From 45dceef75e86fd21c447f0f754bf427b58d043f6 Mon Sep 17 00:00:00 2001
From: Garrritt McCune <glmccune@gmail.com>
Date: Mon, 4 Jan 2021 00:20:35 -0600
Subject: [PATCH] First attempt at getting a little meta data on the client.
 Included a value for peppering all password hashing functions.

---
 .vs/SecureCore/v16/.suo                       | Bin 60416 -> 61952 bytes
 SecureCore/Authentication/PasswordManager.cs  |  29 +++++++++++++++---
 SecureCore/Controllers/AuthController.cs      |  12 +++++---
 SecureCore/Services/UserDataService.cs        |  10 ++++--
 .../SecureCore.csprojAssemblyReference.cache  | Bin 424 -> 424 bytes
 .../obj/Debug/netcoreapp3.1/SecureCore.dll    | Bin 18944 -> 19968 bytes
 .../obj/Debug/netcoreapp3.1/SecureCore.pdb    | Bin 24148 -> 24396 bytes
 7 files changed, 40 insertions(+), 11 deletions(-)

diff --git a/.vs/SecureCore/v16/.suo b/.vs/SecureCore/v16/.suo
index 4fe6fcb823ba1e32953e34109edd23f9c350b821..70d44bbfc8b7642ca495d792cb165a817760bca8 100644
GIT binary patch
delta 2872
zcmZp;!QAkKd4ho~69W_oFfb@HFfcGPFfjc4|NlQolzH++R{f0$EsT?xayeF2Y9&6p
z#;7v6l&PNa`sS}p%#57xctOe-7&s?0vdGs9FfcH1F)%RjF)%RvM*@Nj3=Fai3=F~y
z3=A?13=C`x3=I4X3=HB73=9fTwYdxo3>;9ar5P9)6d4#8Bp4VNq@eP7P&s`lA7s2L
z0|SE=l%EZ<79<G5dJGH<B9qs$=rg)ZzH6Z`2@-Q<U|{foDhBaA85kH6LH?VVV8Edc
zm6+Vasv@e*z`!8Sz`&5tz`#(zz`#(*z`#&8`68<@YdHf0L-OQ{tjd#^ayTD6E{gyK
zh#OLX*unw?WCI9uGcYjx{r~?zE7bWQF*&GZAT|i|FfcHH!cl4RMOJA+P@otvFfbT0
zFfe3*R89`$7xz_TU|`4u@jx2>|NpPcz`($Q#1~^=U`S(NU|?rpV9<ezi!d-SI5RLX
zXh8X*P&a5od@aGKKbe<PUm$>ifgzBAfgzTGfgzZIfnl<bwTdMu1;jBhFvK%3FeETA
zFeE|E00mSE0|P@U0|SF30|P@k0|Nsrys{V=7>XueWR({!289?@2gt$jaNES?!N>_R
z`w9aC!_~>2{K}m77#JAtgIqQ-uzNEHj|KB&2W}4BYMLhr9G-kw%#iWg<gWttjF%^u
zig!;E`-03}WX3c}u7uHIa;e;T4p2~n(%NMCNX5wpOze|O<a;0r*n$`s7#u_=S4sT>
z32st3%sBb5sO=^dCZ@?u3Qm(<Bn&o}2=y>dQYzV8qSeE=NP=nd5(|;dB35sh7wIuA
z(qWpU;KBh)kDxRUGasyF@}iS=o9zq^F)s38T4cgB$;pMo9U2h`bzVKJi(;4-X)#US
zbV_Wqn8Pc^Ng*CApkxYDGr1%rgaz5~$zMWxCO3qrF`7(PWRjfhpu@oevLB|N^)3Sg
z!^X`&RoPi!E@k9TNli;E%_)g5$t^H+b}`w^A7{%LB>KL#IcH^bf?tQOQ{UO=`bYhB
z7iHG!I?1mvtvwyob$eZ>u9NMx9@%rNK3v<<sq1v_u>bi<y7>}&J9V9e-#?Oe;pSHV
z)~M^0eYpFspVG@+8#*V?i%(jV#<a+WX;A>vCJ$#OP*`qmaB5&&l)*H)ai!R1v4~fU
zi+orXWif3^@L<C9C@7i2e1hiD18OEbV82018-`6mhZ#8;K|u<NUZ^H+c2L>Ez`(Hi
zfA(9Z$qTNDOv)FT{NbdCI4E;~G8u?=gc<=#==S->y!i}845<uy49*Ps40)UD^VwJ?
z%g@UcPG+!Th+!yYC}v1yC}JpPh+$xu%vfZ<*`cJ2iQAaLk-?3@m7$h_aq__u`$^^h
z85t&3bWDD*oPV;y606A<79E}}zx2T5ixtNvM^)8L_FK#|xwhVR^8KX;Cr2$gI(fme
zLz6Y@>R{?Of2h08I9Z>GgV6<~W%IPg=`8G^0)v%-Ve-ei2AI0Zf7|{Eg33dP7c>rl
z%g4<;UE3K2eIR0>0`UN-yz<+uzcGke5)`Ho8Hodt3=9lP3=9mQkYJuHFj;Bxflc!l
zsWE{H{K<-?)|`3_5$8dvjbZY_GU3VRN)=c^JjcoVCu>UPF;p@rFgP;=FoZH#GvuT&
zf~pNJZVSoHjoa@sG1g6PJeP=^)Jz<W93e>!Ik`}h>@bp=aw<a%gC|1)gD*oOLmopS
zLpnIF^ca#EK;;i8aHdRdJeN9I;fl~?i#;-vBO){=N8Na|_`q()$u-9sCOhmsuqopW
z8+}s>H-m#Hq$cEGm@LqBaB@`DahwSTmRJP34pJkLAkx0dfhYzBhDt(-M3G5svchB`
zP(q<rDoK^6Aj&p7>}_CN{O1_s<OBO1Cha=_V=g+uw&_3v<Kz#QO(uUhIAQXE`!<^!
z9vom~6rUV;V*jM`4wFAkv6%cOk7IJf`2(8+PS!C_wtDI`>5{|bLncm}_g$)Eq)7WA
z#>oes+e~h_a$vHNvDjvrGZBpZ$qcFBV#AT4l%a$nWAfi?JEcS6#Yu&(T8R6H$!;rW
zC_YdTwED+3xzR{pKyK$J{bJv<$<=M*P0ZKQS54-*W-$4XquS&(r=w_M`aPliEKu>l
zW|LQ%lVitVoKaFTx#4UBW6fkoy%bAaF}1ku`@3(cKe`rOti8In!DZ@h=k}!~iAydC
zRJ)|OEHRQ~05z5-e>8TLPGU%AFkvuZNMpeC@x?uuKHfaxSOMeYrgJHi7hLlil#T-c
D_;lJe

delta 2735
zcmZp8!rX9!d4j>@3+XJ93?LxDz#zlGz`)GF!0_+?|NkH%#>tI_!W$EKnK-6#diX!O
z#;7;Bl&PNa>gKOZ%#55_ydX6U3{sOBS>)?A7#JA-|NsAA1WJS0AS{T)7lyLc7#J87
z85kHe85kJE85kG}7#J9mp!V`X)v!TnkQs$gHV2gEVqjoUWnf^?VqjoUW?*2*V_@K8
zP=Okt&%nSSHhC?J{^UDqJdB=`U$V%{x<EC$GB7ZBK-nOJK^{#6d2(Wc4@Wiw14A+c
z1H<GVRu#ou1_lOo1_p+F1_lOg1_lOs1_p*A1_p*=1_p)_1_lNRh%T8)OgWqeE|*+E
zp<_6?l*w<hGqWM%jmck`nwdCQCs#37)rT=KFu=kJWGM)9GB7aw{r~?zE7Z{-F#)K<
zc%ZZn0|Nsnh`FJBT?PgQStuLiNst~8Hh_j=8d4~N#91I}#s2d%Ffgz)FfgPuFfb@V
z1pf<x+^-oA<$;uguowdagB$|`g921s6zV)@km`vECX8;Ac{%ktqZk+%0vQ+>f+o9i
z%DaLBF`9vaA%=m0A(nxGAr2aJ3DBSe84L>76b1%{R0akHP;vtWX9fcULnbI}5W(rP
ziOYkL_cGMhs|*Yb*Cq#YD^E<Au$hC$f|(O!)g=Z7hRYDqDU$>ab25Vb2@1Q(@{x*@
z4Vc&&uTTCeP|tW}a;acFYcK-?1Iy%}@?M~L*<7N~!#GLAnG+nPprC;337uRjQqLGN
z`Kw4hqu=CG(e6nCUl^}|4Z1kFRIq!I3ezO961D&a28M+~ldGhDF}h4H75C!=#|S8v
z;3hdw{wjTL@?m+~MY4>O#7Y>gCzpzy=K!TVP&~ktO)e4dnWW$X76&C~nE2)r1%F0P
zMo^eBg3=<?Pm{kWHZb~6E>!}VY&f|@xo49c6VqlUmw(KQl$aLjFfGzznq+9V+0Nh)
zqk!DbPx{5aXOpYj#G9C}rLUTNq37IYrAbPRlirwZHZwWJxJZO)@)9+X$s%emCjVg(
zU;zc|WC3*vS#Jgg1|J3n2483lfFwX(hD7#4HQ~t->MKB6H;bsfVV-34gE3|EPa}55
z$(v4zZ5DHQ#W=~#g$0y0C-+C{Y%VeDVO*raw8(;KQ;;(gCnHD#R7@cJYSzQLD1d2^
z4bvni4;JKLm|Wr%!U9UzFtwAvIQ2}nnC&vTJJJ*s$%|Z=CNJD5wplFV72_f+7XFmf
zw8YY!lK7I`0#|bji_QFAwv0jd4*Q><q?<3Xw^P^2_F9kZxm6#oZRyl?>O1>f|ERz2
zqRd)dC(-w{%{eQh6Z|@Kow5&i-}O^^xobnGu9N%<)7sNPUANbD>N*L(e<ba~&8_~e
zaq>Lxq)iDPOf1O$m|WuI&&lA%z`%gd#mG){aWXgC%<pB$SP#k+poj+LPwF^P*GW*I
zphn6`VAt(hT_;cx9mmc5zo`Slt_pLuJC*}sGcYi0-tX<mG<kVg{pR{<xond?PKr#*
z6q%fp!8IwKWpYY}$YcX17FIt728Q6t_L;`KMGTn?c?{_c(G0N+3Y+UQ*;sgs8A=!u
z8HyN67)lumCQr(ZnXH&2%*ZhLZjS8a)?CHS4tZrv+$Ic03}y^Q3@!|elMD0hCl&r@
z)SFb)F<D>*&*a)l+sUFUk4>Jm{P5({%Z^W8RCaW7=!yfAAC?~6oL=t02vfBAL&bGQ
zR#1t=x%o_0BI{&*CXUIUD(WXIl=E-iyTyW$k#X}MZx$v{QNY0PVLvD?KpE2oWYXl*
z+dfT>-NeIc3ks0U=eFxGEt<wMxp0-?WbIvFK{9fn3J6pjgNk2JB?wZ8l!qpqHeio9
z4@#p9lMA~oCpUCyOip?%0V;eLCc6~ca6ly)CU+ECfMg}@vg6~O5|gtt^U~ciQ*%-n
znHU%txVSAOHXrP=XWW$bhKW#k^P_|}!=lNJnaa$Z3?h>S3`92X&OFP+IAd}^R_f%S
z9GS@nvm`cm<fJi9K2cyfnK9oU9Pm7DuC+D6smY~9sf-Mh9gFNH6*_P&6k=ci)x_)!
zlP^?Z4fo0E<%d9WjO?4wRmEe5v?wUWg2IPzI0rF<0#_JI;7(3-^qeenMriWyN3P&F
zLn*Rw1ovcz!u_lkAgd?0Ek_FT#0qejPfl!+U<8HlU8c=Slad%0ADGNIxg*VQ@}((8
zn;i}}FfKmuhH>(NqYj(SH84&-@YZ3nLx$Mo364^e4Nj;`zHvThbHjxO#!Wr*7$+-D
zN}BAE);Iaml)TM<-moyjRBkpnae;O60TYMGO{c{sM_o{36rUV;qI)vOWsAvIPB=_%
zxO`ypCj*ns9w*xvC-1w;HtCwf<fQI|$#xgyHa9&u#5lR((SgZ}j>=7zJ8H67=1c_R
zWT9@c$p@ZnlTKmqWk_VmV@PDE&{Yd@|1jBY<qX9KDuP!3*d|Zx(Vwg|#b|OwgvR81
zlO9bzk|qRl8FMN_;^zI685t+NZ2<dka>LsOm`kC4(t-Q;Ls!J)m<uXk2RCnSxNv}R
z@|6<@CS7)z{K){~a3e##&7ZFDF-}hCRROtpa?>>@kO!19OeSA2G1;v1FobdPhHjzB
x0tPITWzOV*J+rA>Zt{vVXC}XU4Dm-QgEK=uLlHwNHh-Me$E=<No~9A<JOImv)9U~L

diff --git a/SecureCore/Authentication/PasswordManager.cs b/SecureCore/Authentication/PasswordManager.cs
index 9200720..7925ca4 100644
--- a/SecureCore/Authentication/PasswordManager.cs
+++ b/SecureCore/Authentication/PasswordManager.cs
@@ -6,6 +6,10 @@ namespace SecureCore.Authentication
 {
     public class PasswordManager
     {
+        //Add some pepper to the passwords for good measure: 
+        //https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html
+        public static string Pepper { get; } = "rVk/OwQUw01qy76Q+5WimPk+NdqUMMghftMXyJzzckOj/+eFn056PDYzBD61E/ZNjRdgiMK6RhcHEcdfpJdbcw==";
+
         private static string ConnectionString = @"Server=DESKTOP-OEDDVKC\SQLEXPRESS;Database=main;Integrated Security=true;";
 
         public PasswordManager()
@@ -18,14 +22,14 @@ namespace SecureCore.Authentication
 
             ByteGenerator.GetRandomBytes(ref salt);
 
-            return (GetPasswordHash(password, salt), Convert.ToBase64String(salt));
+            return (GetHash(password, salt), Convert.ToBase64String(salt));
         }
 
         public static bool PasswordIsValid(string password, string salt, string passwordHash)
         {
             var saltBytes = Convert.FromBase64String(salt);
 
-            return passwordHash == GetPasswordHash(password, saltBytes);
+            return passwordHash == GetHash(password, saltBytes);
         }
 
         public static (string PasswordHash, string SaltHash) GetUserPasswordHash(int userId)
@@ -49,9 +53,26 @@ namespace SecureCore.Authentication
             }
         }
 
-        private static string GetPasswordHash(string password, byte[] salt)
+        public static string HashStringData(string data, byte[] salt = null)
         {
-            return Convert.ToBase64String(KeyDerivation.Pbkdf2(password, salt, Settings.KeyType, Settings.Iterations, Settings.KeySize));
+            if (salt == null) salt = new byte[0];
+
+            return GetHash(data, salt);
+        }
+
+        public static string HashStringData(string data, string salt = "")
+        {
+            var saltBytes = new byte[0];
+
+            if(!string.IsNullOrEmpty(salt))
+                saltBytes = Convert.FromBase64String(salt);
+
+            return GetHash(data, saltBytes);
+        }
+
+        private static string GetHash(string password, byte[] salt)
+        {
+            return Convert.ToBase64String(KeyDerivation.Pbkdf2($"{password}{Pepper}", salt, Settings.KeyType, Settings.Iterations, Settings.KeySize));
         }
     }
 }
diff --git a/SecureCore/Controllers/AuthController.cs b/SecureCore/Controllers/AuthController.cs
index b1b4bda..dfaf438 100644
--- a/SecureCore/Controllers/AuthController.cs
+++ b/SecureCore/Controllers/AuthController.cs
@@ -21,9 +21,11 @@ namespace SecureCore.Controllers
             //Very the user has login data.
             if (!UserDataService.UserHasLoginData(info.UserName)) return Unauthorized("User doesn't have login creds");
 
-            var (password, saltHash) = UserDataService.GetUserPasswordHash(info.UserName);
+            var (password, salt) = UserDataService.GetUserPasswordHash(info.UserName);
+            var agent = HttpContext.Request.Headers[Microsoft.Net.Http.Headers.HeaderNames.UserAgent];
+            var ip = PasswordManager.HashStringData(HttpContext.Connection.RemoteIpAddress.MapToIPv4().ToString(), salt);
 
-            if (PasswordManager.PasswordIsValid(info.Password, saltHash, password))
+            if (PasswordManager.PasswordIsValid(info.Password, salt, password))
             {
                 if (HttpContext.Request.Cookies.ContainsKey("Session"))
                 {
@@ -33,7 +35,7 @@ namespace SecureCore.Controllers
 
                 var sessionToken = SessionManager.CreateSessionToken();
 
-                UserDataService.SetUserSessionToken(UserDataService.GetUserId(info.UserName), sessionToken, DateTime.Now.AddDays(7));
+                UserDataService.SetUserSessionToken(UserDataService.GetUserId(info.UserName), sessionToken, DateTime.Now.AddDays(7), agent, ip);
 
                 HttpContext.Response.Cookies.Append("Session", sessionToken, GetCookieOptions());
 
@@ -51,10 +53,12 @@ namespace SecureCore.Controllers
         {
             var (hash, salt) =  PasswordManager.HashPassword(info.Password);
             var sessionToken = SessionManager.CreateSessionToken();
+            var agent = HttpContext.Request.Headers[Microsoft.Net.Http.Headers.HeaderNames.UserAgent];
+            var ip = PasswordManager.HashStringData(HttpContext.Connection.RemoteIpAddress.MapToIPv4().ToString(), salt);
 
             try
             {
-                var i = UserDataService.RegisterNewUser(info.UserName, info.Email, hash, salt, sessionToken, DateTime.Now.AddDays(7));
+                var i = UserDataService.RegisterNewUser(info.UserName, info.Email, hash, salt, sessionToken, DateTime.Now.AddDays(7),agent, ip);
 
                 HttpContext.Response.Cookies.Append("Session", sessionToken, GetCookieOptions());
 
diff --git a/SecureCore/Services/UserDataService.cs b/SecureCore/Services/UserDataService.cs
index 0db4dcf..eeedaa2 100644
--- a/SecureCore/Services/UserDataService.cs
+++ b/SecureCore/Services/UserDataService.cs
@@ -84,15 +84,17 @@ namespace SecureCore.Services
             }
         }
 
-        public static void SetUserSessionToken(int userId, string sessionToken, DateTime expirationDate)
+        public static void SetUserSessionToken(int userId, string sessionToken, DateTime expirationDate, string userAgent, string ipAddress)
         {
             using (var connection = new SqlConnection(ConnectionString))
             {
-                using (var command = new SqlCommand("INSERT INTO [Session]([Session Token], [Expiration Date], [User ID]) VALUES (@SessionToken, @ExpirationDate, @UserKey)", connection))
+                using (var command = new SqlCommand("INSERT INTO [Session]([Session Token], [Expiration Date], [User ID], [User Agent], [IP Address]) VALUES (@SessionToken, @ExpirationDate, @UserKey, @UserAgent, @IpAddress)", connection))
                 {
                     command.Parameters.AddWithValue("SessionToken", sessionToken);
                     command.Parameters.AddWithValue("ExpirationDate", expirationDate);
                     command.Parameters.AddWithValue("UserKey", userId);
+                    command.Parameters.AddWithValue("UserAgent", userAgent);
+                    command.Parameters.AddWithValue("IpAddress", ipAddress);
 
                     connection.Open();
 
@@ -101,7 +103,7 @@ namespace SecureCore.Services
             }
         }
 
-        public static int RegisterNewUser(string userName, string email, string passwordHash, string saltHash, string sessionToken, DateTime expirationDate)
+        public static int RegisterNewUser(string userName, string email, string passwordHash, string saltHash, string sessionToken, DateTime expirationDate, string userAgent, string ipAddress)
         {
             using (var connection = new SqlConnection(ConnectionString))
             {
@@ -113,6 +115,8 @@ namespace SecureCore.Services
                     command.Parameters.AddWithValue("Salt", saltHash);
                     command.Parameters.AddWithValue("SessionToken", sessionToken);
                     command.Parameters.AddWithValue("ExpirationDate", expirationDate);
+                    command.Parameters.AddWithValue("UserAgent", userAgent);
+                    command.Parameters.AddWithValue("IpAddress", ipAddress);
 
                     connection.Open();
 
diff --git a/SecureCore/obj/Debug/netcoreapp3.1/SecureCore.csprojAssemblyReference.cache b/SecureCore/obj/Debug/netcoreapp3.1/SecureCore.csprojAssemblyReference.cache
index c26662d4c401df88f9a58f71514689daa52affdf..387fd51b9dcfe8ed0bc23f2577950a05b5ac5ec7 100644
GIT binary patch
delta 14
VcmZ3%yn=ayKO@r*&B=j`;Q%FA1hxPG

delta 14
VcmZ3%yn=ayKO@s2^~r&Z;Q%BG1bzSj

diff --git a/SecureCore/obj/Debug/netcoreapp3.1/SecureCore.dll b/SecureCore/obj/Debug/netcoreapp3.1/SecureCore.dll
index 97e1b270071ec4bd368e512a17486d2471e16682..6464bac64f32d1c4887578ec4039b81c5c5380c0 100644
GIT binary patch
delta 7806
zcmZpe!q_l}aYBbzW);_21}J#Ipv1t<Xu!bW!oa}50TDcw%)r2)z`(%J0OC79*h~xz
zEFdlef@U}{@sb{2NiqY2KS-v5fgy!;qM|U*0tN;i1_p+XBnF0%$%;%mlOq|`xz0F4
z4Rx8^#i+~)GMbHnfx&I^Hb!~Q1q=)fObiSRK9lb;Dk-c0+0Veh-~kq8WjLV6z;MEt
zfq{_$jM*kHbTF74z+}v5IJt#sinIs=1B<GzxLTbs0|U!HHWvm4wqi8~1}@bGk;%r)
z&%|9B7}&Vjm}^BrE@!F+d4%mBo7-dq7C%O($@MJT!KCEo09I*6MyJU+Y$1%RCLd(e
z5RqbGC}7UlXJFt`W6#%PVBjh;VVV4wO<L25fq@Z4Jcxy%fE7g~jfJ6rk7aT`o1roT
z1EUPcdy)+06BxKbA;rYN!!T(cge`5r%<yV*A-gD370cufcJ2CE7`85BVJKihF?|Py
zeIU2;p(-)~If1oD4x3~7*ig&^yOtd+G?|CPz!&CZMTU)+AkG9i`Qlv&8|36@1_lN$
z1_nWfI%Wn2mSP<S1}-j!qC+eU1#HE-3=CY{4A3BxVwt?3Rc!KHj!21WRxGj%1x%n&
znrzQ0&-i(AJf}S~D?|C@g`8rd!YqO;IzmiE9c&B*`L+xUT*9mtzLQUKO4l=KI5049
z<vW51Ck6(tI%g2eg@J*K2P)+X5^w_%?jXX1fq{!%!<>PEjh8uJnSp_golV1pfq_k!
zO_0s<1~^KPjPw9S^%0P*o*-K}1UYn^8K4G(?5xj6sPJN7;L;EV8O15csUyQwbcKzf
zK*Jj(>I1Ub7i0pf1t_^QXjp;Nu`}l@GBB`d@G~&539@VWffR5FaVdjb!N4HnpyAKJ
zz{Q~vz`(%8sUgU~zy`BA5M*8u0|Qrm5y)|Z>`WT+3=C}f!JwF6D*A%WVr^~)ru-0)
z6|C9}f~;B$(gqw1&ltcNRFDA@78=G33~Z{^cAzM%wg<%>*rBkX1o=20C6w#Ac%h+z
zGnj>07$Dwc&R1n%U}IzFfOwQmhz-@FoM4X%vS<i_!iE)UF5IhNpK_pjRKkv(p+Jze
z2b2pnLP3E74rKOwBElRDOoANwVIVPZf?>bMAjq!8z`!T~3f&ln;`0n5YLk1pW$Mvl
zPy|~zgDuYw2M2F{1Soj48Q8QKgbi32+!z=b_&~|OI1*ISfIY`0#DMBIjVJ~NuHtBr
zYhpl#s1{kVGZf^<GB9unF{n!9$AJX7wHes8l$bQ)CtLBjFvd@==TT?$oxGe!h0%BN
z86GFD1dzRKOab|clO=dnvZU&G7#LWz)R;8nK)M;U7#J9Y4VW0T85kG@Kn~KdXJBCK
zjbUJ5<Pu`gFaZ0DO~V2d2^vWt_n3lW7-T7fumLlJ6az>TgCGO5Ml#4I7AA;djg-mr
zcqJHlCvWFfVRV{&hgX#i6zs*RliB&Q>zNp2LH2^QGK>6U<YLp|5ChvOz{tc5whZho
zkQxIf1`P%V1`&{2h#D?tjWh-ZF0p@%-0V8+P<x@)@@O+~XbBszg8d^3(!-=-2+A#>
z%*3o=3u4+Z)HASY*nybopnL}M6&EOG!iu`s844Oe0aWyvm7$=47Zg-rM=&zTGcYiS
zfeZv?bhH3s1BVRQ$x6_G)sm{?1L>Bk<A+cJ5K0h4B}ml?f#_KZ3)&bN8bAsq8bIpg
z9U4ID<OLc)>f{v~z{>QBof#O|8bH+(D5k*?r=`ZgtdRk#S`b2Z%=uyr3~Wr*qLX9z
zb?SWt85or77#Ma4GB6~FFfb?wmlS2@r5A&evV<A~g98TxgK}svLxdhU>KT;XLp?#Y
zc!nMWLjo%UgR)ajeiBGAxEf_(43}TT$;rjQ!0?OF7!(ws>NJ6YfkB9Yfk6~h6*Dj}
zSV5{-h71OVdT@>G3kfy`P+iRjRmcieBnL5=ff;N`AP2}mP<j()6X#`P=m3*{Snl!g
zGdS>q!~<D>vvDz;VtFgb#*oiuz{SR}mK8*1fys6-X$%(EW;NidXJZHzs^{Qi=oj{9
zXJdHCBF-zsFrVcfj}U_Z>pdPZhUuIooKg%<T<lzO3`@DwxcM0Dz$zmc>N%7c`nfyV
z)ff^PelxH!{9pw+sFtCgLyKV{7niUW!)qoG>BY?@%*ODPxt>Fh!HHFjQIFvas~DpZ
zgB_0;qh38jEE`DZF{>D(8N&e~F-9wfue?lrYz(`(>N)Hfq6PnP=`r}Qi7`4c%;Nbh
z?8fkl?HH#Q1A~A+yBEVxZhv+^1}1)gc0Pv3-2UuA3^pQr82A{j@Pj<#!Cuc1#;}MF
zr1CkxKf4seK0bD?C<Y~db}l`JW^NE!?+E7n<Pc+wV-OO^VUJ_b70zK#VtB}x#;wHA
z#-GNW#;}P$jhl_3jG>+*i(wM8GB+E87sGD`ErvWUkk1OhJ}%?o63%0o!gZ7@kHMDv
zC>I;UT;_U?Jcfr%N4bg^@`XWcUY27FdJGXPAP=7t5@VEOSX?jsk4uiBS@<899fN?#
zKdv%{GTux<IfiFk|G26cjtV9S*)fE2{o^WPa1#av;B&CH5*Cp9R9;ZnED-`3w_Qk#
zk&Pi+sGft3!JYvWa$(H>xY!t$v4KR^bJcUWF}&bB#;L~;%b&)r$FP$-4cthoUkXlE
zj0_+sz>vV<%wh^=GcpJ;NOMDYEDRu?9rH&XQwAmm4u*vc3=F!=A9)xUm>IYk8W{x`
ztiW>247^~K$;@tirVK0$Vqjh&4~WOcAPweO@k|hGWng2F0rT$Eb4?I5Wng1a1asBF
zlAH`0U|t9hNREp^8*D`nk1VGt0}q1%SdIhAGX(P_z&t(%E3irnK9EX21{(%uMFEEI
z3=9mW48jaf49tuI;MT1vgD8V5gCau*(_5x`MFxM~k4%CLrtBLS85ueme=;#LY-a?q
z&w|OhU^19#1EV5?9rGV1Mh1v@7SjesLx$x{8yF#a4H@<`{bVv^c+SYcY{(!5W;1|E
zW2T=>W(*4%SeeBb#27f4*%;awe=-Gtn*I#a>KR^h2r@G=BtW<fpSi`EnHW}pd2JFK
zc-R=288*Usa?H#OhafzTWt=L^EDWb0JO)-?O=cE`7f_xbi#{_egM%U{ZXu?yGkgK_
zo-xJ<nKQF9@F;=go-x+DGdeJ{gV+oV498eOlF<GM!!cHn90!97Sm`u|Q|xZcoD6@U
zyoU^%n7A1xfa~IE3}%c0%sdPtDj<WVF|-MVGV?O*f%1-W#4rmmOi+c$rSYUOi!v-x
zgYZ)888<P>GH9qnxO|+&%yJAXz`ThP+juIN<r%hsd2Jl)7@`>E8TLSVTNyx=%~2?C
z1G5UF0>fD-Zzr<=g95`f2oD^FiVXKrcrPG4h7TO|HOz_(Ihr8r+ZdX8YM7N63P80z
zLmR^k;TmRTh9h8JBSVB>3$qG?7^nrn00~kR26+gN;}Ek7qY8sMly{z4fI)@90LuHz
zq{67mU;*WEF$*xLGB`qc<{T>ZjA{&?P_83~0D~Gs5QGPIw>m>KoY%#y&X5D)F~kT>
zVAf!m0Ow6()?nBI;ej2a$*>2?135;M;V6_hfkTB+i{UJkw~#}Cp<avO8iWhBP@CZa
zm^Y2#I`3R&Z3Y<~P{>T<@Z>RN&|y#p^B}(0VK4ymrZI>!yD{r9WI%b9j7ymH7$!h@
zr`T6B8!|-bf=yw##ITjwn4tyEyT)i*&#(i`oyhQ-eJis$!+Qu19QT$C9C{Fqn>b7v
zEE$Z!Jc#v{3^riiG!A`%J<OI2&QP8t%K>If1}`Y@G#f}R5X##J=7B1528L-I*TKB{
zc(5cSu~{;-q3|Ywc`yrSgL%yi@(jnAEg6=Ac@Q}(hIL?GGlL<+8D>cB?#Kt~MnlLQ
zoFKM2FNplb1?r`)7Y4E07#Zpr7#Z3iRXVu7zrzfYKqgg~K^o=@feKp(MvyFsWMa6<
z0TStC0rj^Tgc%rE86FFQWI=kF7`(x<_t-(QpV>jOAoXkvAoc7FAoUzz_4SNkgJ9$i
zHjohz@+%jJjZ8wskx4JGb3q<pWIz^w&kKq;5N2cmc>qE(F+jWlau!IAfq}7}0puG-
zhEEIv0uX6bHb^r}TvG_-pxweO3?dAi3>$bD83Y+XC8Q+71|BX3O@<9T0t|*=(h^KM
zf=N#>83-mL!DJ$stOV<=?_}7(Bg$}+VFQme!%wgTBO}OAK}L{ql3>yiECM107$O;O
za49k*f<-bJbvSewDjAJLOc@#(6ND`p8W|(_oEauECUNR8%w&|{_G2hyyv-ELkO{VI
zA)|tD62nSHea1qDos8c&Dj81JGX@EFGTda$VV=P7kZ~FN1csN4-#8~Q@GxxPnaA*u
zQATJ9g9uo&2tx?t4h9*p_)o@_%-0!if}Q&i6cUUN8MX;>Fmf`jX5(X2WO~NI#_*6K
zf?JGHlgXb^no*M}gF~J%lfjK0R8Vc;(PuPdYGh$!&}6DN7LsPPWYXvMVsvE6WAJ0N
zWKt4|Vzgx9WJzaqWNPCmXAESDVC-j9VaQ;Z#;C$Dkzp2NAk%!|d5non<-$uCGnrZh
zS20#HeG}TiSjd#Yv6(TEsg-LNV<Xdf!2^t)Ow$<-FlI7E@*ZQH$n;$J4C6$m433M8
zGnxJ}n=*7Vy4MR`V+>?s<+#K6kzup&W5$mR_ChZhH5sdf-Z3UJrL%lxT*(y4`<rni
z(>EqYCXiFOm^vB#gp`>K8QYju7&kI)V-a8gnV`>P367MLOjSa*Ogao3cy=&YGB)x0
zF<CPHVHaSqWZcUV#l#6#<H<OKC7sEW@fmM@E|VjZ8hag+Ba<k57gHyro5%#FmrS6z
z?_>-T*~Ijbsf%GZ(@&=5g6Eio7%norVB%xA$-uy%$dJsikwuXqo8cFW9s@VSTV_25
zVTNzadJNJGqAYq0$_#QWdJNhOAuM_f#td~VdJNVKeJpwm&I~hI^ccJuma*tD1T)mt
zv*<BIGt{v(f{kkg8@B+=UI-;Y790e#4}xVMg4qwjY(_?qBN!P$YLpqP8JJm>8Jih4
zvZyc?Gib9qf@K}SvWZ}JBAA`bSj`~HnhaK1-w2jy1WOzQvk!vV55eq*U^XKY*cv8~
zHHu)iBABfVW;;SjkgPM9eE>{80Fw;NAiWA;vVpmqVH-;W^JIpDEDM;s8BVh-s0VWn
zFn2TDWH|t4E3kkxIDp9nFxdbm7l6qFU{Zl~Hp5012iC<5PgxRJLFya8WD9FCgBR-p
zF#7<QRA2+is<45=qk$d7UH~Q!fXN5!^&lYz4iKr%(8{on;W)!b26ILy#$d)c#yrLv
zMgb;GCR3(FredZRrfE#em{v1wXF9>e%)rRN&cMXL#lXVA!@$nK$H2)T02-=eSjBmX
znSo&^!*yl`h6l{InHd-^gGp&H>B@l+IRj!VG5GS_XJ%k97I@6ez#z-=oSA{)5gUko
z2u$8)dpucRHdfn^L70Jw!G=MUfr-JEL7ah!!Hz+afr-JML7IVy!GS@RVLHP`hI0%W
zjINV6$_m#zgX;w*aPJaS)LvtH2kt<E91h}x@O`GYf*=}IECoD@18VYv#)?7m*O)ef
zTZpLYc7WBPioJk|)r0hb@qH#aES7YF4MerX6|9bhfsKI?>g;PwT*4qjP%TjfkC3B^
zZ3Ndh2(fwwhWku*FxP<00OR{iOrY*H141E4T_0F83j;IMS_Xz|ObK9hpguTQBLhg?
zF-{O0Rj)tTBdB5=91I};qx!B8+^j}bXpY4|F>qr5Rb3wzkL(2v{-b$hFF3SV7?>Dh
z5OJpr?&pC75n@L{0~8FXVjW-~qgtE^jS^UdfI>!zZ}J2A&78i81tIyK0c9qWCn*?l
zc_bERKn6}G?^h6GOxb)<VJjnBKx#ojYSHErB?DH0g2dwD^8BI{kV*#k)RN76)Tc9X
zq^Fj|JLl)+P4>}><ODHNlS?x5H_z9KVg$>9OxXNQTa}U1BQ-H4wa70qcd~?TIX8HW
zCM+?hG_`oLp}Lq{Kv8CHW=UpQYB57_WpPPruAX0Ni5^UJbGNPuv#M`qa#4P9ep(4w
z&ZDHHKo4SQF$2gM5ccG~2IlIX0gfptMXALQiJ;Wn{E}490+?7Pj5XO&Q+cwOVIT+0
z%E>8)eL|tdsYQ<Isd*&~rBK%94~86!0-g{HTrxpE%u6hq{LRRS+q2lOG$+Tu$ThcM
zv#RkiCZ@*F$!|^DOm!F(7@`?M8HyQF8HyMb7#tbW8B!VY7)lso86a|=3;|&A6owRr
zB8F6kVus?$fu@p^JI(y`K`I>Jx)FLI;+_lz42}%Q`mUMTs0qU?Lnvnu#!$Lhz+8yA
zzF}h#Ll{FggFb^lLpehrLnuQzg8_pfLm@*YgE@m4Lm-1TgDFEeLncEmLjXfIgEoU7
zLkdG7LnwnUgD*omLk2?{LkWW~Lj*%5gBL>;Llr|ZLpFmyLl%QRgEm7dgBwF0g8_pn
zgBe2rg9}3>LluJ)gA0QhgCT<}gFZu)JA)rX7DEt23PU<WCW9}7H-i~N5JLt-GJ^+$
zD?>6v3PT!00fQGq3PTb@GDA6oErTs6<1);+xK~oP__u#gSg)F7<b(3bCRT>(JB1o{
zGBYsnaWXIoHGnvLTrid_AEy8#BSds^kCmL%O(9=ykmOCFhMR&751H8+nb;T@nS>f%
zPCjDgB=(a@NQOy7fRRa#K~$)bkr6~S{G2Rft;){IuD~SJ$UE7?Ix=3BgPlbvSEx{i
ziG_iYNk)jBn~zVhVJaV!P{TwfJ|-r?N;U;Xp+;R9W;S64W;S6)Rs{y3Mnf=Z3MMU?
z*!b8K7(trAd`B?p3MM@#Kd=_950qhHU=XZiRbUjX<Yi-E1X%!<4h55u916^ge0)L;
zbHUtLA$Cqah$A=zD}@>+3N_4RWnkjtlVN3N6l$0VR+Pxj&IFR2%g(?k*qAC<$ssD(
zm<eKXD=;#`*lY@njDn54xnPY;Ss56F8kSBjv$2e4VP|6EV`FEQWo6<6`J0cKoso}+
zfmN23PnK1%VI>C#D?5`cD<3-pqfld`P%Os=`}lgnt6WwbYj;*!Xx?3y04es_ggn{V
zM1>L=g=Co6IGEXlL|E7a8&*#KZR2Oo!N<k`@)rju11lp3pI{{)9}fcu2OkK4I4lf|
zjC`OT3%dfyTS6Kjk2TDl+-PgfxN`DdTN!RXW)21pRt^TihLxKi*p@JwGB7Y?d3m2=
zVDt?D6`zF+3=DUY7#Qw=hJe9|3e+V5_oo;@V+y{>3=F=mliTc-1oE~m)Ldi#!>{$U
z_hO}u&E1oC*ryml1@|3=3TAnEdu9KV>JL<?*s)A)!Phy^Nm-E5+dyoEiHc%OE0QOt
qITTFhb1G(R*xcmwn2E7@bDHaHCe8%#6cfV<<IRE|?-?f=umb==Nl@ni

delta 6550
zcmZpe!`Lu|aYBdJZ@IV!3{dcZL5YEz(SU)$fq{X610vWL$H2g#z`($e0OC79*h~xz
zEFdlef@WAS@sb{&O&kM*KS(Blfgy!;qM|TQ0|NsO0|P@qECWNxWJM;O$&rleTvP0z
zhB{2{VpQe?8O_GPz~D4_8>2jD0|NsC69WT-$K-pAN(u!a`$0UgC@VvXE(60GeFg?b
z1~6uue9_flasZPtqrv1BrYX|G3=Ax)y5eeeLJSNn|JWQE7}$!{7#O%z8-yntGd~k|
zVqjq7Vq>lq0lA#18srhSe{9Z^4Osjb9VgebYzLE)n*&&-8Ce_|7#JrzvKvlbz^1_1
zI{6@*hR7ynh63h%eFg?DHTHZx1_rL8Gt86!vPr|#8e1|j%7EN2$q<yyzzqrtCI%jc
z+)4;r+JKqi2m=EHCj)~ZLme{%152?E0|OTqL(wbd$!plPL%3Mb%@<=~C}2UcQG<n{
zfE7gq<SIT?MQ4~93iw!i<Un2s<S-S3xJr?sdkw@TAXly4K6xI8f~XM-LjhZ{E&~G>
zHv`mDo0uo>XBC_Lk|R>$H8xp>0;b81>_(G&IOQ0VC$HwTuV-P<Vq^drEy%!}ugJi_
zroqR+z$W&Ok%vP^kg4bgD?>rPEdv7=uLTPu1561o0|T3CwH+t~s_jAcGv_NaFtD++
zX&5swunDsWvRIx02cd=o0|QsSBZzPU1-c0vLqWbX0|S>Zn;@HxJp)rcRuwJ`3|tz*
zAfwm?*>xnCid@(j3N&0nqHZ9w+(8b~E@#j%2dQC&I-H+@flZKA!vkbIhY*J{$OQ}x
zG7cJ^AdP|y3~UTc5bL}^hIoS<R1b2IAS;uGJOcw;z7GQf7XwpK3O3ug7?|>X!S*t6
zYB4ZK8?ZCXX8>msP{@J2uVI89EMWKXKtqi=UzLG@jg6fH;zAZ77G(y8dXOVwP84Eb
zVB^JbBFKdts1EF4V<_P40VQ({Kaf{I;UUa=PehoFfk}`p-yb9fiZo%?dkliCS`3T=
zAZz3qGCLSVR2di;g$<Y(+!+`cco`;F@$lCpq6QrBB3MHT<c$0PZ~)~8f?{5qflZ4+
z*now>je&uI50o*AgFrbJ>^&|a2DI=GW?<kd4gt9=6l92M(JD|{2xDO25@Jx5$PWhz
za%(fNYbh~lL`;_AbzzK{9M7xH=svlfSB24i@)}+zu1Ju*Y)k?9QImi0s+g%UX~==J
zF=#O`fV`y5z`!5?a)^cv0|Q%cI0FMCmk@)70oXrm8m6G&*NC1R#V4x~12Tz)2_mQw
z3rfQvyFu~F%&>rgfk6mlP94wW`Ftvjj+2k@sj{tOV<;$&oBW<HyPlOnk%56h7^H-W
zS;GpHYb-&8HHe4@rM760`JfQeD@tZ%C}`keU|`V#=`mnrkY`|E5CQ4cu*GmDn+8ZH
zEF8eT(~_#=1?iTm<AYHAlidV_9A_ykXk%n(07*$SfMnzy8u%F)SmXs71VEHRgCIz`
zUa<oM16u>ASOtYF#6&d)W{rf&3k1X&MJDeM(6QAKU|>+LV_=vez`&p*%)p==TvC*o
zmtG7?HAj>g82+#^FerxxGaS$Y2QY)Od#I-i0|UbaEd~ae$%=v^_2P>-Ik^}Z7=AGt
zGl+ppc!p?5D1yAo;LO0lU<4`o!4;AhBnTK-!HEzY9AGx6c8~_w7z_-|Aln&~IY45d
z7`)4RfQOAChz&#@V`=B%XL!j25|?H@%2v<CFoorZ02_lP8xt2BLpdvmGy#)=VDc}R
z{K^6nPY?{`;A5y3l4NINSj}>PM~ESlrJYBJ;TB6fj~GKHryHjfg9z76PC151ZYgd)
z1}(742!=ooB?f2iV0JZzM25QzYz&9M4yt7c<j|^TNa6Y>sKv0A2}J(m`X<Q6u%0=P
zLyv)n^#_9<!!*_(3`Pu}xIt`nHW0a%^#_9)!vVn`3~UT_T!9=`3|j>@ap^ILvHf7M
zV{qoVFXY6qg>43>8$%SoB)c2KT5d^pFNPRCNp?Pl>D-d+ehgy5n;7^Q^!P#Es25@n
z<OpK;!wXXC$S=t*#UR0VlQWE=hVLe)9)meIh@1^(pXT_%5XF$gZ^j<QASq<V9>-wK
zC&jJA@PJQ>JBfjZUy7TJp^PDrBaI=3`8pRHgBQbH1}z2$u$Kxzer1s7`6igf5YE-X
zmBsLptAmS;A-$eCkRyv>HB$#y9z(Pch<%-T4}%_q5(~($=LCN+$T9Q_ZQ_z+$QRng
zWyPS*wTUZ_!AJ-cLeIgnb}S%qK3-55ED;3h+71qzY{5VdHU@hJPzWh7Z{lKOC}0DL
z6mbP|I5F(voWZHbu$`}7id&B%ms<*4anA-P97YBZ6ksso;AJrdvl$r#7|wG+cq|Mc
z9tZO*9#aM;1`dXW3=9n4nP%~Tk{vfgBclKV3s{bsffuY&mw5rNDFX|G7?>x;1LCnU
zNP~IrxDVG0v@)<U$bh-?xeg1MGO#fyf_b;O4-2$1a589sd4IV<a$F4BU@J^{-gB5T
z@GuyF<@Rtxc!pr!88DBR!5pk|5-&)Om%);OSy6!DCIbV5DT5G$Jp(hN0Jud}Z^|IT
z;KZQFkj1oyNs-|P&juzzhW~6km>3zd8Fw==GR$NIvDbsidN66qw1Y{JfrEJ;6C(pe
z+=pogRF@$`C(~{wLxz)#hnNf*{xE{rkHDlT({3g+hUpB)nZy{x7)~>>F=R0AW(ueW
zwKN%~G3@2I%*4o$0Oc*`zRASIuma3$lZfPDV_;_32<JUuVrDo5;c--OK4W5GI0fM`
ztmApj#KQ0b%9CLE$i&Lv04i}AAf~W0d;#;GF{TUtWMXIFQ36+^&loisnV8wZvCqJ8
zj1?paZ4EOVV+F}^Ft{jzq^B`VVdr4xWcUN+onR1R=4O}xuCb;uNHB^s^Dv00KvcE~
z$}saX?1A#8b0{+lFyyF0<oJ2CnS~i5)WFsFGzND@A!bR2J8BTg2OMV1QVcQbAl^iY
zcphtJX@(3iuZ?2~LlmPlLjjbxnt_o)nxPWPt72ARlwoLu@|u|i7-Sf_AUtpw$}&tw
z;muJ8HzV2@4sqBs%Q9Ti09n|^pu=O&EXOcG6T)i|vS*fOcmn1%GHeoXXI5Y^164@S
zAXQ+nhwwOhm{k}R7~G+}nalzV3Jd{I-f<=sMn#4QDDMiB0D~e!B8XSd(8j^Zp~9%d
zkO|^4v~dV?2rwuy6hU}kcPleg!+E~U$_zaa9z(idFtZB71~@O0S%u*Wga>wvD#INp
z59AnChNn<o5{C+-8pB&KufC0=m_vX;jo}-Z3rQyG3=E(a0mC$g65a%6bp{(S4<e_*
z-~r}MV|d8K!K}g10Odt9rZa0Xtbp>Su;(%BG8E{5!f+zP3ib+SeTKOZ9yme`8P<S#
z)9M*oI7}G~8Lor55GxEB9)Nk%I6C?3nGG49LwS#xo0$z6-a&a&*+6n%p}Y<-?+=u>
z5X@uN1zQibPz!};2IjR%)PpjYA%i`b+sq)((8+Ab;0fkI9Am@~1m-m}7&7!TL#pE0
zyr7C2LUwV2*bjI><T@@;M`*SXh@HU*BSDS;v6nHUlkb=q>KT|A<_m%fPbIJh5Xr=_
zngb*f%mUNE#2^b6*})F##T{j5U|<ESVPk-(0jXyMi!d@Yv4M0!$dz0mHZlnjN09Z5
z3?g86LEMXwU}Wgwg}5AK#5*P!33D#UDG+%^29To}89-_vvWyHSf*|$Fg;*Fw7&sXs
zc^DZ489*T|$q>oI#h}R$$s@pE2qNnlEI|~5Bbf9AlYw9|5=<t7$x5*1PKHPxQHGNY
zkv!52Kf&URj37e=89~NLf=NrT2#6G52xOeirN|Ho7D;6M$F9Rr$jBpX%23JZBV@@?
z$+(HvnW4Uu(S%cnVIt!hE<c7$#-&WL44GidW-{^!B{3{y6l5%9*vNQ-qmtnuqn%JE
z!$n3j<_Qcp84K7aFg#>D!8w6}har+@9>YyWb-^VJB4E8D3}%cw7-YcW9~q08uQS{P
zJNF?dBp4quycFPIWMnF3<71SpXWGHR#_*7Vhg*zMk;#xzno*I-ibI|;lR<!8g;9ke
zl1HCWlgXQfjX{ygPEeZBkm)g(7o#Op9)lmFA=4kBC`Lo3%gpJFmP`>G<&2(8R*c<@
zDhwG6lNePPCNfN8^knK5n#CB&lq|G>F_DRhcNt?Q(`BJGjG0VU92*%6nd*--n=&*q
z1_^Fs^klluzK8K6!+fE`j2{`i1WzzVG8wX*V{Bw%;=RJy$#j6}7TAKvjE#(uf<G8F
z83UMA7(1C7SOgeAdRdqZ!9l%{sY+0YNrxelX9t5Jqdc!NlOf|db^!)M#&#BcCQh&#
zN5&);8zx7_=6YTyCQGIdY{5*HO!wL1nHm`tgj1OgGJ#_BBvThdJ<~;|TLP1q6d95k
z3Rn~wvKe-==rM3JtYOw;5N6oQtj8eDaD`cqL7Cw$vmS#sgD{I8gE50GiynhDgD;C7
zgEK<}iynhFLn@0NLoir8n!%Q(5o}r`LpDSGPL>5=&O#^&vfv<?eGqKfLooXxn9axt
zas(qINR2XMHNznmWyWTP0u~j<Vun{Nj$m0wuxuijod{+pGgdQPVMzw7TnH9l2o^sG
zV%M`A1alsOI4lprY(^%qHB2CD6v1poFk2bSb_SCNz~lok$-oR!uK*?+n7bKDSsIup
zGc>R)VD4t<Vp#xYA7Jign89)Y%vN9lsdoUAsR>}J0Zc9clLx>g3u`e0C#wSMY=#0B
z2iC<5OIQ+ELE0L?<N`3cgcaoP17NlSJ4n_6OeTQI1~9n*L{7daCtm-O@gE}>lNpl-
zQzTP1Q#Df$6Eg!N13Lo~0~Z4e0}lf`g8*olh@pmaDl-GadWKod3=FH7=P@%d%mtHA
znLuoD4iE_unFnU~@-Jd$V0g|9Dqq*If!IA@aw*#)W+nz!24)5(1~CTK$))mvs+J7G
z3``7G45AE74Au<d3``6*43Z2?47Lo?4AU7lGMr=3V3eBtQC_&7mjzVRGJyx?K;_&l
zrXApZ70AsXJ_s*n`T-svKo#4^50V45lR<-eAoeV#YH;HURh<wPy-qMOaJvkomtiqe
z1xygk2N8>zg24u&S~4H3j)j4Zff4HLSxnyqLF!R0evic?e&E6$p{|~RVKLJTuul+z
zATe#QLKbkSf{bQhn8maUEC%Y5LPS97W^jVosCp&Ajz$%`1r|f~h%*PcU5KiX6N`aA
zKz1;os(XRO(P^L&Su}Mkg+Q8F7?7j*I;bbk01{I`#9aqm5Fz%6cXEu<=E;)EhP<K0
zsYM=%#XkAznRzaovz50pZnjXBW0i1EEeS|0E-ue6O7Tc6&R{5jayF-FO=p_SqZ_n2
zS2u)l^BFxQ#>v0*OEzybFkqg{VPZPjz*u>5he^QX$0psIn@rglC(kl7*nGq6FcVY5
z+sSh++a|MEicQ{RBQd$t%53s`E9=cc)&k5z3=A6k@8`JfZ1mV#%$|^L-*RKJhP|Qs
zR-uNi%nS^CoD57t4ImC57mOv#$0@+b2oas!U@s?iRmhhcBzaY+;i_Q6U1oMhCN>5}
zCZUF>lXuuViG5`fl3@}NU}TbG5EW|p%Lt~vP8M)bWoKkpU=nKNoNVI|S+B^!&LWg6
zR4Bv5!obKR!^h6a$HyepFp-ImiAk`MO@UFUQB#JQO_+h1O_-5YfkCKI7fc$0NmCXD
zMkYQM1x7wTRt6?MK0dGpTNxGx2Ej^J1xCS2Ua&exFzL#nz|6?UC)6+#%=P4BXAk4!
z<Kqyl6l$0#)G!rngbXV?qfo;{unJ#xb|#SIOm+rF!Nx$rN)A!M#!wKGTY-@g#%5Ds
zWE5<S1nXPK%D^DhuyFEJM@t`Oc1AuP23A>CK3P`5hNT=Ftn5s(tbFVYj6#jMLa`hh
z?BnYNuX0&&tle2@p?P;*0yCSCCp(*{P$Hv{3=<n46B`FJn~(?#n_$Dz$+}K{7EF9B
z42&FnYz!b@aIiBlGji|=R&p`0aqxkFU?mF!BO@QEea5Z;@`I2D$QKPWCvS4HW?VY?
zos$eZ2P+4IV8hbQqRu6ZMzaD>&tqWp4FDz7LIwtgC9w<)OYA}E9D+e3Lc$CT44`h1
zXdDBBsKexaE=mHMZz)8vnm+fQeOT-%kImBf$sb%&jG%(n(NMuzfv4q4{3}vJj|++2
zOt@Q+0-dJ-nOp~AD@;@rV=9Q7JkPaYvx1KW<77U!V#b8cO>U2w7?U@rdCq3y3;+-N
QGEA`BEa>x|aiRe`0D6})C;$Ke

diff --git a/SecureCore/obj/Debug/netcoreapp3.1/SecureCore.pdb b/SecureCore/obj/Debug/netcoreapp3.1/SecureCore.pdb
index 39177d022ca2c261c9738955d70ce419eaf01067..70585a7f9f91bb3e320d8bbdacc9f40ffc403ab8 100644
GIT binary patch
delta 2713
zcmcbzhw;ol#tAC*ISdR8$^j`!3=9kmFBljYbT}Cpl<OE6M7S6jYCv+qB}JKe>BS)V
z30w>eEFiJaV1_AN3=9b%wtJ|j3j+hg7cK^dh!6$_Wv85ckYRb-7HY1s|KZnq+Iz9m
z#^&xUFYi-~3=C}H@{2e*xfmE28Nm9j7=#!Y7(^Ku7~B{b7_1l|5*Z8(3``6R489Bu
z3}Orn3~USx417>^tWY&_6K|>uf;5FNFfeE{Ffhn6FfhnX7GzWo+vUy7@W7jeVTBJf
z!#N)ohI&6{hNXTi46**q49)&547dH685jdt7#0RHGaL_OVc-v9W-tw6Vb~SK%<v$H
zg~213nV~G0g<(@LGsA;m76!o(W(M<+$z6;d^$WdN82G$d7^1vc7#4W5GBEnEGI02?
zGVuGbGKl$r0ttlK7~cD^F*NwHG2HTHWB3a41_K)dmmeF0pdTB9gdZD&ydN8bnjag3
zt{+G}JHs(Qc7{8C><n-H*ctx$u`{sxvorAcvoi?$gXB3FmiTirC<Sl^F=PgCGE@a{
zGRz9#WY`eE$-p1T$zT-7$q*CB$&eSw#qc5!q=B0uEQp&SHi(-cC5W3LJBXX1D2SV(
zJ_sZS!b}Xaz-(rQ)tjd?)iNfoVqjnpWZ-7tV_*bF%?c==pMjBqmw|zykAZ<fh=H3y
z04&SE@Cu0!ipu9uz93Zn1t?#LfssLxfq`M;<WiRN_2rBV3^ELS3^ELi3=<g`7;b>0
zjgLVVYU(p6Ux|T{A%=m00hH=w8Tc5K85kMPGcYiSfTEazk3j{h-kpJgK^}<@N)8~~
zVDjt?3=B#P3^4We3>=^oix6M{DNsS;gXC3__#k;TBtA%9gFz5xAcFt{1A`_KUz~w~
zK?{j50Zp3_2h}rxE!06XP#1|0vQQ6+53<mJK?H8090LP`Ap--0Dl`N@Im3uS9M0!t
zU|=vt;)61V34=I;8c2OT0|SE;0|SF8gE)gaNPvNXVF3~!6p?eFd<|$swnF)u42%qt
z3=9l;3=9lr4B`x0Q2n4>XO6_zU|?XdU=U}}hRTB+U<u`e><8y{D+VdJ0(k}o1{+Yp
z1JwZXku4hE4vlY*#&<yDJ2J>J=s?W_MV|`;D~Jy&LKql8LFC53!JspFF1vKSC%C8q
z#S=3_I4El{2!ab3OmUD1BLhe!0|Q|;6GJZ8G=xe_5e5bYP>?V(K+3xk1_lOZ22gRv
z&R_=CtPgeyL>45%%m7lu0#?JyV8Xz_z`>viRtXAb2Cz8{3~^u)WQ!plgNQqWWf>V{
zTtOx5<QW`Fb}>FY3=H6G&dA{4$Irk3PS=bK=Ki3<Ss3hy$N*3w4JwQo8L9$7p#Vw^
zj0}}QlYekTC9!xXFtIWOcsDSyGB|lPFtaiw`7U5)WjNw{fSHxyuImG4Rt7dd1y&H-
z0ZcNmu`(R>PhewZm>SRkCKs@=GB5=mU}I&_4Sc}H$`BgJzz$Z=4pK9D6{q3kC!DHG
znFW(Mxa3$8(^K;{t8n>yD&(dzAKLCW?YDCC7GBj~Z!Bj-gsQ(U;q|*;tbanLL_T!$
z<X{Izvq%mG2F3_ZMg|imF>VG%rea2hhHFe>JP@WG6NeCk6BC0tgE5G(U}6wruwY^k
zp8P*Vg)NDbfq^l5vSz3$CrAt;5gV$;wNi}H5mc8oG*9jc^=6zp`9^3J>+%B(-s>iZ
zhqZCbG9F-XdBJ#q!N+{EV306d4v6VAnK9hnr|STN&oqTKYj$67j=U@+dUt{iQ!H2I
z4u+o|0U95B!}X3z8{YBIE#hWiU=-nGWH4pn5CGM^rVKek3|=gv5)4sH4AKm_Obm()
z&Xb$MRqACJ7?}zg8O&K2*clocSQrc$0$CW88BAFiBpDdlDj6BXm^io?7+DHs85{O8
zHXLVc6k%+vVX_rtWNQ4%*gTo3DUzvaCxbH&0|TQeCnJLc6NdzYITHgL+$JRkMm7dU
zhK2?v4pWffN(}NW4AKn3ER{?QjLu99j12Nj9D*P#L>WaHr5TeL8<sOR@-sGWU=U+u
zY<e!m%fP_s!^z0t&cva>pbyf^!@|JHz{pf7z{kMA7&<v1LL@3h2~+^Eq^N_bR0uB>
z!b_6}3#O@X2UixCq~_{{q*jz@fC3d1(yo7D!R=-bV*O-1z~E=Xc!0qT8t(fd%vrk*
zF!*Io{uMEe$zN*nq)10r+XD>#K9g@mx=xObGSLI^PAIgU4a-lg+v8ohURiC0!Gd;;
zSD}^eJLaD{`&0Nr;GWN|U{`Rf>rXc17n{7FpJ%c|lyqo-Ca5xy;OAs#U<3sQBNKy^
z05tm4nK-x^)L9rf80=XXL_t1gVH6Q#6cuD(V3g%#WYA~gU}rF40oATdm4QMG42&v}
zggW_mu)<`mXyY7NVFm_9OHM`xK_(7XP%$CQpu)i*%@WH6HjPO@j8RF1fq~J1laWCN
zWSTq+0~bi0Hi)CZQVCYa#wfyMBgQBw%D}+r#mUIf(8a`|0WyG_fq@~4+klIqjKx@F
zvO%E8<gRFAP}l_aPd*f_#3(lTX|x-NAH+P_AjX3!Kyz|cObjTg2W^^sJEns#nDGEZ
zFzW$^VD1A9!IF~;V`ET-rcb^d8>$?_sPN?c(K;Vt={XmxKJWFGP+0N&-BByvNrJmJ
MDVAJ4cdbMQ0COaaZvX%Q

delta 2429
zcmX@JkMYVL#tAC*84L^z$^j`!3=9kmPZ$^&PH-?VDAzGCtl?x}r~%0ZmlS2@r5A(b
zHMkfUSU_T-!3;WF3=9b%wtJ|j3j+f~4;KT&iC_i>Wv85ckYSr|DMYcFKKGt|SnMf}
z&C>W;fv4v&GBB`(i!b8j<YHi8WME*3W?(R55Mp3p5Mf|oaAsg&Fk*m6fDHD6inB5>
zFz_O=K^mne-c=U_X$WLsU{GUVV31{CV33(C%BUQ+)SH>%v^NXGWFKaRojxoK9)8RW
zd44PmYW~a&KK?8WPyCq~xB^%h1Ok~E%mP^$>H?V=mISgeXa+Ge_y@5tY!6~)cpAjQ
zpcu@|;2+Gw&=Abbuq=3TAEQV8bT1Z$UtTN>uHGyR-QKJWZ@gI<K6|q={PJdHVDte6
z5D2p|-11>#i1KA)SnSKju+JAFcG;JW;g&BO!$V&-h8MnU4DWr}7`}n!*ctl$*cq1k
zu`_J*V`n(-$IfuhkDcMFA3MVxKagGyhFpJ62JHY&HwK#kPKKBOPKKfYPKJvCoD7cw
zxER7gLBPPxa5Rvc;Y=Vm!{tD3hFgK$3=adj8Qy{AK!z|ea0Y>BW(KLv%b98!6I&S=
z7z7!(8Tc3&!BNo+<?}Nzf<rr#fq_AYftx`9EX%-f1c?udfrC)KAXNP-C|`(ykwKAx
zfuVbHE6e$MEk*_g83sNEDF#Lcko{-CQN_m~4K;N>lrP7?$RN+azyPvUmVu8!o`I2}
z0~+UY415d<Q1$K%3=Hx}d^ZLLux&7Tb_NCpB?bnV`g#TqPzpr|Fn|=OAn`%+sz`j0
zJSaWE3<Sw*FbKj7WDsCrV9-S3i!(4VXd&?>7#J9|;pWvdfGyO43ow8kq>ID{S*VA^
z2U%#qAOg2gj)8%}kU^Y55gG!V;9P>>gDf*<5NA+=%1bdYFqkliGbn@j^$ZLQ3y=gr
z5jO|QSAj+xC?S9}s4_4zNHQ=m<S{TXm@<ensDTWC2Co?spPPY!!JI(~E)R+}O9lo8
zb*Oqa1_lNzC_fgI<Uj(}Pyra<290lv#<ydTg&PQp4o3!7I3E-O&I}w3>XYxXOV@)^
z6%zv}*qIr?)-ecz%MeU)kO(7KB?CAu;%754fJ;0im6#$73<@D&%k&u-7+4wXLB3<K
z0E>V^kqIoq%mDHn8-pfT78G5OFlJy#0gE7<#RT<$&*YaJ`gZO<JkWxVk%7~XpMe3K
z_81u${6Ph#FxZxZ{-O*F3}RsR%K%UyfMSr5;YHx&FwUrm4_*mOtPIxP4NR;IPF@Yn
ztPD=R3z%6MCi@;>W@WhR`hc00;k>T`D~Rm?CK=dR8T$Mk*jO3D0}{Yw0~;&Dk$?qk
zAT<xbA`A?Zg}4kkiW756JQ9mDCOdJdP0r?$-Q36J>#1;~s?7S0tE(&D`ZZQ(lJ<Qv
zmyp-(n)doxuBM<@;J2xon|}v8FpBzfFfcGia56HOFo|(9FftW0GBhlj91tooSvXXg
zErOGQfiZLP>`>Fmw?b7pdBqqVK=noaWX>>e#)*?d!>U*(9boXDIr&Ohn+gZx0S1>B
zj0YHelo$^%xY>iaKN$}&xUzz{IUot$$#voOPNfGJd>R#AEz`P{v&K+I%+BZH>mQMx
z(urC%PY(6C%dA?i$o68!>vV1g21XH1Mg~(B4t@p(W(HG+96<&@7EuWX_sN_QD)kZ!
zj7)`$4CX8h><pzW3|b6<EDXvFrYsB+42*1*j0|E-9Gnb{EQR8X4SN|Ijx*VcF)}rZ
zF*faBYOG^wyvJa{!@$63%*n{$z{DZJV9vzA#=ywNz{pU>#GwN+ONl|Ag+Yozn5B}5
zfsqMREHZHjf(+zm6lIiVtWRQWILjc$$k_NxikE?b(Swtb!JUaifkB^zL7IVwg@KcS
zk*QLEkAZ<Pkdu*vg^9zNfl;WEnL&&Zln+@FlpvHkm`a535+S@Kd9YxT3U_d2aY<^f
zUPx+1i3TVHL4oZ07ZkKoprA&CvM)%`4I0X^k>;$W2N?W}CeMtV#^m>SvSE}XE877E
zf6>Y1QLc>olLZBoCObq+Gx<-PyeG<}9wc>9Ve{O3iV=p>r_D%=n&q;^e@6L&Wv5vl
z{SK^Txe{=JQ<Di);!1FHvO_|Hk%>V{fPsNgfRm9yor!~+L7jzxgTbAJK@{X~7Df><
zMo~cq21ZFvMh1N*4t53`7El$&R2eA5z`&@0oa82Ni}sZe5N2RtH05MusAb}i0~rAd
zf-+9d$$2pzAh!qno4h+liBV+oy%;wTKd@-BW~>Lu2gR{5pkx@NIQdF!2VYRZ0fwNG
i0}Me`2N;4nCTGRPpa=!CO}-Kr$`o8MSvy{lkpTcXxowRA