.2  Security considerations statement in Cl= ient Assertion Credentials section

 

This section says “The client assertion creden= tials are used in cases where a password (clear-text shared symetric secret= ) is unsuitable or does not provide sufficient security for client authenti= cation. In such cases it is common to use other mechanisms such as HMAC or digital signatures that do not require se= nding clear-text secrets.”  This is a security considerations st= atement – not a normative statement.

 

4, 5  “service documentation” an= d relationship to discovery underspecified

 

The term “service documentation” is used= twice without being defined.  The possibility of these endpoints bein= g obtained through discovery, rather than service documentation, should als= o likely be explicitly acknowledged.

 

--_000_4E1F6AAD24975D4BA5B16804296739432461C3F9TK5EX14MBXC201r_-- From eran@hueniverse.com Tue Nov 23 23:56:26 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 420843A69A1 for ; Tue, 23 Nov 2010 23:56:26 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id O3p+1Y-dNdYL for ; Tue, 23 Nov 2010 23:56:25 -0800 (PST) Received: from p3plex1out02.prod.phx3.secureserver.net (p3plex1out02.prod.phx3.secureserver.net [72.167.180.18]) by core3.amsl.com (Postfix) with SMTP id 66B2A3A6993 for ; Tue, 23 Nov 2010 23:56:24 -0800 (PST) Received: (qmail 29270 invoked from network); 24 Nov 2010 07:57:23 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.19) by p3plex1out02.prod.phx3.secureserver.net with SMTP; 24 Nov 2010 07:57:22 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT001.EX1.SECURESERVER.NET ([72.167.180.19]) with mapi; Wed, 24 Nov 2010 00:57:22 -0700 From: Eran Hammer-Lahav To: OAuth WG Date: Wed, 24 Nov 2010 00:57:31 -0700 Thread-Topic: Dropping 'realm' parameter Thread-Index: AcuLrE0WNL4CckMHSC6Rvg1Kh0kB/Q== Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3B191@P3PW5EX1MB01.EX1.SECURESERVER.NET> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [OAUTH-WG] Dropping 'realm' parameter X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Nov 2010 07:56:26 -0000 Over the past year we had consensus that the WWW-Authenticate header field = 'realm' parameter is both poorly defined and useless in OAuth. Realm does n= ot provide a useful mechanism for the complexity of OAuth tokens and the re= lationship between the protected resource and authorization server. RFC 2617 language is cryptic at best with regard to when 'realm' is require= d. HTTPbis has an open issue (#177 [1]) for deciding what to do with 'realm= '. Since 'realm' does not provide value for OAuth, and is only adding noise an= d confusion, I am removing it from -11. I'm passing the ball to the HTTPbis= WG to figure out how to deal with it. My schedule has been very busy over the past few months and I was unable to= complete -11 as planned. I will be publishing -11 this week no matter what= shape the draft is in as it now includes many normative changes collected = over the past few months. EHL [1] http://trac.tools.ietf.org/wg/httpbis/trac/ticket/177 From frumiousjohn@gmail.com Wed Nov 24 08:22:15 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id D08B528C143 for ; Wed, 24 Nov 2010 08:22:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.977 X-Spam-Level: X-Spam-Status: No, score=-1.977 tagged_above=-999 required=5 tests=[AWL=0.001, BAYES_00=-2.599, FM_FORGED_GMAIL=0.622] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id R9L1iTkw3FG9 for ; Wed, 24 Nov 2010 08:22:15 -0800 (PST) Received: from mail-wy0-f172.google.com (mail-wy0-f172.google.com [74.125.82.172]) by core3.amsl.com (Postfix) with ESMTP id BC04E28C121 for ; Wed, 24 Nov 2010 08:22:14 -0800 (PST) Received: by wyb29 with SMTP id 29so9661206wyb.31 for ; Wed, 24 Nov 2010 08:23:14 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:sender:received :in-reply-to:references:date:x-google-sender-auth:message-id:subject :from:to:content-type:content-transfer-encoding; bh=nI63/SqOlqVI+USl1fIJvsIkHRsG6O7V07UkpvK+I94=; b=JKjY30g46HEeQVPpDvM1Eie5Nk3NcRKg5PyJc2DVDPqoi5cKtlUqBlkuVHYXnRJbwe PbqM8fROKTXt/4w12eluflX4fAjjBsFgW1IKFDXFx8r8JMSiEr+QupeCT9najmgcm/mb uzUlpAzQuYOIBfNnnQ5Nw9LB9ONQDg1RbWCaw= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:content-type :content-transfer-encoding; b=PSW01SasgSzuaq329Tng7I07i6FYNlHUk9f49bXTbb8ZdZIQLoLxJN+I+uMDp65klE npX2Yr4rWf6qmj/4jDsgOM+ES7Fc0S+XJ5wu2xXaUyt5/pwDI2HwKPTMezcjI0CILtKe JYgags3tO1mRY5F3f0+PakoB0CJNlXdZz2KNs= MIME-Version: 1.0 Received: by 10.227.127.75 with SMTP id f11mr9586004wbs.69.1290615792828; Wed, 24 Nov 2010 08:23:12 -0800 (PST) Sender: frumiousjohn@gmail.com Received: by 10.227.196.194 with HTTP; Wed, 24 Nov 2010 08:23:11 -0800 (PST) In-Reply-To: References: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3B191@P3PW5EX1MB01.EX1.SECURESERVER.NET> Date: Wed, 24 Nov 2010 11:23:11 -0500 X-Google-Sender-Auth: Sk-Mb_h_i-wwVzxKjd9SCdV-2KA Message-ID: From: John Kemp To: oauth@ietf.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Subject: [OAUTH-WG] Fwd: Dropping 'realm' parameter X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Nov 2010 16:22:16 -0000 Forgot to reply to all... ---------- Forwarded message ---------- From: John Kemp Date: Wed, Nov 24, 2010 at 11:22 AM Subject: Re: [OAUTH-WG] Dropping 'realm' parameter To: Eran Hammer-Lahav Hi Eran, On Wed, Nov 24, 2010 at 2:57 AM, Eran Hammer-Lahav wr= ote: > Over the past year we had consensus that the WWW-Authenticate header fiel= d 'realm' parameter is both poorly defined and useless in OAuth. Realm does= not provide a useful mechanism for the complexity of OAuth tokens and the = relationship between the protected resource and authorization server. > > RFC 2617 language is cryptic at best with regard to when 'realm' is requi= red. HTTPbis has an open issue (#177 [1]) for deciding what to do with 'rea= lm'. > > Since 'realm' does not provide value for OAuth, and is only adding noise = and confusion, I am removing it from -11. I'm passing the ball to the HTTPb= is WG to figure out how to deal with it. RFC2617 (section 3.2.1 of http://tools.ietf.org/html/rfc2617) says this when describing the realm parameter: =A0 =A0'A string to be displayed to users so they know which username and =A0 =A0 password to use. This string should contain at least the name of =A0 =A0 the host performing the authentication and might additionally =A0 =A0 indicate the collection of users who might have access. An example =A0 =A0 might be "registered_users@gotham.news.com".' Is it true then that realm provides no value for OAuth? The information contained there could be passed to users in some other way of course, if we assume that it will be done so by the authz service, and not by the client... But probably it would be nice if there was some interop around the display of the name of the service which is asking the user to grant access to protected resources. Regards, - John > > My schedule has been very busy over the past few months and I was unable = to complete -11 as planned. I will be publishing -11 this week no matter wh= at shape the draft is in as it now includes many normative changes collecte= d over the past few months. > > EHL > > [1] http://trac.tools.ietf.org/wg/httpbis/trac/ticket/177 > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > From eran@hueniverse.com Wed Nov 24 08:36:50 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A2FB73A6983 for ; Wed, 24 Nov 2010 08:36:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id TUcI1CRHNVYw for ; Wed, 24 Nov 2010 08:36:49 -0800 (PST) Received: from p3plex1out01.prod.phx3.secureserver.net (p3plex1out01.prod.phx3.secureserver.net [72.167.180.17]) by core3.amsl.com (Postfix) with SMTP id A01333A6981 for ; Wed, 24 Nov 2010 08:36:49 -0800 (PST) Received: (qmail 23452 invoked from network); 24 Nov 2010 16:37:48 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.21) by p3plex1out01.prod.phx3.secureserver.net with SMTP; 24 Nov 2010 16:37:46 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT003.EX1.SECURESERVER.NET ([72.167.180.21]) with mapi; Wed, 24 Nov 2010 09:37:39 -0700 From: Eran Hammer-Lahav To: John Kemp , "oauth@ietf.org" Date: Wed, 24 Nov 2010 09:37:27 -0700 Thread-Topic: [OAUTH-WG] Fwd: Dropping 'realm' parameter Thread-Index: AcuL8/Ky02fNN6MnRPKx1Oh6nar49gAAc2zA Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3B21B@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3B191@P3PW5EX1MB01.EX1.SECURESERVER.NET> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [OAUTH-WG] Fwd: Dropping 'realm' parameter X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 24 Nov 2010 16:36:50 -0000 This description of realm doesn't really fit into the OAuth model, as OAuth= challenges are not meant for end users, but for clients. The problem with = realm is that the existing experience (i.e. Basic) does not match OAuth. Re= alm does not improve interop because we can't figure out how to use it prop= erly. Note that 'realm' will still be allowed if someone can figure out a u= seful way to use it. Currently, if you drop 'realm', nothing happens - that= 's not a good sign. EHL > -----Original Message----- > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > Of John Kemp > Sent: Wednesday, November 24, 2010 8:23 AM > To: oauth@ietf.org > Subject: [OAUTH-WG] Fwd: Dropping 'realm' parameter >=20 > Forgot to reply to all... >=20 > ---------- Forwarded message ---------- > From: John Kemp > Date: Wed, Nov 24, 2010 at 11:22 AM > Subject: Re: [OAUTH-WG] Dropping 'realm' parameter > To: Eran Hammer-Lahav >=20 >=20 > Hi Eran, >=20 > On Wed, Nov 24, 2010 at 2:57 AM, Eran Hammer-Lahav > wrote: > > Over the past year we had consensus that the WWW-Authenticate header > field 'realm' parameter is both poorly defined and useless in OAuth. Real= m > does not provide a useful mechanism for the complexity of OAuth tokens > and the relationship between the protected resource and authorization > server. > > > > RFC 2617 language is cryptic at best with regard to when 'realm' is req= uired. > HTTPbis has an open issue (#177 [1]) for deciding what to do with 'realm'= . > > > > Since 'realm' does not provide value for OAuth, and is only adding nois= e > and confusion, I am removing it from -11. I'm passing the ball to the HTT= Pbis > WG to figure out how to deal with it. >=20 > RFC2617 (section 3.2.1 of http://tools.ietf.org/html/rfc2617) says this w= hen > describing the realm parameter: >=20 > =A0 =A0'A string to be displayed to users so they know which username and > =A0 =A0 password to use. This string should contain at least the name of > =A0 =A0 the host performing the authentication and might additionally > =A0 =A0 indicate the collection of users who might have access. An exampl= e > =A0 =A0 might be "registered_users@gotham.news.com".' >=20 > Is it true then that realm provides no value for OAuth? The information > contained there could be passed to users in some other way of course, if = we > assume that it will be done so by the authz service, and not by the clien= t... > But probably it would be nice if there was some interop around the displa= y of > the name of the service which is asking the user to grant access to prote= cted > resources. >=20 > Regards, >=20 > - John >=20 > > > > My schedule has been very busy over the past few months and I was > unable to complete -11 as planned. I will be publishing -11 this week no > matter what shape the draft is in as it now includes many normative chang= es > collected over the past few months. > > > > EHL > > > > [1] http://trac.tools.ietf.org/wg/httpbis/trac/ticket/177 > > > > _______________________________________________ > > OAuth mailing list > > OAuth@ietf.org > > https://www.ietf.org/mailman/listinfo/oauth > > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From James.H.Manger@team.telstra.com Wed Nov 24 21:30:01 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 724663A698D for ; Wed, 24 Nov 2010 21:30:01 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.184 X-Spam-Level: X-Spam-Status: No, score=-1.184 tagged_above=-999 required=5 tests=[AWL=-0.283, BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, RELAY_IS_203=0.994] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id nngQCBfBoCkM for ; Wed, 24 Nov 2010 21:30:00 -0800 (PST) Received: from ipxbvo.tcif.telstra.com.au (ipxbvo.tcif.telstra.com.au [203.35.135.204]) by core3.amsl.com (Postfix) with ESMTP id 026D03A693A for ; Wed, 24 Nov 2010 21:29:58 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.59,252,1288530000"; d="scan'208";a="18333468" Received: from unknown (HELO ipccvi.tcif.telstra.com.au) ([10.97.217.208]) by ipobvi.tcif.telstra.com.au with ESMTP; 25 Nov 2010 16:30:57 +1100 X-IronPort-AV: E=McAfee;i="5400,1158,6177"; a="13928067" Received: from wsmsg3753.srv.dir.telstra.com ([172.49.40.174]) by ipccvi.tcif.telstra.com.au with ESMTP; 25 Nov 2010 16:30:57 +1100 Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by WSMSG3753.srv.dir.telstra.com ([172.49.40.174]) with mapi; Thu, 25 Nov 2010 16:30:57 +1100 From: "Manger, James H" To: Eran Hammer-Lahav , OAuth WG Date: Thu, 25 Nov 2010 16:30:55 +1100 Thread-Topic: ABNF in draft 11 Thread-Index: AcuLrE0WNL4CckMHSC6Rvg1Kh0kB/QArB9Zg Message-ID: <255B9BB34FB7D647A506DC292726F6E112789E5CDD@WSMSG3153V.srv.dir.telstra.com> References: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3B191@P3PW5EX1MB01.EX1.SECURESERVER.NET> In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3B191@P3PW5EX1MB01.EX1.SECURESERVER.NET> Accept-Language: en-US, en-AU Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, en-AU Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [OAUTH-WG] ABNF in draft 11 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Nov 2010 05:30:01 -0000 Eran, > I will be publishing -11 this week no matter what shape the draft is in > as it now includes many normative changes collected over the past few mon= ths. You are probably still editing this text (https://github.com/theRazorBlade/= draft-ietf-oauth/blob/master/draft-ietf-oauth-v2.txt) but here are some com= ments on the ABNF (mainly in section 6.2 "The WWW-Authenticate Response Hea= der Field"): The "error", "error_description", "error_uri", "scope", and extra parameter= s in a "WWW-Authenticate: OAuth2 ..." header have to appear in this order a= ccording to the ABNF. I think it would be better if they could appear in an= y order. The ABNF implies there will be a extra leading comma (now that the mandator= y "realm" attribute has been dropped), eg WWW-Authenticate: OAuth2 ,error= =3D"xyz". Defining the "error" value as a , but in double quotes is weird. I b= elieve the idea is that header parameter values are either s (no quo= tes) or s (in double quotes). The rule is missing the parameter name: scope =3D "scope" "=3D" ... Its value is also strange. One choice is a , which doesn't in= volve any quoting! I think it would be better to simply make all these parameter values s. I assume the and rules should be removed as th= ey will appear in the other part after the spec split. Any new parameter value (defined with the rule in section 7.3= ) should match | , not the OAuth-specific rule. Using as a parameter value is not really legal as RFC2617 (a= nd draft-ietf-httpbis-p7-auth-12) require | for par= ameter values. includes characters not in . I guess it is too late to use space-separated or semicolon-separated parame= ters, instead of comma-separated parameters, to avoid confusion when multip= le WWW-Authenticate headers are combined as HTTP intermediaries are allowed= to do (in which case their values are separated with commas). [Not too lat= e for OAuth, but too late for HTTP auth in general] What error is returned when a request has no authentication? The status code should be a 401 so the closest error is "invalid_token", th= ough it is not really appropriate. It is such a shame a WWW-Authentication response header can give details ab= out OAuth errors, but not providing the basic OAuth information such as a u= ser authorization URI, a client credential swap URI, and a token refresh UR= I. -- James Manger From eran@hueniverse.com Wed Nov 24 23:03:11 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E95DC3A6AAB for ; Wed, 24 Nov 2010 23:03:11 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 9BlEAEtxLWla for ; Wed, 24 Nov 2010 23:03:11 -0800 (PST) Received: from p3plex1out02.prod.phx3.secureserver.net (p3plex1out02.prod.phx3.secureserver.net [72.167.180.18]) by core3.amsl.com (Postfix) with SMTP id E0DB53A6AA6 for ; Wed, 24 Nov 2010 23:03:10 -0800 (PST) Received: (qmail 19157 invoked from network); 25 Nov 2010 07:04:10 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.19) by p3plex1out02.prod.phx3.secureserver.net with SMTP; 25 Nov 2010 07:04:10 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT001.EX1.SECURESERVER.NET ([72.167.180.19]) with mapi; Thu, 25 Nov 2010 00:04:11 -0700 From: Eran Hammer-Lahav To: "Manger, James H" , OAuth WG Date: Thu, 25 Nov 2010 00:04:01 -0700 Thread-Topic: ABNF in draft 11 Thread-Index: AcuLrE0WNL4CckMHSC6Rvg1Kh0kB/QArB9ZgAATzm+A= Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4B06532C@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3B191@P3PW5EX1MB01.EX1.SECURESERVER.NET> <255B9BB34FB7D647A506DC292726F6E112789E5CDD@WSMSG3153V.srv.dir.telstra.com> In-Reply-To: <255B9BB34FB7D647A506DC292726F6E112789E5CDD@WSMSG3153V.srv.dir.telstra.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [OAUTH-WG] ABNF in draft 11 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Nov 2010 07:03:12 -0000 Thanks James. This is my current text. Let me know if there are more issues. EHL --- 6.2. The WWW-Authenticate Response Header Field If the protected resource request does not include authentication credentials, contains an invalid access token, or is malformed, the resource server MUST include the HTTP "WWW-Authenticate" response header field. The "WWW-Authenticate" header field uses the framework defined by [RFC2617] as follows: challenge =3D "OAuth2" RWS #param param =3D scope / error / error-desc / error-uri / ( token "=3D" ( token / quoted-string ) ) scope =3D "scope" "=3D" <"> scope-v *( SP scope-v ) <"> scope-v =3D 1*quoted-char quoted-char =3D ALPHA / DIGIT / "!" / "#" / "$" / "%" / "&" / "'" / "(" / ")" / "*" / "+" / "-" / "." / "/" / ":" / "<" / "=3D" / ">" / "?" / "@" / "[" / "]" / "^" / "_" / "`" / "{" / "|" / "}" / "~" / "\" / "," / ";" error =3D "error" "=3D" quoted-string error-desc =3D "error_description" "=3D" quoted-string error-uri =3D "error_uri" =3D <"> URI-Reference <"> The "scope" attribute is a space-delimited list of scope values indicating the required scope of the access token for accessing the requested resource. The "scope" attribute MUST NOT appear more than once. If the protected resource request included an access token and failed authentication, the resource server SHOULD include the "error" attribute to provide the client with the reason why the access request was declined. The parameter value is described in Section 6.2.1. In addition, the resource server MAY include the "error_description" attribute to provide a human-readable explanation, and the "error-uri" attribute with an absolute URI identifying a human-readable web page explaining the error. The "error", "error_description", and "error_uri" attribute MUST NOT appear more than once. For example, in response to a protected resource request without authentication: HTTP/1.1 401 Unauthorized WWW-Authenticate: OAuth2 And in response to a protected resource request with an authentication attempt using an expired access token: HTTP/1.1 401 Unauthorized WWW-Authenticate: OAuth2 error=3D"invalid_token", error_description=3D"The access token expired" From eran@hueniverse.com Wed Nov 24 23:30:49 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 6A7973A68FA for ; Wed, 24 Nov 2010 23:30:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[AWL=0.000, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id QiiUMQfvHXE3 for ; Wed, 24 Nov 2010 23:30:47 -0800 (PST) Received: from p3plex1out02.prod.phx3.secureserver.net (p3plex1out02.prod.phx3.secureserver.net [72.167.180.18]) by core3.amsl.com (Postfix) with SMTP id 291133A6A8D for ; Wed, 24 Nov 2010 23:30:47 -0800 (PST) Received: (qmail 5785 invoked from network); 25 Nov 2010 07:31:48 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.20) by p3plex1out02.prod.phx3.secureserver.net with SMTP; 25 Nov 2010 07:31:48 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT002.EX1.SECURESERVER.NET ([72.167.180.20]) with mapi; Thu, 25 Nov 2010 00:31:48 -0700 From: Eran Hammer-Lahav To: Mike Jones Date: Thu, 25 Nov 2010 00:31:38 -0700 Thread-Topic: Feedback on preliminary draft 11 from implementers of draft 10 Thread-Index: AcuLZ4S/L+jcb4bQTGW5Vy1JIsr0hQBB52LQ Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4B06532D@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <4E1F6AAD24975D4BA5B16804296739432461C3F9@TK5EX14MBXC201.redmond.corp.microsoft.com> In-Reply-To: <4E1F6AAD24975D4BA5B16804296739432461C3F9@TK5EX14MBXC201.redmond.corp.microsoft.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: "oauth@ietf.org" Subject: Re: [OAUTH-WG] Feedback on preliminary draft 11 from implementers of draft 10 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Nov 2010 07:30:49 -0000 Thanks Mike! Comments inline. > Normative Issues >=20 > 4.1, 4.2, 4.3.1, 5, 5.2, 5.3.1, 6.2, 6.2.1 "Scope" parameter should be pa= ired with > complimentary "resource" parameter I am more inclined to drop 'scope' than to include 'resource'. Scope as cur= rently defined can easily accommodate resource - we specifically chose spac= e-delimited to allow URI values. If you want a new parameter, *you* will ha= ve to build consensus. Not wearing my editor hat, I'm -1. =20 > 4.1, 5 Parameters without a value >=20 > These sections say that "Parameters sent without a value MUST be treated > as if they were omitted from the request."=A0 This excludes the possibili= ty of > the semantics of a value which is supplied as the empty string being diff= erent > from an omitted parameter. That's a good thing for interop. Do you have examples where this is a probl= em for the parameters defined in this specification? This does not have to = apply to extensions which are allowed to opt-out of this. =20 > 6.2=A0 "Error" result should be required unless the request lacks any > authentication information >=20 > For the error response from the protected resource, the error code is > presently optional.=A0 By making it required, clients can programmaticall= y > detect this condition and request a new access token using the refresh > token. I already upgraded it to a SHOULD. Any strong support for a MUST for the 'e= rror' attribute when the request includes authentication? > 5.2, 6.1, 6.2=A0 Type information only communicated in early legs of the = protocol >=20 > While a grant_type is required in 5 and 5.1, no facility is present for > communicating token/grant types in the subsequent legs of the > protocol.=A0 Please add an optional parameter enabling a token/grant type= to > be communicated in 5.2, 6.1, and 6.2. What for? The grant type only matters when including an access grant. Inclu= ding it in 5.2 is odd and in 6.1 or 6.2 would violate the architecture (iso= lating the access grant from the token request).=20 > 6.1.3=A0 Restriction to POST, PUT, and DELETE verbs overly restrictive >=20 > The more logical restriction would be to verbs containing a body (i.e. - = not > GET).=A0 (Yes, I realize that this comment actually applies to my spec af= ter the > split, but I'm including it here for completeness.) As noted, no my problem. This should be any verb with a form-encoded body a= llowed (by HTTP). =20 > 6.2=A0 error_uri simplification >=20 > We should mandate that the error_uri is fully qualified.=A0 (Relative URL= s are > unnecessarily difficult to manage for this context.) Done. =20 > 6.2=A0 Other response parameters >=20 > Shouldn't there be language in 6.2 that explicitly allows for other argum= ents > to be added to the response and mandates that they be ignored if not > recognized? Also, possibly some language about how to add new values such > as registering them with IANA? That's 7.3 but I can highlight it. > (many) Unifying treatment of tokens >=20 > And finally, as we discussed, it would be desirable to be able use the sa= me > protocol flow to obtain an authorization code as to obtain access and ref= resh > tokens.=A0 One way to achieve this would be, for instance, to use tokens = that > represent username/password and then present those through the OAuth > scheme in the HTTP Authorization header.=A0 Other kinds of tokens could b= e > used as well.=A0 Then the authorization server could be simply another in= stance > of a protected resource. >=20 > I realize that this isn't fully fleshed out but I wanted to raise this is= sue now > and follow up with a concrete proposal soon. I don't like this, but I'll wait for a proposal. > Editorial Issues >=20 > 1.2=A0 Terminology >=20 > . "authorization endpoint" and "authorization server" are both used in th= e > draft.=A0 The draft doesn't make it clear whether these terms are equival= ent or > not.=A0 If not, they should both be defined.=A0 If so, you should choose = one. One is a server and the other an endpoint on the server. The endpoint is no= t a term. > . 3.0 uses term "client operator".=A0 This should either be just "client"= or you > should define "client operator". Dropped 'operator'. > . The term "Authorization code" is underspecified.=A0 In practice, the wo= rking > definition of the term "authorization code" appears to be scattered > throughout the document, including 1.2, 1.4.1, 3.2 , and =A05.1.1. =A0Now= here, for > instance, does it say what the syntax of a code can be.=A0 (I'm pretty su= re I > know, but the document should make this explicit.) OK. =20 > 3.0 Security considerations statement in Client Credentials section >=20 > This section says "Authorization servers SHOULD NOT issue client secrets = to > clients incapable of keeping their secrets confidential." =A0This should = go in the > security considerations section, issue is there is, in general, no way to= figure > this out at runtime. This is important enough to call attention to right there. This was always = a problem in 1.0. > 3.1=A0 Statement about shared symmetric secrets >=20 > This section says that "client password credentials use a shared symmetri= c > secret".=A0 In fact, these could be OTPs values based upon an asymmetric > secret. This is clearly intended to be a password, in the most obvious sense. =20 > 3.2=A0 Security considerations statement in Client Assertion Credentials = section >=20 > This section says "The client assertion credentials are used in cases whe= re a > password (clear-text shared symetric secret) is unsuitable or does not > provide sufficient security for client authentication. In such cases it i= s > common to use other mechanisms such as HMAC or digital signatures that do > not require sending clear-text secrets."=A0 This is a security considerat= ions > statement - not a normative statement. No, it is giving context and explaining why we need it. It helps develop ch= oose. > 4, 5=A0 "service documentation" and relationship to discovery underspecif= ied >=20 > The term "service documentation" is used twice without being defined.=A0 = The > possibility of these endpoints being obtained through discovery, rather t= han > service documentation, should also likely be explicitly acknowledged. Feel free to suggest text. EHL From James.H.Manger@team.telstra.com Thu Nov 25 15:51:07 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9F0B03A6A91 for ; Thu, 25 Nov 2010 15:51:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.113 X-Spam-Level: X-Spam-Status: No, score=-1.113 tagged_above=-999 required=5 tests=[AWL=-0.212, BAYES_00=-2.599, HELO_EQ_AU=0.377, HOST_EQ_AU=0.327, RELAY_IS_203=0.994] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id zoeJ93qiAks2 for ; Thu, 25 Nov 2010 15:51:07 -0800 (PST) Received: from ipxbvo.tcif.telstra.com.au (ipxbvo.tcif.telstra.com.au [203.35.135.204]) by core3.amsl.com (Postfix) with ESMTP id 8D9F73A6997 for ; Thu, 25 Nov 2010 15:51:05 -0800 (PST) X-IronPort-AV: E=Sophos;i="4.59,257,1288530000"; d="scan'208";a="18405107" Received: from unknown (HELO ipcavi.tcif.telstra.com.au) ([10.97.217.200]) by ipobvi.tcif.telstra.com.au with ESMTP; 26 Nov 2010 10:52:06 +1100 X-IronPort-AV: E=McAfee;i="5400,1158,6178"; a="14041398" Received: from wsmsg3707.srv.dir.telstra.com ([172.49.40.81]) by ipcavi.tcif.telstra.com.au with ESMTP; 26 Nov 2010 10:52:06 +1100 Received: from WSMSG3153V.srv.dir.telstra.com ([172.49.40.159]) by wsmsg3707.srv.dir.telstra.com ([172.49.40.81]) with mapi; Fri, 26 Nov 2010 09:52:05 +1000 From: "Manger, James H" To: Eran Hammer-Lahav , OAuth WG Date: Fri, 26 Nov 2010 09:52:03 +1000 Thread-Topic: ABNF in draft 11 Thread-Index: AcuLrE0WNL4CckMHSC6Rvg1Kh0kB/QArB9ZgAATzm+AAITzOwA== Message-ID: <255B9BB34FB7D647A506DC292726F6E11278AB64E4@WSMSG3153V.srv.dir.telstra.com> References: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3B191@P3PW5EX1MB01.EX1.SECURESERVER.NET> <255B9BB34FB7D647A506DC292726F6E112789E5CDD@WSMSG3153V.srv.dir.telstra.com> <90C41DD21FB7C64BB94121FBBC2E72343D4B06532C@P3PW5EX1MB01.EX1.SECURESERVER.NET> In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343D4B06532C@P3PW5EX1MB01.EX1.SECURESERVER.NET> Accept-Language: en-US, en-AU Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US, en-AU Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [OAUTH-WG] ABNF in draft 11 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Nov 2010 23:51:07 -0000 This is better. is not quite correct as the right-hand side is not quite a subset o= f since allows "\" as a character, instead of= treating it as an escape character. Option 1: remove "\" from Option 2: define as <"scope" "=3D" quoted-string>, and in the follo= wing paragraph say the "scope" attribute is a space-separated list of indiv= idual scope values -- more precisely, individual scope values are separated= by (and consequently cannot contain ). I prefer option 2. "WWW-Authenticate: OAuth2" is not strictly valid because it doesn't have a = space after the scheme. RFC2617 and draft-ietf-httpbis-p7-auth-12 actually uses <1*SP>, instead of = in the generic definition of . Option 3: Add realm to ; add back paragraph saying the mandatory "re= alm" attribute allows protected resources on a server to be partitioned, as= specified in RFC2617. Don't bother with any extra explanation. Option 4: Add a paragraph explicitly saying this scheme does not quite obey= the generic rules for schemes defined in RFC2617 because it does not requi= re a "realm" parameter or, in fact, any parameters. I prefer option 4, despite believing "realm" has some value. Most servers w= ill have a single protection space (=3Drealm), plus NTLM and Negotiate sche= mes already omit "realm", so I think disobeying RFC2617 here is ok (and fix= ing draft-ietf-httpbis-p7-auth-12). should be -- James Manger From m.ley@tarent.de Fri Nov 26 00:40:21 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 990203A6A55 for ; Fri, 26 Nov 2010 00:40:21 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: 0.351 X-Spam-Level: X-Spam-Status: No, score=0.351 tagged_above=-999 required=5 tests=[BAYES_50=0.001, HELO_EQ_DE=0.35] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 52wgvNb0+zcz for ; Fri, 26 Nov 2010 00:40:20 -0800 (PST) Received: from ugs.tarent.de (gate.tarent.de [212.79.178.249]) by core3.amsl.com (Postfix) with ESMTP id 4F0DD3A69A6 for ; Fri, 26 Nov 2010 00:40:20 -0800 (PST) Received: from localhost (localhost [127.0.0.1]) by ugs.tarent.de (Postfix) with ESMTP id 366D140224BD1 for ; Fri, 26 Nov 2010 09:41:22 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by ugs.tarent.de (Postfix) with ESMTP id 2DF9240009994 for ; Fri, 26 Nov 2010 09:41:22 +0100 (CET) X-Virus-Scanned: by amavisd-new-2.6.1 (20080629) (Debian) at tarent.de Received: from ugs.tarent.de ([127.0.0.1]) by localhost (ugs.tarent.de [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id pZ9V-APyuq9y for ; Fri, 26 Nov 2010 09:41:22 +0100 (CET) Received: from localhost (localhost [127.0.0.1]) by ugs.tarent.de (Postfix) with ESMTP id 1A9B440224BD1 for ; Fri, 26 Nov 2010 09:41:22 +0100 (CET) Received: from http-v.fe.bosch.de (http-v.fe.bosch.de [194.39.218.10]) by ugs.tarent.de (Horde Framework) with HTTP; Fri, 26 Nov 2010 09:41:22 +0100 Message-ID: <20101126094122.53764oqlukyiow4y@ugs.tarent.de> Date: Fri, 26 Nov 2010 09:41:22 +0100 From: Martin Ley To: oauth@ietf.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8; DelSp="Yes"; format="flowed" Content-Disposition: inline Content-Transfer-Encoding: quoted-printable User-Agent: Dynamic Internet Messaging Program (DIMP) H3 (1.1.4) Subject: [OAUTH-WG] Requesting mutliple scope, but user authorizes not all X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Nov 2010 08:43:28 -0000 Dear list, perhaps I've overread it in the specification or it was not explicit =20 about my required scenario: The Web-Server-Flow is used. An application requests data about the =20 user. The scopes are dateofbirth,isover18,address. Now the user is =20 forwarded to the authorization server to identify and authenticate and =20 give permissions to the applications. The user decides to give only =20 permission for the isover18 scope but not dateofbirth and address. How would the application be notified about the granted scopes and the =20 not granted scopes? Best regards Martin --=20 tarent Gesellschaft f=C3=BCr Softwareentwicklung und IT-Beratung mbH Gesch=C3=A4ftsf=C3=BChrer: Boris Esser, Elmar Geese HRB AG Bonn 5168 - USt-ID (VAT): DE122264941 Heilsbachstra=C3=9Fe 24, 53123 Bonn, Telefon: +49 228 52675-0 Thiemannstra=C3=9Fe 36a, 12059 Berlin, Telefon: +49 30 5682943-30 Internet: http://www.tarent.de/ Telefax: +49 228 52675-25 From eran@hueniverse.com Fri Nov 26 09:05:09 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 965C628C0FA for ; Fri, 26 Nov 2010 09:05:09 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.67 X-Spam-Level: X-Spam-Status: No, score=-1.67 tagged_above=-999 required=5 tests=[AWL=-0.930, BAYES_20=-0.74] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vZyU883zXN7Y for ; Fri, 26 Nov 2010 09:05:08 -0800 (PST) Received: from p3plex1out01.prod.phx3.secureserver.net (p3plex1out01.prod.phx3.secureserver.net [72.167.180.17]) by core3.amsl.com (Postfix) with SMTP id 7A3E63A6AE1 for ; Fri, 26 Nov 2010 09:05:08 -0800 (PST) Received: (qmail 27339 invoked from network); 26 Nov 2010 17:06:11 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.19) by p3plex1out01.prod.phx3.secureserver.net with SMTP; 26 Nov 2010 17:06:11 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT001.EX1.SECURESERVER.NET ([72.167.180.19]) with mapi; Fri, 26 Nov 2010 10:06:03 -0700 From: Eran Hammer-Lahav To: Martin Ley , "oauth@ietf.org" Date: Fri, 26 Nov 2010 10:05:57 -0700 Thread-Topic: [OAUTH-WG] Requesting mutliple scope, but user authorizes not all Thread-Index: AcuNRiprjQGI5lC8RFCh46ri98cr4gARgJJw Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4B065398@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <20101126094122.53764oqlukyiow4y@ugs.tarent.de> In-Reply-To: <20101126094122.53764oqlukyiow4y@ugs.tarent.de> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Subject: Re: [OAUTH-WG] Requesting mutliple scope, but user authorizes not all X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Nov 2010 17:05:09 -0000 LTEwIDQuMjoNCg0KICAgc2NvcGUNCiAgICAgICAgIE9QVElPTkFMLiAgVGhlIHNjb3BlIG9mIHRo ZSBhY2Nlc3MgdG9rZW4gYXMgYSBsaXN0IG9mIHNwYWNlLQ0KICAgICAgICAgZGVsaW1pdGVkIHN0 cmluZ3MuICBUaGUgdmFsdWUgb2YgdGhlICJzY29wZSIgcGFyYW1ldGVyIGlzDQogICAgICAgICBk ZWZpbmVkIGJ5IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlci4gIElmIHRoZSB2YWx1ZSBjb250YWlu cw0KICAgICAgICAgbXVsdGlwbGUgc3BhY2UtZGVsaW1pdGVkIHN0cmluZ3MsIHRoZWlyIG9yZGVy IGRvZXMgbm90IG1hdHRlciwNCiAgICAgICAgIGFuZCBlYWNoIHN0cmluZyBhZGRzIGFuIGFkZGl0 aW9uYWwgYWNjZXNzIHJhbmdlIHRvIHRoZQ0KICAgICAgICAgcmVxdWVzdGVkIHNjb3BlLiAgVGhl IGF1dGhvcml6YXRpb24gc2VydmVyIFNIT1VMRCBpbmNsdWRlIHRoZQ0KICAgICAgICAgcGFyYW1l dGVyIGlmIHRoZSByZXF1ZXN0ZWQgc2NvcGUgaXMgZGlmZmVyZW50IGZyb20gdGhlIG9uZQ0KICAg ICAgICAgcmVxdWVzdGVkIGJ5IHRoZSBjbGllbnQuDQoNCkVITA0KDQo+IC0tLS0tT3JpZ2luYWwg TWVzc2FnZS0tLS0tDQo+IEZyb206IG9hdXRoLWJvdW5jZXNAaWV0Zi5vcmcgW21haWx0bzpvYXV0 aC1ib3VuY2VzQGlldGYub3JnXSBPbiBCZWhhbGYNCj4gT2YgTWFydGluIExleQ0KPiBTZW50OiBG cmlkYXksIE5vdmVtYmVyIDI2LCAyMDEwIDEyOjQxIEFNDQo+IFRvOiBvYXV0aEBpZXRmLm9yZw0K PiBTdWJqZWN0OiBbT0FVVEgtV0ddIFJlcXVlc3RpbmcgbXV0bGlwbGUgc2NvcGUsIGJ1dCB1c2Vy IGF1dGhvcml6ZXMgbm90IGFsbA0KPiANCj4gRGVhciBsaXN0LA0KPiANCj4gcGVyaGFwcyBJJ3Zl IG92ZXJyZWFkIGl0IGluIHRoZSBzcGVjaWZpY2F0aW9uIG9yIGl0IHdhcyBub3QgZXhwbGljaXQg YWJvdXQgbXkNCj4gcmVxdWlyZWQgc2NlbmFyaW86DQo+IA0KPiANCj4gVGhlIFdlYi1TZXJ2ZXIt RmxvdyBpcyB1c2VkLiBBbiBhcHBsaWNhdGlvbiByZXF1ZXN0cyBkYXRhIGFib3V0IHRoZSB1c2Vy Lg0KPiBUaGUgc2NvcGVzIGFyZSBkYXRlb2ZiaXJ0aCxpc292ZXIxOCxhZGRyZXNzLiBOb3cgdGhl IHVzZXIgaXMgZm9yd2FyZGVkIHRvDQo+IHRoZSBhdXRob3JpemF0aW9uIHNlcnZlciB0byBpZGVu dGlmeSBhbmQgYXV0aGVudGljYXRlIGFuZCBnaXZlIHBlcm1pc3Npb25zIHRvDQo+IHRoZSBhcHBs aWNhdGlvbnMuIFRoZSB1c2VyIGRlY2lkZXMgdG8gZ2l2ZSBvbmx5IHBlcm1pc3Npb24gZm9yIHRo ZSBpc292ZXIxOA0KPiBzY29wZSBidXQgbm90IGRhdGVvZmJpcnRoIGFuZCBhZGRyZXNzLg0KPiAN Cj4gSG93IHdvdWxkIHRoZSBhcHBsaWNhdGlvbiBiZSBub3RpZmllZCBhYm91dCB0aGUgZ3JhbnRl ZCBzY29wZXMgYW5kIHRoZSBub3QNCj4gZ3JhbnRlZCBzY29wZXM/DQo+IA0KPiBCZXN0IHJlZ2Fy ZHMNCj4gDQo+IE1hcnRpbg0KPiANCj4gDQo+IC0tDQo+IHRhcmVudCBHZXNlbGxzY2hhZnQgZsO8 ciBTb2Z0d2FyZWVudHdpY2tsdW5nIHVuZCBJVC1CZXJhdHVuZyBtYkgNCj4gR2VzY2jDpGZ0c2bD vGhyZXI6IEJvcmlzIEVzc2VyLCBFbG1hciBHZWVzZSBIUkIgQUcgQm9ubiA1MTY4IC0gVVN0LUlE IChWQVQpOg0KPiBERTEyMjI2NDk0MQ0KPiANCj4gSGVpbHNiYWNoc3RyYcOfZSAyNCwgNTMxMjMg Qm9ubiwgICBUZWxlZm9uOiArNDkgMjI4IDUyNjc1LTANCj4gVGhpZW1hbm5zdHJhw59lIDM2YSwg MTIwNTkgQmVybGluLCBUZWxlZm9uOiArNDkgMzAgNTY4Mjk0My0zMA0KPiBJbnRlcm5ldDogaHR0 cDovL3d3dy50YXJlbnQuZGUvICAgVGVsZWZheDogKzQ5IDIyOCA1MjY3NS0yNQ0KPiANCj4gX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18NCj4gT0F1dGggbWFp bGluZyBsaXN0DQo+IE9BdXRoQGlldGYub3JnDQo+IGh0dHBzOi8vd3d3LmlldGYub3JnL21haWxt YW4vbGlzdGluZm8vb2F1dGgNCg== From igor.faynberg@alcatel-lucent.com Fri Nov 26 12:25:50 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id BD8A528C108 for ; Fri, 26 Nov 2010 12:25:50 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -4.599 X-Spam-Level: X-Spam-Status: No, score=-4.599 tagged_above=-999 required=5 tests=[AWL=2.000, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CNdQbztAvSP5 for ; Fri, 26 Nov 2010 12:25:49 -0800 (PST) Received: from ihemail3.lucent.com (ihemail3.lucent.com [135.245.0.37]) by core3.amsl.com (Postfix) with ESMTP id 5A65528C103 for ; Fri, 26 Nov 2010 12:25:48 -0800 (PST) Received: from umail.lucent.com (h135-3-40-63.lucent.com [135.3.40.63]) by ihemail3.lucent.com (8.13.8/IER-o) with ESMTP id oAQKQm7C012368 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Fri, 26 Nov 2010 14:26:48 -0600 (CST) Received: from [135.244.32.195] (faynberg.lra.lucent.com [135.244.32.195]) by umail.lucent.com (8.13.8/TPES) with ESMTP id oAQKQjRD005996; Fri, 26 Nov 2010 14:26:46 -0600 (CST) Message-ID: <4CF01805.7030607@alcatel-lucent.com> Date: Fri, 26 Nov 2010 15:26:45 -0500 From: Igor Faynberg Organization: Alcatel-Lucent User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: Eran Hammer-Lahav References: <20101126094122.53764oqlukyiow4y@ugs.tarent.de> <90C41DD21FB7C64BB94121FBBC2E72343D4B065398@P3PW5EX1MB01.EX1.SECURESERVER.NET> In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343D4B065398@P3PW5EX1MB01.EX1.SECURESERVER.NET> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Scanned-By: MIMEDefang 2.57 on 135.245.2.37 Cc: "oauth@ietf.org" Subject: Re: [OAUTH-WG] Requesting mutliple scope, but user authorizes not all X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: igor.faynberg@alcatel-lucent.com List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Nov 2010 20:25:50 -0000 In the context of Martin's question (which concerns end-users understanding and resulting actions), I interpret the citation as follows: The end-user has no control over the value of the "scope" parameter, and, given that "it is defined by the authorization server," the end-user is not expected even to understand this value. Granted, an implementation can of course fix this specific issue, but the standard does not address it. Overall, I do tsee this is a drawback of 2.0, which needs to be fixed by careful specification of the "scope" values in the future, but I know that 2.0 needs to be out and that it has high-priority items (such as security) to be dealt with right now. I don't want to delay 2.0 by suggesting drastic changes in the design decisions, so I am not harping on the seeming irrelevance of the end-user. With the view of OAuth evolution though, I would like to see the whole token standardized, with the end-user having the overall control of the token--even if in the default situation it is still prepared by the authorization server-- with the ability to assign or change (or both) any value contained in it. Igor Eran Hammer-Lahav wrote: > -10 4.2: > > scope > OPTIONAL. The scope of the access token as a list of space- > delimited strings. The value of the "scope" parameter is > defined by the authorization server. If the value contains > multiple space-delimited strings, their order does not matter, > and each string adds an additional access range to the > requested scope. The authorization server SHOULD include the > parameter if the requested scope is different from the one > requested by the client. > > EHL > > >> -----Original Message----- >> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf >> Of Martin Ley >> Sent: Friday, November 26, 2010 12:41 AM >> To: oauth@ietf.org >> Subject: [OAUTH-WG] Requesting mutliple scope, but user authorizes not all >> >> Dear list, >> >> perhaps I've overread it in the specification or it was not explicit about my >> required scenario: >> >> >> The Web-Server-Flow is used. An application requests data about the user. >> The scopes are dateofbirth,isover18,address. Now the user is forwarded to >> the authorization server to identify and authenticate and give permissions to >> the applications. The user decides to give only permission for the isover18 >> scope but not dateofbirth and address. >> >> How would the application be notified about the granted scopes and the not >> granted scopes? >> >> Best regards >> >> Martin >> >> >> -- >> tarent Gesellschaft für Softwareentwicklung und IT-Beratung mbH >> Geschäftsführer: Boris Esser, Elmar Geese HRB AG Bonn 5168 - USt-ID (VAT): >> DE122264941 >> >> Heilsbachstraße 24, 53123 Bonn, Telefon: +49 228 52675-0 >> Thiemannstraße 36a, 12059 Berlin, Telefon: +49 30 5682943-30 >> Internet: http://www.tarent.de/ Telefax: +49 228 52675-25 >> >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth >> > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > From sakimura@gmail.com Sun Nov 28 06:11:22 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 74CCC3A6BD4 for ; Sun, 28 Nov 2010 06:11:22 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id qcAk9TvUYHhI for ; Sun, 28 Nov 2010 06:11:19 -0800 (PST) Received: from mail-fx0-f44.google.com (mail-fx0-f44.google.com [209.85.161.44]) by core3.amsl.com (Postfix) with ESMTP id CE6403A6BCB for ; Sun, 28 Nov 2010 06:11:17 -0800 (PST) Received: by fxm9 with SMTP id 9so2783070fxm.31 for ; Sun, 28 Nov 2010 06:12:25 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:in-reply-to :references:date:message-id:subject:from:to:cc:content-type :content-transfer-encoding; bh=DckkjeP+KsOz/j18SHtFJ8X3fAWP83GnTzFhX/zV3QI=; b=t1h25yAfkDJL39Q+VlPcoJgaxM1v2vljh6CX8IBxPj0iBpU4ZN/lv0fZD96uKGtcXn gNfPWoyxzep4+BLAlyI6bl6FxGhv0+ujF2k3Rjyp22Qaax3xajtOiPJOahDgBcgh3JFn Y+Ej68TLiyJhR889kQVit6pgXLYVLHKxTA9sk= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type:content-transfer-encoding; b=b9DdbLuJm+OrApZOQG9qhOZqeYAWQWWkU/9m7Wu5dQVwbhVmcX2jB2eJdroURMHAMD JQDEbKuHTWFd50Y1/SPTpiqAU7tMqVvzJlOKsvmwOCn2nTwMqXuCcTmi8vyYv7MBw3gw 7m86JpE10EqDErzIRT6NMyC0dOehSsGgESH4M= MIME-Version: 1.0 Received: by 10.223.103.12 with SMTP id i12mr2480976fao.43.1290953543213; Sun, 28 Nov 2010 06:12:23 -0800 (PST) Received: by 10.223.120.145 with HTTP; Sun, 28 Nov 2010 06:12:23 -0800 (PST) In-Reply-To: <4CF01805.7030607@alcatel-lucent.com> References: <20101126094122.53764oqlukyiow4y@ugs.tarent.de> <90C41DD21FB7C64BB94121FBBC2E72343D4B065398@P3PW5EX1MB01.EX1.SECURESERVER.NET> <4CF01805.7030607@alcatel-lucent.com> Date: Sun, 28 Nov 2010 23:12:23 +0900 Message-ID: From: Nat Sakimura To: igor.faynberg@alcatel-lucent.com Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Cc: "oauth@ietf.org" Subject: Re: [OAUTH-WG] Requesting mutliple scope, but user authorizes not all X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 28 Nov 2010 14:11:22 -0000 I think such things are better dealt with extensions. I do not like to overload "scope". =3Dnat On Sat, Nov 27, 2010 at 5:26 AM, Igor Faynberg wrote: > In the context of Martin's question (which concerns end-users understandi= ng > and resulting actions), I interpret the citation as follows: The end-user > has no control over the value of the "scope" parameter, and, given that "= it > is defined by the authorization server," the end-user is not expected =A0= even > to understand this value. Granted, an implementation can of course fix th= is > specific issue, but the standard does not address it. > > Overall, I do tsee this is a drawback of 2.0, which needs to be fixed by > careful specification of the "scope" values in the future, but I know tha= t > 2.0 needs to be out and that it has high-priority items (such as security= ) > to be dealt with right now. I don't want to delay 2.0 by suggesting drast= ic > changes in the design decisions, so I am not harping on the seeming > irrelevance of the end-user. > > With the view of OAuth evolution though, I would like to see the whole to= ken > standardized, with the end-user having the overall control of the > token--even if in the default situation it is still prepared by the > authorization server-- with the ability to assign or change (or both) any > value contained in it. > > Igor > > > Eran Hammer-Lahav wrote: >> >> -10 4.2: >> >> =A0 scope >> =A0 =A0 =A0 =A0 OPTIONAL. =A0The scope of the access token as a list of = space- >> =A0 =A0 =A0 =A0 delimited strings. =A0The value of the "scope" parameter= is >> =A0 =A0 =A0 =A0 defined by the authorization server. =A0If the value con= tains >> =A0 =A0 =A0 =A0 multiple space-delimited strings, their order does not m= atter, >> =A0 =A0 =A0 =A0 and each string adds an additional access range to the >> =A0 =A0 =A0 =A0 requested scope. =A0The authorization server SHOULD incl= ude the >> =A0 =A0 =A0 =A0 parameter if the requested scope is different from the o= ne >> =A0 =A0 =A0 =A0 requested by the client. >> >> EHL >> >> >>> >>> -----Original Message----- >>> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf >>> Of Martin Ley >>> Sent: Friday, November 26, 2010 12:41 AM >>> To: oauth@ietf.org >>> Subject: [OAUTH-WG] Requesting mutliple scope, but user authorizes not >>> all >>> >>> Dear list, >>> >>> perhaps I've overread it in the specification or it was not explicit >>> about my >>> required scenario: >>> >>> >>> The Web-Server-Flow is used. An application requests data about the use= r. >>> The scopes are dateofbirth,isover18,address. Now the user is forwarded = to >>> the authorization server to identify and authenticate and give >>> permissions to >>> the applications. The user decides to give only permission for the >>> isover18 >>> scope but not dateofbirth and address. >>> >>> How would the application be notified about the granted scopes and the >>> not >>> granted scopes? >>> >>> Best regards >>> >>> Martin >>> >>> >>> -- >>> tarent Gesellschaft f=FCr Softwareentwicklung und IT-Beratung mbH >>> Gesch=E4ftsf=FChrer: Boris Esser, Elmar Geese HRB AG Bonn 5168 - USt-ID >>> (VAT): >>> DE122264941 >>> >>> Heilsbachstra=DFe 24, 53123 Bonn, =A0 Telefon: +49 228 52675-0 >>> Thiemannstra=DFe 36a, 12059 Berlin, Telefon: +49 30 5682943-30 >>> Internet: http://www.tarent.de/ =A0 Telefax: +49 228 52675-25 >>> >>> _______________________________________________ >>> OAuth mailing list >>> OAuth@ietf.org >>> https://www.ietf.org/mailman/listinfo/oauth >>> >> >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth >> > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > --=20 Nat Sakimura (=3Dnat) http://www.sakimura.org/en/ http://twitter.com/_nat_en From anton.panasenko@gmail.com Fri Nov 26 10:52:56 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 1A35928C100 for ; Fri, 26 Nov 2010 10:52:56 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.598 X-Spam-Level: X-Spam-Status: No, score=-2.598 tagged_above=-999 required=5 tests=[BAYES_00=-2.599, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Bd9wo7K8sdJr for ; Fri, 26 Nov 2010 10:52:55 -0800 (PST) Received: from mail-ey0-f172.google.com (mail-ey0-f172.google.com [209.85.215.172]) by core3.amsl.com (Postfix) with ESMTP id 0ECA128C0FA for ; Fri, 26 Nov 2010 10:52:54 -0800 (PST) Received: by eyd10 with SMTP id 10so1168072eyd.31 for ; Fri, 26 Nov 2010 10:53:58 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:from:content-type:subject :date:message-id:to:mime-version:x-mailer; bh=GiAjzP6qE9lL70iigeZW3fneuQo03vrekykN5SbGX/Q=; b=KymGpLQp0qFXBgQNLnMplffx99lTLMw8tupqm27ksyquRUZvj3kgLPqVtM8cNLugON k/dhmQGm3w6hpciaiIMfMADEMwY7jygdkknXOoAygMFNmFma3tiwEMv3HUinboThnEF+ lkpu/WAqF8t4p6PBfFpytdKZEO/xk9P81/GCU= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=from:content-type:subject:date:message-id:to:mime-version:x-mailer; b=K11Pfj4J4N3WHdg/r3QVG24o8POvrHwRH18mDvAFjxCWuP5igpACQYYnMhmYd/noEi 2LkykmRIe4bFmvFrKp87Fl3+8tLbmsa7WxTxuIX2GUgEldEae4iBcAAl6OkGpPXhlzDz b7DaDOATCFT15avcFop6GIg2bwXjIykcG5fs0= Received: by 10.213.34.208 with SMTP id m16mr2254225ebd.97.1290797638048; Fri, 26 Nov 2010 10:53:58 -0800 (PST) Received: from [192.168.0.101] (95-29-67-11.broadband.corbina.ru [95.29.67.11]) by mx.google.com with ESMTPS id v56sm2000995eeh.14.2010.11.26.10.53.54 (version=TLSv1/SSLv3 cipher=RC4-MD5); Fri, 26 Nov 2010 10:53:55 -0800 (PST) From: Anton Panasenko Content-Type: multipart/alternative; boundary=Apple-Mail-18--1042155124 Date: Fri, 26 Nov 2010 21:54:17 +0300 Message-Id: <5F4958F3-F1C5-4E0E-9AE4-7042C5EA1AAC@gmail.com> To: oauth@ietf.org Mime-Version: 1.0 (Apple Message framework v1082) X-Mailer: Apple Mail (2.1082) X-Mailman-Approved-At: Mon, 29 Nov 2010 08:37:45 -0800 Subject: [OAUTH-WG] OAuth 2.0 server behavior X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 26 Nov 2010 18:57:21 -0000 --Apple-Mail-18--1042155124 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi, What behavior is expected from the server, if in the query on = access_token without "scope" = (grant_type=3Dauthorization_code&client_id=3Ds6BhdRkqt3&client_secret=3DgX= 1fBat3bV&code=3Di1WsRn1uB1&redirect_uri=3Dhttps%3A%2F%2Fclient%2Eexample%2= Ecom%2Fc)? 1. The server must generate access_token for an empty scope. 2. The server must generate access_token for scope, which was approved = for access_code. -- Sincerely yours Anton Panasenko Skype: anton.panasenko Phone: +79179838291 Email: anton.panasenko@gmail.com, apanasenko@me.com --Apple-Mail-18--1042155124 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii

1. The server must = generate access_token for an empty scope.
2. The server must = generate access_token for scope, which was approved for = access_code.

--
Sincerely yours
Anton Panasenko
Skype: = anton.panasenko
Phone: +79179838291
Email: anton.panasenko@gmail.com,&n= bsp;apanasenko@me.com

= --Apple-Mail-18--1042155124-- From eran@hueniverse.com Mon Nov 29 08:39:58 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 764D528C0F0 for ; Mon, 29 Nov 2010 08:39:58 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.607 X-Spam-Level: X-Spam-Status: No, score=-1.607 tagged_above=-999 required=5 tests=[AWL=-0.868, BAYES_20=-0.74, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id r+bRHfUD0Hkx for ; Mon, 29 Nov 2010 08:39:55 -0800 (PST) Received: from p3plex1out01.prod.phx3.secureserver.net (p3plex1out01.prod.phx3.secureserver.net [72.167.180.17]) by core3.amsl.com (Postfix) with SMTP id 0DAFD28C104 for ; Mon, 29 Nov 2010 08:39:50 -0800 (PST) Received: (qmail 26436 invoked from network); 29 Nov 2010 16:40:59 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.21) by p3plex1out01.prod.phx3.secureserver.net with SMTP; 29 Nov 2010 16:40:59 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT003.EX1.SECURESERVER.NET ([72.167.180.21]) with mapi; Mon, 29 Nov 2010 09:40:50 -0700 From: Eran Hammer-Lahav To: Anton Panasenko , "oauth@ietf.org" Date: Mon, 29 Nov 2010 09:40:55 -0700 Thread-Topic: [OAUTH-WG] OAuth 2.0 server behavior Thread-Index: AcuP4/CCziQ8p1elQMy+nRNAmYA08gAADNAw Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4B06552C@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <5F4958F3-F1C5-4E0E-9AE4-7042C5EA1AAC@gmail.com> In-Reply-To: <5F4958F3-F1C5-4E0E-9AE4-7042C5EA1AAC@gmail.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: multipart/alternative; boundary="_000_90C41DD21FB7C64BB94121FBBC2E72343D4B06552CP3PW5EX1MB01E_" MIME-Version: 1.0 Subject: Re: [OAUTH-WG] OAuth 2.0 server behavior X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Nov 2010 16:39:58 -0000 --_000_90C41DD21FB7C64BB94121FBBC2E72343D4B06552CP3PW5EX1MB01E_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable #2. Asking for scope on the access token call can only reduce the already a= pproved scope. EHL From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf Of A= nton Panasenko Sent: Friday, November 26, 2010 10:54 AM To: oauth@ietf.org Subject: [OAUTH-WG] OAuth 2.0 server behavior Hi, What behavior is expected from the server, if in the query on access_token = without "scope" (grant_type=3Dauthorization_code&client_id=3Ds6BhdRkqt3&cli= ent_secret=3DgX1fBat3bV&code=3Di1WsRn1uB1&redirect_uri=3Dhttps%3A%2F%2Fclie= nt%2Eexample%2Ecom%2Fc)? 1. The server must generate access_token for an empty scope. 2. The server must generate access_token for scope, which was approved for = access_code. -- Sincerely yours Anton Panasenko Skype: anton.panasenko Phone: +79179838291 Email: anton.panasenko@gmail.com, apanase= nko@me.com --_000_90C41DD21FB7C64BB94121FBBC2E72343D4B06552CP3PW5EX1MB01E_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable

#2. Askin= g for scope on the access token call can only reduce the already approved s= cope.

 

EHL

 

From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On B= ehalf Of Anton Panasenko
Sent: Friday, November 26, 2010 10:5= 4 AM
To: oauth@ietf.org
Subject: [OAUTH-WG] OAuth 2.0 s= erver behavior

&= nbsp;

Hi,

=

 

W= hat behavior is expected from the server, if in the query on access_token w= ithout "scope" (grant_type=3Dauthorization_code&client_id=3Ds= 6BhdRkqt3&client_secret=3DgX1fBat3bV&code=3Di1WsRn1uB1&redirect= _uri=3Dhttps%3A%2F%2Fclient%2Eexample%2Ecom%2Fc)?

=

 

1= . The server must generate access_token for an empty scope.

<= /div>

2. The server must generate access_token for= scope, which was approved for access_code.

=

 

--

<= span class=3Dapple-style-span>Sincerely yours
Anton Pan= asenko
Skype: anton.panasenko
Phone: +79179838291
Email: anton.panasenko@gmail.com, apanasenko@me.com

 

= --_000_90C41DD21FB7C64BB94121FBBC2E72343D4B06552CP3PW5EX1MB01E_-- From subbu@subbu.org Mon Nov 29 12:43:29 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 103AA28C134 for ; Mon, 29 Nov 2010 12:43:29 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.599 X-Spam-Level: X-Spam-Status: No, score=-2.599 tagged_above=-999 required=5 tests=[BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 1XIbICUwuqyh for ; Mon, 29 Nov 2010 12:43:27 -0800 (PST) Received: from mail-fx0-f44.google.com (mail-fx0-f44.google.com [209.85.161.44]) by core3.amsl.com (Postfix) with ESMTP id 678A528C10C for ; Mon, 29 Nov 2010 12:43:27 -0800 (PST) Received: by fxm9 with SMTP id 9so3907089fxm.31 for ; Mon, 29 Nov 2010 12:44:37 -0800 (PST) Received: by 10.223.115.203 with SMTP id j11mr5839196faq.35.1291063476140; Mon, 29 Nov 2010 12:44:36 -0800 (PST) Received: from [192.168.0.32] (71-37-49-53.tukw.qwest.net [71.37.49.53]) by mx.google.com with ESMTPS id c10sm1377759fat.6.2010.11.29.12.44.33 (version=SSLv3 cipher=RC4-MD5); Mon, 29 Nov 2010 12:44:34 -0800 (PST) Mime-Version: 1.0 (Apple Message framework v1082) Content-Type: text/plain; charset=us-ascii From: Subbu Allamaraju In-Reply-To: <90C41DD21FB7C64BB94121FBBC2E72343D4B06552C@P3PW5EX1MB01.EX1.SECURESERVER.NET> Date: Mon, 29 Nov 2010 12:44:25 -0800 Content-Transfer-Encoding: quoted-printable Message-Id: <5ED8359C-5C46-4121-BDC0-2A5B8F3A4790@subbu.org> References: <5F4958F3-F1C5-4E0E-9AE4-7042C5EA1AAC@gmail.com> <90C41DD21FB7C64BB94121FBBC2E72343D4B06552C@P3PW5EX1MB01.EX1.SECURESERVER.NET> To: Eran Hammer-Lahav X-Mailer: Apple Mail (2.1082) Cc: Anton Panasenko , "oauth@ietf.org" Subject: Re: [OAUTH-WG] OAuth 2.0 server behavior X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 29 Nov 2010 20:43:29 -0000 Could you point which part of the spec specifies this (am looking at = draft 10)? In any case, I would expect the auth server to include the = scopes granted in the access token response to avoid any ambiguity. On Nov 29, 2010, at 8:40 AM, Eran Hammer-Lahav wrote: > #2. Asking for scope on the access token call can only reduce the = already approved scope. > =20 > EHL > =20 > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf = Of Anton Panasenko > Sent: Friday, November 26, 2010 10:54 AM > To: oauth@ietf.org > Subject: [OAUTH-WG] OAuth 2.0 server behavior > =20 > Hi, > =20 > What behavior is expected from the server, if in the query on = access_token without "scope" = (grant_type=3Dauthorization_code&client_id=3Ds6BhdRkqt3&client_secret=3DgX= 1fBat3bV&code=3Di1WsRn1uB1&redirect_uri=3Dhttps%3A%2F%2Fclient%2Eexample%2= Ecom%2Fc)? > =20 > 1. The server must generate access_token for an empty scope. > 2. The server must generate access_token for scope, which was approved = for access_code. > =20 > -- > Sincerely yours > Anton Panasenko > Skype: anton.panasenko > Phone: +79179838291 > Email: anton.panasenko@gmail.com, apanasenko@me.com > =20 > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From igor.faynberg@alcatel-lucent.com Tue Nov 30 09:24:48 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 229F928C0D9 for ; Tue, 30 Nov 2010 09:24:48 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -5.266 X-Spam-Level: X-Spam-Status: No, score=-5.266 tagged_above=-999 required=5 tests=[AWL=1.333, BAYES_00=-2.599, RCVD_IN_DNSWL_MED=-4] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id UQyeOOz8+DEC for ; Tue, 30 Nov 2010 09:24:46 -0800 (PST) Received: from ihemail2.lucent.com (ihemail2.lucent.com [135.245.0.35]) by core3.amsl.com (Postfix) with ESMTP id 4FAFC3A6BCC for ; Tue, 30 Nov 2010 09:24:45 -0800 (PST) Received: from umail.lucent.com (h135-3-40-63.lucent.com [135.3.40.63]) by ihemail2.lucent.com (8.13.8/IER-o) with ESMTP id oAUHPsr8021924 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Tue, 30 Nov 2010 11:25:54 -0600 (CST) Received: from [135.244.2.139] ([135.244.2.139]) by umail.lucent.com (8.13.8/TPES) with ESMTP id oAUHPrkk006870; Tue, 30 Nov 2010 11:25:53 -0600 (CST) Message-ID: <4CF533A1.9050108@alcatel-lucent.com> Date: Tue, 30 Nov 2010 12:25:53 -0500 From: Igor Faynberg Organization: Alcatel-Lucent User-Agent: Thunderbird 2.0.0.24 (Windows/20100228) MIME-Version: 1.0 To: Nat Sakimura References: <20101126094122.53764oqlukyiow4y@ugs.tarent.de> <90C41DD21FB7C64BB94121FBBC2E72343D4B065398@P3PW5EX1MB01.EX1.SECURESERVER.NET> <4CF01805.7030607@alcatel-lucent.com> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit X-Scanned-By: MIMEDefang 2.57 on 135.245.2.35 Cc: "oauth@ietf.org" Subject: Re: [OAUTH-WG] Requesting mutliple scope, but user authorizes not all X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list Reply-To: igor.faynberg@alcatel-lucent.com List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Nov 2010 17:24:48 -0000 Nat Sakimura wrote: > I think such things are better dealt with extensions. > Sure. But first we need to define that which we will later extend. > I do not like to overload "scope". > Neither do I, as long as "overloading" means varying the original semantics. But, again, at the moment we have no definition of "scope." > =nat > > On Sat, Nov 27, 2010 at 5:26 AM, Igor Faynberg > wrote: > >> In the context of Martin's question (which concerns end-users understanding >> and resulting actions), I interpret the citation as follows: The end-user >> has no control over the value of the "scope" parameter, and, given that "it >> is defined by the authorization server," the end-user is not expected even >> to understand this value. Granted, an implementation can of course fix this >> specific issue, but the standard does not address it. >> >> Overall, I do tsee this is a drawback of 2.0, which needs to be fixed by >> careful specification of the "scope" values in the future, but I know that >> 2.0 needs to be out and that it has high-priority items (such as security) >> to be dealt with right now. I don't want to delay 2.0 by suggesting drastic >> changes in the design decisions, so I am not harping on the seeming >> irrelevance of the end-user. >> >> With the view of OAuth evolution though, I would like to see the whole token >> standardized, with the end-user having the overall control of the >> token--even if in the default situation it is still prepared by the >> authorization server-- with the ability to assign or change (or both) any >> value contained in it. >> >> Igor >> >> >> Eran Hammer-Lahav wrote: >> >>> -10 4.2: >>> >>> scope >>> OPTIONAL. The scope of the access token as a list of space- >>> delimited strings. The value of the "scope" parameter is >>> defined by the authorization server. If the value contains >>> multiple space-delimited strings, their order does not matter, >>> and each string adds an additional access range to the >>> requested scope. The authorization server SHOULD include the >>> parameter if the requested scope is different from the one >>> requested by the client. >>> >>> EHL >>> >>> >>> >>>> -----Original Message----- >>>> From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf >>>> Of Martin Ley >>>> Sent: Friday, November 26, 2010 12:41 AM >>>> To: oauth@ietf.org >>>> Subject: [OAUTH-WG] Requesting mutliple scope, but user authorizes not >>>> all >>>> >>>> Dear list, >>>> >>>> perhaps I've overread it in the specification or it was not explicit >>>> about my >>>> required scenario: >>>> >>>> >>>> The Web-Server-Flow is used. An application requests data about the user. >>>> The scopes are dateofbirth,isover18,address. Now the user is forwarded to >>>> the authorization server to identify and authenticate and give >>>> permissions to >>>> the applications. The user decides to give only permission for the >>>> isover18 >>>> scope but not dateofbirth and address. >>>> >>>> How would the application be notified about the granted scopes and the >>>> not >>>> granted scopes? >>>> >>>> Best regards >>>> >>>> Martin >>>> >>>> >>>> -- >>>> tarent Gesellschaft für Softwareentwicklung und IT-Beratung mbH >>>> Geschäftsführer: Boris Esser, Elmar Geese HRB AG Bonn 5168 - USt-ID >>>> (VAT): >>>> DE122264941 >>>> >>>> Heilsbachstraße 24, 53123 Bonn, Telefon: +49 228 52675-0 >>>> Thiemannstraße 36a, 12059 Berlin, Telefon: +49 30 5682943-30 >>>> Internet: http://www.tarent.de/ Telefax: +49 228 52675-25 >>>> >>>> _______________________________________________ >>>> OAuth mailing list >>>> OAuth@ietf.org >>>> https://www.ietf.org/mailman/listinfo/oauth >>>> >>>> >>> _______________________________________________ >>> OAuth mailing list >>> OAuth@ietf.org >>> https://www.ietf.org/mailman/listinfo/oauth >>> >>> >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth >> >> > > > > From eran@hueniverse.com Tue Nov 30 10:44:34 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 107963A6C20 for ; Tue, 30 Nov 2010 10:44:34 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.483 X-Spam-Level: X-Spam-Status: No, score=-2.483 tagged_above=-999 required=5 tests=[AWL=0.116, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gweylEUoXLlT for ; Tue, 30 Nov 2010 10:44:33 -0800 (PST) Received: from p3plex1out01.prod.phx3.secureserver.net (p3plex1out01.prod.phx3.secureserver.net [72.167.180.17]) by core3.amsl.com (Postfix) with SMTP id 37EDF3A6C04 for ; Tue, 30 Nov 2010 10:44:33 -0800 (PST) Received: (qmail 6578 invoked from network); 30 Nov 2010 18:45:44 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.19) by p3plex1out01.prod.phx3.secureserver.net with SMTP; 30 Nov 2010 18:45:44 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT001.EX1.SECURESERVER.NET ([72.167.180.19]) with mapi; Tue, 30 Nov 2010 11:45:44 -0700 From: Eran Hammer-Lahav To: Subbu Allamaraju Date: Tue, 30 Nov 2010 11:45:52 -0700 Thread-Topic: [OAUTH-WG] OAuth 2.0 server behavior Thread-Index: AcuQBkKEcb5FT5NsRBShpfHGYyGWsAAuIdWQ Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4B065822@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <5F4958F3-F1C5-4E0E-9AE4-7042C5EA1AAC@gmail.com> <90C41DD21FB7C64BB94121FBBC2E72343D4B06552C@P3PW5EX1MB01.EX1.SECURESERVER.NET> <5ED8359C-5C46-4121-BDC0-2A5B8F3A4790@subbu.org> In-Reply-To: <5ED8359C-5C46-4121-BDC0-2A5B8F3A4790@subbu.org> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Cc: Anton Panasenko , "oauth@ietf.org" Subject: Re: [OAUTH-WG] OAuth 2.0 server behavior X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 30 Nov 2010 18:44:34 -0000 It's not that explicit. I'll fix it. EHL > -----Original Message----- > From: Subbu Allamaraju [mailto:subbu@subbu.org] > Sent: Monday, November 29, 2010 12:44 PM > To: Eran Hammer-Lahav > Cc: Anton Panasenko; oauth@ietf.org > Subject: Re: [OAUTH-WG] OAuth 2.0 server behavior >=20 > Could you point which part of the spec specifies this (am looking at draf= t 10)? > In any case, I would expect the auth server to include the scopes granted= in > the access token response to avoid any ambiguity. >=20 > On Nov 29, 2010, at 8:40 AM, Eran Hammer-Lahav wrote: >=20 > > #2. Asking for scope on the access token call can only reduce the alrea= dy > approved scope. > > > > EHL > > > > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > Of Anton Panasenko > > Sent: Friday, November 26, 2010 10:54 AM > > To: oauth@ietf.org > > Subject: [OAUTH-WG] OAuth 2.0 server behavior > > > > Hi, > > > > What behavior is expected from the server, if in the query on access_to= ken > without "scope" > (grant_type=3Dauthorization_code&client_id=3Ds6BhdRkqt3&client_secret=3Dg= X1f > Bat3bV&code=3Di1WsRn1uB1&redirect_uri=3Dhttps%3A%2F%2Fclient%2Eexampl > e%2Ecom%2Fc)? > > > > 1. The server must generate access_token for an empty scope. > > 2. The server must generate access_token for scope, which was approved > for access_code. > > > > -- > > Sincerely yours > > Anton Panasenko > > Skype: anton.panasenko > > Phone: +79179838291 > > Email: anton.panasenko@gmail.com, apanasenko@me.com > > > > _______________________________________________ > > OAuth mailing list > > OAuth@ietf.org > > https://www.ietf.org/mailman/listinfo/oauth From eran@hueniverse.com Tue Nov 30 22:15:16 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 60CE73A6CF1 for ; Tue, 30 Nov 2010 22:15:15 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.49 X-Spam-Level: X-Spam-Status: No, score=-2.49 tagged_above=-999 required=5 tests=[AWL=0.109, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 8z9a+ua6z89P for ; Tue, 30 Nov 2010 22:15:13 -0800 (PST) Received: from p3plex1out02.prod.phx3.secureserver.net (p3plex1out02.prod.phx3.secureserver.net [72.167.180.18]) by core3.amsl.com (Postfix) with SMTP id 3B3643A6CEC for ; Tue, 30 Nov 2010 22:15:12 -0800 (PST) Received: (qmail 21049 invoked from network); 1 Dec 2010 06:16:24 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.19) by p3plex1out02.prod.phx3.secureserver.net with SMTP; 1 Dec 2010 06:16:24 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT001.EX1.SECURESERVER.NET ([72.167.180.19]) with mapi; Tue, 30 Nov 2010 23:16:24 -0700 From: Eran Hammer-Lahav To: "Manger, James H" , OAuth WG Date: Tue, 30 Nov 2010 23:16:33 -0700 Thread-Topic: ABNF in draft 11 Thread-Index: AcuLrE0WNL4CckMHSC6Rvg1Kh0kB/QArB9ZgAATzm+AAITzOwAELdNXg Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4B06593A@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <90C41DD21FB7C64BB94121FBBC2E72343D4AE3B191@P3PW5EX1MB01.EX1.SECURESERVER.NET> <255B9BB34FB7D647A506DC292726F6E112789E5CDD@WSMSG3153V.srv.dir.telstra.com> <90C41DD21FB7C64BB94121FBBC2E72343D4B06532C@P3PW5EX1MB01.EX1.SECURESERVER.NET> <255B9BB34FB7D647A506DC292726F6E11278AB64E4@WSMSG3153V.srv.dir.telstra.com> In-Reply-To: <255B9BB34FB7D647A506DC292726F6E11278AB64E4@WSMSG3153V.srv.dir.telstra.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [OAUTH-WG] ABNF in draft 11 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Dec 2010 06:15:16 -0000 > -----Original Message----- > From: Manger, James H [mailto:James.H.Manger@team.telstra.com] > Sent: Thursday, November 25, 2010 3:52 PM > To: Eran Hammer-Lahav; OAuth WG > Subject: RE: ABNF in draft 11 >=20 > This is better. >=20 > is not quite correct as the right-hand side is not quite a subset= of > since allows "\" as a character, instead of > treating it as an escape character. > Option 1: remove "\" from > Option 2: define as <"scope" "=3D" quoted-string>, and in the > following paragraph say the "scope" attribute is a space-separated list o= f > individual scope values -- more precisely, individual scope values are > separated by (and consequently cannot contain ). >=20 > I prefer option 2. I'm not sure about this yet. I'll leave it and talk to some ABNF gurus. >=20 > "WWW-Authenticate: OAuth2" is not strictly valid because it doesn't have = a > space after the scheme. > RFC2617 and draft-ietf-httpbis-p7-auth-12 actually uses <1*SP>, instead o= f > in the generic definition of . >=20 > Option 3: > Add realm to ; add back paragraph saying the mandatory > "realm" attribute allows protected resources on a server to be partitione= d, as > specified in RFC2617. Don't bother with any extra explanation. >=20 > Option 4: > Add a paragraph explicitly saying this scheme does not quite ob= ey the > generic rules for schemes defined in RFC2617 because it does not require = a > "realm" parameter or, in fact, any parameters. >=20 > I prefer option 4, despite believing "realm" has some value. Most servers= will > have a single protection space (=3Drealm), plus NTLM and Negotiate scheme= s > already omit "realm", so I think disobeying RFC2617 here is ok (and fixin= g > draft-ietf-httpbis-p7-auth-12). Nah, I'll just open a ticket against p7 to fix it there. =20 >=20 > should be > Thanks. =20 EHL From eran@hueniverse.com Tue Nov 30 22:18:39 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id ABC6E3A6CF4 for ; Tue, 30 Nov 2010 22:18:39 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.496 X-Spam-Level: X-Spam-Status: No, score=-2.496 tagged_above=-999 required=5 tests=[AWL=0.103, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id hf+xckNGPjZL for ; Tue, 30 Nov 2010 22:18:38 -0800 (PST) Received: from p3plex1out02.prod.phx3.secureserver.net (p3plex1out02.prod.phx3.secureserver.net [72.167.180.18]) by core3.amsl.com (Postfix) with SMTP id D2F193A6CF1 for ; Tue, 30 Nov 2010 22:18:38 -0800 (PST) Received: (qmail 23536 invoked from network); 1 Dec 2010 06:19:51 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.20) by p3plex1out02.prod.phx3.secureserver.net with SMTP; 1 Dec 2010 06:19:51 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT002.EX1.SECURESERVER.NET ([72.167.180.20]) with mapi; Tue, 30 Nov 2010 23:19:52 -0700 From: Eran Hammer-Lahav To: Kristoffer Gronowski , "oauth@ietf.org" Date: Tue, 30 Nov 2010 23:20:00 -0700 Thread-Topic: Draf 10 OAuth chapter 2.1 question Thread-Index: Act1MZiEzxFBD0XQQ1+jz60a7Grs0gAABllQBvuEXKA= Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4B06593B@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [OAUTH-WG] Draf 10 OAuth chapter 2.1 question X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Dec 2010 06:18:39 -0000 This is fixed (back) in -11. EHL > -----Original Message----- > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > Of Kristoffer Gronowski > Sent: Tuesday, October 26, 2010 10:19 AM > To: oauth@ietf.org > Subject: [OAUTH-WG] Draf 10 OAuth chapter 2.1 question >=20 > Hi! >=20 > Just wondering for clarification on the example. >=20 > For example (line breaks are for display purposes only): >=20 >=20 > POST /token HTTP/1.1 > Host: server.example.com > Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW > Content-Type: application/x-www-form-urlencoded >=20 >=20 > grant_type=3Dauthorization_code&client_id=3Ds6BhdRkqt3&code=3Di1WsRn1uB1& > redirect_uri=3Dhttps%3A%2F%2Fclient%2Eexample%2Ecom%2Fcb >=20 >=20 > Alternatively, the client MAY include the password in the request > body using the following parameter: >=20 > client_secret REQUIRED. The client password. >=20 > For example (line breaks are for display purposes only): >=20 >=20 > POST /token HTTP/1.1 > Host: server.example.com > Content-Type: application/x-www-form-urlencoded >=20 > grant_type=3Dauthorization_code&client_id=3Ds6BhdRkqt3& > client_secret=3DgX1fBat3bV&code=3Di1WsRn1uB1& > redirect_uri=3Dhttps%3A%2F%2Fclient%2Eexample%2Ecom%2Fcb >=20 >=20 > When searching for the password should also the user part be used? > If you Base64 decode czZCaGRSa3F0MzpnWDFmQmF0M2JW you get: > s6BhdRkqt3:gX1fBat3bV >=20 > So it is sending client_id:client_secret. > In that case the FORM has a redundant client_id parameter. > Should an implementation search for client_id in the basic header or not? >=20 > If not I guess that a valid basic auth header could be just :client_secre= t or in > this case :gX1fBat3bV? >=20 > Might be good with a clarification here. >=20 > BR Kristoffer > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From eran@hueniverse.com Tue Nov 30 22:35:49 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id 9ECA03A6CEE for ; Tue, 30 Nov 2010 22:35:49 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.501 X-Spam-Level: X-Spam-Status: No, score=-2.501 tagged_above=-999 required=5 tests=[AWL=0.098, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OW+OaTEQIORB for ; Tue, 30 Nov 2010 22:35:42 -0800 (PST) Received: from p3plex1out02.prod.phx3.secureserver.net (p3plex1out02.prod.phx3.secureserver.net [72.167.180.18]) by core3.amsl.com (Postfix) with SMTP id A1F1F3A6CF1 for ; Tue, 30 Nov 2010 22:35:42 -0800 (PST) Received: (qmail 3692 invoked from network); 1 Dec 2010 06:36:54 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.20) by p3plex1out02.prod.phx3.secureserver.net with SMTP; 1 Dec 2010 06:36:53 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT002.EX1.SECURESERVER.NET ([72.167.180.20]) with mapi; Tue, 30 Nov 2010 23:36:54 -0700 From: Eran Hammer-Lahav To: Nick Walker , "oauth@ietf.org" Date: Tue, 30 Nov 2010 23:37:02 -0700 Thread-Topic: [OAUTH-WG] section 3.2 error in draft-ietf-oauth-v2-10 Thread-Index: AcuF6Se/h2A5aCygTxqraMnkZ48tWgLOOV/w Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4B06593D@P3PW5EX1MB01.EX1.SECURESERVER.NET> References: <20101116234514.GE31381@concentricsky.com> In-Reply-To: <20101116234514.GE31381@concentricsky.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: Re: [OAUTH-WG] section 3.2 error in draft-ietf-oauth-v2-10 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Dec 2010 06:35:49 -0000 4.3 would be the wrong behavior. I think it should just be an informative p= age to let the end-user know something broke. New text: If the request fails due to a missing or invalid redirection URI,= the authorization server SHOULD inform the end-user of the error, and MUST NOT redi= rect the end-user's user-agent to the invalid redirection URI. EHL > -----Original Message----- > From: oauth-bounces@ietf.org [mailto:oauth-bounces@ietf.org] On Behalf > Of Nick Walker > Sent: Tuesday, November 16, 2010 3:45 PM > To: oauth@ietf.org > Subject: [OAUTH-WG] section 3.2 error in draft-ietf-oauth-v2-10 >=20 > In section 3.2 of draft-ietf-oauth-v2-10: >=20 > "... if the request is invalid, the authorization server informs > the client by adding the following parameters to the redirection > URI query component ..." >=20 > This leads to issuing an HTTP 302 response with an invalid Location heade= r if > the redirect_uri parameter is missing or invalid. >=20 > I believe the correct behavior in this case is the same as in section 4.3= . >=20 > Nick > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth From Internet-Drafts@ietf.org Tue Nov 30 23:00:07 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A9F7628C152; Tue, 30 Nov 2010 23:00:07 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -102.438 X-Spam-Level: X-Spam-Status: No, score=-102.438 tagged_above=-999 required=5 tests=[AWL=0.161, BAYES_00=-2.599, USER_IN_WHITELIST=-100] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id iR8bGdCHHnDH; Tue, 30 Nov 2010 23:00:02 -0800 (PST) Received: from [127.0.0.1] (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E9CBD28C154; Tue, 30 Nov 2010 23:00:01 -0800 (PST) MIME-Version: 1.0 Content-Type: Multipart/Mixed; Boundary="NextPart" From: Internet-Drafts@ietf.org To: i-d-announce@ietf.org X-Test-IDTracker: no X-IETF-IDTracker: 3.09 Message-ID: <20101201070001.23423.69598.idtracker@localhost> Date: Tue, 30 Nov 2010 23:00:01 -0800 Cc: oauth@ietf.org Subject: [OAUTH-WG] I-D Action:draft-ietf-oauth-v2-11.txt X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Dec 2010 07:00:07 -0000 --NextPart A New Internet-Draft is available from the on-line Internet-Drafts directories. This draft is a work item of the Open Authentication Protocol Working Group of the IETF. Title : The OAuth 2.0 Protocol Framework Author(s) : E. Hammer-Lahav, et al. Filename : draft-ietf-oauth-v2-11.txt Pages : 46 Date : 2010-11-30 This specification describes the OAuth 2.0 protocol framework. A URL for this Internet-Draft is: http://www.ietf.org/internet-drafts/draft-ietf-oauth-v2-11.txt Internet-Drafts are also available by anonymous FTP at: ftp://ftp.ietf.org/internet-drafts/ Below is the data which will enable a MIME compliant mail reader implementation to automatically retrieve the ASCII version of the Internet-Draft. --NextPart Content-Type: Message/External-body; name="draft-ietf-oauth-v2-11.txt"; site="ftp.ietf.org"; access-type="anon-ftp"; directory="internet-drafts" Content-Type: text/plain Content-ID: <2010-11-30224650.I-D@ietf.org> --NextPart-- From eran@hueniverse.com Tue Nov 30 23:10:37 2010 Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E932F3A6D14 for ; Tue, 30 Nov 2010 23:10:37 -0800 (PST) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -2.506 X-Spam-Level: X-Spam-Status: No, score=-2.506 tagged_above=-999 required=5 tests=[AWL=0.093, BAYES_00=-2.599] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id KOx+Fb+2dJLm for ; Tue, 30 Nov 2010 23:10:36 -0800 (PST) Received: from p3plex1out01.prod.phx3.secureserver.net (p3plex1out01.prod.phx3.secureserver.net [72.167.180.17]) by core3.amsl.com (Postfix) with SMTP id 21B6428C0E8 for ; Tue, 30 Nov 2010 22:52:21 -0800 (PST) Received: (qmail 9253 invoked from network); 1 Dec 2010 06:53:23 -0000 Received: from unknown (HELO smtp.ex1.secureserver.net) (72.167.180.20) by p3plex1out01.prod.phx3.secureserver.net with SMTP; 1 Dec 2010 06:53:23 -0000 Received: from P3PW5EX1MB01.EX1.SECURESERVER.NET ([10.6.135.20]) by P3PW5EX1HT002.EX1.SECURESERVER.NET ([72.167.180.20]) with mapi; Tue, 30 Nov 2010 23:53:23 -0700 From: Eran Hammer-Lahav To: OAuth WG Date: Tue, 30 Nov 2010 23:53:32 -0700 Thread-Topic: -11 Thread-Index: AcuRI/DsdSKDDtSpSoyGSmkQj/ZEGA== Message-ID: <90C41DD21FB7C64BB94121FBBC2E72343D4B06593E@P3PW5EX1MB01.EX1.SECURESERVER.NET> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: acceptlanguage: en-US Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Subject: [OAUTH-WG] -11 X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 01 Dec 2010 07:10:38 -0000 I didn't get to finish the editorial changes I want to make so I pushed the= incomplete but stable draft out as -11. This includes all the normative la= nguage changes the group agreed on, as well as all the feedback I had for -= 10. The remaining editorial work should not change any implementation detai= ls. It will just impact the document organization. Changes in -11 include: -11 o Many editorial changes. Fixed user authorization section structure. Removed unused normative references. Adjusted language regarding single use of authorization codes. o Fixed header ABNF. o Change access token description from shared symmetric secret to password. o Moved access grant 'none' to a separate section, renamed to 'client_credentials'. o Demoted the HTTP status code requirement from MUST to SHOULD in protected resource response error. o Removed 'expired_token' error code. o Moved all the 'code_and_token' parameter to the fragment (from code being in the query). o Removed 'assertion_type' parameter (moved to 'grant_type'). o Added note about redirecting to invalid redirection URIs (open redirectors). o Removed bearer token section, added new required 'token_type' parameter with extensibility. o 'error-uri' parameter value changed to absolute URI. o OAuth 2.0 HTTP authentication scheme name changed to 'OAuth2'. o Dropped the 'WWW-Authenticate' header field 'realm' parameter. o Removed definition of access token characters. o Added instructions for dealing with error and an invalid redirection URI. Please provide feedback and review the document fully, even with the pendin= g editorial changes. IOW, please consider this document the final draft (pr= e-WG last call) for all normative/implementation language. EHL