From cb7184e61ed397bf179a429d9bc45b27780af5a4 Mon Sep 17 00:00:00 2001
From: briankelleher <bkelleher4@gmail.com>
Date: Sat, 13 Feb 2016 22:12:24 -0500
Subject: [PATCH] cas maestro

---
 .../plugins/cas-maestro/ajax/validate_cas.php |   21 +
 .../cas-maestro/ajax/validate_ldap.php        |   39 +
 .../plugins/cas-maestro/cas-maestro.php       |  763 ++++
 .../plugins/cas-maestro/cas_error.php         |   29 +
 .../plugins/cas-maestro/css/backend.css       |  133 +
 .../plugins/cas-maestro/functions.php         |   28 +
 .../plugins/cas-maestro/images/ist_logo.png   |  Bin 0 -> 94452 bytes
 .../plugins/cas-maestro/js/admin.js           |   42 +
 .../plugins/cas-maestro/js/autoinput.js       |   63 +
 .../plugins/cas-maestro/js/select2/LICENSE    |  485 +++
 .../plugins/cas-maestro/js/select2/README.md  |   74 +
 .../cas-maestro/js/select2/component.json     |    8 +
 .../plugins/cas-maestro/js/select2/release.sh |   72 +
 .../js/select2/select2-spinner.gif            |  Bin 0 -> 1849 bytes
 .../cas-maestro/js/select2/select2.css        |  603 +++
 .../js/select2/select2.jquery.json            |   36 +
 .../plugins/cas-maestro/js/select2/select2.js | 2711 +++++++++++++
 .../cas-maestro/js/select2/select2.min.js     |  564 +++
 .../cas-maestro/js/select2/select2.png        |  Bin 0 -> 613 bytes
 .../js/select2/select2_locale_es.js           |   15 +
 .../js/select2/select2_locale_hu.js           |   15 +
 .../js/select2/select2_locale_it.js           |   15 +
 .../cas-maestro/js/select2/select2x2.png      |  Bin 0 -> 845 bytes
 .../plugins/cas-maestro/js/validations.js     |  111 +
 .../cas-maestro/lang/CAS_Maestro-pt_PT.mo     |  Bin 0 -> 8956 bytes
 .../cas-maestro/lang/CAS_Maestro-pt_PT.po     |  370 ++
 .../plugins/cas-maestro/lang/cas-maestro.pot  |  332 ++
 .../plugins/cas-maestro/phpCAS/CAS.php        | 1980 ++++++++++
 .../phpCAS/CAS/AuthenticationException.php    |  107 +
 .../cas-maestro/phpCAS/CAS/Autoload.php       |   97 +
 .../plugins/cas-maestro/phpCAS/CAS/Client.php | 3403 +++++++++++++++++
 .../cas-maestro/phpCAS/CAS/CookieJar.php      |  377 ++
 .../cas-maestro/phpCAS/CAS/Exception.php      |   59 +
 .../CAS/GracefullTerminationException.php     |   86 +
 .../phpCAS/CAS/InvalidArgumentException.php   |   46 +
 .../phpCAS/CAS/Languages/Catalan.php          |  114 +
 .../phpCAS/CAS/Languages/English.php          |  114 +
 .../phpCAS/CAS/Languages/French.php           |  116 +
 .../phpCAS/CAS/Languages/German.php           |  116 +
 .../phpCAS/CAS/Languages/Greek.php            |  115 +
 .../phpCAS/CAS/Languages/Japanese.php         |  113 +
 .../CAS/Languages/LanguageInterface.php       |   96 +
 .../phpCAS/CAS/Languages/Spanish.php          |  117 +
 .../phpCAS/CAS/OutOfSequenceException.php     |   49 +
 .../phpCAS/CAS/PGTStorage/AbstractStorage.php |  220 ++
 .../cas-maestro/phpCAS/CAS/PGTStorage/Db.php  |  429 +++
 .../phpCAS/CAS/PGTStorage/File.php            |  259 ++
 .../cas-maestro/phpCAS/CAS/ProxiedService.php |   72 +
 .../phpCAS/CAS/ProxiedService/Abstract.php    |  138 +
 .../phpCAS/CAS/ProxiedService/Exception.php   |   46 +
 .../phpCAS/CAS/ProxiedService/Http.php        |   91 +
 .../CAS/ProxiedService/Http/Abstract.php      |  343 ++
 .../phpCAS/CAS/ProxiedService/Http/Get.php    |   84 +
 .../phpCAS/CAS/ProxiedService/Http/Post.php   |  144 +
 .../phpCAS/CAS/ProxiedService/Imap.php        |  260 ++
 .../phpCAS/CAS/ProxiedService/Testable.php    |   73 +
 .../cas-maestro/phpCAS/CAS/ProxyChain.php     |  118 +
 .../phpCAS/CAS/ProxyChain/AllowedList.php     |  119 +
 .../cas-maestro/phpCAS/CAS/ProxyChain/Any.php |   64 +
 .../phpCAS/CAS/ProxyChain/Interface.php       |   53 +
 .../phpCAS/CAS/ProxyChain/Trusted.php         |   59 +
 .../phpCAS/CAS/ProxyTicketException.php       |   68 +
 .../phpCAS/CAS/Request/AbstractRequest.php    |  343 ++
 .../phpCAS/CAS/Request/CurlMultiRequest.php   |  136 +
 .../phpCAS/CAS/Request/CurlRequest.php        |  197 +
 .../phpCAS/CAS/Request/Exception.php          |   45 +
 .../CAS/Request/MultiRequestInterface.php     |   83 +
 .../phpCAS/CAS/Request/RequestInterface.php   |  179 +
 www/wp-content/plugins/cas-maestro/readme.txt |  110 +
 .../cas-maestro/views/admin_interface.php     |   24 +
 .../cas-maestro/views/metaboxes/general.php   |   48 +
 .../views/metaboxes/help_metabox.php          |   13 +
 .../cas-maestro/views/metaboxes/mail.php      |   71 +
 .../views/metaboxes/registration.php          |  127 +
 .../views/metaboxes/soon_metabox.php          |    2 +
 75 files changed, 17652 insertions(+)
 create mode 100644 www/wp-content/plugins/cas-maestro/ajax/validate_cas.php
 create mode 100644 www/wp-content/plugins/cas-maestro/ajax/validate_ldap.php
 create mode 100644 www/wp-content/plugins/cas-maestro/cas-maestro.php
 create mode 100644 www/wp-content/plugins/cas-maestro/cas_error.php
 create mode 100644 www/wp-content/plugins/cas-maestro/css/backend.css
 create mode 100644 www/wp-content/plugins/cas-maestro/functions.php
 create mode 100644 www/wp-content/plugins/cas-maestro/images/ist_logo.png
 create mode 100644 www/wp-content/plugins/cas-maestro/js/admin.js
 create mode 100644 www/wp-content/plugins/cas-maestro/js/autoinput.js
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/LICENSE
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/README.md
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/component.json
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/release.sh
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/select2-spinner.gif
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/select2.css
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/select2.jquery.json
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/select2.js
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/select2.min.js
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/select2.png
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/select2_locale_es.js
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/select2_locale_hu.js
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/select2_locale_it.js
 create mode 100644 www/wp-content/plugins/cas-maestro/js/select2/select2x2.png
 create mode 100644 www/wp-content/plugins/cas-maestro/js/validations.js
 create mode 100644 www/wp-content/plugins/cas-maestro/lang/CAS_Maestro-pt_PT.mo
 create mode 100644 www/wp-content/plugins/cas-maestro/lang/CAS_Maestro-pt_PT.po
 create mode 100644 www/wp-content/plugins/cas-maestro/lang/cas-maestro.pot
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/AuthenticationException.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Autoload.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Client.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/CookieJar.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Exception.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/GracefullTerminationException.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/InvalidArgumentException.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Catalan.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/English.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/French.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/German.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Greek.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Japanese.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/LanguageInterface.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Spanish.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/OutOfSequenceException.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/AbstractStorage.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/Db.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/File.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Abstract.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Exception.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Abstract.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Get.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Post.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Imap.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Testable.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/AllowedList.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Any.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Interface.php
 create mode 100644 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Trusted.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyTicketException.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/AbstractRequest.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/CurlMultiRequest.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/CurlRequest.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/Exception.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/MultiRequestInterface.php
 create mode 100755 www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/RequestInterface.php
 create mode 100644 www/wp-content/plugins/cas-maestro/readme.txt
 create mode 100644 www/wp-content/plugins/cas-maestro/views/admin_interface.php
 create mode 100644 www/wp-content/plugins/cas-maestro/views/metaboxes/general.php
 create mode 100644 www/wp-content/plugins/cas-maestro/views/metaboxes/help_metabox.php
 create mode 100644 www/wp-content/plugins/cas-maestro/views/metaboxes/mail.php
 create mode 100644 www/wp-content/plugins/cas-maestro/views/metaboxes/registration.php
 create mode 100644 www/wp-content/plugins/cas-maestro/views/metaboxes/soon_metabox.php

diff --git a/www/wp-content/plugins/cas-maestro/ajax/validate_cas.php b/www/wp-content/plugins/cas-maestro/ajax/validate_cas.php
new file mode 100644
index 0000000..efeb594
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/ajax/validate_cas.php
@@ -0,0 +1,21 @@
+<?php
+error_reporting(E_ALL ^ E_NOTICE);
+
+
+if(!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') {
+	$version = $_POST['v'];
+	$server = $_POST['s'];
+	$port = intval($_POST['p']);
+	$directory = $_POST['d'];
+	$lib = __DIR__.'/../phpCAS/CAS.php';
+
+	if($fp = @fsockopen($server,$port,$errCode,$errStr,'4')){   
+	  echo json_encode(1);
+	} else {
+	  echo json_encode(0);
+	} 
+	@fclose($fp);
+} else {
+	echo 'Ajax only.';
+}
+
diff --git a/www/wp-content/plugins/cas-maestro/ajax/validate_ldap.php b/www/wp-content/plugins/cas-maestro/ajax/validate_ldap.php
new file mode 100644
index 0000000..61132a0
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/ajax/validate_ldap.php
@@ -0,0 +1,39 @@
+<?php
+error_reporting(E_ALL ^ E_NOTICE);
+
+
+if(!empty($_SERVER['HTTP_X_REQUESTED_WITH']) && strtolower($_SERVER['HTTP_X_REQUESTED_WITH']) == 'xmlhttprequest') {
+	$version = intval($_POST['v']);
+	$server = $_POST['s'];
+	$username = $_POST['u'];
+	$password = $_POST['pw'];
+	$basedn = $_POST['bdn'];
+	$uid = $_POST['uid'];
+
+	if($ds=@ldap_connect($server)) {
+		@ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, $version);
+		@ldap_set_option($ds, LDAP_OPT_RESTART, TRUE);
+
+		if($r=@ldap_bind($ds,$username,$password)) {  
+			$list = @ldap_list($ds, $basedn, 
+				"uid=$uid");
+
+			if ($list !== FALSE && isset($uid)){
+				$result = @ldap_POST_entries($ds, $list);
+				if ($result['count'] > 0){
+					echo json_encode(1);
+				} else {
+					echo json_encode(0);
+				}			
+			} else {
+				echo json_encode(1);
+			}
+		} else {
+			echo json_encode(0);
+		}
+	} else {
+		//No LDAP connection. Return false;
+		echo json_encode(0);
+	}
+}
+
diff --git a/www/wp-content/plugins/cas-maestro/cas-maestro.php b/www/wp-content/plugins/cas-maestro/cas-maestro.php
new file mode 100644
index 0000000..1cd0277
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/cas-maestro.php
@@ -0,0 +1,763 @@
+<?php
+/*
+Plugin Name: CAS Maestro (MODIFIED!!!)
+Plugin URL: http://nme.ist.utl.pt
+Description: CAS plugin (w/ Custom fork of phpCAS). Do not update!!
+Forked CAS: https://github.com/dylanfmarquis/phpCAS
+Version: 9999999.0
+Author: NME - Núcleo de Multimédia e E-Learning.
+Author URI: http://nme.ist.utl.pt
+Text Domain: CAS_Maestro
+*/
+
+/*
+|--------------------------------------------------------------------------
+| CONSTANTS
+|--------------------------------------------------------------------------
+*/
+
+// plugin folder url
+if(!defined('CAS_MAESTRO_PLUGIN_URL'))
+	define('CAS_MAESTRO_PLUGIN_URL', plugin_dir_url( __FILE__ ));
+
+if(!defined('CAS_MAESTRO_PLUGIN_PATH'))
+	define('CAS_MAESTRO_PLUGIN_PATH', plugin_dir_path( __FILE__ ));
+
+//Mailing type
+define('WPCAS_WELCOME_MAIL',0);
+define('WPCAS_WAITACCESS_MAIL',1);
+
+/*
+|--------------------------------------------------------------------------
+| MAIN CLASS
+|--------------------------------------------------------------------------
+*/
+
+class CAS_Maestro {
+
+	/*--------------------------------------------*
+	 * Atributes
+	 *--------------------------------------------*/
+
+	public $settings;
+	public $network_settings;
+	public $phpcas_path;
+	public $allowed_users;
+
+	public $cas_configured = true;
+
+	public $settings_hook = array('settings_page_wpcas_settings','toplevel_page_wpcas_settings');
+	public $current_page_hook;
+
+	public $bypass_cas = false;
+
+	public $change_users_capability;
+	/*--------------------------------------------*
+	 * Constructor
+	 *--------------------------------------------*/
+
+	/**
+	 * Initializes the plugin by setting localization, filters, and administration functions.
+	 */
+	function __construct() {
+
+		//Initialize the settings
+ 		$default_settings = array(
+ 				'cas_menu_location'=>'sidebar',
+ 				'new_user' => false,
+			    'email_suffix' => '',
+			    'cas_version' => "1.0",
+			    'server_hostname' => 'yourschool.edu',
+			    'server_port' => '443',
+			    'server_path' => '',
+			    'e-mail_registration' => 1,
+			    'global_sender'=>get_bloginfo('admin_email'),
+			    'full_name' => '',
+			    //Welcome email
+			    'welcome_mail' => array(
+			    		'send_user'=>true,
+			    		'send_global'=>false,
+			    		'subject'=>'',
+			    		'user_body'=>'',
+			    		'global_body' => '',
+			    	),
+			    //Waiting for access email
+			    'wait_mail' => array(
+			    		'send_user'=>true,
+			    		'send_global'=>false,
+			    		'subject'=>'',
+			    		'user_body'=>'',
+			    		'global_body' => '',
+			    	),
+			    'ldap_protocol'=>'',
+			    'ldap_server'=>'',
+			    'ldap_username_rdn'=>'',
+			    'ldap_password'=>'',
+			    'ldap_basedn'=>''
+			  );
+
+ 		$this->network_settings = get_site_option('wpCAS_network_settings', $default_settings);
+
+ 		//Get blog settings. If they doesn't exist, get the network settings.
+ 		$this->settings = get_option('wpCAS_settings',$this->network_settings);
+ 		$this->phpcas_path = get_option('wpCAS_phpCAS_path',CAS_MAESTRO_PLUGIN_PATH.'phpCAS/CAS.php');
+ 		$this->allowed_users = get_option('wpCAS_allowed_users',array());
+ 		$this->change_users_capability = 'edit_posts';
+
+ 		if(!isset($_SESSION))
+			session_start();
+
+ 		$this->bypass_cas = defined('WPCAS_BYPASS') || isset($_GET['wp']) || isset($_GET['checkemail']) ||
+ 			(isset($_SESSION['not_using_CAS']) && $_SESSION['not_using_CAS'] == true);
+
+ 		$this->init(!$this->bypass_cas);
+
+	}
+
+
+ 	/**
+	 * Plugin initialization, action & filters register, etc
+ 	 */
+	function init($run_cas=true) {
+		global $error;
+		if($run_cas) {
+			/**
+			 * phpCAS initialization
+			 */
+			include_once($this->phpcas_path);
+
+			if ($this->settings['server_hostname'] == '' ||
+			    intval($this->settings['server_port']) == 0)
+					$this->cas_configured = false;
+
+			if ($this->cas_configured) {
+				//If everything is alright, let's initialize the phpCAS client
+				phpCAS::client($this->settings['cas_version'],
+					$this->settings['server_hostname'],
+					intval($this->settings['server_port']),
+					$this->settings['server_path'],
+					false);
+
+				// function added in phpCAS v. 0.6.0
+				// checking for static method existance is frustrating in php4
+				$phpCas = new phpCas();
+				if (method_exists($phpCas, 'setNoCasServerValidation'))
+					phpCAS::setNoCasServerValidation();
+				unset($phpCas);
+				// if you want to set a cert, replace the above few lines
+
+				if(defined('CAS_MAESTRO_DEBUG_ON') && CAS_MAESTRO_DEBUG_ON == true)
+					phpCAS::setDebug(CAS_MAESTRO_PLUGIN_PATH . 'debug.log');
+
+				/**
+				 * Filters and actions registration
+				 */
+				add_filter('authenticate', array(&$this, 'validate_login'), 30, 3);
+				add_filter('login_url', array(&$this, 'bypass_reauth'));
+				add_action('lost_password', array(&$this, 'disable_function'));
+				add_action('retrieve_password', array(&$this, 'disable_function'));
+				add_action('password_reset', array(&$this, 'disable_function'));
+				add_filter('show_password_fields', array(&$this, 'show_password_fields'));
+			} else {
+				$error = __("wpCAS is not configured. Please, login, go to the settings and configure with your credentials.",
+			"CAS_Maestro");
+				//add_filter( 'login_head', array(&$this, 'display_login_notconfigured'));
+			}
+
+		}
+		add_action('wp_logout', array(&$this, 'process_logout'));
+
+		//Register the language initialization
+		add_action('init' ,array(&$this, 'lang_init'));
+		add_action('admin_init', array(&$this, 'add_meta_boxes'));
+		add_action('profile_update', array(&$this, 'onSaveProfile'),10,2);
+		add_action('admin_notices', array(&$this, 'notify_email_update'));
+
+		add_action('admin_menu', array( &$this,'register_menus'), 50);
+		add_action('admin_enqueue_scripts', array(&$this, 'register_javascript'));
+		//Filter to rewrite the login form action to bypass cas
+		if($this->bypass_cas) {
+			add_filter('site_url', array(&$this, 'bypass_cas_login_form'), 20, 3);
+			add_filter('authenticate', array(&$this, 'validate_noncas_login'), 30, 3);
+		}
+	}
+
+	/**
+	 * Initialize the language domain of the plugin
+	 */
+	function lang_init() {
+	   if (function_exists('load_plugin_textdomain')) {
+	       load_plugin_textdomain( 'CAS_Maestro', false, dirname( plugin_basename( __FILE__ ) ) . '/lang/');
+	   }
+	}
+
+	/**
+	 * Generates a random string with a lenght
+	 */
+	function generateRandomString($length = 10) {
+	    $characters = '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ!"#$%&/()=?';
+	    $randomString = '';
+	    for ($i = 0; $i < $length; $i++) {
+	        $randomString .= $characters[rand(0, strlen($characters) - 1)];
+	    }
+	    return $randomString;
+	}
+
+	/*----------------------------------------------*
+	 * Authentication managment
+	 *----------------------------------------------*/
+
+	function validate_noncas_login($user, $username, $password) {
+		//Add session to flag that user logged in without CAS
+		if(!is_wp_error($user)) {
+			if(!isset($_SESSION))
+				session_start();
+			$_SESSION['not_using_CAS'] = true;
+		}
+		return $user;
+	}
+
+	/**
+	 * Validate the login using CAS
+	 */
+	function validate_login($null, $username, $password) {
+
+		if (!$this->cas_configured) {
+			die('Error. Cas not configured and I was unable to redirect you to wp-login. Use define("WPCAS_BYPASS",true); in your wp-config.php
+					to bypass wpCAS');
+		}
+
+		phpCAS::forceAuthentication();
+
+		// might as well be paranoid
+      	if (!phpCAS::isAuthenticated())
+			exit();
+
+		$username = phpCAS::getUser();
+     	$password = md5($username.'wpCASAuth!"#$"!$!"%$#"%#$'.rand().$this->generateRandomString(20));
+
+
+		$user = get_user_by('login',$username);
+		if($user) {
+			if(is_multisite()) {
+				if($this->canUserRegister($username) &&
+					!is_user_member_of_blog( $user->ID, get_current_blog_id() )) {
+						$nextrole = $this->canUserRegister($username);
+						add_user_to_blog(get_current_blog_id(), $user->ID, $nextrole);
+				}
+			}
+	    	return $user;
+	    }
+
+	    /** Register a new user, if it is allowed */
+	    if ($user_role = $this->canUserRegister($username)) {
+			$user_email = '';
+			$email_registration = $this->settings['e-mail_registration'];
+			//How does the site is configured to get the email?
+			switch($email_registration) {
+				case 2: //Using sufix
+					$user_email = $username . '@' . $this->settings['email_suffix'];
+					break;
+				case 3: //Using LDAP
+					/*fetch user email from ldap*/
+					$ds=ldap_connect($this->settings['ldap_server']);
+					ldap_set_option($ds, LDAP_OPT_PROTOCOL_VERSION, $this->settings['ldap_protocol']);
+					ldap_set_option($ds, LDAP_OPT_RESTART, TRUE);
+
+					$r=ldap_bind($ds,$this->settings['ldap_username_rdn'],$this->settings['ldap_password']);
+
+					$list = ldap_list($ds, $this->settings['ldap_basedn'],
+						"uid=$username");
+
+					if ($list !== FALSE){
+						$result = ldap_get_entries($ds, $list);
+
+						if ($result['count'] > 0){
+							$result = $result[0];
+							if (isset($result['mail']) && is_array($result['mail'])){
+								$user_email = $result['mail'][0];
+							}
+							if (isset($result['displayname']) && is_array($result['displayname'])){
+								$user_realname = $result['displayname'][0];
+								$exploded_name = explode(' ', $user_realname);
+								$firstname = $exploded_name[0];
+								$lastname = end($exploded_name);
+							}
+						}
+					}
+					break;
+				default: //No email predition
+					break;
+
+			}
+
+
+			$user_info = array();
+			$user_info['user_pass'] = $password;
+			$user_info['user_email'] = $user_email;
+			$user_info['user_login'] = $username;
+			$user_info['display_name'] = $user_realname;
+			$user_info['first_name'] = $firstname;
+			$user_info['last_name'] = $lastname;
+			//Verify if we need to add user to a specified role
+			if(!is_bool($user_role))
+				$user_info['role'] = $user_role;
+
+			if ( !is_wp_error(wp_insert_user($user_info)) ) {
+				$send_user = !empty($user_info['user_email']); //False, if user has no email
+				if(!isset($user_info['role']) && $this->settings['wait_mail']['send_user']) {
+					//If user has no role and is allowed to send wait mail to user
+					$this->processMailing(WPCAS_WAITACCESS_MAIL,$user_info,$send_user);
+				} else if(!isset($user_info['role']) && !$this->settings['wait_mail']['send_user']) {
+					//Otherwise, if has no role and we don't want a wait for access mail, send the welcome mail
+					$this->processMailing(WPCAS_WELCOME_MAIL,$user_info,$send_user);
+				} else {
+					//In any other case, send a Welcome Mail
+					$this->processMailing(WPCAS_WELCOME_MAIL,$user_info,$send_user);
+				}
+
+		        $user = get_user_by('login',$username);
+		        if(!isset($user_info['user_role']))
+		      		update_user_meta($user->ID,'_wpcas_waiting',true);
+		        return $user;
+			}
+
+		} else {
+			$caserror_file = get_template_directory() . '/cas_error.php';
+			include( file_exists($caserror_file) ? $caserror_file : "cas_error.php" );
+		    exit();
+
+		}
+	}
+
+	/**
+	 * onSaveProfile
+	 *  Hook to verify if user email was correctly filled, and send a welcome email when that is done.
+	 */
+	function onSaveProfile($user_id, $old_user_data) {
+		$user = get_user_by('id',$user_id);
+		$user_data['user_login']=$user->user_login;
+		$user_data['user_email']=$user->user_email;
+		$user_data['display_name']=$user->display_name;
+		if($old_user_data->user_email=='' && $user->user_email!='') {
+			if(!isset($this->allowed_users[$user->user_login]) && $this->settings['wait_mail']['send_user']) {
+				//If user is waiting for access (not in the allowed list) and is allowed to send wait mail to user
+				$this->processMailing(WPCAS_WAITACCESS_MAIL,$user_data,true,false);
+			} else {
+				$this->processMailing(WPCAS_WELCOME_MAIL,$user_data, true,false); //Send welcome mail only to the user, and not the admin
+			}
+		}
+
+
+		//Verify if there was a role change
+		$waiting = get_user_meta($user_id,'_wpcas_waiting',true);
+		if(!empty($waiting) && !in_array('subscriber',$user->roles)
+			&& $this->settings['wait_mail']['send_user']) {
+			delete_user_meta($user_id,'_wpcas_waiting');
+			//user permissions have been given, notify the user
+			$this->processMailing(WPCAS_WELCOME_MAIL, $user_data, true, false);
+		}
+
+	}
+
+	function bypass_cas_login_form($url, $path, $orig_scheme) {
+		if($this->bypass_cas) {
+			if( $path=='wp-login.php' ||
+				$path=='wp-login.php?action=register' ||
+				$path == 'wp-login.php?action=lostpassword' )
+				return add_query_arg('wp', '', $url);
+		}
+		return $url;
+	}
+
+	function process_logout() {
+		$not_using_cas =isset($_SESSION['not_using_CAS']) && $_SESSION['not_using_CAS'] == true;
+		session_destroy();
+
+		if( $not_using_cas )
+			wp_redirect(home_url());
+		else
+		    phpCAS::logoutWithRedirectService(get_option('siteurl'));
+	    exit();
+	}
+
+	/**
+     * Remove the reauth=1 parameter from the login URL, if applicable. This allows
+     * us to transparently bypass the mucking about with cookies that happens in
+     * wp-login.php immediately after wp_signon when a user e.g. navigates directly
+     * to wp-admin.
+     */
+    function bypass_reauth($login_url) {
+        $login_url = remove_query_arg('reauth', $login_url);
+        return $login_url;
+    }
+
+    /**
+     * Don't show password fields on user profile page.
+     */
+    function show_password_fields($show_password_fields) {
+      return false;
+    }
+
+    /**
+     * Disable a function. To be hooked to a action
+     */
+    function disable_function() {
+      die('Disabled');
+    }
+
+	/*----------------------------------------------*
+	 * Administration Interface Functions
+	 *----------------------------------------------*/
+
+	function notify_email_update(){
+		$user = wp_get_current_user();
+		if(empty($user->user_email)) {
+	    echo '<div class="updated">
+	       <p>'.sprintf(__('You don\'t have a email set. You need to set a email to get ride of this message...
+	       	<a href="%s"> Click here </a> to access your profile. ',
+	       	'CAS_Maestro'), admin_url('profile.php')).
+	       '</p>
+	    </div>';
+		}
+	}
+
+	function register_menus() {
+		// If you wanna change the capability to edit authorized users, filter on this hook.
+ 		$this->change_users_capability = apply_filters('cas_maestro_change_users_capability',
+ 			$this->change_users_capability);
+
+		if( current_user_can( 'manage_options' ) ) {
+			switch($this->settings['cas_menu_location']) {
+				case 'sidebar':
+						$settings_page = add_menu_page(__('CAS Maestro Settings', "CAS_Maestro"),
+							__('CAS Maestro', "CAS_Maestro"),
+							'manage_options',
+							'wpcas_settings',
+							array(&$this,'admin_interface'),
+							'',
+							214);
+					break;
+				case 'settings':
+				default:
+					$settings_page = add_options_page(__('CAS Maestro', "CAS_Maestro"),
+						__('CAS Maestro', "CAS_Maestro"), 8,
+						'wpcas_settings',
+						array(&$this,'admin_interface'));
+					break;
+			}
+		} else if( !current_user_can( 'manage_options' )
+			&& current_user_can( $this->change_users_capability ) ) {
+			$settings_page = add_menu_page(__('CAS Maestro Settings', "CAS_Maestro"),
+							__('CAS Maestro', "CAS_Maestro"),
+							$this->change_users_capability,
+							'wpcas_settings',
+							array(&$this,'admin_interface'),
+							'',
+							214);
+		}
+		add_action( "load-{$settings_page}", array(&$this, 'onLoad_settings_page') );
+	}
+
+	function add_meta_boxes() {
+		//Metabox General Settings
+		foreach($this->settings_hook as $settings_hook) {
+
+			if(current_user_can('manage_options'))
+				add_meta_box(
+					'wpcas_general_settings',
+					__( 'General Settings', 'CAS_Maestro'),
+					array(&$this, 'meta_box_render'),
+					$settings_hook,
+					'main',
+					'high',
+					array( 'metabox' => 'general' )
+				);
+
+			//Metabox registration settings
+			add_meta_box(
+				'wpcas_registration',
+				__( 'Registration', 'CAS_Maestro'),
+				array(&$this, 'meta_box_render'),
+				$settings_hook,
+				'main',
+				'high',
+				array( 'metabox' => 'registration' )
+			);
+
+			//Metabox mailing settings
+			if(current_user_can('manage_options'))
+				add_meta_box(
+					'wpcas_mailing',
+					__( 'Mailing', 'CAS_Maestro'),
+					array(&$this, 'meta_box_render'),
+					$settings_hook,
+					'main',
+					'high',
+					array( 'metabox' => 'mail' )
+				);
+
+			//SIDE META BOXES
+			if(current_user_can('manage_options'))
+				add_meta_box(
+					'wpcas_pdates',
+					__( 'Important note', 'CAS_Maestro'),
+					array(&$this, 'meta_box_render'),
+					$settings_hook,
+					'side',
+					'high',
+					array( 'metabox' => 'help_metabox' )
+				);
+
+			add_meta_box(
+				'wpcas_u1dates',
+				__( 'Credits', 'CAS_Maestro'),
+				array(&$this, 'meta_box_render'),
+				$settings_hook,
+				'side',
+				'high',
+				array( 'metabox' => 'soon_metabox' )
+			);
+		}
+	}
+
+	function meta_box_render( $module, $metabox = array() ) {
+		if ( isset($metabox['args']['metabox']) ) {
+			include(CAS_MAESTRO_PLUGIN_PATH.'/views/metaboxes/'.$metabox['args']['metabox'].'.php');
+		}
+	}
+
+	function register_javascript($hook) {
+		$this->current_page_hook = $hook;
+		if(in_array($hook, $this->settings_hook)) {
+
+			wp_enqueue_script( 'select2-script', plugins_url('/js/select2/select2.js', __FILE__));
+			wp_enqueue_style( 'select2', plugins_url('/js/select2/select2.css', __FILE__));
+
+			wp_enqueue_script( 'autoinput', plugins_url('/js/autoinput.js', __FILE__) );
+			wp_enqueue_script( 'validations', plugins_url('/js/validations.js', __FILE__) );
+
+			wp_enqueue_script( 'admin', plugins_url('/js/admin.js', __FILE__) );
+
+			$js_vars = array(
+				'url' => CAS_MAESTRO_PLUGIN_URL,
+				'cas_respond' => __('CAS is responding', 'CAS_Maestro'),
+				'cas_not_respond' => __('CAS is not responding', 'CAS_Maestro'),
+				'ldap_respond' => __('LDAP is responding', 'CAS_Maestro'),
+				'ldap_not_respond' => __('LDAP is not responding', 'CAS_Maestro'),
+				'checking_html' => __('Checking...', 'CAS_Maestro'),
+				'choose_role' => __('Choose the User\'s role','CAS_Maestro')
+				);
+			wp_localize_script( 'validations', 'casmaestro', $js_vars );
+			//Metabox related scripts
+			wp_enqueue_script('common');
+			wp_enqueue_script('wp-lists');
+			wp_enqueue_script('postbox');
+
+			//Register CSS files
+			wp_register_style( 'wpcas-backend', plugins_url('/css/backend.css', __FILE__) );
+        	wp_enqueue_style( 'wpcas-backend' );
+		}
+	}
+
+	function onLoad_settings_page() {
+		if ( isset($_POST['submit']) && $_POST["submit"] ) {
+			global $output_error;
+			$this->save_settings();
+			$url_parameters = '&success=true';
+			if($output_error)
+				$url_parameters.='&error=true';
+			wp_redirect(menu_page_url('wpcas_settings',false).$url_parameters);
+			exit;
+		}
+	}
+
+	function admin_interface() {
+		$user = wp_get_current_user();
+		include("views/admin_interface.php");
+	}
+
+	function save_settings() {
+		if(current_user_can('manage_options')) {
+			$optionarray_update = array (
+				//CAS Settings
+				'cas_version' => $_POST['cas_version'],
+				'server_hostname' => $_POST['server_hostname'],
+				'server_port' => $_POST['server_port'],
+				'server_path' => $_POST['server_path'],
+				//LDAP Settings
+		    	'ldap_protocol'=>$_POST['ldap_protocol'],
+		    	'ldap_server'=>$_POST['ldap_server'],
+		    	'ldap_port'=>$_POST['ldap_port'],
+		    	'ldap_username_rdn'=>$_POST['ldap_username_rdn'],
+		    	'ldap_password'=>$_POST['ldap_password'],
+		    	'ldap_basedn'=>$_POST['ldap_basedn'],
+		    	'e-mail_registration' => $_POST['e-mail_registration'],
+		    	'full_name' => $_POST['full_name'],
+		    	//Mailing Settings
+				'global_sender' => $_POST['global_sender'],
+				'welcome_mail' => array(
+				    	'send_user'=> (bool)$_POST['welcome_send_user'],
+				    	'send_global'=>(bool)$_POST['welcome_send_global'],
+				    	'subject'=>$_POST['welcome_subject'],
+				    	'user_body'=>$_POST['welcome_user_body'],
+				    	'global_body' => $_POST['welcome_global_body'],
+				    ),
+				//Waiting for access email
+			    'wait_mail' => array(
+			    		'send_user'=> (bool)$_POST['wait_send_user'],
+			    		'send_global'=>(bool)$_POST['wait_send_global'],
+			    		'subject'=>$_POST['wait_subject'],
+			    		'user_body'=>$_POST['wait_user_body'],
+			    		'global_body' => $_POST['wait_global_body'],
+			    	),
+				'new_user' => $_POST['new_user'],
+				'email_suffix' => $_POST['email_suffix'],
+				//Global settings
+				'cas_menu_location' => $_POST['admin_menu'],
+			);
+
+			$mandatory_fields = array(
+				'server_hostname',
+				'server_port'
+				);
+			if($optionarray_update['e-mail_registration'] == 3) {
+				//If LDAP is selected
+				$new_mandatory = array(
+					'ldap_server',
+					'ldap_basedn',
+					);
+				$mandatory_fields = array_merge($new_mandatory,$mandatory_fields);
+			}
+
+			//Create an update array without empty fields
+			$updated_array = $optionarray_update;
+
+			$this->settings = array_merge($this->settings,$updated_array);
+			update_option('wpCAS_settings',$this->settings);
+		}
+
+		//Allowed users to register processing
+		$allowed_users = array();
+		if(isset($_POST['username']))
+			foreach($_POST['username'] as $i => $username) {
+				if($username=='')
+					continue;
+				$allowed_users[$username] = $_POST['role'][$i];
+			}
+
+
+		$this->allowed_users = $allowed_users;
+
+		update_option('wpCAS_allowed_users',$this->allowed_users);
+
+		//Check for empty fields to output error message
+		global $output_error;
+		$output_error = false;
+		foreach($mandatory_fields as $field) {
+			if(empty($optionarray_update[$field])) {
+				$output_error = true;
+				break;
+			}
+		}
+	}
+
+	/*----------------------------------------------*
+	 * Auxiliary Functions
+	 *----------------------------------------------*/
+
+	/**
+	 * canUserRegister return the role if username is in the list of allowed usernames,
+	 *   or true if the global registration is enabled, false otherwise.
+	 */
+	function canUserRegister($username) {
+		if(isset($this->allowed_users[$username]))
+			return $this->allowed_users[$username];
+
+		if($this->settings['new_user'])
+			return true; //User global registration is enabled
+
+		return false;
+	}
+
+	private function getUserRole($user) {
+		global $wp_roles;
+
+		if ( !isset( $wp_roles ) )
+			$wp_roles = new WP_Roles();
+
+		foreach ( $wp_roles->role_names as $role => $name ) :
+				return $role;
+		endforeach;
+	}
+
+	/**
+	 * Process the mailing, sending a $type mail to the user and
+	 * 	 notifing the admin (if notification setting is true)
+	 */
+	private function processMailing($type, array $user_info, $send_to_user=true, $send_to_admin = true) {
+		//Global sender is always the same.
+		$from_mail = $this->settings['global_sender'];
+		//Populate the variables, acording to the mail type
+		switch ($type) {
+			case WPCAS_WELCOME_MAIL:
+				$user_body = $this->settings['welcome_mail']['user_body'];
+				$global_body = $this->settings['welcome_mail']['global_body'];
+				$user_subject = $this->settings['welcome_mail']['subject'];
+				//Set the boolean variables
+				$send_user = $this->settings['welcome_mail']['send_user'];
+				$send_global = $this->settings['welcome_mail']['send_global'];
+
+				break;
+			case WPCAS_WAITACCESS_MAIL:
+				$user_body = $this->settings['wait_mail']['user_body'];
+				$global_body = $this->settings['wait_mail']['global_body'];
+				$user_subject = $this->settings['wait_mail']['subject'];
+				//Set the boolean variables
+				$send_user = $this->settings['wait_mail']['send_user'];
+				$send_global = $this->settings['wait_mail']['send_global'];
+
+				break;
+			default:
+				return false;
+		}
+
+		$from = (empty($this->settings['full_name']) ? get_bloginfo('name') : $this->settings['full_name']);
+        $message_headers = "MIME-Version: 1.0\n" . "From: " . $from .
+			" <{$from_mail}>\n" . "Content-Type: text/plain; charset=" . get_option('blog_charset') . "\n";
+
+		/**
+		 * Replace Variables with real content
+		 */
+	    $variables = array('%sitename%','%username%','%realname%');
+	    $variables_values = array(get_bloginfo('name'),$user_info['user_login'],$user_info['display_name']);
+
+		if(!empty($user_body)) {
+		    $subject = str_replace($variables, $variables_values, $user_subject);
+		    $user_body = str_replace($variables, $variables_values, $user_body);
+		}
+
+		if(!empty($global_body)) {
+		    $subject = str_replace($variables, $variables_values, $user_subject);
+		    $global_body = str_replace($variables, $variables_values, $global_body);
+		}
+
+		/**
+		 * Finally, do the mailing
+		 */
+		if(!$send_to_user)
+			$send_user = false;
+		if(!$send_to_admin)
+			$send_global = false;
+
+		if($send_user)
+	    	wp_mail($user_info['user_email'], $subject, $user_body, $message_headers);
+	    if($send_global)
+	    	wp_mail($from_mail, $subject, $global_body, $message_headers);
+
+	}
+ }
+// instantiate plugin's class
+$GLOBALS['CAS_Maestro'] = new CAS_Maestro();
+
+require_once(CAS_MAESTRO_PLUGIN_PATH.'/functions.php');
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/cas_error.php b/www/wp-content/plugins/cas-maestro/cas_error.php
new file mode 100644
index 0000000..2a43463
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/cas_error.php
@@ -0,0 +1,29 @@
+<?php
+/**
+ * @package WordPress
+ * @subpackage Default_Theme
+ */
+
+get_header(); ?>
+
+<!-- _Content_Container_ -->
+	<div id="primary" class="site-content">
+		<div id="content" role="main">
+				<header class="entry-header">
+					<h1 class="entry-title">
+						<?php echo __("Ooops, there was an error.",'CAS_Maestro')?>
+					</h1>
+				</header>
+	           
+				<div class="entry-content">
+					<?php echo sprintf(__("The username %s isn't allowed to register in this website. If you think this is a mistake, please contact the <a href=\"mailto:%s\">website administrator</a>."),$username,get_option('admin_email'));?>
+					<p><a href="/wp-login.php?action=logout">Log out</a> of CAS.</p>
+
+				</div>
+			</article>
+
+		</div><!-- #content -->
+	</div><!-- #primary -->
+
+<?php get_sidebar(); ?>
+<?php get_footer(); ?>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/css/backend.css b/www/wp-content/plugins/cas-maestro/css/backend.css
new file mode 100644
index 0000000..ed4714d
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/css/backend.css
@@ -0,0 +1,133 @@
+label,
+label span {
+	padding-left: 6px;
+	margin-right: 6px;
+	}
+br {
+	line-height: 24px;
+	}
+.mail_tabs {
+	margin: 22px 0 -1px 0;
+	padding: 0;	
+	}
+.mail_tabs ul {
+	margin: 0;
+	padding: 0;
+	}	
+.mail_tabs ul li {
+	box-sizing: border-box;
+	display: inline-block;
+	padding: 12px 24px;
+	border: 1px solid #ccc;
+	margin: 0 4px 0 0;
+	-webkit-border-top-left-radius: 12px;
+	-webkit-border-top-right-radius: 12px;
+	-moz-border-radius-topleft: 12px;
+	-moz-border-radius-topright: 12px;
+	border-top-left-radius: 12px;
+	border-top-right-radius: 12px;
+	cursor: pointer;
+	}
+.mail_tabs ul li.active {
+	border-bottom: 1px solid #f5f5f5;	
+	}
+.mail_tabs ul li a {
+	text-decoration: none;
+	}		
+.message_container {
+	margin: 0;
+	padding: 22px;
+	border: 1px solid #ccc;
+	-webkit-border-radius: 12px;
+	-webkit-border-top-left-radius: 0;
+	-moz-border-radius: 12px;
+	-moz-border-radius-topleft: 0;
+	border-radius: 12px;
+	border-top-left-radius: 0;
+	}	
+.mail_body div {
+	float: left;
+	width: 50%;
+	}	
+.mail_body textarea {
+	width: 90%;
+	min-height: 200px;
+	}
+.grey_text {
+	color: #8e8e8e;
+	}
+.message_container > p {
+	display: inline-block;
+	padding-top: 4px;
+	}		
+.availability_result {
+	padding: 6px 12px;
+	margin: 6px 0 0 172px;
+	color: #fff;
+	display: inline-block;	
+	}	
+.availability_result.avaiable {
+	background: green;	
+	}	
+.availability_result.not-responding {
+	background: red;	
+	}	
+
+.availability_result.checking {
+	background: orange;	
+}
+		
+.column-primary {
+width: 72% !important; 
+padding: 0;
+}
+
+.column-secondary {
+width: 28% !important;
+float: right !important;
+padding: 0;
+}
+
+.meta-box-sortables {
+margin: 0 8px;
+}
+
+.submit {
+	float: right;
+}
+
+.cas_form th {
+	text-align: right;
+}
+
+.main_content {
+	width: 50%;
+	float: left;
+}
+.sidebar {
+	width: 35%;
+	float: left;
+	padding-left: 44px;
+	display: inline;
+}
+
+#ldap_container {
+	display: none;
+}
+
+#wait_for_access {
+	display: none;
+}
+
+#wpcas_u1dates .inside {
+	text-align: center;
+}
+
+#wpcas_u1dates .inside img {
+	width: 100%;
+	max-width: 420px;
+}
+
+input.required_field {
+	border: 1px solid orange;
+}
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/functions.php b/www/wp-content/plugins/cas-maestro/functions.php
new file mode 100644
index 0000000..fc3ae5f
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/functions.php
@@ -0,0 +1,28 @@
+<?php
+/***************************************************************
+ ***  CAS Maestro functions file 							 ***
+ ***************************************************************/
+
+/**
+ * removeEmptyItems
+ * To be used with array_filter
+ * @param &$item passed by reference, the array item being tested.
+ */
+function removeEmptyItems(&$item) {
+	//Verify is the
+    if (is_array($item) && $item) {
+        $item = array_filter($item, 'removeEmptyItems');
+    }
+
+    return !empty($item);
+}
+
+/**
+ * Check for a empty value and if there is an error defined
+ * and print a class.
+ */
+function check_empty($variable) {
+	if(empty($variable) && isset($_GET['error'])) {
+		echo "class='required_field'";
+	}
+}
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/images/ist_logo.png b/www/wp-content/plugins/cas-maestro/images/ist_logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..5ac29cc9d6f426a933ca856df76ecaedb560c2d1
GIT binary patch
literal 94452
zcmbq(19v7(6KHJP*2cE8*<|C5ZQFL9*tTt(Pi$^%CmY+z&HJ5uf5Gk3eX6>ux~iwA
zXQsMp!WHBs5aICPKtMnce@p&U1OWk;0s#S2f`R&`a5^9T$AEAW{jCi1UA$q8!@m2l
z_L3S-ARzE)|25G0P2cx#B9^nby0e(0iGj0)oh^y7g^dXa3kwqq2NMfxc%@14w*<j|
z5=wTa&Ta;dCLkilc7`S-zbqV0-0U2!oJho!I2@YyIlt}m**mJLxo2Hy$;K=&WB9fa
z!etYi*(Y#FfM7ycD;Ug5o|_Kf{R*oS%^;uT@WlPgF>W{*LCNKhF5~_gt@Zb>MItwf
zUo|>k_-*%74>q5}f?cbg9}rU;lc4<>!y||3)-XW&XUI1FL?r!;M>3cDnCU7#lWC-3
z$f5>RBpBAqOXt%vLo%{@gkKT8m%dnCvu;4l9QEg6-v{!0K(E!OE@<dy%@3b@9?l~X
zzuIe#%at_fk8a>`cWAW7>^8jjw%^(}fls3C3y%}3wl~!4Qjqi{_7#~MI`C8KE8xh#
z^3$ypIuv?g(InNC%A%sTEiO439B2LG0EtI`fx4oH&%g&~S^g?-e;%ejNIXhhBC6I{
z=cnN$zA&zDo$P)z&|y)}lRl798rRSFQWAv(H*h%VPC~{`#YFGRWW~cJsiFb|^AC!Q
z(b$N-%nOw(*(17#3`fgpZdwtWMxN_X-^a)bxXL@K*w>GmSYs`sM(m&WFL3aj5~`o!
z&*PHtzT<QV3Xrbb=iAO(ny*$DD%^h=iL}a_=CmNh&g6lVpIUifj1OG9Ap5za-f?OH
z=3=YE!CLQh_h0K@Me%3b59#X%J+!h9LN#}_n6L2hEO#pqwY*`mS7QJ=rcbK6%dd>j
zz}zH2moJ#77I@jL(ENLW_*8;kRH6;2eU95)p&Sp!$&K0@6Q4-@tzjnnm<UMei`r@Z
z=~vY~*ZYRf;(F4%tbwu47u{xW)bmP9NQ4dgL>Cl^c1{V^yQzfsEnBrW0xz7_v(;ob
z<q=Vz)Mv>K>zCymwaQ3y2x6;mHr_0=&(zDZYSXfPx?gt5X;8`uba?T+&nYhwdlXYD
zv7K)p2GTA}%uw7a0~t4^{HW4x6hAdn-4e%FRu@_A7_P@1A>Th(k5vw#`CdvhFCij`
zbC}Mr?rZk12N(~#5Z*5=6lVSR$CWGlm5=RaYQ7Z4nOsoNFVdwiy*ZBFtL-l^zn!P4
znGs^WE8<7s7wH``VbAv4eRZ#$Z}j!26UUNYX%(%`fm0pz3Y)T*Z%*se*R9UEMI(e)
zpa3xE^1R(&`WYd2hm?P~`t#yO$F;uHZeN_x>l0+~K~qDsCfNP^ag(&M68-hMHU9aH
zLwvXYukxdaEgu8~*kWU)tmK|`-mQ^JFcQz0w$MtMKqeku?e!`+2|t~l&L%&8_I4X4
znh&CFP+kK@qsYYD9?`Zpj~JN5&Hb=FGD+S)u*picLH<Xb0!xIXl9iRAe`-olYh&Ym
zj#$pu`{8Bi@J_9=a)yaWz;CE_n(>l?3H$5j`Gs!cCB~t%_jPYK`-9H)!Q}3C1iJK1
zO)k9h4LRph&!V=L@ly9vPs72*;pLpid*^^?b|v(yW|~;={bq5D=iTY}ap6jjK~S>_
zJ98)(`#5rQPwV;gW$&yKI+hritOrcC+lAA6C#n(DdnXjUc~~4eP2@=E`ruaRL5!t$
zyZm=>4=Q*xM(+M7&;^Lk(%wQO?%;=CX1oebO$^<gN)!U5^2KU_xy|%nVapGMPRsS%
znPKl9I@}!{zTBy8X=n4>Fbdj~33XfB-j?Mrck#DH%fH~{M(AV<?#}4(xT8uQ-G?JE
znO&FoW6yO-dbd~XO@86*P3|r2ady3-`F;t!-*a@;U~La1U#uVC`pM?pa1AxaYUONd
zb%FG}AMeq%Jv!EB9z<KZH)if2;vY<zCf<a|UYqXYZAr3Z@@aFNYy7V|AbM#J5V^T{
zd{Vbfy#Bjw@DcC>(_Wx+FZ{@l3CL|m=xTgM0-W*blZRo!=)8_4r3-W0E1mqXt)XrE
zO<@y}`Ey=%xiUK-co?DX`u4r3-Ep<6g#M$><n;IK$Z@3X#O!txLN|ozr3jWC1LIC9
z@lLnRA1i2&v8R8Y5305?f7chay9xK_sG<2iVbppBe%bwSt1!O!IFh3ldD{KJ7Qxk1
z3anXGo!&w5YP?-=Ix&AK2Yx&ya1j>eLT!0tQWWk^+i6`=sP)^?h*^QWSTKe^VFV2}
z-<@&=d3PY!Ru08R=6;gKXB-OxY*&i#IjiyhtB77O&DQ@^Zi)Y-J!>g;l!D0502w|c
zRCqluykDJvo`S{A9MAEEUj6tzj~MDaK&msAA4?Y61HOE6sO5}Dt#cjCJI`c@Xr(@Y
zw^SFxQDyLr4rj<~E^R<9dVsckKzx3HrvEhTDecSX1rPEy4@~(@H70Tjn<~*h=rciG
zp9A+U8s=tw!gT@>7NSyMkZh@5jHg;ob-UkxoKK8IImmE5OknD}!rF*5^G67c6HjGe
zL~boB12}YH#jD7{4?$SIw_D19d<7EQgY+Y<chGr2Ud6j<JtW?C;o8AXR(-gnPKKbo
zu79!aS{>>GI&9nNU3r+K7$54!CACk{11ge(e@zB<%~vJJN(2dAFdb{<dfhJYkH}Jy
z)g3~DotHu8#DHE4|2z54=7b1nBfw{nR%U4Yc`?eXz#20KDaA^|ZJw%KE=F;DI!U*0
zk>mZv_U58U)6uWn^M%pfl|B}wtp}F>)t0w$LkcT(kq2t}uQ#W~Qr!=C*3q&L<+UqM
z47S6~k$5*f$YW>lEDgeg?Bi#W0bX3R^8Kpyu$QVxqA)DPv$hrGb@`skrO9F4eq=+T
zAQ$3;v0ff}_!GT*+W~X%nc32^gY?zrJuG#X)+wIl`YOc@M&a>6TWFyyg8nb|8D2^O
z<gKBJ+XRj2)(|~PhRsUyl_lI6tf{~g9lGUdzCw@H_HJ_l{IAwGQuN{L0r5zJI}LAY
zb5_G$XQ;3SoI}&TVKk!kDQ_3mi+>{(hxHp3T>S?d;ykBIqEOr~e-0=#6LSM~rjp;l
zw!W-LPj~U4UPA(a4ARC)-L^Xwc$XY-(S;7xLD+k|2gEfdq~Jpk;4b(*fmXAC#~y=x
z3lDQms*IFK#F^{Rhny;!d~zoTA)E$YQ(v5D1V$@cEWd2>I8t+lQ}65%{;FG%#Xkhg
z%P~nJ1VMssQC*VBy#Yah!oklZ9!=~E+atDn7{9vx<9u&bX5|RdkPKB$tvQ0kNtgn1
z?{knldJM81)=i~J(*&8Vj~!Lt#g0@x$g_Jx`zda2HW6iwlGkW>=e*aT9M?L<X2yem
zngTXrDLZExi^a3Vzpyqn`QbQEYN00!;x|m09Vn>`6Sls1`bWD+bq^(1v~Vzn^bIyH
zVdnU3Jh-Q)P&3&iircpqDeAUZ`Q$s^7Y&U0r#g{Y3vVwTYN*soWL6*kqE79oV6bcA
z-c6)v$U{l}mFxe9__|*FkhxetacRycZJjU}e~MstYz58CZExf*t{i$5!jYAt(a({>
zxe~Mv6o83{q+~WH#^?!gFBl!zMuZ-<f$E5<e3YzFh1EMFx>Tc>nvKZSG?P&gli|3a
zwTcs4ZK!|19q5<u>;kRznD4nUW()*&cXgTLZhgi?9lcrp@=JlC8)h5bo2WZzvrLUG
zL3QB3F<7?86<rOdKQmpt)@YjVM5XB4YT*f|;%0c}@kb4++G=uf$W#sFis9vZ9uR*T
zFbG~2f6s>}bkOaG*affy4-O5w1cUKY`&{q&>-CS{@SOf0&UZXu^sIGXdP>n9X6Q@A
z)Q5GY=F_`p-DSsxCV;JWksTkF?0UN=?{Zx8=nsk0^*?FF_wZjcgg!qx9BgZ$=(Sg)
z=_M#e&hw>56Tp(v@vKPh<`qFD#)7Rm;G%j;^80NzJjDh?cXF<y!tuvmgFjZMT{^LB
z*4B*mch~d^T5k?2sIPK^{U91NPcZeL;D2Wh5$50!Ge+e7CE#N9kT#KhsvvHF*zl?O
zvJJf5PfIx?AKyuE71HMaz2nbeFI-`M=AoSmfoeNyX8!(ebzqO(IKc?4Im6{YZyqN#
zKr9|H8X6PBjg4IT=iT~z)JOG!{j6WP6D+$<;d73+g7C?)rMfpUJ=zjv#+epB@HDgb
zG?VcZguY&V>9ihEVnfn&*A52Qva|Ljl<zcIVY{~sb#GTqclc-T6yuVyVTF=sL^Hx;
zy`@F0isaz5A3{jC9rC9~mds<p>8?N;H~U`uTv3t&i_mNjI<jffLX+Y!PBKB!-yq%i
zAzoPjA1V5BMHWSjAR6lLtkhpr;#T`Np;TD*ot#*G#DOyw>gWg%0bM7|O|YFuH}?~H
zCkvbc(Bl=D1+=S^=^aE>c;vvvJXzv9z7e#mms@eV2q0Gl*4XsdU^nwN<D<H90Df)A
z%BV}_9+le7BErll!X735;6xmnU<pA*Bj<}P*<42EHSK^Exnl{(!e8uv<D)sCMm>lv
zuc0V=vosjkG`XQ4mUjiSyY$D#8mqvyU;^iZ?uq@`kG!8q#|n})K5X>yVhX?A%pOq9
zBa<!u5|e<m+q#g~5B{z&`NXZmkE}c@0g2HUB=0&7>e{Y|da4xp%DMU%q+nSLz?akK
zAczilCk;taf3>*h?bUi0c+PGOjD7WSa3h`Rey>XtEL>uDR8Ic0dm>v|_K2y45M<R`
z4<0E_`a!UD;(OAdcFb_Shmv{lJ8+O)ieajs8a1vLj_x*XW{XhSVGfshgv!Xn$5$vs
zeST7}=}fe09%<$+d&KW+cAu&Ka$9T3hsd!yv+m{itu7sB`PAO-xSFWyxKK>#QXvv4
zXmqmS{E^D7M^xV>Y{F92w^$Zr)HM>U3rgFTk}o*oPPL|SmIKB!p~%G}#<ghH(^|Ac
zSSE19%gTXiu+1;?SAt0E6P`Vf+Z<<*tzGE2$9Z2Rj!@Y6Qzko*h29J7su#ggYi-Ys
zkbdDI5(;3_bH3<$_Ap4;Nfq+JTd#?u;sYtyhst@j_7vB|dkIB1&tj5TCp-CDG?t|%
z9F+0+t-kl9`94fjj!$Bm7RMCIN5wXFWbpUzPF^qf*Zs;y=dTMv`!m*qgB)tDq{jg1
zSg`?rJFu^uXkCjJ_ob+VD%>{>w!p?tU`dWnR!FS2Hv94=7n9!3#G(dXCkOIh+ovJs
zRDMOz!_|}IeWKs&u@Fp8d+0t;GmYVhG%eLOKI!*L&w{kaB|2qdz21$_blgcgoe_;*
zx#0W6+ZJI${<&A#M#w3RB|~uVUpkbj?r!B5y@AU;gI4Dcr`P1aol|$7`Z_AD{|VZb
zUdpY6HGy`&dFsD1YEltNDSIBaohDA*k7b_n8NLeIlwN`1GzEwlT^=wQqX|VTaoney
zVdnDK8mdhV*4R=#hJ}Bq{FRpRG$_jC)qkTPUDEO5bhv1PRi1*V$b|JqoU*3cGYPxb
zb+#tY;CcUVtOvvB;k&76Y})G9hh{L8z7OVIkIur`mLKQsr$b{&rp5wS;v-(7E78W3
zY{Q)Aw&`f+Q*LyZ-$v1@>HPUrQTK3BHsr81xmL&6>GuByB_3t`cH&BO9W46j$ZqPq
z*joBR$V+`?>a{JkI6<F@$mO<`@?k6fG?j`?n@3*zApi@%vOQvQ;j__vNA{1z=c(;<
zjeViHJ-vp!<g5?}qu_|$CdQn9TQC2{+wZWge4SINwL86Ixz61WAvm%VJaW1B%lhDB
zpUP%gX6@2+UYA@|=nDJMNa4EjM51IlM^>B97VK#X;<6F?jY4X{wq7?Y1owsZFQGGh
zd-nb8*$murte51LY3$8I5_OaSALgnZ>zk}euYe8Jj;>?`F?n^bWiiKUGxD-04~JNP
z{WgBk1MygKvHhmX2!R-?bS>?s4o3-U-+jetZ^yQl<J>=G*SmEpLz~?%v4`goulKWs
zar}GFAn#Y3{%>bn3ESX!B~`>P!{jbU%kdgjz{o0oLW+!5iGHPNCb#}pcJqMn?xiqg
z#vM|JWpF*G(efm}OC_ZCR%C*^;bF<f*>`TJ(v;lQTV34k?ZUHB;NY#(1K`F_mrK>y
zFf7cDq14i$&_ERRTY|JHRBsrdx61Mi>A+cd&3CWDccUVgTQ=_5wH*7Elef320D~QY
zC0cykT~`X;qmqCKJfQL$OltSOV9<+YNxk~3dy0CLv1mK+jN^n1>-73lrQt?b=#wuc
zdM0d0#`+M%(fG)ERcIn3920bDE6?W1o~QTZl#BY}h-3SN(5dV00)P7;ZX_s{V;9qT
z3&LdAYSv?f;I-{=*5sO=(?I?nInqvw#)X?x;qHD<<ULOR-LfBKM{f`3-uP5pj<^)A
zU~AjVPo69n=jxtCLBq^kf&1Q`gI7uHnDF~B!H`>L`PQj${^@vAbU}HY%Gv`nqq-I=
z4h$-J<T&Y~o|`Z+r+z07*M)jmkVbyyJ`$w~@Eg_+Yu26MAf8h&LTV)HhOgh;%@xtr
z7ad&epYZy4z6w8Lf8>50q`WeNYfrq^$1uFn5}TXK>=@%XO1{d;{(Sy-snL+t0pI0|
zB2~!J&mG|BhtT~CpXf_#hsJV)tG=)6#e25ru`00hI8~^Jx7!K(>qRUry))8hMK)Zp
zFKFoLA}8ti!hpThO)ymc!|IIKKZ|nvgZu5WaCYYixYzVC{nhB+T(?`HVgEdUWq9ND
z>;ZnYBmca`Nl<#cBLJ_a{#-af&G0_43-{@oy!lY*dk|R~nLF!earNv+ul_iuN16L>
zwBiBHZz1%?^!#(R)Gyn+qq4zs?jU5}?OZhRY6G&u|05q%bfp`)HvgagLAoy?62iN5
z9nmJJ)^^C14{<MPqn$U}TB%R(^V!MqDdFoc*HRm%QWYBA)93r`erpBYhwTXYG;iI6
zcs~gFJC{+J3nWt!<J@=I+cAm!lzS7ef8%%hm>qTwx7DV4zo||I8k)9W^>6$@zn-cO
z4#;2Gt#!Y&B3aAu*MqM7AhylMh}&1tb+?d-=GcRMZbKEHxfPx}9x6j}gkCsbj!ah6
zTM-L!UQKTg0B&yUrn@ARk&QcJgj<<09|~lQLG)jUriR_m+tDel+aHkp45r*YLc)MV
zW-F$kPi?3%FP@6rTo?T6HTfQ#WcAmn*gdXt-39s2-oEhO{=3{@jTK0yCviS}`5hv?
zpmR>2*&fjJcSiGfcy}i87PIS@ktwW^M@C|5Zf`n~J&+AH<~KD4)2|;VTe&+#exMia
zz!Ur^-vyj%Tjp1&LObRTutFhome;D&75kuRu9NrSxpc!JMBeSZJ49aj{5$cLyqi>f
z=N^$`u9)dpsBF907pQEy*_XnB_hCfQZIXL@33HF2SuPl#pjkE)UJZ^ekrRA??>>xd
z{UcPq9m*?IeksZ;SX;=GSa#?CSPL*Vw*QgsP<YAi{VBGUx1vuz5KX_~rv4+MX)o;L
zW$~R0^V_kyhg;Cx75K0Jaqba+E$iRURNh`fWp6_}_mp>aiX7uR=LAg)#g2F4JNpvP
zzLfmOw3}^*%J%b3cH@Hi5G1*mJ>2}?GzkEoFW(kO?%(`px&C8*&({g%^;qfK$m|uk
z=zm5??h!?wV0_?mMPKBP*d8&hQ96VgcV|{hw-_~RLAKvTfw>H`PRoHy3yLx(_TsdC
zzR5nF%4XTVEvJ(!g^^?{alWoHN9Ti*NGytA(Dz#L-Euj$CJn4=j~x%OOBL_u##1PK
zE<O!MrW1Ic<a@;GYl1e#49$Fh@jsY73oHAA{9N^t$X45!q=epL&%);&x~$~yOYruF
z(LatKfBJ3ipMuR;{eJ$y!-@71irW+Nn#$<<?{4-0Pso`w&^N!KL)2%{$ii>Hrz~e^
zYkye=TU*bxBUGw^ZBD4wDObw#F-ZMHS!al36i|hD)(Kld4N~@00eim@^L-V3-Zh@r
zcMW*u)z{A8{rQi<zJdMm9`;in=L~kkh&U$?7$P*#tqb8T%>IJ^{>dsxyjJ(cv~`MY
zaNc^o9rce1i!RXZ3(RO{?s8zLg?0Q5Qak%sSYEY+<QVnp)~s8q(tLIH7Bqac>qb8@
zWbT!*bie!=iOzZ$BjYp38%b~&NA0%=xTH&>67SD4QVX76kG{!&&T6`K+R;Ty2uATv
zwBuL?X@A!4AJz;Xvl;h{f8uP)tDKERt=@4NQ7>x6^&7O0QC_3ZCNMl>3juC6q_`JG
zx0n`u&Lmd)8AiiGUL?wINY{in*802VVFty$MYP3!uJ`NR!+mJg2fs*e#~o%4z4?W9
z_Jlcz&>cs9{dPGt7ZL|cjqg0mE02b}>GR4tW!K#X!^HB&U79AJ&PQ^3<UBGZqISH{
zLH53z33zqud$A*5BKReTFWP;ibtR=L7zooK)_N720`t=Xa`{Pw2=6Ko9Qwh(CBm(u
zT5Nx+JM?NmrW<B%IaiC|lkNR8b;#3s`0mPkaa{JZ`a9$styydnSCyLV_Udx`^4jSQ
zu^bP*-PfBWSWEC>%g)8h@%pLtP)OXnuyRs*B`T3SKO^zA9zXYGGMC-WkA)iR;P2~n
z@*+sMBYGOsi+k{MYEy8!&B2{GV+QwV)N?MYmFwL(DfR>XXdB<NM-SQF=+!nC>9)YT
zRL>+U?`h`>lGm@Ljabg}Gj~VKQ0^$y-_f18iFw(mw{^}p@@d+4IZ7yZp|=0nik{K(
zf^;gw?vvA4@W=})w~wm_DK~l*ii~>TrQPiqe*<>og(d37v&aU!ShmM)o|An`yCd)d
zq3g@`hX2`pTW^yOI%JE_@7n=pBH98v@%CEl*1SFemZmzN2NpqPwOKmkGIH<Re5;*>
zE){My%X{cfKXGclP#m{f6?3nfyY+~=^&Yl7dX0>FZv5@|ckq#)hrxZn_;>UkuKE_C
z5PN+mc+PFEMU_Vt>_m?|F=+|;#|#S98pkV0`^O#2sy4bYy@`)hJ-79uYD|$2>xBHx
zUS{ghqU9fzl8OhU0I>;+uJ=K$?M<dmpYVAR-Lh_D^tq6B1?5>5mTWQggKrA){rXgK
zSLQBH20l%ChlW73eeW(UX@35_)_jN1jW3%_<cp5UElUBwy6}sTL-uJ{I*I|(&)F=M
zFnX@*ihelPf9R)m^Ga$W_ok)={I9JnbYFOC9GN_)enP+CxwY4!*9!}T)`oPi5{1@c
zZ*{Jp7Ze&pIlypSw*S@i{K6u5VH~imhht>|^GWi+T#|6EBOKMqB1ByF4vTf5dJMSB
zZ0&zKjqlBGmn{3#a-Y8Z%)YuYWRARL>dW6)dbhn_|APFEbuOnjzhWod1X6fo@YvH$
zo<{~$JhyvNZy9yt<6U*m_H8p>0-ZikSj}e!DxO`;4e+8HaiS-lY_Y}*<#Ts?q3r}d
zoM~UOf4!s7;e8_hYC`CleI~w(vBy5Ho@nd&jIv5&!R~?rCtv}dt+zIV(VFiF?l2-h
zSBNDOs&W}^9QRYJ+Kmb261`-OY|emnJhoqAxLI&yQ<uGMOZ4*TnyB?}%47Ly>dz$D
z)ri1(cZMP!Zw_WPz??+BtuKkdDagr$9WIH0J(6~ylZJ?G-`Pk4pUbwpAl|VA7dE_V
z7C)@7Gn=uVf?5nO#LH;DI4^xBx3h)LGW~aP_6>?P&~G?8(U8am-{j_UVjgTru9%mF
z#<qPJa-l2le?C{P^D+=O%@V1v*YsTJ-1vF_y|Sh91)q7bS@D_IZpW;|_;%+upjEEw
zku~w&GDrHiAqUTLcV<Y@Uwu|S{0Kk)VtkMeE<!kb`Ru(hmAW#<d(Z6GsfJdLXMb)Z
zsa~o29h!TrLyj5btGW^1T4$0dv8r#%p1JM!@}5iltMHp!x(pl|R)4-Y`C2J+dTWEr
zeP!DyeN*1F{;<8y6l$t<_5-f#o_*=ho%2r84R&sUKMgc`Kgst@FxO`HeAfIt+TlC&
z3CZ#<Y??vwsccWaaP~PhEj4JgbZuO?&Nbs|BcFe=byIjh8?6a9z_@%J5J0-08}7Zp
zoc0r>$m!jGn<Bs2?HRzQ?*Z=l3DVbWPd#!zD#sYyFa=ELLD%}i<E<@f?Wf^cG6iDn
zT5pUCdTi*n=&aaTk*uvkI1j1x_V^A4<G?n~`^I0M4fnoXueK)U*5H0+#!d)@bh<wA
zMP(^ucDQRL)Zi0C-hWu^X>oJ9SH}hG^&C}Q4ZtN?HtJ?_!e1m-%$jlufw#N2cE0$%
z$P4v;VO3cBTAH-4GJK%FS84Vbahz|aB~C1x=Rh&;!NlstI|C!G`X@PgEU}j=<_Vf%
zo0(awBzAkJuAbMFbGx&%Httupf0Y<cYZv#B)D*L;-s?;y`dM)ca9lpw#0bLa-b7N#
zd4%!;uDY|=A_i`HqIq6)%GAAj%$GPB4UA{jza3hMZN}_m<hP0eE`Dk()BcbM8hqNq
zYdv&tQbPK@^|Zu+xt?g;7w&6c><Y6v@T-3gojR|_Kr=twrl(5rg>`iDPU0ZlVshSl
zp?|la`#pXZwhlw)*kl<#VHXZMcGx|0Qx~-EOq}M}R-MdYOUpO*kZQZz(?nl9-ZHtz
zdO@w7zi**zhWZx^rPBs0g@XNN?1VnPGgaB4GkO<K^zUviOYbF7OP+o%u0&?<19i8L
z$31+Ce9OI(TOO|0)8E;t2fDo1`vaby4FPzj)YzO}wCnYS<J#xN)gg=L(IIiC3*Wn2
z$R7VmABWHHFolHtO)DSrfW$O$$W`_>l9>B*n+GzZgZt-QX>9!Ci&z^|Z->ukok#ni
z)<%yH^}FjEdzUs?I-&P12JD6xj_pnF^w<6iU36{gRIPkQs?+;tcO&%kZ7<^u8=ZUi
z`ui)!*hlR|B6C#e@$L)p{=jCZci5Fcmv;zL>D0u)1oIYOYV5U@+m-g7K9QeCc&|Vg
zLhq*ED@^!?-&)z4g@PJJRB!OI!nD`JkjC>lc5MHhP&drMPUiFN(CLNn`#C&GU7P2-
z<i|7Ir^n~Gc5tfCU4JI_FWsF71R><a;@W=rvafyVrP+>yi%N4n6Zh`7XC&Xt(~Hnu
zhv~1d?|6&w^I~?Q*)E%#TtCDXPdnk3KsTW;pU?e%WvH3_Q|*ePo`8?z*1P>pp3m{Y
z@3(=)Y$mYCS|Wjv5wH7a_Sr7p-Y0JE*W*YPf1nnKDl$<pET7+Xod+=Xa~lKzGeMol
zS$d5fl*|XZW!DNC1+eN3?QPw)RMG_Q9`gY~NXquPt{CYj(fDr`gF>ecd|}x>t{+qL
zB>mb#?f5%kSfA=1P(EQ|n~*d+;dF;0D?^dNBZ+iEW&}FWN3#TB!0eAnX*YBzJdTl{
zKQ}|&Yrj*Z#C>T(c7o0>F7`rLSJ+qJ9pg84u0l&2vGUtj@24Nn!`#2vzZUfeC9Vah
zz=ZI-Z`aZs936;2_AC@m8>!`Q8nI(V<Ts>#pwu(j!yhkD>+MavWV0C$zL>b*y*GH=
z+1{;h9<?_9ucG5zy}<U(2Tk}>Q>P*iyd9T;fCx}Kn3c^*4;0@OY?6#$DDs?kcf9Tq
z__aQFg1K}ftV<lu(~`Dzb~xSepdrO}&BI~b-8z3s-4-uNvAVe2Qo92Zg&>3Z+CNH3
zNXBfEH64M)&KEYty0muPhiZBu>u~MtinPCNjdy<cNAqut@)pZXMYpLm5awdIj?u@l
zsOjy66*XOx{L)O{hWWL+5%yNBAagqJQ>5WZhxv5jljQ%#S}r~@^2viIC)JXa;FW*-
z#!I>WmQl>wAGsGD9Qvbvy3E$!_Y|<V#*u{p4miuOpASk3#;>O|+OX1aA->=d>XO$l
znw2(74}~4SYy?~40N;})?KZ7(CkIusYKq&89-PN1C!-G5uzX&0W*ys{huN)~vFn0b
zJ+Z3_xCwr9L=j=cNhFUVz}@+^Iw~1Qp_j$nhJ2E0><WmVXA)pbNPM$Swz>q*T^^QZ
z)1!Du@E{FfVjzD=V6$<iP8eqpdFPHF&Att{Rh!IpC27aI^e%IV7Vaok>ysdh^J>m0
zUvnp?E7}Rgaa@g&|52JgYTIOLxmnrLl!sT0|0fEAK5Di-CEj3=h_cS02va)0`Y&%U
zi&~~`D+j;&pJRU%{d&a~{Ct>>7_zmgJTTvktYoYFmTp_VG50B-q~>wLt>cDdiisw&
zg8CH8)Uq`85_j@t{`gaFT;t6jOng>GDfYzhkHx!1iPCmiO2%->Yo&Q)%}iT33bSA^
zqo{H*Q78x9YPKfIf1Ymyr@iQYapU&MfM*>(v1Cw>UnnGn*g~{+1f>verY|)>Ctf~X
zYZ}bYFfj(0spW2q+ku?t^ziy%Z6t0*33(8Vn%+}@kSm^_f}*&ePTa$grZGTs#y$b6
z4w?N-M9IjDM4Uw6LCG{lk$S)b6<I{n(HrzP84PtPj49B&49#h&A@XdqE(hWBA@j@k
z0-WU}7@N7q(}*n7mYCB`M5(9;K~37#1PJX2ajsbjGZ#Rs_SYhwg$>6rT3hx4w0}vy
zP@*Fdwxz^DEP=bGvy$ebgO%Ux%sY2sS(XEB$0G8p9Yyo*2qwisYj)I`!5b*Y0ZTlj
z*9ataZaw72sZiVy2sCJG3Ze*9V}toG#c2BTw1eiE=wLbKXW{_To+N+2sz3=oDVRa^
zwi>^vB<b)=`yup;ANi=Ey}~e*rXWefAFp5n_vaEPEae>mQr9zx;9NyC$0@>aD252`
zSG=NVsKoRd=?X|c;EWhdd2yiM;NZYhin&8m^x;tEH=OKvMX~Cn@|P7TjA=+`IVs6V
zp#c!s;=%P0${4TsYi_=X9bG4&T3S>GG^8+_fU7{X;7`c5E=)1<ynaySK8r;GQgEU_
z8V2-`m@$q;d<zseZukYsWTarU2vL-xe)2H-F%xh^hk0O=!IJ0{rPK!`J@c3u2|;i&
zT!3m_2~mAG;X37^Sw{uj*kpJBGcVDsP9K^u+PXBTAP#dax2S}&Tt#tkxgo7VGI(n7
z9?&rvyx1*b3~4kz4z%$HZO*8Is0{4A9~o)gAxG9Y2hzI&hE$E`O9;qN<K6~OfrI{U
zdTw6EKNvN@_9}NWd01Eo>s2F=5*GD8J%n@I!j@qZK-<SM2)SZZ@jjQI`~E2IRcmKN
z)Y+&tA+sT9fwk>h5dK~8R};Q9<ap4J+d<%c1+WSz$fDXBz(PVw2#1=~&HEs3f5h+I
z5dH`a2x*js6iu_kQ`o$zQVbwEO8#}i5|*niAN#V?i*br8HOf59mn#QX=YrHV%}OYJ
zY7dRvhb|;8N}(x2qsH$J!oVF>O%5SPy|x7>cNh`6Ws&wCgW^y0)2)LBp02<>EzFAG
zDh0(qhwXdwId-Gt@Zl16gGM1RQ))SPtNy&wr;uUZzQfx<xE`lFL21UH62^itn0An)
z0Yb+qPNc^+Qxy#U2^YY&WXxUqnM5)k9EP-!kdEF;l>i6_nU-ajTTE!8N*F{0Z2tPe
zq1LkeGpP+~28?2CX0e3>m68O4*{Un6{L_j|Dot6Hh(Dm+y@?7&FejT4rT_ijUna&Z
zAO4;hSwIHam=urp+O0`kqC#>?iB-<Cx-dV`9X;!_!P*vCoHi1n&)M_-I1*_lB_atj
zG)MZ-%LoaygQn9_i&n8li{xYz-o39u#->~*9|3o+6Z^Vzp@ksPu3W8;B<*;TLXK2l
zMZBz|SQiv|tLS&P@@YDQ)Qf6k7K(5Ns2MAi01B?8naN8ydud7E1bd(Vb1S`=rUE!L
z>$yx69Z8()M)Do676Y<1*P!g55K-2jr;gh7ixk43*o&5%iJ(=9Re=bw@_l*0_p}3#
zK7rb6=hh4Wwf{3nt<OO*s2z|j$wV{p+1R<dLKr5sG(=R?zOxUNoiU#phj9$!lyLAa
z;YTT&T(DlGu_QYa%W*;S*(nVqRxP(n=KuyN4S#Dv>hIbnI%r3}46-KaK2G99o@W3~
z5O%Pagc88^6qxzjSr)u>!lHr@6gBz>cCiu)sHB6*=@u%=9NA=dlR%Y)eXq=%{2D3>
z(3rnL^+6auMK(#Gl@JuInz@sr@CNGSDbKgW(A>BiY&oy}%t*%`2$ZkzAZySCorSuT
z%?$u=e;ob?Cu$7rXH0$yS4otvQ63T<h!GBlx}zbHY3YUsl|P+88jBHzMM=<np#Z~R
zb~2gWvXD59sxrcc*_C<(p@?QulV5;`Un0Nn<6N~hfx<b8t{;NL%xldDG{I{Ge}4cD
zfj}BlL;u+nG_ZXdnT9+tZUuHIVQL8sL?pyX@75!bIS_~*@fpO?^B=f<+NR`$kj@~v
zQU&d%7z)h4NsYCo!HXcAX-m47qjthUzu>GK_HL1e(?v0tah9TXU{M-&X6xEgpp;^9
zOA|D}M0s*>h$=dbMI~8u5u5|$kf?w8-|Xby7u?YUBaMbQcu0~4!a<=G&YI@IHbk^Y
zBOqj>z)+ayDbI58Qt`jjW`$$!7ZL#|s$K{TCHM$?EL_?AY4jx(0opZIP=(O8Ud7^a
zB4x^d(d3e*xF=6=Q{}QDZ^dzUer`rV+hLr6d1?eYSf~=={o$HGsc)78pc!KrF0hiy
z!ScjlQB>fY*E5z-FJ+Zw4lOF#reA>i2Yfu5=%TxTi(+{*W~20D-mn@w71&{^?M9y$
z!w?|Ucq5X^!UlMq6`#~&b-BSXP5=-nA+|D4F{cC7MIcmJEK<-!Q|VF^CEt<uOAMDb
zK=XI^%E3tKbMa<3Zpg~P1n3j-@}VJ28k%ZIT4<mQgze;EJ<>$52|>dcNkwU_>WU&l
zg9Ygs(egtJihod7`lH}xfT@MQ_#%Pcvy;gF;ip{W51xzu=K)a$9ny-BnqZj&RPmS-
z-)T#Mja7<K^hcTFkK{ok6oE7X!|bXfBQ5aQaoI&mDZ-e>3u7E#kY~5+Dyb2MsXT!?
zm=8eCD{NHyP>+B~1b+aDJMd;K#6YEj?g#t`UR5d$W9C6rw9ue8slcKV2f)I3AYP_s
z&~1GSv+ZcZVA91^V9KEyIAR4+ucw~=74<LZH)h$TDo%%&is*ZG2bu(+q-Z1kJ~THl
z2_Q;QMOrYrb}95^+Xn_>H6mJx6~j>x@3n1Vc<KAJOF^GVN=ewGqraOAH!l~Q8{^O_
zqp0zo897k=G|2Lxq=m7laBo96^4T+{QAG{IrBx>RiL%;RbdQ`<r;Y~hOdpJq-&Yuk
z3=l^Y#l(j8k1LEj73Q?rGYA|QiwL(PNn%n{2jQSMm+ePjR;?ir#_cXJE!JVSfN?<X
zwYsE*ISl_5iAx5urEYXK%R^&EA21uj3y#wNAU=px1$J!mlf_fI8+{nkeL{e=3Y?*^
zW{yGuXc*@EgFzWttV=y6Cz>iis?P@|$5Rw9v3`hTA#Gz&M>_vuaq)CvU8tv{<L!Xn
z8l?NFETF<~@5AOc`qECxc{$;zektIN(x0C<^yQOdHRZ(#GYdnvF<fGI3s*oEhrcw0
zxg;(NbLazHQVk-v2=&KQ{a`}Ca*~~VVu7E&@Y5|6j4>cd*e`=Q?K1+p2X8er&*H~4
z$(i&xDKw$KLk#xGE<w~R{*iM4(XDUMt$7--7>$lc{jWRW`5Ufbq<i7Yo?`N?<Eef|
z;S^`uHCje|beLw-PM|m=96B?mSD5z-3D@uCFf6SkJ>D_(&7&fKecTV6fRY_DH2XR2
z<qKkIMFt~)Lx9H?I&}YzF1C8qx;Y<~(~yb7SsthvzEjlqi}h!x$Kt+ccES*%SJEZS
zc#U``7pBz>PU~TJjPlYi7&}0<`wq+V<B!iMX*XE^L30o;`bEljEF;j3Fy_>2Erh+N
zHiZ8RPf}=2hV+Zi+eT9=@c)ODrO+-6>c{W50aD=p4(bQ2HIHsv;R+AGyN+xHL9r!5
z#rFOQDs4nuR&Tg6!~~y23ECNnL)>RJ%YKPdf3lS>8*|VY<RQW)CAfOT<lq~2X<UwU
z!T<h^MbD<25-PqGYHs(oEU^Yq0nKG<U0#n3!4cNQ7S?w2cW)`sqF=qMFY2FD136%K
z=`QElpV>gAKcggFc&1}R-*IsYHKl;(;+$SOU=ickq@BismbeLn_PkS}zG{WsBY(mq
zJOf=+9iQ?QPvJN<O6{OQO+7tTC9%C2yvEf-^OT)G-}o>>bn1>GcaVd^)-az<hL~6M
z@K$vSGa9L>g?=eXD;E9*b4YP#W)4q+UMjlz66>iV$x54@dYy7mF$m&*2Hdc?tzw00
z@^?I+Ybf)_fmW24v-ob#QPHSQ5LH>v(fCSns#KD60tYqa7{SDd`i6@BU&SErJHw&u
zBafI^gROABO_lNVI)~qjqb@o7MrD6lFd3U6>mR2vA{jYml)U|=;FNo%rvf~5Jfrze
z#{mrl#7`vb^CQu)aBAjF3?(%I(~PC$0nIs$MU0qGT7MX7Uj(TE$&+y6WU7||P`_17
zn@1JB3A$xsv{c@Bc?K9N<H&$cqTCpzuT!kgKULHze#*g+0@{5OBY`Hys*Lf&AN07S
zNmiR`35FgRiI`ft%?doE`YmeTekuX{=Fj>N5Ev8nLC`^e(i-Ur>GR>8t{W2%3@T~>
zk7?hC?UKD(0B3==U3u^ntj31?h8_4WSfr79J%&lJOA{{XIYZoupjjJB@UnZOAa&6I
zy-OFAjDi191Hy`7^1>f!NKqOxQf-sP6t!#5Z1e=_N>Czl(h#}anz=Yc%E4%tdffq|
zTxbn?VlZAF90SS-BUnNO4O3@G{s=-!iaN{Q36wx$uzx@+^`=q)4p&#E_pUHMaFuS^
z+K7>f9FVNAHaz4JO6S<pH3<*krexo9NDXul#E6pTo-fwVLWbN&|8)9+b1VjY2CQqt
z4ZkQb6P*Oe40VkC3%_oE3$~%kidqNzM>%l(i9J6jOjTp9I#Dt6!9+0_9hu2{);#h}
z$KwtXzw#{MecSl3benYG#Mkq_^xef090KY7&>p<|))Kq}(nfC@QNgnEEuLWuZ#ZCv
z51IR>H|6`A$!H<mlI_q58o>wTdM`T1ip%HHZ#PCUGIR4lTl&)J3;t<5Fm<PZT<t>Z
zdE={}3GUk2C@9v_?%Q(e0g?NJac^(l(${VKS1|wFj@6wpv}v})$@efbSOlV!tjYU7
z-}>@b^e;H1A3OhgObI^qlCbIq&JN1fF4}g@Y%-12)uY+kW#FqnZ+s*mERglYc2<%T
z=634!^Hr_v>A?E=oF9Ixb7;P}<z~aV|F$EEeAJrT^zZub_r*~C1&TJTP?hoOKemI1
z913E&fji496ZXGtfWjw7%c*nnmG3~7$8q?R^-JVc%Q(7wC=gFnJvlt7xXcepCwPqv
zxr`Yl6!Ibhg4e$H3Tm*A;W1T77X|)=a1G{hJ-)O{1%g+EF`y6KaE0E$_I6sjq5d2%
zAwuIdcjW%7JMu2=v)2tZ;UAl)R4<p$acK(V!DV%IP!Mr6qPxn5U3m2ZiD+?m=3<Wy
zHb^8a?_>m`b@OuGRRglC1k9Ph)%+dFAVTXAHcXJS7{Ot|(4cHHiaCBl4%Zv!6|#DD
zGlO95fNWBf2Ak~C<r^OU5C-igyTLVwNIAcm4h7uIHkRPg1ne7UWvnD)A2iJzWDv5y
zWpGBx*%PmaKJ#&LAV`oGYIEdED(bJQ$CBgP!E6-BhBnAVi)X)#OHVtm0Ol22BX<WQ
znGO>w0M%2Cy;31kbbuqNakjJc4r+vj1GD+2zUBqH!GPvz3Y6d#$X4Y1`~$58IMcOH
zTVF{+I|gg~Y_`^EatfRbh%jg+DjHJZ8EiL`!Iv)$A4~pavGvIRkmLV{Z2doEi4wny
zm=+Uf`AG2)=v$_!FB&PG4E>fb6>x^yTRFfnEkhykCyye*T5^y&srP?y#HEKK-ddr*
z)})PmYgs5Uwb`RkH|6(59A_DTs-;EIbPO2zBzx?PD3Zb%()g$h5uN>qC0jVVjv+F7
z7}2dl{S?8~V{9kaHyx(+h4#vLd72p8h5({}kjS<(<_M00?LfkG3ntJHX}8QaQm~K4
z{5yV)1+*6DC8?20o=u8RbAtS}TVXdamg9s-?KOS$=tP%@kFUo63nYgqkj>Umdjt8}
z+tA;((v&q}i#ol2A{_TlD;r^S&-9;$t`b#sn_@uqbAp+FS*B6mTDDZ+hkX&rUb~S)
z9m4(^tI}Asf4Mzds5C|Niu!qK5YU7%r&Ep}^apBKBv*kUI7%epcfiqn5Xvpt-QJL|
z9`wUl6i?!pxhq*a%O%#2O`OhE&*F|A(o>ij>R;w=j#PA~(Fr`AS!ryoN@HONOGHyf
zl&-J91y<vc@f;UKI<KW8u+D|CXpR)k=?a5{@*(`-<pkt<LT3XGno4`0PC<&1AUUj4
zR8eo-3T<?=v0XF~$b5Pgh;t1*JD2%#c!K`D5@8Z@Csr)CZPxUAk~_4Ml<ey2aae<j
z@rfSupTSuUJdL$2ywpW?9&J(fr6eE={Yh#Wf0qsb_9G2{Xe|Uo4^a=P+AXb|MD<w!
zN)`)8dHzHE`D-0nD7MrGoHafML4tPUo1*>-DJ@HBV`egC6phHeDpl;|7qrv|DJZnV
z*@<DW`RzVKvr9=R8(S5UqdT9ve<lknFQ`g`A{~%Y#omUHht%7@lGbd0kdA@;GQuED
zjVcUPrfMn#2ruXW=IkHAun()6*Dk-qIy03A06XY`oj=f(7>?G^Mi9JmRH?Eb-tk#k
z#{B#FiL&j$64EeH@c@x16K9WyaTH<Ff^aLr41DWUEehk3BuEAhaO3au9$#_K2`%1;
z%S##_8zM~`Tya`0cfiQEG)m~=t7y0*w!7FhK%dc5Wo4_T?FtvBy0i*}F%p(R7B>w6
z6vHqT0G;wfUlB6@BB^+gK8l0e#zeFeb|TstqOPYa%M>ODMGXv`IMfDpBC*#<X<9Zc
zuj}X#s>xI$D|1evDyd}!iE_RPO29!^gX;-MAAkm4!`v7X*<RHEA&u~ubyx4$<$FsH
zMBAt#=Q-0*p_5I~4|hO8Qb*6!P?>0@R5z^agGQD~t8_@whpj<|AHJ|gsDqHHOHXce
zXI|x3_|{T~jHaL2>hxzGjUGrQUE>gRC9}~2Ax)oVX(oG4pl<W~Te~$fQ0DK3<$@_}
zih2;fK@=vNO*N$gm@@)+_n}jC?>7pla-*u@TlOS(rKZW=rI7uB*-I!jB!6HiRsMXT
zK>Mkmwm4l(?JkO|cX8<%NUe-kL1-_3O@Tf2&%aNJeN3fTQ1k{v*72}9HvOGF>#u}E
zPXF&1y9bBjQu_pQTc4sc*en!$1!6C+K<Yu-MKf^z@1><ayF<?bfvewGghiJJ32sAs
zfF<Zn{9Z#Jsj(}^<0D>09q<X01j!Z2&sOKeO?^Qd{wb}9V7H)pW~?eB`E3e!7xxT(
zkATQE_!#PtM|?h<GBmnOLRl(otthankz3`EV{cepK}6}qF-TDvJk0g_LW5za7Fwtj
zuNtgaJo6ZvOKnIdK$W>|6I&7rcvU!JUZ2|y!bHvlfF2SbHpAGE8`1IHlGp1jyHLN7
z|BMd~jI;(+f-WRw9S@yX;$g(vlfOtjGh*M!jV?lS+#gl8;*w!WA?5U-WO%1Ug3&P6
zA&(qHVnS8<%2CNkn3!M2*PA5#W6xxWDq}OHKlgqzeUMrWO#Yn~ovZ{(z6$(m^&Zd$
zxj}n{ycW-l1BqK-Mm^Xz(oHb*4~;Xpa4bTB1%XJWOho-6TmBJ$Q7|n(1x!6i7XR3B
zTtO`0cMkI@+wn9C{Tz&Fn}mH0J8mGQI*4u4DeU5SE2(+`JvXg>>Y+?98-x@F5!)aO
zN@h4nh%jsiw&<H6YvmAySl-Xw5JKv`dXPmL3z(FhOOG0gMkj}L6nbEyxN$;qc?(5|
zJ}eQwRd*Q2-D1lW3O%e@(zEZAcXKlbgfvDCf5nzfb<<}ENjMy&mgv9st*})mDRblM
zHXJBqs=vdj0O{RpTV{e1aK!a(_tghy2nCw$`U^;NC!P~$423WXfNyJp3c=!U(BM(3
z5Fi$!YI<DeJXUz<I`5x+*BCOXnqC|QtuV83)Sk>=7*S=_`X%13@r7XtMg%#3;W$eS
zXCl8lg|^&6Ydl&GjI`oO8wez%Ozkws0|ehVvq4mCRdtz#^IyI(SxPi8yP*`0l|NS$
zTwA*`Eg5X5gaJt#=`f|NzyCNi<gQ2lxS}EmKUW?yC2FPKnlgWoWI-a5DM$6I`vmd>
z(f0C}8pjuesh`p-OQ#pOsonO@Ovb(;GTp!8b@>sVhu0&EyhI7z2bi62I1>1fcJN=n
z^nvCSHYv`%ov2kH01XYetc50@2ROp0u*uveHr8pNmuPN&css3<ZvJ?B3+j?ifv#|o
zeE%f5xP5)8$rS-M`4vJg2$r)d=j{Iw7^j5Y$e$9mTujNb<R=6CP_vYhf{ne%n6IoE
z#NflWERS%B=g%6yJlO4tE<sYPt7AIKgYaBzE_IUTUzovo>V;L-XDl%A7ltE%R1Uo3
zkB?VNsxe+RS%eE6iJ9(>h8#ZCw-6Kg;kq<Wpp|(DSzKAeLzv@OB;&D9h(O?-<c^VZ
zfWoguZmlIxTQ>@DI$hf{ssXtx276n(RoQ_;yWDpIf<!xpV064D$M`sq_Nxs&HfsVJ
z139EUIdGv2Otm`bZa{RY>y{|Cv0GU;1qI!)KqlLt;!j?+V!?aPwejrZDB5Q{7cUa;
zKuR0Bnq{1{RTk$7FTE{!rml<lH`dZyi*?$26tT0ogq*~5RW)OfBYiv!c|j+P`ur<>
z3;ogiOdDe5sykbftiwmFlOCB1I4w`B<(2YQ{>Zf$4cUH?Oh@d5>$-LRA(gyA>Re8_
z9@JMLh&7V8O{#q9s3d@<!na;vNwg<>YS*nbVOmDXPL`hcs7v4tkyXz3=Rn|x5Vt*8
z$~KhVz?gRa6ELbRZ7O=lHpM3kHM8QSeLltEQq2dsH@*|^I}(ZSN&t#*Ia4BGZyr;I
z)B#C0B`OU=W{ZzC@()x~HoA+&|NW93_8fUH3b;?J<>9mv9y*7AD%<;pTWK26>5Du>
zwndZLD%-0B+Sk~X{e1!+#*Z;LPn%dTN#yF|8lr7Ex4%dC;FqBx-5AG@@%QQw>9g?^
z12csYRDe)qU4@OyX`KVT6eHpO#}(ez9`AapM!t@6Kzl<@ot2V6+>WQom3^%u6-ihL
zbXjn~E>0@fMy&DZn+(LBnI8!%Wq5*Rt=xz`&i@zmR<wdP$qRrn5p5?&E~_rOhz;)J
z<tz6VZ$6}z|Kn(VVJof|6*84Aia$q|&tL8DdBuSZOB#0SJ=8EuD^Ev~=6UR)xcV=v
zJiX(aD-rEzWX#@|$1e33fqsTIui-~f=iUA*F8l~<GVGxSBm_<ATQfnuGeJ?4;rLQg
z4EPgoPBugcPQm2uX`?WWJnarF5Q)F04XUs&S)ocBV5q7kHTnalX@A3tf4HSUYNG14
zNYvbovPv$c3o*>7-6~n*;s+^YV=ku!dk@()r`4}heIc1uK8LCrfA1;e6NC`fV#wIV
zoxl<IQN?k^8Ypaj{~RcT^G>4zR(xH?I7bLM`zPuJ7DRX=oRNXmaSQc8Dw;pxQH9Wu
z_KeCy;2Kh4R+zB_gGUA^<?RtFpm5YE=r~YFb`mh_5<DuG_xngU0BO5dbW(dpOgb(T
zX9#)j7BjRSyQK)~e-``W6YvlUzxL-9T`f4$%0rGFvnp|pKzTOLUzz6Fl9b#jw6l2m
zE9X>JxaCcR^{<vE6O9G?RN~_b`ws@f{TT?Y8|_TQHPa&e`w#i2RpiTRC<c@g3+lg;
zBTHosCMlDca!q&3W#>-h>)JX%szT%9)$acma*7*$$t;`UK-wPu!3>W6TY__LX!=Gi
zYBcn--598pX_&G@G-TVfqWH&Cx1REw049h%VhZ>_<h}EAFHg`v8Yl1Awrx8(!HI33
z=)|^d+qP}nI<alr-+Z3uR^7U{>iz|{YJTYH?&;~>t*xD%?&%jDUX*wxjt07gxsuod
z-A|;)77OHhu2IqtpIkNgR6-j#;=$G_``#XFGQB*a?<h%_OsZq2G}NAGF#Sv_6iZ_x
zFhYEf9WFQ`5dHz2w_3N9P#$DxAI)(|*^dw7c4e$q@SutYCxA@_gO+efl}vOQALlYT
zV-mMr-#3NVnQ-V(%#uanR)hySxwSggiXmAnc^$F3ti2aSKOnf3m(uRGpw!8toDRrr
zO(P|?Zf7)UVsPmkv;j=X%CJGLa&u`q3Do~lQ{Dm4!ZD}O-w#@){yN$5m@X24KB1dv
z$43-nmK#pN9SV`=he!r5Q&8lHme4~!m)lR0pFpM)m7z-`%c5B$!OEHLM~B#tYsn>K
ztKGkQMp)seljH!vl3h)<uE(#0IL6$hDM$!shQe`Ly(|4ShsN0Fl}6(#eB)TY*9R}M
ztX>>HZ#3;V<^1$(>@l;Abq8f_B3xHBB>p@oa#Q;k)R|BUwYmr?#s@t4o6-UwK0k=A
z6FAW?6(C~XssvUS^>@k^c=ZI{;lF>n6BjfQ4jakuu7}heDNESmoEe4+&-+pxdDnHJ
z#g_t@s05+tai6!?@!c()M8oEYO1aG3EN3FiuE;$!NsUTtC98C3VFn-l(g!yEVvEiS
zqK>(_YCyH26n>2=cv(NO3{$Q$O-%spFJ;dw;1l--#v*p+^RHB?B_g_-R0@Oz`tdvH
z@b~prEu-Gmwy9W7Pw{d$71Lf?cX0t3n7l*K!v>dkR+Pf&*dTm_?22aRe+!_K_jEU5
zF`AjpOoSQd&C9R{ki)$%c$gR(qQMGU-TrgVbruYUq2H_PJAnxJNO|Y1kg=WxBM)hN
zl1PNwYN#e6r6PiZAZ5qzC#^842YKQMN8U3#CYpS6zn=J$&z?RW0&YWOT`(BC;i1OD
z>X0jm&uQo(ENzJ1AbkSVj6135nR|n##Kb6Wpsc=?V+%Y}LP*SD`m#8zq>m63(f+ga
zvSkZY{ihsLX_hSgSUjw}yf82{3GM#b|7T3uCRpb2MA#UB!ZA>+X~?cMRtTI3>QdX^
zub2kuf@tX=36)s;XTPU_8KIgTGn-ZrqcXoVGn{v{*m#K)uZ*+QAqYh{h(9s*X|7~Y
z_GvOn?F$#lopv}ba-tA9u>eJHIua!hQh3MAbQQ}MSS0AaRzry~1y=j=_isZSLM?uq
zUMu#*+0lCEv3_d^x{D^vo(%Jm<x1y`q9zRNM@0WX*`9{0T1J)JrX9H!a1`i>TR8NH
z*nG5^w>2`Q>NrKoJ%y_35gy)Ng^22uaz$$Ze!hWK%t9Tu^oHUJyZ`Zcu6EK@#4)N}
zQnC*X%9<nVzS1b%NV}4)IJ81!%<)@3O$63SzZcxVK<S(0-}yF0Gq~xdrnSZygMOjs
z%xoHjats>wD5iY%-O|cl78GsRCep1`16WKLCEV<+<;OErS7iX`yBPJK&NGWqMj?gr
zU6Ho>bgU%$Db9foYEIAE=062=W`lUT>}deFV2Vmj$D*VuXmwq|{SMh|2wqBFq84GG
z#NFE+)(uxk7dX1DnQO<0(B=xL#LxnN)Uc|~Fb*`=WNU>p*l4(79<$seXLwat+qx#g
zl+BC%J*H8Cx%#G-x~=KcT6LYDe6-NQFbe^h8S*H8r%bTxw$t&%Vd{8}EhqEf6CK)~
zfp_TBw*Z)1M$Re1Tyw}!NF4t*mU`0%`NKW*?pZiYoSyr=C_6}445q$>mNjr0$TVeF
zd)o+;R)Icqx!{ib3iYk=O2#1vc0~5t8Qtw5A$<zB3o%qJRvfsvqEnbux~EB^M}3c;
zXiW&=e6cfxg<E1Gs|7SuL=zJc3XRgB;CIR`$}rdosI@T0)=yY9+jU5XO=8hEeTyTG
zu52!|2?P_mP)=vYGdoDZ;hRGLRp9<pFta|q5v7y{9EYALj$kP8ndNLHlH>VVkAMG?
zJP`!ci7>{$tmZM7^|Mq($A7yCL&@Qc?B~5nbK{>W^XtjG#i8t}PmS(LG9b?DpHXA4
zz0p3vD;nY{jcEdN+{l6xC86|pNso=*bV4IWL8G5$Mh_b@>o~sM-nhjEg_~4u9R!Mf
zMk{KcLhg^-`Q)Rjz4f&sw*;6QTGqdXhWt*M2!%}(j><~AnQhqG-GT7XNdZt%A0aE{
z)l-1^8Hu(<6FG2Rfg}l=2%s|41jvx3CZ9qm*<y}Q<R?eY=CU1%kya|Itp1e}hw=s4
zs*zFk<g!MlIlc}{^#6pUP##8k6n>~SmmPX!|Jj(x-|U@_NT4Q|0N@+SLi$_smaqfb
zyHvXK!wR1hV<87pulAKs07>uPue7SFt>SZOtrA!~N7xh-WLir#4&15Fjr<ZIjJ)#Y
zf37$ZquHZJf=!T%V|g@W2Q_<&0(pNcWO|s{_Nl3|vOjcW#`a#(b#9+W(~Lx?EWcN6
zD+#y$MTL1HW#>dG7M@d$L<Wh_7oBJE1E?<4I1C{`!9lVWeFPJXCxg4ETcF37IJKgT
zCVMn<`2*$6WuJRs?}hbbsu|rv0qp?xhAD>h)N3J!n>v?-fq?L=1amnVZ=h_qEx`+L
zlO#9tFB0PEB8Cpo0(r>-dEDM%5jh1Amr{Ux@j!r*Rm&T(;S!7T>3~FmULqeq%O=$`
zD6^_YL6M<)qc)Ha)*k~obB(4@tf<TbOfOvPdG&4YwSq7&OYsaClUvKfEJS52`ib-S
znwoUgm#wU0iTL}JOecb>xWFP!!6gBr0*UglZYZ^XnI?PtHRQL$sU`C5b^>8~<GNE<
zmY%f8utP3cY#US*EzZeI(Zmr@k``cp&N75%$JVy`G)q&eaRpi6b=#1JNzhc1)wt$s
zA2P}ix$;`WFMs!?lyh!Opd<yzj|DvM%s=|@_WWck;Yj`tY>0X@_PFjHV^CX1P6_}5
zy{BSg4+PqTAsYV*q@e!E-r?jtwdZ-UVw++Q8#g$`;t(U9xZI)I^*b6O)(`{qUA~vY
z1&^?(;gxlBhdQyIh&WPWx|2&UCSF2I{w0M}qi%Wpb=bVyNB9t3^fz+X;GtX_zk|3v
zqB4HPsf_^$5%H~+ct%acg^9Lt@@Y{W9rWyu-xp0qCra0-=XPAsh?v@ath)5*&$sQ&
zo;5!&<$}G|aQtH45i~++2C5U2fl=FmyC@rmv=ZfqjG~ikrs~jab7HIwH>9{QtZ-&J
z7fE^qPgvw}oVdE(zD%30l_)EQFAhm~_b8$;S}4;v{zo{rRCJcUWjhDb2dV~B<DyWo
z1U3>85P+(fW{tfj^vFC>d?+6B&ql31!RcbS5d~v!6y&%*|Az2|s*+7jDNkNqkGFd+
zSi7V#H>o{=%xp@z<)?gKH#2tOs#)ADi|dkJoWl7)?>ft-O_xaYGOVr4rgfXhVAMzv
zCv6vc`Nkh}na!&?v>-*SIs#e}d_5}4*?}g%U3qwzKO*x?|MpcA^3iR^1m`kZyo8ib
z49o-Rm;0;%M*g&c+2UquD#LDVy!ul65phjXAXwT{n0J{vEhMb`==V#>4bwc#{FW8P
zh0<K~kw2edc2w=g;b{!O2p_(tJb7XU7_SM0NLEL7tl?VX<^&!SAT&doe8iS=gH~4|
ztE+%qXh)1}7`eer8SBb91fox!!u@by>b!UlF$9kd3fF*?Ynlo-Z)YNd%jF-TK6Z43
zw^U1CV*?%NakM5_u!n+ny8z}#fB2RY&mUx4@Ek*_p=d<wB2+ZLjp!9HZLnRj*HMy~
zcU8Bb{wi3q!mNZkCEV7Moqvn7b&!t17+5fYwi<S$R!^zQ%%87jt-nvH*Z8i>7$Aqi
zvT5l387s9wVk%3?J<cYAK&0?VRA5y)YyO&c2s|8mF4(q{9rQ}jc2K<o%fZKT)8`Aq
zng~TqWY|0@+toS6I@`H$q8q@d#$j#{P}Bd_ij-%R9m>Cf#>x$k0Pvw>{IeC(wAb2l
zZz^%8xhbSYS2G|4!5CN0RIDqh&K&$lDo5;w<EmF&K=q<!+ce(=j(g$bHf1RH58YF_
zqK>+G#+k8#rrrK3Y%98EP7VdS;_BBlS$3VZ+XjC`mUt^QfhxoU{9PnEj5={e?K?8Q
zzB;)`GIlTEA<sjN)Tpg~hz~;WM8C|>uSivbTh4trV)rn8t_UKG;(g845nffBr7zr?
z8j<*m6utM>NUBHAA3Gu+6(~=8mo`uq<oA%hbFdkfhV%dskp#f)>fJjp70*NxjYsWA
zW1sd)G1zAK%&wLqvo0S6D3F!xKz~{!egU#Vd5a$|aI`*T$k;2RnpqGC9z}!Ph>EDp
zRZq`mtr=XDIXWKL_uQo&x+8E@96bPq@PH~W&O8-_sL}^3+}^UX*z6=I8~d=yCbxx0
zU->W1Y|Z7WNsUh2?3ezT;PrcuPULwfL;4k4NqU5ig;&pf;D~M6Y((qt6T<q$l>#2?
zba4W~M1*}%VaRltV8PTvb^%;3HK7wh2Mtb(#u@~~)by&IxcuC~q6<1`=O#!}hJCsp
zQ;XT<a)UHsD#V8(u!zLz6Lmb1R|sAHwOUeIu=YPI@M5sR;RZ(<j^G5eUk;GNa0lGb
zq)Uuk+7{F(cmFp0IcP|14e3>C?Z0rL;v)Sux#wCc`asmo#@Azg;Uy>q8BY_C$s1s`
zEUAwo2iI%#;GbD2hg@tLQT2-068a6(5SBx<9`65mEVJS3GM`eLGxbGsR~J1mI1<I?
ztj?w);?oceZ!C90PGd2NVJtIH<G+{}aw?aMGfuz9bGP=L&Dv%E<UG(Oo=%<QoIt?9
zjc90>57`AQx-R$k<N#-`a6nU-fojgOJ{(5MR6unNrTSpXf?=~?PIyq(CWYF0IU5Js
z4x)hTHa-nCZ-+RB*irX~1tLQ4!K)C{W~pnECp0Jo1Jw4$ICq(H`w!#6fJ6a6r~jhn
zhSEEO>DeKb*5KqeF@cJ!RLKhuIe~C7;`f1UwK=0fdI4#i&_EO-dCJ6x!RE*mBDu;|
zyTQ~&)u!G)5I|Mi*n&9P8;j%OIF*~s4>{M)qPrSwGHQdkwK6a(uE8zCR!ZQUOyhKR
zXNIC6VEKqbn48%SK!ojJwFAuMwKSu@f!ooal#hL_U40B)t##MDpyF_@^rIh3{x`}a
zy)1;wlZd6=mE}eP_+3$?WYys0CxZwMYK=6=!Azh4xJ6J8!^7m<Dl;~oX%9}~vv7#e
zSLP2PEASws9s4g(bP`o<V5}nL5zvMy{|BQ4#XBT}dmB)x4pPV|4vIdp=d4k|i|#pd
zz<gE7i0!e<p{<%q*1IJ}m(r&n@M!qp3u3u}ZUeicu~urv%6_C@9TBzwoGk~72-DpW
z{S2!GjB1*&1!b~8$=lF$NZQJ-Xn-I=T%%eH`lsEMWLyGCb7}yVJ@Nu;nX%r~lD=BC
zh=o#odN&m@$;kH@1@u96+17rtU~C#Wr*}DijO7<S+`L2eH3}`GpTA1wVKnQJZ!9p;
zS@y(EpIvE&F}MG`5P5wye(!JI=b;oBD!*GUB1>fO=wGB@bH&H`#O^FVe{5T=n8nx^
z+U3;YI=x(@fYqWw-SIf_(1v33D{0wLBk>Tx#&}_66;}Ebz~B<+w>Jmtr1IXbJ6fQ&
zEL04A>}{#l2G?Nix<gv@%;`=VXYQJgQ#hIdgP~hQ4s%5&qLw*U`Ky+2UR@2XOP4bF
zgfw;~6$rm5O{AN-wagH^Ov4ypmn(~%-9S`$<-SO}zIu|Kf;0u+(tc1Q;vM{kagRAq
zM;7XWHO6bxA9AR&8fnBb%cviXCP>tTl9su3M6KPrsqm|f)eo6Bc*%k0pSGA82-y@;
zOdV#S_t_8kv{tGy+{t*czYvhP1J8XWTA5dgZX=T`@&~w6KzR2@W8-DGFdW=`5iu8#
z==%)Cg7KcSY#2|jPHeZN?(^cpCTZ?Z2C~k=g+^mmVW)*ci`0s;w!RuHf<g(*4Lg%K
z?;w*wE>CO=hk-9R&DNa$v!kznBUl&Tu=Zi$Ploy6oA=;cEs#&gL&%C-oMca9LfOKM
z6!pJ^J)`_A0hM6hM1}>RSbnMCD{%ADSlC?=Q{*ql^aQr$5AzoFFM-HwE07dnP$`Uk
zB^5H&yj{Xu#OG?oTj@GTK9uiuZC2TDQ#ODdBBr3DjzWkPAXk1C4L24rs)D#Coepei
z+>g7`$((mtXaJ3OT3Cj)W<9SQ{1ty=J#=wR5#{3Gs6B+vAcYvzj?&7oFdi;xY-z;3
zyRDyL;hKBrt+1iZeCYD%mZ9jr1Y2ZUCZPVQ9SsC<lCQuzgo>3<X>&ir6+%86RD($<
zu!9HCln<?=fn=EnIk3)-k<^%j*@8*_rBsiS_(|e~leG|<M<UIevu88s@h4^Vu4yKT
zCIn1T{##=c_YExOEQhOVNZ?8_pSZpdnkJJ1QF$kxmi$===4ol}F#UqzT~4@c=jJt;
zH%T^O1=Vg3!;>!CHF$2lX5nwtWB=TUIDkKKg<{cgobHPSl#MS`j6UR34gIDy$$nML
zHBaG5j6Vez)}+EhzyK2l!mRGBgL?)?64sR(AR*#~FE&9z?w1rBHOz5B<M`AE0!1=(
zQ>(8Jb_YnC(;*9IpWZnm*wRtrO%NeRb*hFU9pYWJLZ#2`x>gHa$f64KM(Bi31oA#=
z>h~+pm`7=?I*Rr%XW(Fy)mfEaK*z=*eo&9|$S3M3J&)`_Yj_ej7;T&}|EBCnd+>Qf
zOZrpEnd;IXMR~fLzlcyA)^E0PXsXRiUYM?uPMJBJ)Lcu->~P1bz!}xmFp$^FG9-Z#
zv_Q_Pl}Wd~hTrPUS$jgVbe2K>R(!i-XZU{LNeA>d-xj+|2kH4rjU=A@4T4<K9%&tS
z(XjA`4upLw%!pcB!#AqU0`)_5xD5Sa21f#a?^AU*1<S0{6|vM4Ye-J5^!=NB={ID`
z#g?9$we#l*gcG0WD5PEF?svl?9u40DNjAre0}m?!Wl?<!pjF`^&T3U=s8ujcoAui&
zI`cQSfEq#*dh}Z}ev9a~<@~7sJtDUUIQl8s;Xx(U6upDfEOVb1Vi7m%j%>%I9@|Y$
zC*Bmj0yJ4|W<9~FU$%x+K}zeKdVjctvxHxXW9*C!C6rn`Vf?ft%YZu+^zmnfDYYjz
zTJ+I@E8qIxV%bq*fi9U{clq(OLQ8yWz~cNtsh-5gg88fSzZz0_hpK+AeA|BkHQ+$v
z4^hFWi=hXh-E)K`*u;2q9N5k(0nH?DVxWEIEPFrf(Z;n}t`W+-ILTDSOdH7k4+}t_
z4@6MrSrodxb^ITS%UUFSB`<pky0rLq9%Z4OV0B)Q2vlI|O_ePVON2t5GWrchTEb;!
zcdf!Vc@N8QDy#KPyh1d&;@gLA&1YjfLF5*Z<Z&9i01jfYoN>0{9bgt2EUe@pw+iib
z6a0jkzZtxI9KTwe?7hRpq08o9!6DXvxo?|ZBKnbWRO96M_mWuVS-e^@dB;ZntNL@q
ziBHn|%TnX0p)tK<kem8qbpd}xKUGiCq*lnm74dR+Sdt(+J@37q3%-vXYVaYdX#}5h
zW0aIC6ozLdaHsQ^XC8cXVK2m26zMIQYQkGQDc%N@m(-OVQVreVAThv(bJebPo*XN#
zw`!F|Bdn?}oj<s0RBVaOVXc8(;9Yp#65gr~ByL=`bP$bsDVDt7VT(UCFw9xRm3{4z
znMTA;Zq%<@|D4WuOI<tbL~^Hb$SMz;gY(!_?{5w@)zbMS7^LRmW`Ph*BcA#}h~9|`
zh@?MS#RS4Eg0L{Kr*T}J>q+%c!^qtL{R8(E5AvUf-)R+fiZfP!P$>{wjZhzV%EAR_
zitz49*%wS)8Rg^fiBO{r8x^0c(X)FL6fR4^$-uIc?K?w+Eon7>x@2SrO=|3Y><^ve
zQY^VeTto>3DPd?Q$TQotDC0A!4l5>oD=S%wzQxR{b7!dCKbtHGA}T$(@Xi>|o+;~^
zyAm`%8BsK)nUd%)m|y{Dk0IOwM(~c44%YKz;?sfEy9(Z;nIrr0l?rx$VRxX`u@V7?
zA(I9pvN!nePJd#m;4R`0{~O^E>=)!BQRQn2PZJRlc=zjQ7Npm4WDU&`zp#=LYsn3^
z@5UEUOWRp8P#Y%#9&v|B{7?XnCu0FFh&~?iE_uu}*xI2w{*z)?$TNUmBzfD2E$ptU
z%do_inmS8?MaZ4T<2Q1nf;gUVg&VU09zvbQ6Y4X5{Awlx-5`cHshF;WP|PKcH=?*C
zieSPuXCigvDGU!`MT4wtl<8Vswx3OQN(klP)aFw?#k9a!Ij>I@YGD#cpQ3gc%e8x&
z+^@}-ss^&@ck7l!I?b9*qdl!K3mhD9q<w*e<9_W+L}v;Xs&JFbTDj^rKb3VPshX)T
z8R;)h2DqFiAwt;FstcPLS19mB>OkX*VZ=MIfcGd819tFLeQdHr#KW}Brh!5#(Dz-H
zcoq$_!YitF%V#4CEMa_b!;S8Wb%TpxPefGOC}$-q6y`4e{ntak7|ho?88N>20;P3>
znvlpa9zR<Vf{`I7=*+%?5otdOS=jwXe(_emS`Z<i&A@$CurDWsvp@OrB%B)7z)M})
zusjl+rkqg()7EX~ua4|sb!k81Eo<w9^gXj>H8ixL2qWU*#m<kif<a_Qot<LZv>!^6
zfn<YNCAH?Xk{1yrqybAaEu}a=O*sRYiyanT{?47*Db1NEk`$0%yRcs8he)u@8u`WK
zMG@V|ADVg}8{QHH!a$8kqJlIWhk#92nx*jNwsc%h40Xvq;~^@yb8Q*;4LriYPwffu
zy-EkRw9!6PD1#;Aza+hXt&0Q^8mNAG<Jsv|_0JYezS7}Q+?LcW;HVXA!!=Cp?(`0{
z2+dRHH&{hOqKxH&5KVr=zB_412R;NI8^^88A;nYDJq)29RwoGl<+dE;O@BPRDiS=I
z{q-AE0~N$}ECLVG4^fC0SyStRXF8JpXLB7N1n^WRlLIVBi879KP59}19Nw3i<iN-C
zYhIm{=ucg5@G7(kPW&)26*jMz6tjx6hD&f^-S7EPUyf<fp)oHWmaO6aY}BQcsQ&3#
zTJ*7spanvU==?RTUjXAYejpjEDB7CotH`3j`VA6i2H)B03zUmH$*%xQ$`?J?BePfK
zc^%y`fjH`)lRZYaw&_og3*7<%P4cfx>6mA=G8o`J;!3qYKSX4D@5(xIh&NY}{UiXG
z3D^@XLpd`68TE?l2m?+*e4d0E(#Zi;?hW*K23=~V`!FgRF(^Zd)o==YEhvd~Oj+BW
zLPT?0JfqChBCs6naedjF_QYeQUvAw1^prb&bILgvzK?e-pm5g$-+IZWP)NCjA{skH
z5U6^_Dx(Mr$(>#M71#FMtiUVG%-{G;x-1cFxZv&5yK{bPYi9kaMHwMVi8q*;qupyl
z{VASh=W)Z7aC>|cB><jPRhFHys|_J#b>c|Aqh8>6vn_}}STf0(UH|N^8mUtXaA)z{
zc9K}fHn?=@dwO-UbpPt=-)gR<Ifw&dpoYZSjjmkl43d&vBk@hi4AvzHN~S4YBX`F$
zm{1yIiR_gLq@buE=_X6DlVKxqSsC}&)R-CVXL}=QbjEr|g+N)VEsALCaW!qy<m(if
zHQ>n;MpP;iNfH9a4(y_+i{cOD%PocDB(cc25*5<ra~1nV;f)ikMR~j-zCe8}hSJ9M
zivpdzL~V`jibum)>TX(QyH|pgY+<katrRoEAOXK8of^BI5(gew_8WgIMl^CS{0Z~k
z9mZ!t7#|$^=;Tz|75a(a6vUkFNynj?j{iw<M(AsK(x#}Air<qy6dKR?Wk7DhBC4CA
zVR;m32|+t~mNLI49mEBU60K#GJs{aipGi94L|iq6YOEDus?9iEyF1glCe75qe!nBu
z)RabCG1W-+eBql=$jY*-O;a1!(8fV}H!rQk%i${tPc<biVp`9vbdZ!b1R!-6hGtRX
zOQW4cH8Ut)6g|EM!u)Mu0s=M_@E{ncW)j}WoPgosgHNbuWl-GO-9HI<pu-YjT2aM4
zk+?G6hAwYsRKi7s*3ysXV@wK46P6e5e%;&XmyRPq0ISaMuRD1SN+TA)hf-_O**+-m
zrdPtv48IUU*oPQ>YnP78fk#Cz0KYz0E<a}m=aNM5FoIgXzOJaAKs|6I46sVC%GOJv
z8a)-%KLBRE_-L25v)!saB3!;dXBPG5jU7^5QavN>FRh$FeSH;VzqoLqx7$2F`;krN
zl08yAI;HLH)G{L^FdQu#hkw-8+sRd-I)?W(0JLlMR9CWfjdjTT;%m7fV&W%t{-cq#
zg}}6EQG}hG(!eCebS4y8=^*5?u$-`@`Wi8L9U*AhUHDf~v~-dsf=@4yiS@{jQ;d;E
z9Zx{GXcBbVlYT}qk92J)W(&d|0(!w1`U05gSBteYQmEkJJq}h*Xo-|HQY6GeCoX~|
zQl$Tzoe3J<#pF*#%&Jq`ASDn{v`1QkuF{X4K}vPMu4UJ?hVp9KgcY#dfu<M=))~qP
z-bO$!nz^?MIU8W5G+847RY_IVSTO@gZk9lRw}3Js9gG)YHEadHvYRp?HSl()I#C?u
zms?{P=Kn<m_$^@=D_V_l>FFg%Bn5>Ed&!WiBx|#uOEJTYE9%8dB#|v|orO>SdZzl7
z@D?szP6M`mM#EfIk2qLWGg>$<Y$@m^T5Ob{TGmahbSL4Up%+ILJU<EP+}Tc=@E71j
zdnUykmMpJU(oLFBI_7#+lqiVt3-EATC`si*AAENV8T}ImCdVRwEIg-S24Kr?cXtyf
z?DV;!mnw^p1yeI4<mdg&8ty{MUr{qk3l{l^mKL%lgx<fTW`sOgAoTOfkqhx+A1(h+
zH!S2w*WZ;DP4UMIiLY={(;rvK#(s)aDEv5?IjN_DVI&#fP5j#U<}WQVuSPncrWZ>^
zN0xYqdk(`~R1jEC``1gT_#tujcX+FEELAWxa}CAjJB#|ak&VqK$}{I*TYVTdx}Bm%
zig{pj3t$#CP2Jf}o>k*`MrfrDX%aFK*r7!tNf)ET+1jgFwpgYa^`W|XXS3EtFS)Zg
zGKnQR2}yZ1z3MA2!b;ns83~E?K1MVI4wOlZ^UTCMDO<i?@U&tW1JRk?9k7|g3allU
zfB-3U)U>qc&O`(f$K^^rMrCZ=z&%NHGTvt5(GBUi+<JCl*NG2ac%^m{Ck>wF^fE`~
z3~{LI)%Nn@)+=rI7O?LW(HwBC2dJ<r+w@0CKwR^l0TC~4CNs+2U2?Y8xW+%40W4m3
z1z9XkkkrEy>&X<^prinkU1e-bui`ynCQvt!<GFbUDYpp0)L%)h0ws=mO$X9`IV+pX
zek~MjdzZeuZD4`Al{{5(h7V@oB_pZ!bD&{<zCZbHy%JDZWDzhZI|qI`9GjALjW_zz
zj%bj$IM?PiV_tMNz_2bYRAk3!@5U1?`@;oBGpjpym#tHjbkenbNhx+(3Yxk40Whfh
z<oSs`rU5jl`^kBUIYt3yA9fM)l1lY`tcR^+lw|rV`swx?Ac^y+mW&82@E=8%;5d`2
zk^5d$>81gv;dYq}Tzi&`r34|*@dDEjpSKos+ZCXZ>c$SN=J=A&I{}!$&9l9QgOkhy
z!D*U_N|NCy!oJV*_5=pn^i_40xDhwJ!uTA&$Y%Efa@nkPC3A-$g`{>hM8rhM3|z&+
zXN~iQ;cKx5Hjuj)ZKj2GpXxo8@yRDxxZT6pxV(_;Rv!1qGe<7e#s2=oPu@vI7`Sx`
zJrnS8rGBzu<#h_1AjwjHt2AA=l_!7x#M+zY8k6i!WJPx|^f)R8RD5>cJosLzuXJF1
z7NcVpQCaaT&|cIX6$x%$9Co^<&*Q;(Je!k;bn*V3V-;Ds?6~CHsm6)G6EZ=@2iSjf
zZ*POLubk{{C>Y=nb*`<aQ{dm{dVz4E-0Aq@CcgZF%0N6v4!jJBoD1YkiCp)d#f*}&
z1H3;6#PZR1k)hNQ+~raPHXp=Yhwz>NH0az8-iZ+0g+-+BU%f{Iy76CenA|QqUbc@B
zrvJkN2$*=<f2No9@pP)GBYMWhu}6r41fzbQb>Fct#ecpb@Z5hu?zVeFoSN-g5Fkyt
z%JMe|@(~!(;%kG2xE?#a)E}OfyY97Opr0fA{Mb`4eENT(2|&{tz)`F$5)k-?2lO~N
zefKTQLLQv$(bs|%-|gLD#S65#K<1F}4!!;Y^WC!aX;g=7@akTn>ki7vX6Uwtd#>3T
zZ?O$x@J3L}Vfcd2d1+@^p=cq19B<i;JA?;1e-QFb6u-Ifa0QTXwRPg~JG!A)=N$(B
zKL7)wP6gVa*uM{GYmX0Tr4PpTkEWy;AMtlO?a*bj+5hF}vU9loo3+rz-xx0OjFcOy
zmd&wkTq=<Ri|6tp9+<!qr`UgxW@SLut1jof7YOETXl-hRyY3F$_CXNH^JviYL{MwC
zNih9ja~s}9o#D53bGEq!dAZApsM%SY7_yG%DBqp3_UEvS<;aj3#$oTvh_Y}c8M3?r
zLI;1U#Qv|f2J=-L#B{Xtexqy{dpWtSc4rF!SD&JF&V9*`^v-BPYyrCOU3$e3=@8o=
z5~x`GY<G%hl{U0hY!iO3p>l*3R#mI<fWi<(@)+$NzDhV8*1O4QyctZ)C*;P=U}Plc
z^_XFW_l@Ek-7f8cc)tN}t)n+N$EM)YJ~o|IZQz!*RJ6JC3>V13yFMURdwWD~DPAd$
zt-ViW$@*UnyfgSScNc@{G*o5w5j~k4mK@K{-6;jUUz6Ez{}zDje5L*^HjuU5ydhB?
zxGf*N1a!BcjeJc75oU3`U<2{$NT910L4YCf`HPrs#tUk*R)WJ)lkLBT{e)<~`mf?Z
zAfNHJrO;6hI6FH)>n*0-@ow$);WTs}oG@pmzy*F=DZUT~{xtYkd;Bi~QFt%N>bZ%Q
z6IR*w9UP}Zy}|z*E8suafJnBS#>zIh@_P`=cfiLxD0A4Lr<@;~4<y9rEErvabbP=(
z3Vn=y*n6_vA3n5~AjIpHS({k^B3y;Y0QF+6BwMAT%t45_iOK&rU_dRn5F18I&FSyO
z8$`#S1Hd`Wyq%!DZ`_6YU&sq^0xGw2);MDAG6N%<Yz9~v{mgcS{m^Oy{f1Z%1ccr*
zw@O$6iPo5d%Q_%Zhgh^rH-A~k{=TcgRfBU$zZhxi57_ho#K1KYs;5|fcV7ls(Ifb*
z-rdCbx-dY3Pa;1dRWPE_?5nX{h1IKYa;sMxZ%SkwaC1pg@hG_it1aIgcMP>8n2&uv
zo*j1Vtk&@g@4S)UoOGN{+S6!gs~%$tyOg$B&Q}^J-5A9xyq7g@KT?{Ecf^ofcSBE~
zLU1;4kMhji3I#hclPZpAv>@GUVDKUGj-zOd3>B|=-{~}&us<Pt_g)GvR=yL;eN7o?
z2!7|g;E3V42J?%O%}iFKwe*&ESWUM@8z=2K11pj{^StaHAbyp&Em57i-O%eMr%c*+
zvwcvTo$BKCHBY-X|3w$M)@*a$!kU_xz7#!Qed*amNMj5ppw~P|o!R3NN<e}sVG&Fm
zqT~Q&Prg~PKB{OiR})aBi#b&7LLxt=AD3uBXYL(~A*Ps1|3JMkuin78`O<@tKv-s+
z<$#5?)*vppZ~|3Zw5?J2iyLKu*NM1H^leL5Q3k*<&9xp-vxQ5a-Qu8Sr9+UJ5LvLV
z+r|2--AX_sb2OsAg8ZdAGKo+S*JnI6wO8W+#tc?PmQ{0~8lu8q${oJ{wid@6YB+lw
z9fwhN$6*_5o4At0EPkH9IprCQzl-4f!J9Y(9W2Q-D8DdnLX&P7k0s<77=x#u9V85<
zUF;FQDjh%8L9j7iqxpPSp`WD-Ta5*2N*+o*q1<EV2e0fiy8y3Rz7(XbQ&D0yitNc(
z(T@5yFq*FwA>Ie^`RJ>`8ov%pUOgxxJ^wBsj+w?WSb+=hfC<RQq>Wt1BXa*ivKVRO
z`r~j^%DUW<4z{Faax9V3!yOq};`S_LqTJoJwRkX|NY#<eosZQS?k`4T=)KB(J|-Bp
zCZXOX<kQjU-N5a<if3gSCKJ!eoV9!Dc?kpoX$@NwdUmr}8@#|Q)jB*6;bF_u3Mph)
z2L^E&(7%i*hwApyu?y5TCAe(2h(ESSy=$>K@EKl+rFpA#9$97{T2`!M3};WN#oo+s
zsQzM>!m-09x5kk@DazQIl7c}uu)ZBP=czY!GJ|X|<O-qTiIt42c6m3)N?Z*=a)C|%
zi;^eKc(W3lKSI@=!yjyAot<J1tOQ&DlJQUMVn#E)^@8Nhu!1S1PwR;{XXQ<MsDNW0
z$+T1|VP-6OYA0{xa*6Fe@=A0z1^R`jo?&#mwq{Fqzgow#j+|MMHp;~)6MEb;b0T<*
zLpREuydq(S+Ck?AYbHVsb0-8pWM%7L(HC!;`4q_RL&R_X=noH=J(?DkJt;+V1$T;u
zI1(ZwGDsXM+{AzScM5_$^d!OvVaGLEPhU*6cFQI_!hXj{-o4#u3tsfa?~802t;>(g
zAypZe&@?#WghK(CGV`#uX(0r|h^56Qp_M`-r6tx?_zrC>c;%FpLQ8ry-#qHxxC{1P
zB3Rn<S0ND;0Nh##_}^$&d@<+og#B=@uu(ZaQMgxsoL9+KocIDlx>UJHEAt*)D>>aL
z_wD91v#!y%aaRhzK?p2=iVc`$6vpU)X7u$8uS<HaVy!ygOhT~OzkF%De`(x%+y3cT
z^s?5PYlI7Q=2!EbeUF-|**9x}^$6CzL}XZ|W|76Sp01Nk@PPX{1a!z5GUahTFivD`
zy-{m;xXw7<B0*~7ZmsJ`RgjP!p#vQ@n7=Rmp&ysbB@<DIi!7lC%}AS2$&U;r&1bZy
znUpX%Cr(Tpc0WH__}7Z}YjzOCdU+V+<<|`toQ1z1VJrq-FuTDrZ?-oUs@Gcav7kni
zurgT&m(p^8iXmw$cH^m`_p$mOpI-N0QKlEMMdH=hoK}pZ^&$KSTHF0aM4UEjm5l@H
z?(|)(G@(wT09P!<{*lCAPD|w5GNhUgD7wb3RwC1lCh2d&I#{bL`jahvs^5shxY$8^
zAcyz0dRDrq+?j`&v@|^G9kBt?oi1*;?F5OVySUI}O*X+~_E6NPSC#xAR&~r#Z=hg=
z%T?B-$(#~RlLDa5hIWe^sJ%#&rh(6%vCmpbx87_g+xI$Nh>}%_wgZ65-~y&tfx%g1
zDS;^6W0!~?$ew%E8-*T*EBb@B6aw@G(|_q=(dEq4xLsywi`{=B3~Vnsob~G{3v&i=
zHW755&N{($asMRnO2np$l@)2ckb>N)8HnQFuXY4b({qC!tr*eP%v_Hk!gM50>HPl;
zHX!^+i=gj)v}h#HpqInXXGW~1)0(Bafz{apzjX5|!hqhb@L{}Rj%I`}{x3d2_iBjZ
z4K~{p1xMaeYyFM+wB*K1d0M7JKE(Ug<W|j=vcnn8^qC)WSfG0W(FaIin`Z={)>I}U
zsaZnPKFlR$?Tg0sQmS)UHwRuIUc?39jZoP!UVOFhe0CKW^&4ll<GZJe!y^8Ib6UiL
zHJ_4pqp;2`4I_1vhh2_?;_0x?MX(&=%-JacNbhf2QX1-&Z$3Sc@UU6MH~*F0bQsF6
z>Fwy5iXbvreL3@j9PL#O!|v7X)Z`Q2IfmW1!Xb~#I{&6s4!_MdUh{Rz=M!H5c)Op3
z;l)9W5sFV*i}@7`12(@yOVp+_P6waO1s?m;0Bs89gRoo+Yj3ouprz~e(71=oy5NFU
zE|<*?&2N(yq-_eh>ve<GP@`#|Bhdj<U4VTN@AU<qvomW?a~beT>X7Hf%tLTbkNV5|
zrt_3@hsjLF6Lf}i(&SV|{_NX|_-M%g%Gjq|GLHU7_QXjy$<HuR%eB9)NBi+<oq^si
z19L3XF;M)OzuhSAWp&;|HcNAvqW7@Q`W%LFL2=bwRJT6wx;4*Zc{=k>*Odcb+cPn;
zHlp2hZ<Q?cw%lR0EYqUHaeUc6;OrHfC7hU9J%#jmJmOL+Akgj5Qnl`))goZCN%OaJ
zyJ&D|Kx9A4$EWV*xx;ELZ@qEAZ9%tBtp^+7sX^(+pqXUiS+}y&r3H@H8OOB};>qr)
zcwp#i&tNUiN5TzqK<KKM@8J_;^4$fe@S<Sk<xM{MS(;aQ(Wd=vO1X#cntewCI($1w
zOW>ldsdO#mS&ZMwVbbouY9RzeS~zIIE&)&=8kL^QE4w<!+z_<ePWx&x;&NLL%?F!r
zb>LbaFW<_%U;A+1j}nJiU0XZcpY7@;J-sE_MdNif@gI&ONBicdt3+Z%&gDl*{whn!
zJH-S(O^G&VMAxoa0w>E@+d@jPx6axcEF7gLQ3>nr^V~C*EeIUV-Yf?$n^D}OZb*E%
z&m9?`j+@(4h+DVSAN4Cqc-;9^Y4s`KvK~-*ph2@p-a+zq=P5fFE30(<*Bfe|<7#Ah
z3JFiHH6i~&4HP6orNpBv79S@lF92`vx&8upDIwHpYqv${UL~We;ZM%31PwW@4@AXE
zMevZ(o`$Bo?swsT@f<~MBSvYQjAI>?{#!M{oscc1171?dyNtPU{xm7v)?Uo0c@?^L
z9fDl%ZjdRq;N_`AtI)3{KSAyW$#UrwCU~TA%%Y9RP)7Moi4d@(WXr+{b$dM;^r2+*
z?#Kta(fflLX>^(q4_^ZK!5XORp~#kdauFj4O~E=torbFxHPJlj+;@6Y>5)xs`aDj&
z`1%~e@M7>2xO>UZUs-EC0G}yeQ_H>2c4b&D%ep}r^hisZDJ9w2j|UjsR6FLoiJ|;4
zb#bS_ApO^7_Ro-&=n3+})R~Tv5Lt8g@aOV8h`F-(r`efIKP!n`cJXP2X}v9`JKU5I
z+@kCb#bXG*Ztmvx_c$M8m);r@v7_*Zy<V;n%9j7O41dR}qLN+7arJe+d&d7%qV*S7
zTNdc_eAz+zI?h>`=56OJHkWJ!=I?l^u90|c?}<Fx4cP84`D$)K@SO?2_Ez?KHZ!-q
zUmY6w;`#pEI}DP$ZifMUhr&4Be)rCB++chFzMJKiPr+X@LR>`NMvCR!UuptfZd%sQ
z$_OG^dR)D4)f)BQD85Qy6uj;R_7Zxel3Z%ZKTW?O#Ff3?FosG(Xe(?wR&2kbduk7O
zVtlFfeawAh%b$1IjPYnAPccsWdj-fZnY3#kYfe434{c7)a0p7C%(ittYKCSOC?caS
z@SnOeo2lH4)l0rJodc>DU#fWf_wLgtKR_|3IH;JNQZM|=`Clvc66BQVPoF=lX!Izm
z7(J!pZJeCQ&`M%P=Y7tPF}^V>zw3@O-NkyOht9vZ3Sh^Fz3)B|cHZ+}#Px8;G`-Vl
z^PQka_6Q_*3q*D^wyM){d~U7orp}esTjUy2-%Xh8>z!lXOm=(8Fk%wOIK0@i-V;fx
zQ5e2?E(WjmzRwFgzprNW8!>lZto@;$7plE-4vx9)ww@#IUNiD$%fAm=B5<X8UWLBM
zlPuoGzJY0Od-OkI7U*%~lisa*aP)dvx`DSY-*P_zu6HvMdp$utNuy67{NHYBdn*Em
z1t1{;RI!}E&w$iVgP7GGx%y`h*I@!7_i0S8;S-LixueKA(@1_pM^Lfv&XJQ5osnP`
z?wq;Tr~;Ou@c*GAr!7uCXwm+D+(u5DI(qM)Sk9byiXF3XbL8GbF1!q5<;_5S4kKyi
zAiYJ-ng;R%=S3(Dun7NjqexhX*8YczoV9@ZgjI#h31M~-J7E#-F$;A5Q6+i6%3~3p
zvAyHEw-&mZN%flU<S~50YS;!diP?CiPW@Dx{9*hc1k4>zcCd)$Ftvjh_-LlN{J8Oh
zE|BTw@}C<y{?h_cKVt44gcHvn0|ob3Sz5ENB`H7RlV{+(nIHZCrlNxSTo~)*A^9;k
z`=7c0JVXurIyKtLLVEKOJaIVM{O?luh#!8vpx*h^<+Ro4hs^G0!TFT(KRVC3!@Qs~
zz<xA9y6-mSK5}Cy;cvvl)*@8cIJhkxns!V_lC)#`!yTHYxK7th8imJUtNtvtw{Tug
z6T;PG54(0h3YMt_xO5#v<huBEVJPmgHA&6{7+XH;kDC>*<t-kr8`#=qEN%>2M5*HG
z*7F}4zU}A~xMN(b!m=BPrjt)%){#GlLQ61Q^`z>yYJBI^-~CX1F1Re-{`dJk;4x|<
zuksr{FpK%{?wwK#f0wTf$jw)_^R#xC{ef6Ev+0(-PTF4C5kMI{QgDIHPW5#$6rTAd
ztdl@$EU5D^(|j|76zhER?{)#$TL5JGa`(Q)#(=D?ErsO8hH?4*CejdFC<M;O*VHTH
z26*mZd-wVJ{zX3I^ZKJOr>M=x|GTR6>*9~p&6SP*72De9=TP_D#5-1JM>L{@=5;R_
zfm&1EHGQ#>2cMTTHuhs{h!3o%_YNJLz$LQFB};pt5hyMS2Jup-ru5h};UZTtt7s{g
zbsNmJm%0MZmPdzY39=mc4qI&7pkb&=sIJR#2YSX#+~?jUlcwCF`55i#Jx2k>l-5qa
zTXz}PjbUs&-wKA0#QkfbdRp}JS9PUUPXPS}XpH)b&p~=>C){8a-v!O1pztupAe%@d
z-$#V1fhSFSZT2b7yeCD~r%zCccgClG_6)-pMN$&aIu*7mmYPcnY10BB(vq$!bJX><
zU-<9l$dhNJ=h<RD4;&ANHOYVT9T~4j1jvs91LNNo!|7$mj=xG<JkND*$02uw;7^`5
zv$#MM)_UJZ1`)EHhz!6lBOA+IsH+_AtExh-=ViSzI%@<TI6oj?K4UOChVW{7?iu*D
z|82j`0Om?n*C?jnx^E?VDEYU)5)pR1v;zeCe5kxuIo}8VSQ=S9?YFF%_Iwl;t=0$x
zO?MaS&3rAxG<@$5**@RJi+47HJY+cRzaLIg+sb_`UPw0bUKW_M70=||X1=1W>Nq}M
zPQ^r5?{oIQdHkpiO`2B<T&6Tw^a-2}n3J8b9C-Lm_q4sRZa#bn^aT&5PU<0#?>fj2
zbmD(@&Ae%Kxx954e?4Y@NxgYS42za!&0D@6)hHe8J5KBvz6^7mHgK&8z8LZIKVMk}
zK$<yu|90@?+i)J;DBk9=&d9Kt(vff}Zu-6-S{@sIzj_)&qdiHeI2P#qxVr=1T6k4?
zw&(eh(OCaP^J&eR9YiTumbl+XTGpf4jDbk>tWw@abMXPY{w5ph6ri%|S8Mh*ZuXw?
zF#V*TdbI@3q1$Ny_iXmv7JzvfxMjGp4hi1wJj8tB*B~MnEwxcRaL-`IBMvhtP-&>D
zCz>C#AFt%?MDxtitGa6w(BhrSjxhMf9lo<UCB+thTAq|zkPbu$UvO>=cxG!+_4s1>
z4|o7!h+aT;NhF19;m~A56oo)ZEZjG%*Gas}L;AR2pDN{dI_C5Krup70Ru5cQM)g<C
zyX(oU@l(Q<a4TfuH{49xRV@njrJrPcgG}}zTxYtYzs{Nnd)7mvF=AI*){f~nyYr#V
zeVIuM#s0NR90=eVFX4)56(7&D=6MVs&-9gk=_Q5A6u|*(_WaAp^%*UHr}c_E3q51-
zo_bC^o8#1TkbKjxBBH}^w=4C-a3jo6^EIQT{_32?=a+|q{AUR3^zLiG<?W><>Y<H(
zkh#u%OvLur_pX!2txQqX7ld2pZXm)Pv}e5Y(|TIvi_)QN*N8m_$F>WRUr)Cy$o`vD
zc&=BL?2ujvYVua==vJ%uwX<K27gz9ieC6Za0@*PF@@-1y+zkR_flPf+^0(bJl#AVV
zaOio(b!!kF%$T`tEit`@*9gB_FDZbRd?N{<XEk0waAETBF8nt5M7MhU<LQ0tdq!Zj
zVP(glPPz;R;OqyO<C@-d)vopZcIcX+)^sdK7ZhW#I~eYH^Dwnu@+9KXs$&p*l!E@%
zzGD!0<Y2SxU?A`EmAzHpZOJAZ)Eh46G~26u>2vCWLyPTd<~_2>MoH|o=V)!@t)}Gq
zO{U-W;g)fs^8Tg0Jg{u!c$;c%p{*P4AWQEt=Depnekwr2o%++_owq8ra8|DIGIsm9
zddbIa>DrpY8+`v`S=np8>t147v6BXRiM`Y<#!BA$$_5|in~7+P(_f(Q_lZl{+qct-
zlEuR@;xh8!XARBvw|A9&*q{f$oT-y*Iq&FqSK%W+)^;094<7PyXktZ&lwEVipc1#)
zX2#al@b{W>46D(1el;IyR8;rPdfa!B#`2q82LB_Z>-0@o^XA*gs?ArCPthZ|&3ond
zF^0~fK^77J1O5wZ)ZvW49rXaW%iE(1nSH|bjZ<*EXFvsu$okp8NoV(N$7<FK*{SKI
zV1aD&8^PA=O;!1iOX0;qUTB2RU4FR-g^`|1lxYG2<Q(1G&!ae3O&8bUJr?xum)h2@
z^h>LM%Jc@e+kMnN36*brzfWRqq8!djy)s&%T=o;r5?m^bc?#XNAh)Jvgw=Q-aqh*1
z@8TG#@fgP2tv{Yq`QM%Q7U=GM?!8~dZ~pDNDa`<i%x+rPPTOyVgtvRDJz<U^YT!C=
zTxwd+M;t+n-%6Kd2!f(TRsX6@G59iUS+RX@f1W%)6DTH6>3Qg0l^1<O3uJh2GT}Ta
zM2{_+vd%0}@4;Ss6Jy1r3lwHu{`p6grIN&Co?>s{$Q{%F?cB3(k>d5_{Kx*>!3QTU
zT<NL25&V|6Xd(aFJZDd9;IzrD$HwD9s6M>s@*~lO^4CjCOM(_t*7f>If{!$og`S?H
zDb6xuL(O~6the}j^+r+;K?D5uO}6U_Acr~Mb3C&DyWI$8wGe50I9uBEo!$AMpz$dr
zkuL)MB{qgf`BaZA<MW-g>)U?r@kwOnDuh(+FtYebT#HwK_38KtT`m%StbmJr8-L~z
z{uF0m%R1q4FTpXa8z$h)Dhuj*hw5X!>{h@SZ{qgDs@~Zqyj3Wt&ep@}`W1oUTA=mg
z?eLaz{@a?sr3cHjif@a*d%WZ0`Lyv8!BD)=+s8-s<8bJJVFus3&I6#Fv;B>&htDU=
zuq@Z(UAEJ5tk;v+5|hIxP2l!a>2bYqbtvTt%>RCO7LpQ^!#}c(uU#CYty6rhvl&p=
z$B^UV6VO5$`F-|!{QLb3Ih)4jT1Us3VfiK0;~Bqj`-)GRVOj79D91AtEL*!+{9|G9
z`~6WWqGoxsM$eH!?d6jqMqnVtr+s+Fa`#c;`P_l@S#J4xft9{y{zYJ<kFTwJut!I?
zr#B^JbK=k`{W{>h<fTa*q1ui)$Hyt^M^v)S@AZWm=K0o%QWGK}5{LE0*Hw(Vwa!3L
zGUNTq8uk6!AOhbV#-PXFnG!1Sg$$*=;r;dR;|BTb{!z*$LpORe;zAe9&2M?+#chSw
zBSTm4K%fU5ugYSzr~FH$WLZ2%pm&C^$0aS;;gQGl6`6wAhG4@dj{kngd#xAp`MRj*
z$FR4@%R@-Y&;23L3y<pZ`WjOCLI0R}>)H6u|K5G-OEC+x$?=9C@OXP25V?Ok8#^9r
z?P*^jKY0fOI%_B~8>r^*xX`^R_;#T-b_M(M3gzt%RuSI+g*o_TXRnD*PBe0(7np-|
zbR7^Y0D<X~NciFHe-AYMamW_=@^nYDvNz$O=LhzAkK#EQVY+F39E`GV#7#IV`SJX8
z$6PhF5KWWK|GV?`rlIj3fnH%ApJ)v7JJLp=JupO@@0<18KtsLby9w$X^2P<*->dFr
zng-_j(^O4DF^6K+{bR`C<Dy~4&tPB)bLE_&&in2aLvMFtF<_(>QEmA&Ms0bMfWWDT
z@66j{<MXNY{gQw3`HX*Oz;s!n_F7M`xJQqO0t8}X#yD--I`bb<c{jJxTNHp>%;EhI
z?d$5+1=QXl%beqJ7^ldn)$8V><u@msn+4qO(Z_*(DLRfNY`V$I&+P%kt8ae0uTPI2
z$m&))0*gs8>N2Mjf{M#w5rVGHPij8Z)2M~DzjuU?BoYYWH-rR{c612wKX|9!ny*ne
zg2S8MK`irY1A>`P?cV=~qqB}`t9kl(2<{TxN^p0V7J|DwlmsvC4O%3)yA&vHg*Ldi
z!QEYpOOZmM6l%XW&->Tz?46yvCpqVyy?1B6AF}C|(2NuYCq(nMf7_PI$JCU+{wdL?
z1fHg!(+;J3a+mEZ+fyc&=ZMvQ&IK|YnwVV1m?8vj2MS@)zMz~;$pF4WPP}i{Em`DU
z{0bT#h>V4=HK*&`$M-U?z_~kELaZJJKZ*tTZKc57hO$=V>$p7YRxY{B%vF-Jud>aJ
zx>IBAc2L=(9>qojW4{LE_EK*LsHsbXKVVVkXyNrEGYCO_BF}}`eT*EXh)OZPSI62}
zXfR0`N()T*KX3-jMa@~$w9A!nT&by4!)$-WwlVNDwqj}*Au%4Z5p1NK)Ga&6H<Ex;
zEBJSl1KBvDx2{kod}ZdD2bG0U+~DfmV*ByH7cU&5sTxA&^$K>lH#cKkeMl>4>s5+i
zcz+=^bm~VaFL3`R_XS$xC#Jfa&S`59Wl@L;i5wYygvIer$hMpzV{lfNR<yf~onK4_
z%|klm$Kc+B_cCh=T){A6SZax6JY=}d|1t(5#VXb4c<=*S!Q7U*h4Pm_%lG1l*;S#5
z23xyMH)BzGvi*iCDv`33(U|$c;!xizeHdIUPR33VwEb2V6IjmFdyNrktu18Nk&WU%
zS>Vf<%a^XR_eBcz_i)4-PHx1HOZwHzhtBkQdO*L6_p?tLClhs}pC9Ejo6cSV)T*Qx
zF<BC1zoQ8Q>rDVz{WL^hKJtw`*p$45rJE%dK(0^@_=2JKs-XM>e(?M?vxpGL&x(6P
zSi%?tG<ZEgav3`xJ-;l>V!gD$z)<4rg`kHCcyQ{EuOQgV8dIFBK;Z!F*`-?vCY0=}
z{z*(D23XZkVoU-mFh~l5Exw1={mo-WPTeBxb@945qcz1E+eH}&L$sxIJgq^%!u&F3
zoB-@0i1ePo2xxN!ff5Cf$_+<le37;QTLALri8<Jz**2wC+qBrcO;M>25?~9^MdhS0
zyA=J6zIfw86a`Sy4CcC9@k6arW?Q&|jiU{EBZkOua8`V^@xkS+-08ETzN?syNlf@P
zRsmXTIuyvGsDWqkTbOJy;jwH24w0y$y>CY_KpF4(@Q7TggGdzyC|Mkxau$dY^3YtR
z_fZ^Zf<T63rD!<-kz>+`f&+PRu80|MdvSDMwng@z;$v&!*+^00)()42V{m#8E#uW`
z0H}nmt~AD@REG&u&;*Ih^vkj$@qgFZor4stWvq&ptoP{%z)6*tMJ2rn)OTPBYnBcl
z`{tuZOx1E3aEsW>y{(X}4hZF65^kqA$qRRiBMTW5Yaz4%Y8<EwqM`;4n#G7zj@mZh
z>%6d}Y657BI8h_D4B0Ozf;o~AU&i2V15722f<mqQZ#I6Eptohc)d7k`wI;{;$lJ%D
z0{T;sED=-pU|=3UwoHR?)M+Szm7|Ib`6B^?c9e|&4KAy1<nmsA%r2uLeu`GD1&UbZ
zAd<|YQF4=<E5^7y7X7DS*%4L}03ysqz6W`+P~iT05skspLLj_H8f~|MRKwN6`?Fma
ze}x+aV7d+;N=O4i?iM)X$VT5ftGt$J7@i;MS_CR!{4=IKPb|2k$t$fy6qETO&)a~u
zG^npf=Ws1`9NI|!OG@HWSIly&8z{g`vtUaRFGX*;pP0{-klCvC)g3Mb5VE&pnMc#1
zawAN(Mz^Z~2K4WR4Mn<j8=uL^yluj`ClY3#Dtc+n`dS!NuEMxRKTU+3WH=*hwoXwL
zMF^irkL5ryT|Iv!4sDW~WpNK1^7?<3y~5**$|q!ID&XMq+D`MKzyVeTSjtHFFQ)lq
z1?&aMIZW60^|Ljy3s_L2G;d8_ZIPP+A%IrFub`1P>K6Dhlbq2UKD^9Vc+o=YwR8~L
zccuFi$K2w|q=)l&_mMO$6~NH35b-Jtx6CYjS*y2HRF7|=_ji5W?^;Zb=_0?TxX!iW
z%$2s};Ksak1F1Wakn|krb}Km53p0|XoM01WoYpHG^BjR|)$V{1q^oz&pGvK;fyKc*
zHZV${nM7AZs2kO|qi)Zl)`}rKZ|bMnG6Jy3NSnQJjxnc*`|*j~QqxpvxjF{ppU|AL
znISf=JfqD6A1aeX^v1WOe+9Hd9ASJ?PDvz^_ml4-PnsKA5#p{c8X0IMo&mnb=N4ao
zW}bpOeTSp{+B-26m_T|X8}gF+hFTmrx0LtDmF!|l1ePx?^2Z;z1S-$RMwe2+*@qV2
zKHgasK$CK{KDRg~NPQGJvDc+Nr^TdC-{~0=SHS}c_0tE7(lfx-uN9RM5t!@L{=&HG
z3D2dcwsGlMiQeL^>VVy;&5B5kneY-Uh`MR5qwy5A_PT#7Dh@Za{oG7PIuHEuYb*(1
zVTm4q+gOPK1zaUZti5o7?5ofKO_yWh`DaRhY=)M{gRx7Mri6d>K%-+ymPJ|p{$mTA
z%+N+*eoC9&!hsy22EBDsV$GHqUg-=e4Miy?V*jW^={{8AV^pT}DfyvAj}UDV%{Kt5
zOGeU7Tn6rvSbvW=vQo!6#l`QwKV<s@p#6%Z0ol*=oS_31{-p{A7$H(Q8N@sdH!EdL
zthBTq>^OL6MJt1}Nh)04NX$l2fUHD?g|I91G+qq%1_yQPBp}7&U*!n!kDUu3n#Tw`
zu<+;NE`w%3&cpI>H1N-c<N9Am?<HdXCh+(DeoOMJa1!Z4B&T$Pg%>RBs`6YrrfDnz
zRGSxRkjkZ3b17&`CJJdu6P&N#ALcP&7Oj3sl*eJ=8?BIy36Ut476vp4hzXz=?}-~V
z=7;G37`4j2|6bj8HN#@v#4Tt4Lh)c7W81JEWiDoir4f`kLj#Uqd!x)fbJeq0YI6b`
z4l^xwa!DHDic?5;AoF;uJPTT^3~!bD1Usb<>#imG9X+{}5Lt7RKmi4uGR(L%qY4qN
zLW~wXuUc=}Pb^_SIJvzy3E5W%kd=LA`@E{M9hrgqc8VHtqf#92p?NfO$kVsPMiUhU
z*7X3RE5wDpE6vzeqkoXha_Em6LZJQKhI{fzDmaw*?FkQ9yxWgAcJv$GIen0T4&Drx
zz6e4%+)d3dKf8)Hq=2(skreOif$L7B_kb)+@tX#|>iR$iF~*JHfbt%Ph4H|U%Ck(;
z#Cb^b=IsD4i%N|%%7nsqTN$80s4>)1Ta)E7-z#!RkMT9?;CSE2c)}mf`w@qfaZVH_
z-IotUBpd~&WUdqOo`DJ+W1G=t)JkkMyDD$->pk0>Eq!)xnc6fk!ZJWCj1Gl^+*p6b
zoClt!RFns>SIY;M6TxZ#(+F^EcIPaaGXZtiVsi21^0ZEzFo-OPdRoYzH<V#eXCTVA
zTxV9%japi{fCnB>`lp~~i2x%`G<z)a?dr9Ofhg8!K1h%bQs5^umYbZIOQfLFR9wro
zcQKpd#u<&{R7otS-c2C+>`#{=mAXa9b8Xx+S1onTe9S*}ik@vrQlgAbyf=I?=`u1D
zeZo8yhQtVdDtURF<Yr;f6jz^N^i?S9&82eYFI+Z9WBbUo+KdV!i-2Iog5@%zP-y@H
z7&{H<J0~Or5$O%!e2Ov%x7o*77A|l15mU6p-i`7L(q7Se16?G~B9G`46(?)JOl4+M
z0rbg?NtXGd)X`W0VhJ2nEJJnzrYkm2u!?VxeiH~xWiiDDp2j>jT(dl=gNhErbMji^
z2kegeU0f0?vwWTv*JfsnK>05mWzFArt!24}hyK2K>VNif_xY~_--h9^tVzljp}*Mk
zJHwww9LoHDoBk9n&OUb8{dfI!>Z9GDXjsxm7RR}dZ%98LJUqGNqYs4s(aFz0BL!Zr
z{yP;oS^KFU`}8M)@cf=Zph~PwesZ$d1dLXT#kVRCEHA#kz^~F=&G4wF7PY8ySi_G=
zTqPg1Fuh3<Fj4H`rF+5j%rddN7&zV9L!$TI7geVAs6}Xl*QAbP%R(fnHWcYiL%_^G
z^HgXXqDSzfvAVhMfJk9G20P@AZw9T)VW;6+WCs<@*Pe6M|CDwds!E2L%^J1dJS5!z
zZbbNW`Co06_1Dw`Gwu<Iuey;x=HlXq>PlLoO^mHpFln5>(x$LVP(nsbjytv1>X|!r
zwy^|MtYb};q;L7AQAT@4*glr8wvzUe;0qKmd5#yJ!->L=c+(UP0yoIvMU9!&7qU0B
z!UmK4w`M=6y2weHQk~zE@a$k?eX0M1q6QJf-iHlv9=Br;N=-@;!8Ij@DYo*u-(pI&
zpT*AlOVlzfXVLVari;A{T6<uH@iIGQ&VfUs7k=lT+$48i7dmxQ>Po!5?wxM12`MR>
zS++Sb5S-GRao*^s{@44~FEEYUJh=6PZF<D(h9D}|YtjRSv)I-K-D8H8nhsvgv5L5i
zJ9+4D?5_B<oMlX9q8?2Lr^r(l%Yy+!Jke)MSTZIr10{ZRypIDZpZDrfojnh!@O1j<
ziOI}@%OpKsDsPdHI^soVvNfr+W&i5K*g<mOV8Jf9n67e_5V5~dn+k^%@S8S^+xEu#
zp1XPS&mh$c8fiRkxaz^vQr!nn(J>e@@8fhDbVOusWm$uro`!Y#@WIo}#twNN2@GI{
zioe#=wvFGf202j;B$*!Q(>nvg=ckL4vP2EHIl4W?1SDJWX4LNh9@XVusqHV18bhCn
ztdxUGh*DIGu#;Z(cGIIABuL+3J96-F8!`|w3a8<&Piia~Xb5Q10UqXj4o^Y@);*Nn
zDs!udP|@rKB78GXy31;}np<XBRi26XL9A=G(yh&?FIh91Z7pfh1S!)K(0Ch2zE-ae
zq1~FHK@_Bfl(6jwYE?v9Qeb6L7LTCLQSm;0kK^oGx6Q(R9Mn)zCJJ0SE6_&2d%-N{
zaDGP3me*9mUR6@6o(Sr6l$W9=9dz;h`-xjrW<9a+7vt>QOtF<XijWk^!DBiQu71}&
zRt|TFbS`w%kCo97M9pIgg5Z(E_%Z$9^Ma4;evOaycwoCNku_@2IKqpYpks0w0d1~K
zlmulJ5Y(;n6SA1VGO@^Fu<?fmVn-vWz&+!4m3|W7ltIkrB)xHgG^;$%*;aV%K;JEV
z6{sgQV$YSMbyqj+YkXDldW9%kgs}6j$El5FRuLYX)vzWEV=QR%35K<&yR5TAB)%yp
z;&gs>Dz1HZ1#v%W9XY0>QMTY>&3+U|ku@7%yg<<migN}vM(Po(6}$(jDB-G@NpAtt
zzbfMMG`iE;5F?cp<sGLen0Ub85=KcoY^c8Q!((F*5yT83Y(D*~_!HU9^x_@vzM_T^
zgpgY5^n6N2|IJ9oiF~-s>G{X?x#C)(Q~AGCt%Y~@$Hlep&M@?krx#CB6WX6*Q>CM4
zV?kHN<nF%-&n;N8=fd6wORPT7P-F=nwX6l5C$|5MC76X-Mk*K<J9tL?kcc%ZP7!LB
z{EQr5z*GDN=RFwN{4;1046w-@GMJ%dM29i$#O=uB;)}J|va?lvwcIVB-ddE@ju9sb
zu(+KqZIE*Cd;^<l8uL>OZ{SQvhhG_nav(g$CAO%WJ3ike6Y%eB1FJVS(RZ$PLbOwb
zG@@MFKihl0*)Os{wmTVCZaR~XZvGpz1;)l}%5ZJgp=V`y3d`A2QYm?w`8Qq(-K0pN
z#Jl;sHd4~tpQ^DtN(X^RW2R(_w{})g3-+{#*R8c6_dD&8NEuH*Za>$b{pjG}4-etO
z`T;oT#eo-NelbZkZ78Io7q<{HpTR0+<Q7!m;28;n<cx(R!c=Ai!y1W^Ilt+0Xt;2x
zDp+NPNeom*h}u$>((1VAh6l$AE|!X71P!xM&z-Sd3u72(U@SULAMs!`0+&^xZctt~
zqY&IM&#LLaZbiyY>w(p*Sa}(!Ac|U?Zxx)?uRnt8EJ_5%M_aKAQ@O!Ct+7p)v(#S8
zVGj%BOIbbdW-wMA9(!f4<KA6epN-wcbIpDDj#nzLZTJ_o8Sz<4;n&(M$Nhd&$@ds=
zx<Zz&VB*Mi&>rj3!{*8QGo8pu95Ql`bQpsGAdR{I3VZN@JN^zMgEeXgL_5gxa&J7g
zv8DN%PCi_H7I(Y(1svc6YjPQ5K+c-teOsOQby!g1h)}Ax<02Xr)CkP6_lbr53HNdf
zFZI1lr!vUp7KTXoKz#ufp-!vkqm=?UL=RZ`*Lz5t<v2!wl|{nULh8l)W{X&GvT4iU
z;Q!XnE08X6KI`O8{{oy6djm%hA0)paua|3fbtOPaQN0q4<SjgMbS58>O%WwXkiu(s
z+;^m9b{1ZAn-lk?&uHz8U|;5n2xEEAN{iUcIU$VzKqWsJMa}i!q;3DnQ)wDzOY+x(
z+kVA_>5bzuG+r{ZvFc{SZwWgYPY2of>}TjO#=2D!oL-%L=S}kuCgU@jJ~m}M{m$}|
z^!JV)sU=^YjS5B@#|UHcN4ytfS@vlo`A(&W8X{BsADw#cPV5{W#@-O|U7Vy^S$<en
zUM(l<*$$uXO2v|54Vt+UfCsP2@cc^V<Cpx1&UBR+d|>?<{aTb(Ql0VsyBg}vs6TJx
zu%yV@{wTJ*1i@Y+D7@=g(JaH>G-a90trD;e@Ho^lCyP-H?a#hHA?P$eMpW(ljh{p8
z=V_=3(o1@C8O=XfPxv~y|LtBIiLr%xheR&KyymtInjXV{*`y<UIg?1J`Of%q{l{e5
zNWTE*QS<I!_V@J%X7aoPUWp^LsH^-l9#Wby=oD)cUMRClX`|v;k)6qR77G)&1xl<a
z%~QTZ9P+Khd2R?*8kvJPd>O;N1sFc42JBG<c*MlMAWvD3@>F~tyC|4J*Av6boPv$s
zOf>KNh&#Jp8O`3fImP`e)3?$3Rc1f;!Tf=rQAdO=enP)ifJ4$@kWlv?nRB=ps4XMt
zIfKNtmS4ALJ=fGU=~;#+-%M_h{k8<HMk5=9gG^NXL?_s_)5)^l<_uZWYGcfC)8m;o
z^IDXqCht<uETdQ)FC?Q<K1{&*GpKu9K{OKc$Ei*I_4u$x{;wkLBUNP*Z`z;_9h{EH
z&%LugE+~xF$y;?>=WlKh3zO><o?n>u5jbDQ)-S_#@x<c@YA)ZGU}X@S6ouE}!$xZF
zpKgdlxz)y`0x%$^+uH|*(PWd9>V!AeLx%Yq-tG_><_CL0FI63lpQPeCp6d7mhy4=>
z#ylvWWQO;HlmwGJF%g_uuJjWv_>mgs{J9p<2B4jJiP*(Uq^8h6Q^b#|iYKZ(4<V|5
zM0RgH<0;3UN){XZ+3Iyu5jE1y_}lVX)U5HDt~nDbYw10qkfWRA@K41+EJJQSyqo6Y
z<McU349dYG_?ct%P}(RzxRaB=t{$7kcq-vf(PKsZS#;YUU5FQx!42(n!n%)U7F#5Q
zg~Xja$1toiLj6CaftBfcREB^qE~HmNAQCMS?>2^+jdr@vN<uo~P}fJzN9Y>cQ;y1Q
zOP0>VRQ=KHIqkW3r!r`T{v5?IF6gON#2u;qOqV9JNn6%8@=KE8F3W(CF62mrV1~26
zxMsp=yfN+xevY(oY%Hl!Nsmb>G;ydSQl$1nr*|orMf8Y<Rg!PLRrdsl-xp&W<D1{-
zX6JtoSlW!vwEHF0wOYk!AKYavjW?n=a3JTpH$S{j?poa7I~r+VN(HsPudS#;dsvn(
z+P}I_?7G6wgBz?2^looATV}(fIo1c1yZF0j8fHNJw<LVN#pYaJt@O*V&ZIH?`1DQx
zm7=MA-$lB@Zg$*KA7d&4PGZDuxFcTBB-tg7_>@2XMH`|s&WEBD^5ukIJg(KExpF{7
z#5Wo@Rn9Zc@hnE-^{Ul7%88V^Zu_1;3lC(A+d_Ra2Q^c@uOghPe2mz<dTSZbNCT$%
z>rnM*E)~9Zbxc+a$_lQnLr^AwU}1X(BU=LyTR?GzQ4F7VAJq-j;9+(<JPAbfIHygC
z?;~R$g??rXdB}UpOiw)x##`Faik&oH`R(`N^xb5>*sJ&jIjH{N;FJh3r0CmhcJyy1
z<VS_frc=SG-e&!Yb;|P)B%|0Y+!lF8CH69QRk(T6?+2Vg<#p==lvkxXK>2_5F_j1`
zsP6Rwc84})!Rr~&cS;X&jjX9_@f%;)SD(B{qoPw2?LB_sA*!$$JqxUw+-=;hC3X??
zx6Diz^j?n&9z1SzxLR!*zke1CPb}4&rVce|*ZVQR%PIlt!2)ii?G3&xq~ww>NHrX^
z-|QHS_^%s3E*WB(uOF%HS9{2VE8K33l#r!68X6%eflrF(irY{}$Ki_1j12N*&Gk!)
z=D5m{M6wH<Ih<uwQyQ2WTfYg@-^3WT2(_CrHlH*^b3IDi&bh8j*evYH5lD?&6E8n3
zZDGtEODPJsV{dijFkIL~QRo7MJxk6l0te-&s9&o5r}s18XCRqYYRShb1LVNri;JF=
zk`k}1VzY=o{=MkBuRr3cj>Hmrv!H5HW0@@-%>i%yn9j>}C3PXGj%2rG1C4$E>+E@f
zmq#lfEMB>>S@)Moi6Wb#Bd4R*itU=4r#!aRewDbCxK7|1zW?<NY?Y}7r2FG_mXrb}
z24&Cn`fJRp!q>8x*p!3#^&HLA#GUm<ir~IPFQj_x2#COavEugMei{9+pn*#LF%6R&
z=|7@x`|*J)O6i+?`;QmZK-C=j!y8fCc@bh&sVG*h)SmOCZ)9OZEA5nqZW57*ioB%s
zc<dzZc6-RPFYqrJOSE-?M(?%Qu~w5#Iiw9Ps?2uJH|4*S;Q*s@HVZUpTwbmCJlRV(
zNL+C4STX4+OBhO1TsVt_B7VfUD7y_adpxsXw}9|3KU60zFVuUUoHQjb&()_s2E9x|
zw>wEe*J&3KdcA$BU(c3H&E<e9==Kv-j`Kfz_m!NM8jxey&TH&SqYMGRxhi6(;4T-5
zb>5*)&#u#^I(A*{xb0#Ne6{+&Tj|7J6W=nk7<OhZSiX7s>%UkOHHQqk1!<~z<%twR
zMxy0-d$Ux8g`V&H+-|99V8AuMT#A<sMJ-$45z619R-Ws98ugO!<l53z&w$_zt*V{^
zO@jNNvve9s_*I3&#TQBfq=}_SBpY@dkYK=+X}nHMt25*bd|`@u3)2rziH~j7T&h7B
zd0aVhJea))X>}^UmhVfLl>T%>!bu{j^{L4~+o!bO_|qJhX@MhaHA(pQX7R|U&B%zW
zHB%TyVoI=$u#!tOTjB>_cmFlJn;YV-;<bi=l2$6!R&FlT%%$;biQP;_%9EnyKwoRA
z<=X)ZfUtgen%dGA_2Qc!(8b88stNy~t#Um<V6oe$wrMSS({@=MzIVTJso{m-yr5Ox
z*PXEGW$Z(NQi}}p>byf}vxor+7c_*3+eeI=01JCc=j++D*I6=;Bpie;NK06B4ZLqA
zin7<1+nJ*has&iPV(DLc)u~}~ao}9eOzkHs*II;#1se#Q^n(2vsW)KnGC=q=VRlnL
z^wPtKcj?|`31;WDZFp7yv9;My5aA;wm=s>eXhQ(Z5`#6gDOP)Dt&x$Pj{lJM7TKA%
zT*8E<K_A~KxLdM=JjRFm=#`9o5cw-`pxF^wt@>3{Y5hv=s9P=4Y;DjR$nvJ^29qHN
z>-0u#q4W!|14wbN^x)hWG1^Gi@%8m2^^=ms=be;X0zhe)%q>Fr7lTsSH;cQi8I*UV
zx0-m)rA8ab>C?A*mhC%+Sw%G~7BVk2RiGQ*a}<zg;}WRxG2|QIf($Qh^lkLcAVlnO
zD^?V%U*K|_sxr2ft<(RshOdL*^?GxOf|RYKVVA~n(8Dxl5OpKmkc3oiN{ZKSYcnmM
z=R$dub%SDAwhIr9ILg3XmfTFIaf6nYNH&AF{H)`-IV3;)bkk8Ax;Cm$=h3bs;Vau#
z=QCBp3+q|;;csgiBEYK=QL%LFh}*O3_&~z9=ZRdDDWMX^OEnY#y{{zT_85f)Mm&E3
zIzQnrHDEGTj3fw>pE7*Q5~a=1;h}zxCH(R3hgn&|z|@ft9u6eX07J-^1nPS%MvGa4
zAP=KR+Cnpsps0n}Q19EC{WyMs&ZZcG`Y(CkJEXq{q0+*(_&XJhAUHvvFDcILV-Bx^
zq8A6^ibKQ?RIGtddU|KmJ)+xDV?hrnhYhFwikz(tOwux!D7vwSV(w|Z@AyVhD15Uw
z1aF6s&?wEm7wM!!6yi#0yl_SV?nr+pdYmI3@GIR<R204WQMJ_cdf42>k@|aBw0)T1
zOFJr}FK*mAx9CT~=x;$Eq13%z2u?H?#c$<$>7e8hZPF&fKes@P9M#V`$%39PY%9Va
zSgI$ym@`^!S6*n(E#wYb|Ng$ZA6QhbG^RR<N$_^gEUzj7|APf2O4L{<U-BUUIrn*u
z7zUdJ;-ueIiL;e=<fLerCXL|OfWIuoKF=4;{QREHsKkDul<X-0BahieZDW2p{VQcM
zvHTD%TFZUXfu4e)Ue9-3Z6=)!;>1Duu7wP3G6<*p$=O_<*HwCOYbKb~M$T|FGuZ3n
z=1s#sTjr6h@Fee3$C2UKoS;HQ8VBcxP?Pcssa()P=F(a1iQ0k7x-RL<(s~`=Ho~~1
z0}wdK<Ym?zw;#FSuGMy+v@^c$5jOva%zBg|a3GsFAjl-L(&Wi`K0uK&d@pw(Es2nm
z%-TDt>LQ^e;)zqt7({eqbV6MR-%jx4q*n_lgC?FPnFcopp))bMDi45cC>-J^xWVB*
zE?=M=FPdT?`Dl=F3mw0GW#7A_A~0a~d)t%Rzta=1PZ_zz(;&EiE6AW-0EedTc@u75
zB}ko#T#a-IQzX&ixX~^QGf<M)<j6}T7m12{{7Zw!;CSB(rUeL4_e*ZCv~7`l`-lLi
z$OdWopRsgVqxOR+R!|+Y67kdV9^LVm&aDF+AwNeqSSyLP)u!B;#hh%h8RToaqdBlD
z#fUNAB0t;>Qr1rxt>^hY@SLjgK+bP?7y^}r-lL6bf4PmLXtj*$I1big!k~DA!;uGa
z?-v;Fd!jNbSpm$Y?WzTGCE+(sm_h7m&9nul_Ex>!1*=+rN`9!K`+Tt1vs^nfzpADd
zf@YaE&>a96?jvut1-C_Z67#4T8xU?zZ9k(|-m$&UL7%C%y16Us5f0yBWcSRqAmpi@
zT~xG<#DbxaI%-JNq`&!GLH`j;;}HhuC2O?<D?Ab#T<xeF;j`|^14d2{!>N)0!FhR~
zA>hlP|3?^HlL)fXx2K&xAbSfVkv9&QG#JJbBH~AJ*AJlIuzwlx?f=W)J~CgE6yt5W
z4DR;hA67VWHmiok{NWDsYK$hSBmI-%&FNT`#cS7<;w*gg;)}-S_A-Gk%*SHW0-gv}
z*rJ9MQM8mP`W=FaTCB<$p#K{+fV5o7BMiULvdwXxj2ivBfeIXnY6VO<5D6IjgA9|9
zq7m%u{Awb>5YRdSQaf1jobLn7K5DS;yI-F@=BNvb?Ue1$38xWMKQTFooxO@c0MTJ$
zDpdT+ui;mXs%hua(9kqa$l(BMZG-oT>5l^?j`&2WyM|4B@vXB83=@DqQfbJj6xW|D
zz+V#&fh@myVNi-|%s{DsT*kMMVWMZr3|}JrmXu~fG2A_XSFZEUNJIUbu>)T?`D6BH
z#RBGR-?ogNajaa|;k!)V!FxqK{wrQtOwLF*VP>x&%IS81u^gyn9cTQGh8gjeLCbaD
z;_VVrs+Inso%^$Y$047y9P{KhVX_~d-XO~t)7KX3yct%=+TRHLn2AS{Y*md#ElP*$
ztV92*lm)oC2kkA1cSf7rS+$$adSvXG%9q0c9$b(%!Ed#jMd>5H>u$JVmblZePTzW6
zb*UFI@5zUKh`&Ktlain8Vd73Az!~{9{61p$X#{5pUurwlCe+*Z1qscqGx;T*p$kf-
zL`<^8KWWBC{N;WLKDgJ4{u%!~?sOs#hR`>LkU-u(KGnzwHad}o6d6a_vOPcP%#VFk
zvpMQw0~26E65Lf6k9(d}i~Zx|5@Z>Cv3?}OYNI4_1z+6v?C2a7J;)crK#P(t^!6GW
zl!Lpu-A4R?N~_!}tCguSnzCzpFxW=a4Niqwe(;x;TEDJ{GTV?@-<z4(#k3>oO^+W#
z{ZC~wXyG)h7rF$K=={A${wjYiqNh}s+Vg84zKE7o6_0=u`<G$i1iA{Tw-NDkrm`tg
zTnC;3W|7J(`efc_Sb?YaUGx5h$)S&f!Z43Nf*ZIF*eND5C}T9hKohrA93JSK?riaH
z&y#&gVc1j8o9d;^Ln$$W__9?h2xhRZ$=pkROg%Fj?Q%YfE;dl`*Lc1za@~@HkzEk`
zXUOl9#`v%A!*m6f(h@$@TIJaytx|p!DDmhBHpaYn`}kfjkiv{cIhb3CaIs0t`O;?v
zKT!wk1FpkN06MN@q7wj~3t<(uKjX*n56t|B&tK5WQ}*rs&SC5}=-EwfNNZI%@QAa~
z`u$VY!6rV~iWtlW!Uy+VGk&Y3XFG?#r+hO|p4h<2F7np!DElRgqtc3mcw1`jMM>8v
zE-a}Pc)lk@jL^}=b1zIP+z+Qh(GzPsy3103J15#W!-Y`5%gZg@10>2-dt>hS4jb*d
zJ@kDdoQi+&H8U>Do+dA;_l*?kv-vp^3IsV1TCb_aD9c_3&VWR7W+dVuKQ!<dC*lH_
z)E|5{unufaq)$Z|;&nL?D^5{7v_yZ<KsT{~I^AmH5u?Hy*S1<QEJciqH5#r@6v@Mn
zj|%%n^Z$b)zJ^uXec#ocYVTWELkz0@z~*O@qx<*L07>gEyXSbQ+8w*Z)SpPK%kEHx
zVC5cdNn0x882<Uc<lK)QNHvizo2nEhf7|)6$-MO5B9c*saQ<ijP$<W3{WpWwSPzT8
zvKX;7cgzW9^K<kL1J5Ss=Sw;Hn-$_z;=^*zDr9Ifqx;V7k+jCYzAs~J9Ef-|8JNC9
zjMy<fmM0%KcpmR1l>!JsA@EnW(+}dhTfcw6;45gAcV_uY^%H|6lq2Ibv;#XDP`~h!
z77Z`R9Ws(s`43(|bs|VTVOM~}oy>jV4hBTVNwOG}(pq3yNNphvqWn1WxW`zXrW{0r
zG0QdZVI1FRF@T4-+ab(=K}vvd`(n<9D+@odCk8hV<r2pDF?MuYg(*y#F+&kR?dQJt
zO_(ApGE0DM(|8$YN_zYNj)L7<V=^$+F_R1DhczU+sM@+i^5!$YZq|j-CNTtj*T31c
ze%{<37kOL<pfO1C#~7iM!br{AA<`+vzV#f>VyD1W>jE;;WhaKae>P?HU4M?5+>~Uq
zRafoW^}8UUn2J^{O)nLZGxp1})Ih)wXHNEDU4tUVtU!BLxWej4Sf||alNZU{{|55h
zy0-Z!GBM40qJNN0-o5El?1#Cb5Ad~KGo+3^h(u=2xon{?<6<82Y)E0@D)3grLs`)S
z5CWp&?_Ern9eK`gRgQ#z=*ZS49R?wDZqx!LHO&klH;*Fj%6ot3bzk>*bA3v~E*!^+
zRh&{O$ZNAz#TOXf>k8PC&i8tYgY)6Fo+_w}9;<-=lBiQ9$hTfR$d(xdpzL}cWqT)(
zX&XS;f8!vTrygJQ5p&&Wq1{zAE!Lbw9<(yA9i+`c^E+NW^ZnCJg^rLyI>%Q1Q3GC`
zHG3fbvG_Z`{^~5k1|E)o)a9~$dhcOwp<3KQB{5=P3_-oAQu2urEmj(*mu%BriD`3a
zJi`R`o?5!SjwqHnb{Nra^cN#1o@P*rkUMBVZ-Ll&OOI7&vz`b;V;pa5z9U$heU0@6
zy&;i?2G`^B#VvtEy|S3MLOBEQF5E9o9A9<~{0Hsd{QVBW7te*u4*S~?&HGz+_zJ?l
zNE2=|Hu9dy^j)Oe*6l3crVXZ5=XV_lfVK@=t-Z;7?*e%+j6de?TkBlaZS=z{P}SsP
z8{!AY*}ypFQsU`ezXGz#q_lE!ZCwkV-R#5)iEm?wy5*r|o~hG;YkWtbP*thAlesCF
z;~g`y_TR|h297e0zSs%>sjvy+1eSQF@GS6o#uLn1qB5}iV6uK5auyez+`j%)VR4&~
zPkn=M%Z*%{2E3mVrXU!U-R+Yn%Z=>f3GgM3AF#iTyS&6S#U~)lMQ|_Ih{<m=)esCk
zm8tCy9R#lVBo0OKVkHV2*_`HlFh~d!IYpa9Lz)tK0dhogq0G{xCTw_(s`yUf!t1fb
z{TC!E9DDemhVzmz!Ti-G#A(}6XIS!BnX|)vYUCGYPBAD?CJsmC`EFyzf?DWu`}{3P
z_AWjJooHiLEcTWSCwCkEhMw6dE-q+J-EAsLG|Kl_nJg+;8=Bc{?^o4fqlL`bFjh6^
z7>x_+7^@ec>5W@Lr~Ik0de<<z@XIKE4NCw%FTmwFN%l@N@j*iih`VJOvyr*3ctp&#
z(S(b63Y7Q8B0POjxOIE>iuy;G67m_Vi+9!L>b#u<-jfthlsNJ}PBudVRO)V%uZVOf
z2eW^^x(b%fi~fvj{Jv2jqwIfAV(Dz;)=0ztk;ZkAO>m#**<>)gUvHS&XFcwco;kXF
z_*hSVcNn!?y2g+lnpwc<tCo(>A6$=S7QBRxgILvxp;)8K{d}PBi|~$70G@6dJ(jDR
zG2$+OGAmH%bu_btYv0D&>3e_SLo4oqqI$)I_3Q!wS8~?BE({Sfei}fz)t-Ep9)ZSj
zKu{EnZYB;EnNfqNNOAaVkU~P}us%zrSeGZAZaR50Q>;MpONC&79z${52!ipTLnRVE
zuNC$rPR2UM%$)usJa`g7BJIJhKW+@!92fb#`@@saLNp3ZEMVZX&HWO2T4{NTg{P|J
z3TB7{Bc6o(U#87%h%@ys8^^r(jS~_-0jcf)9&VI=bGx#Dj7_XYZKvb*o~@0HH(Zxg
zWubuuhww$jnor?!ash|<Ex*LW*{tfFD<=0p(dR7UnKlMklT_VL=U;nqAfO4V^A8Im
zFBD;}9k5g)Y>xULb%x0I3M?||ompCf&Y?vjWZvS=i8oQSEGq2g_OEH>UWQ<Mb*_{K
zqIm_i4Or`(Ni8`HI}>sBv59_|pJs^?Wpps+ir|pU25Y2qAdXi`HSfUKTohR%cY&^f
zLodCK&q|t*GEkPi3^41+Z&a|&nY%82Nq5_6r@(a0m67yp*Om7Zk3XmBu=ulAwH&_!
zTf%ASNxcyy#N7pDYB6oHqk%np<L}ndxPq5j&qmkRUSWQqu}>5%wG$_L3<Aq6=M5tJ
z9*U(A8<+FP5-w-^f;abiXYXj8LB#p_1ydvVtsC%<PJbhSJ_ld8i*txwl@{mo{69^z
zrZ9*93zjylTlY9}{|{F{=n&u(<ueMxG;2%s*!sq^6I?v$Q!x+={5<4?2sB_23h<Sh
zl;2mAx8&@@GJ)F|0m=>l8D2XSw$l?AXZHTW4nu!d1u&o+Zcee**Eo?=I(||B8|O4R
zj6DMVZG3>aMU-|Xfxk>5A3w^;8quv&zt;Ns1x93tH*pyg^R*SIm81if{cDcY)DUj2
zyGGTF<FSS*xx4S#?2!}&av8+weD1;?$wt78X#J~z3#ecK$mvvSnJVe=Wwe_Z+hX=)
zAI8A8v)(_)nj_{b@c;KpX6St`ovc&<*%*lviN3dfSO!j2yKKRyjh;cy1TB;s`S9zW
zQu6r6?CN0>B8qp*LdRVJJ4R{R*6vs?UlopWt`U|=bT6Bxg=M!|a&!f*m`3dt6O?!L
z9+{Zw4^T)q%nS-(phe&Kam%iX&f|06+~$@+%gfj=O)Uf57!Q(P&FLs5U0)~(aic~(
zp9TP>Hsv*~>jlb)0WLu<c)O^Q&LgwzE};iD>Y6j0?6O7-?&AJA3%cnVqri^;ImA{^
z!{R|HfWy>Hf>dr@;Hb-I2a-l;-TGeYnB;40sI-|yb-~`sBvxgo0AIJ`g30T|k9&Nz
z-?xi3W9}iezp?m;%AnMIUouB^@noPCFdGt~H06z>b8anM8bhKdfZk!hP^NwrBK9Lb
zESp=HQ51Y5S!qJN`&KL`BSp|rY6W&`w3KlP997aC_ZELJnsrA=Ulcvet{`jz0}BR?
zI1j_8mc!8L3|}Je;_G2m6hdq6ER=2#cwp45xu?T%2FhzrzQkf_K+adOE&h`7qmclc
z-GR$?2PeCvS*^#vQUkZk_fH@4M@=&|<7HHldX|I^#a1C}1~uni=qUQNbGjCpWDjBc
z#;d7YYlwT!XuVnKi{_UAA+{5ICO1e~t<&{I9zXZKC!w6#DLY>c?J0G)Oy@W(^&`p9
zE6v|sXbN>-oTS#r>3TvZ{G0%D`4h*Cho)96tpJqZ0_SP2gjhC*K{Qo>XhX5`#`JEU
zV&W*)BOEsh?SZ_}b<GAX7lBa}+!z<+L4rSDc#pAbBUKJRB;J1i=A6@pMge!Y5OBII
zN*;D_SX3Y>WPfE-CH@DS#@gj^(l_-)hZ_{Lp^bcQx?u(6aE%^_^y74C{nd%3J%5g&
zO82+^A>oHTdTXhBXwT;**wKPUt2I+e(O4JiP#&rCk-2{A%7YTvhUC06*_j2kyq_*J
z>h+z_MsgKEHjK+74E_XSlqwRC)7Uf%Y9gvZX2&$YTcyw?FhmvHk>5;ahZi?KKp3TQ
z_H3n&V4*;6%79!fN1z`u!pm$0&>>2W5x}hP`njRNNL}{IswT+7G`IdU`=55$&-C|`
zy}hy@%7>>wD&;3wt4<+18TBctI_8%Q9{$9b2N$Z%U5+!?^oNo*@YR`EmwJVD`45Vb
z2>QAiLMk+>AiF#G0;ojcHY_D(Toys%%U84^C!D6&io*W?PwQepEFi}+mB(n6Vi`iV
zwuyxfFU!EYo30%bjW_r#b&;u<fl#Bg`eDVQ2vKI7Ns@eADbQ{`A&sE$ua8!o>Cm_-
zqOig{^TU<*x{f^kq0;MByQcF?Yl&YivOE59BZK~BP<r6I;CbJrAO0>Ax@RgrVycp}
zN|`*Kk5>|op@z8?TzPDBew7AoPbAfjp-~wUYNu1!QDgwMJ;E)dU;<f^nOq_MexR^`
zss<h(Re3`As;=NKC0rbNwNJboaP=mv@+MR4a&CURYm6G~>O&5AMQ{_bJ(k^mT6`H5
zQ{qqhqidCkk-PQk0xrt>6(EE2Xmy9hq%*^>+$XCA+Eh>D9~qG;h&}TW^D^4cl_%*#
zpcZ-7PVz--X7-fNmhEpwK~$^e#i?>IuvT!l>m7=pTsqk_Lh#5PQj|YQ5!DJ`%u7?z
z+m_eHnzjFS8NhRsc<Gpkvdk|MD4qVYs;?tgY|%k(eLO=E+zP+#x^wXPL<RUS#_EU3
z_TMuJj){FyNsC6ulImBquM+z(!0`&_dTO2*T;!Kzk>KU}kYS2oOjS<k-#dX%O-VDq
z6slW&SSMng|9H4MKka1();TMS1(ZTbU_*wVv?h(~+4w$Y<8I7bqtM;HvfCgi7%n$%
z+|0I}sQ!b1A@Dnb)6YDKu%-!2DJ8uEYJPu2<GCO3#G%dg;Q)U$Ohq}AN5A_2F$Kx>
z@qF5@ok?A1{AcSFd6h=$0RXkN#(Q}ZIB$>&A5S{d3G0`Tq2CkThSgkAWL>ZF^jm*M
z{N3YzcGT)M=J6+*o_gkxKxMnGeyPtW$|`sG(QUU^aYoCYMAF~5EQq67|Lv2UL2nlA
zbQ6#!0cA*t{#}5XQeTb4*^F4etCbWxClIOZ)@`j2ZAOhV1Y*5i(LfI?EIE%*N0%X}
z(fO(`zRdl4`Z$99KYVt-BB`SBU}JW<jmXp+1YL}_Gh0f>P&EMoq5UlZe-@VOWk&F`
zW`zu5o0nan0!6RDjt-57^3-)o<KLfp<$U;dbwKC-O-xG%k?eUYe&@Lsd#MQ`aegKK
z@By8CwYXQXg}3vag=2eSUu!hJ%^<@|ZMOGvA#uH*QLxZ)+Oaw&R%D(a(Vf^Hyo#bH
zqD0{rsZ~awX$s@1JC@^jfv3RL-AMyi^%#ZFUxW<B2@C>^lCFA~&E(7;m-nkgay2uW
zJ{?iu)n^`T52#E%8YLz9^#M*SbIb!ivF<D&!{h5>cBukgdKtYUc|1>Tx?8f3`p3iU
ziD&Hf((6{{(;Bc>4~g1nNI}o@IEAT`>WhZ}o6TR>gct7>?mci=k4thA-v`Ws1qx0Z
zo)yHUk|2V;JZOW>c+lAktbFSsgk@4(<}@u?W}6O{btAx2^h^eA@JLt*XductINfz#
z><U2r<CrGMIx>sGBj^e1FN(ti`GHl4|7Fj`?RE377Q)`CKy@vFmpuNxIbXYlat;W9
z{#pyOyA62vkPQ)i2Qkkm8qDT<yz&61%C#Wz_M3mHaUL(;bAyp>IvH$~_6`gGnLOpL
zmABX(<;Nq>W+HP|5jNqroX%zLeQ&b4OumTFAZMcQy5*{Ynp73#D?DNEIT2EcMYoDf
z_kycocb-i*HMvP-4^-j<l(=EQ;(@q7%GP$GxT4h60mqq@l#?BehT#)7!xve7V!>{}
z{}=@~h_BiwNCz&9^g|inVY7IF0YCJNc!eRwp?FqvmZZqS5&rUDSu)E2<c`d1>{Q$)
z2BSF7D`mVsC{R3^@f^>CeF3S`PMY~^Avz_m8;BzOv;V2NowV8GgD+aejUj+$y<(Zx
z(pmY8`|-}+Iwny&JPV^Dx!)L0Y=>DcdnR~0X)9cp)Q|bU_|J25R#^q@u24Uio*cu8
zjW}a>U2;jPU&ZVy>u@xq&ZZPr-MIYi%O#dd?m?x!6RS^eK715e!k=Cw<4CaH&pBRt
z?>27J93UgLHanWD7zB-2po|hr{z-5rLLfU3uwXN;U~l}5$)GAsC6YT955m?nnGO5a
zDBiP=V_ZSWN}%cXx)fg(xx3E!d`mGG7;^bC)g7^4w(hsVXG%bedG9=(iunx{b-S&Y
zz>STYY#U&=yuNC<l}CQX4epDDr5tKp#`0UQp2eXnbwZ4B5IO{7NW=q3q8bqJJ~AVy
zPnXQCDH2i47Xo)HK^1={lvuWcjf@=vAwdsDD^BKV<?*xI^8IcV(7Bjr`@sr5)j;LE
z=S(&DLk<IZ1Vk_#`Cb3j?@{XlRJ4PoB=4sik6`{&cqzu3N;eAw=t0)Ov)2xX?4`5A
z2@S&4a%_^s0;lzTWI33fbk@{2rE__cgafwnYPdoLp9R9To470RQHD~k$#-mi_NG!W
zmy<e$Z^@pTe|P<KV!#N)6q#yEKL7X~IKynx>-GYj6hfWqjGq0xK3f4!kUuUS?1lM1
ztzxvnCqf%Xre=FWfI;oRN2HKaGrbWw9QFgpmNeq{XF%z2>8PIfqV#hHXS<<+;lZDY
zOZ0uM;i<TM11#tQqBkd3J(FCJ5MHfP4w8VlVQuYj5vnhN6nIU&skG{MncrR#AZn-~
z=i{uPNX^+GMl1-{ZG!t%^S3UaJTwDX0PEn=;q7zWNEE1n+#4;e89D-;d$gDv$P}i=
zPk`$n$v?rGneZJl$%uD9Rmbk@uEwyz_$kEwpsCs`KK@?@n&O+0T(RkWM$*z0Bdosd
z0St~)rY5+j+~vHBxMi>Um;Rhz4g_n}B`Mhd1o~XT-|iW>eAllihrZb_sr}Pb6)&6p
zhQnl<Y!G@IR`9Sg^yx)ZtHED1oM6+WCOPFr1&=Eezfb+#^O<=NR->HDjTYpj07Jmx
zl80#x-&!m{M2BYF!R0#$f67EF-U<9;zuJ&1tw3-D2)kt85<aMo$!JO4pZw|%ggMVC
z<<XQ7-V}D@olIK!`#u+=IkmR57bI~$0fv8cLBB;sR_t<@d1&)wO)L@}Ych5Lk{ERu
zb`BE_;oXdqrOs8^^S03-f!1Z~eUbQ>az3J$Os@TQTq%Y<OFl^yFQY*U&T_7gMn^r&
zmiLROFL!<=KJ(#{n7dyEG2yX{uuBnKoD9K3$-OBHzaz$Wv_J*%yEM`AUg5o_ppjkd
ziCR0Tsf&r3sCM7dzv2E$1Wmz#TD<)?_ATV3Tc4UfLE6TH>`9Y9PMpZQ;MOYpAPyD5
zNw)Zm5VIlvBycVCzA@S|@44Q<nI(2Be?W2cLMwr@<!TpqOR1c<CAo-TL8D8|#8kz|
z$oRd7aIj@XmqAu3VQv#11&!gNKY2A3#sN?;M6lxCs_Kvn`eM8@ulN<Cv(}@qGnN#m
zO9QVA2(9DxFaq9*K0Mm<%0ANR(@=D1to+vQ0*reXTcw$0mb+2NY<ypctDYiHn@@Uo
zaikMNQ)rc(`g}E8%rv*Senaqzyx5zeTEHrwa-xtEnEyI|u<^vXK~^f;^CV@8$im`S
zD7U*1#{np4+qs!K<PNvP)~#VMDSTTGw@rR+gU5p=6TIp!{5rfnJrQH&j}H3wT;|TB
zC5v66)uOu;b~m}Yn$ch^#uVxeIA+W$vP90hIoC9ZiER+G`#~tgv}G)Hr%jyfYdRZm
zr7&=^3M>IiQW@mjU#E3Uot?Ehex71IS%Jh>F0`j@l<f4t4I3Q?iuzM^V`c_3iG^+u
z?pze5gm7wNp_U<}`S(G6VqwE4W;`7!O#kLuF6V|{AuRGMBo5i{ANq78x~XKM8Bc)Y
z=)UO}k{puCT*f<-qB~Kl?*G69b;7GZB~G1q{p2!+BxiO@OY`f;uN2GBV1hsA!G&&q
zUy!+|wc1ms|6-;$HTHMJ#xE4)*MI#T71nS`ST4M?^<C67e5Q=+iRbD+e@jcmjQRij
zx3oBEr~1pTT<&0j&xJnz(fBALlnvFCWr``M3|%Y8*F<9JlPS?$L>pMY<c!KvUCO$v
zS-ETyOXg%d)p@_6?V{)~MV4H&e$u8RI<qIW_e2mLV#OIX9m#2M(^I$TIX%Um(d}{U
z=L?je;Q~<gVGvHnR_Jt!2pQ`NhUToFHL@(DZ{nOVcByw};PKMoC8r?)GoM)V%GgA3
zp$ZQGoY+3C`muhrPp5*iZ*bSW<<fE`FHbW7IG-tb!ce5IF;)B(D}%s4#EjDv%_T5{
zo3k5BIy)Ja0N7|hK6?)4$!@^vBbBM!W^PpA$*w~<ou(yM)^|&9CXtSfEG*kFdWtSQ
zRO#>v{Fv-Kbu@y38|O>2HDjw!W*%~M)GRiQMeC8vi(AE+G7|52#b3>hSG7QHniSZw
z2?&+8A5wI9`BiY+TpZn+8*(?rMB8ml^RMU%-2|uQ7Y=853RSe~U<;*LnpKD**(<cE
zljk601F)UJp3jfrwfSQ+Gcv~&=kBk@S;*O5wI%i+mSF1>I{4mzA7z4eg^@p9A;`N9
zJ#fHuJBN->7vHSF=I_R2BIpsShQ<+mHR*Kuk51qf@&6`0+;wi8JwaU=j9x_1@J9`w
z8U;4v>_;kmnsyh*uPcwH{*W5ZeLf0(cm45Y_Aph}uq*t+O=F1Zbh8537#ID}jqc!b
z{HlR3fJo>@=t$&eJcSJQzlgfizkQf}(L6d3jWKo97MZ*FMFY3a6J5ghx(|Bn(>lcq
zbFBGSpyqx<yS{{`66_z%C+;sw>@{<%47D#t99DHY=zoo6(-dLUbR%0EcloJ<#~^=B
zXtfk1Ja{xUlat_4nl0jsS%X`^auG1lL~AZhH^8;n4!r9fKylzE4VFm0>>(ixcx^8)
zEKW^?^}wD?@luwYa$hB{tgk~6E_CpUPv>0l$cbtAL8ZKMu}|@lJ4jb%#PjE3Jn{Nx
z)-C?^3iVeWu}dZ9ZZ~bII=K7idnR3!`9JS>jd)sYWO$%w{O<^av4kf@<So3SHMwwi
z2I_;>e@!37*kk;`8m+ATnK#KCB^=k#{5(GN!-fV7rN>yxfZAMI9FG_j7R3ILPwVBL
za~2-LaV}9~l&W}uf;m4ino-!O349;Gq75!v+wn1KR3Or+10O2dAKEeq1b@g^h=c{c
z75UZX`1$K&kY%vXFPmxRFM=0D*HFlGX&?Uu!F42Ln%RK=J)U5Mkh4B_o&+Y%JIYqr
zAE#7QEYFBXfuAMF2ZL6Gp~hwvU{e5@9);yay-PMr*l-;Y-Syw?D<C%KKa_V#NVcqv
zpxc!RwVB>L{HPk?%|+YX^x$f!;4_!eN{i7mKTvZt-hzrNG`j_Ju;GJIp;u1R!XKn|
zg9m=Iwmf9yuaMzd`BAs!tq}fyOSG$cWI|05^}33CN=zasvWc4CW6#>bmqhgS@*mS+
zTK<n`>%=EVDVoFeU%77h(ifVO<}02b?OFUEdv5~O#Imk|22fE^aYjTyMMXqrWe&j+
z5fK#uks%^tHX?+13LzpYDhi??B12RJRECJmV^EYZhd~H)m;+>DOvu#zf_tC6&pqqD
zbB^cUyViSa+4L%^>i_<~tH1iIx+`7P-CR9Gz0x6%M}3Gweuu8TTbCN%^YsIwx7;#4
zdPH`3*D@7dyVC~I9bM<|_<b1<e2LP3T{g;+>$vn?G|$(5=D~*dHJ81kN)4vk`L3q}
z>gdpyn{0HaOe53vz6|NcvTv0z4E>ks#Z2FRwkg^fEje)o(Or?+DD)51yo!S3r&rD*
zddmDJ<8|Kr&0nm$UWR`hNz%ORgg9Fwi->F0l=A7qB;BRCFvc!cc{Sg5bh_NU8`f;w
zqFi2YJ4(=#2)=tlFOsi|ID(f0?9K%V;7hCG+$z=Zfsb@S;i9;Ym$Z{SFagWCCbw^M
zHe>Eju{aCNBMP_DIcwfda1hhiFn!K$699q|Md0V%IZVY=e$HIS!+z#$tR^}k{j00m
zz))WIh`b}f%A<OGjb~Si>H!o*-A*Z@>P&RJX-TN(Oj+d88$O>!Hbm0D!G|bFq?($V
z7c|8&g9t@?J|G8o#RPjk*v@ZtN#Ue6WK6~^%z0o9%YmV>XAxIqs-p4VEJD1JeOXc@
z_S1a;Y!1p1SzR@p41qu@-QA8_1|~V2ZCH0(eLby-JiQ4LUUj}c(<yVsjb+H+Zho<P
zw(oi#=+RIe?vqg0*nIt3^7ez<jow(udOnt0&~iADuCbDRaaCGtwCIgl>(mjJW>0v2
zzDmWdSK{HG6Km7`f{JF+L`*zmk=JBa+`J;sx~5j>VpQk9TCZy((cu}Xx%SBR&7b(v
z{qJ9BH_aDK_jPxtn8a<W4!?+!(O{ig#XJAt=GRk-`VU=O!=q9%2fjsnb~tTQJf5Jx
z?d@`SsT@50SZ?152xM81@Judpo9h7xM)#ZW%>Kt)U=sc119z(W`sEI%wwvx!+VlAB
zlg&?0Ubqj_UUW9Rd8#}2+Tu&`HNH=Va~qEBE+8wX#a=kAv=j(PY&IL9Qr%A9C5L~K
zi$BBLI0?73!uEUUjLpsYfLt!uC$zyYL(ZyG#i|k$6r|VXOr6JN&x1T3Pwli{Rxm6T
zbmb8T!2}~CqtG6RkBEC}j`Ab_&wh71VivbFSJ=MvYt+rl=jQpHm2QK*wK->0uW{Pv
z?L!+^YmmZ^5y1V-rccO&4~WJ0)x47$IjLXn!-roY%;IbuNVzEqO($&SW}R==&mFW&
z$6idbl{r;*u~K-rb%lu>kWQyhN8LvUrn3oW6wpT!cb2yeC$UWUDb}(LI_2>(j%>8i
zGuO71(oZUs9g7nH)^!}D8K6_noL>A$yF}kdxLALVttGfPpn#hvzmr9PIn$@*<vTey
z*X@*Z85Jlpp$|J3VRxHeASWptk6ZLyCl-~KIA0N>v+eN~j?qg2jPPXM>iOOVgG}be
z=r`H?Xtf!4Rzb>HjM~JAX;eWs`}*AZ&TxJ(s&>Y({aWLs_T;q$501eEuBRSM`*gli
z?72G+g<>D3?-5k-mbtd32aazB5r#E;W_LF^R_=vP@o_(DD#bFshtlNBbW!7U#!`32
ze{@32G*!BB+27#>te^r|mfrW5bvK)WAGd*McLn^M37K!^wks=fe$H)wgWi-0e?+4U
zA3HD+{G4<!`#gRh<7Shq^*H{a;8Pz@0p4jio5cE}RnnZ|zK89ohgchr(%bhjAa7rJ
zuYN-U^?_gX!u8IV+|mno+4`LoXO!J-2=mfUY#dYNGQI}yWt+xVFw!)!sf_rW$W(xM
zS*GwhtkUfe%ci`KpfaJ5HJ7~#X01kxcXkAecCmM@M@joN7S!ikrFYM5?=Av29Z6~x
z#DFF)MkZ(g_6?NAuz)B2!$}p=QHxq&-K9;TH!8SE@hH*7;ENgaM~W;QiL><|Ta7lc
z^I$&7LDBUgIfc_0vWXJ*T)Lr}MyE!o=JVDR(mm`2wJ+Or7Na3D?Un0&+}Rj;AMfbd
z7a#|-dv5;%uOH0Q#AZ4J#1dJ9`Ov3+Dho48=y3e~2E#(DMU67Vw!%??KE<iVbNDJH
z|1c_fQH#AlIxZaJHnYoJ(Y-#UyB18<#LlVKhT3&1p-srmrB|a{FP-Q+gQJiH-Mr5)
zJ-<AkigWrNUh<ZwLz!*W*+yhjP6jQg_ZX8S&&X_o&85VZunWw7bFDCjR?g%9Xplcz
zrGvS_hX3^~#$Z%FB0lPdPP)TB2t?HMuTJRfq5p9YBs3uGgu2d~e>L8AV(9eyJ8>U3
zKDl)#?%b+vRbm?tIPJYCx~_iq=t}e2N?(R~v#a+q-^xZ`u39^<a9N_fIj_<#U62dZ
z<#4I+kL$kABQjtHg6>J;S&Tn7uN|8V(EfjxRhEz83MT(J0ka<RLUjDR@Fja0u(G${
z8;qf#d#@l_FlNSu&kF_EO6={!JL5l*=W+YT@Kf;f^_W)tn^-Us*pkLa2$WBEfqeoY
za2jmEr{4k1!Iv8WDS_K|caYQT2nMzy@xaVUo=~ylH_#URaI%LC_E6=KZ-vOxHwdBd
zAA*xz^4E>Hq(fgo^|@AjdLCVJE>w`I-z&sVU1b{ylppr<=5Z5ez)WBv*#&RpjKh@Y
z@j(Hl9iOg6D?-p0qNVzITtXxREf_(IBr|kUNObjO5QvE7UruH9;D5=fI)_}tuWY_|
zUfgSgxYv3quk}lj-10DqqV!$h!&Q{9V~G|#s`<@k%cpxx|6!MJ_1ZzHWLi-48VUl~
z_)-ft(t+f&gW&Troj{~*6C7lJukhR2@X64TpuPrE8R5(P<Q#|2bMnt_;z0{A9Xfd6
zF#}#mMOo`nv17r>XkJY>zSOZ@(BM<ago7kXP-qW~L<7+-y}=9;v$s&dZDdpM0z8f@
zM`CBPjdMBzcu6NZu(Bk#Ka0j?ulTpASu}>N=42H^FTTGoY_t3RqSuc7Z`=4MKw+Eh
zKL2?0k!^Qd<8Ce6leKKmPLWloj73+RdLm5jblN+3<weBap|G3&r6^uz9Y(m=r?2l?
z`UmdpG=0+hRkV#{(WrMxi=H<RTjYTR`(k*Qk6^#v4Ib03un5DrPshM3ia-bbtDu@)
zQ4z+2$+ECv(lAA5@yu?F5~>i)4M6cIPqnau_*_4bXmV3%<2hZYVy+uw+RdyK#CuW!
zY*gO>P|{B1vEcP8cwX5+5Dov9#K2GXrU>HMFX;gl%wCLZ9Y%<rX=9b)>0Ov0H9EN1
z+1m>X=z)@j?{6iu;KZIEMo>Z{_+C(dq#OaJm2-GP6RZH9WiyurZ+2xH^3*2tQ7Hn_
z#S8|_A-NRv^_v3PJKpmwZ2rHKA^A`0Qz)9IN#YP=K!BO;RR~1v@n0U}#QNuo|DIIn
zG5wz(536sx=XCnjGU0w!&nIE-g6Q6JUt*0{{l5EF)hJhAzy9<L?JIu>bTlKnq;06h
znI5&)jpPX`|Nc0kXAW6+5U}RaF78jIKBcH3HERkzg5D*&74<+r9|rn&<w$VxCSVIc
zwk!Dl$IvJxx6i?q<<c#J%db$0b5H!PK;Z+vk6dUo4;f@xUXD~2r6KWoZnG}Vf_}lS
zAX|jWnZ16Go=92&ixTUc8*3_Z2JCxuqQ&5yw-!Qz+P7I#c;t{ad?47gMxPzzC~=7x
zud^wHRn4yUMDFZs@3w(6dGrxH_JbE$A$ne|69auyS9-cELaOsP<1#NmcIo)vN1k*I
zS-T9Bxj%9^3Cap0=Pd+=QSRV2UXst!Q7ogg=BAI2Je}@Aa1+_&vwg4y!z)Jc=C`5D
zMB&sKWiH+vbPEHVT0kflJIP!pC}@St{B&S<8k7+9=K=zv=E4F(9g*@D06zFx<ZKYG
z1GJ0GA7MHT1BCB$(ZT}do#L%!xqopso~l$(<VsCqXQe|z))5$#<UHbF3UGp(krEz0
zZ8zvJzP-yOALEExV#RBe(X<6nr4gk%&ygI@QH!mOGWpP|6t>(F=eifzw}J~Ol?p<V
z&7I3{VA(XHksy+V9g%wlt3)mtP$6CKY_f~y&0|bKz3i|~rqmLa&}Hq9`W!)h(u{V=
z78**~z?gYEAhTUL#DrE+bWKR_nr)fI>rTr`dgSt6@#>d!zFexI<~kn+60XEgf#}p&
zwvf$%M>`U`rq!#`ndN6Oe|p$XNsyTS80eY6{jUUS?kzsN>(fT(YaRe?3_R319LVuA
zvU>n*JPK+FT%akR+j!;4(&ZMhbbJQ>?YP#930wweM^3X()tUjt`b7yra8=UDpl6-J
zE2aEj4fDFnp9TIOM1&2q^~l;=#t^Y1Z+D7_UplgS<C8miVr$vAX@?Rp&!9Ei*mtM}
z(<sV|UO^ahA{zMbcX$RS5pd@gO_J09_anXB9>tsTi|hX7Y39jA24XF5cxb6YAmTND
zM-})lRsRiukgDX*al`uSPbe-s>bX)@R2kRZ$lWBmYrSwk8Zo$jW!QRsu}~?()jLXc
z2dqq=4^{XKj1!Rxq&V!gx)-pbUb^I(YW4qar)s-SYL}O-&8LHa)Eo)-Omg2SSs=%I
zF`50=;la~<3cwMyMt#mL`|d13eB9#+EKF1F?%_trDHYp&jl^;88Fz%An=h;``1TV2
z7HYB!W7_nL*ZD|WVJ`Abvl75rV887z`oc$!l!U=>)wOAR*q6*zw=CKrstl$x3{}w;
z5h2q((2Ik}WDz%tg-<~bDdb&$8Uce4K8nx+J)BtAFas|y$V&j%GM6&aG|5HeLWdJT
ztcXmw(MM~5x1tNK=zdmDTp5s*ldlJRAYeR4?)`4ec3!^p$CH3TcqzwCzY<Tt$Z$C&
z--4U~$$j!QU{W1Fw|W0XokC(Z;(~mM=fb61cx|!HTKG$Wl*{8cmtXuy;l~#=GFL3R
zHG8@9(-!g^)iCG9_=lyZ8T?2`-rL*!y>m%@YXT9#UX~gB;uG+Em$<j)U@}J%S%p_l
z5*fr@bOL;9pGrf3(^iA{$#!<h+u!3B`djNE(>5PAf){>d3|kzCS%RMc+SZ)vra~}j
z2WAybH3!!KNCNz+NYR}&OIdS@w$~wx$^{Ti!%}+dpv9*pD>rrl)=O4YzGAN}S^0jO
zuc8Uz$6bB`GfiAdf8m?joLF%Se_`!3S$Rov;}%RwN306|{^TNM$zsP!%!RW*05in8
zrE={8_L#1?X%db<`gkV(S``EcK3s#{QwOQzw)QN-jbib8#P(1LZX+1pxg}(|7U(c(
z)UqFAx+3cVM)9W4jGl2S-?US@MHHj2HfaDBqt&zyH<I<mE)Rjpt^Qn@R#d;(8-E7j
zGA+a1;}OjC%M}&A<U^lVDA8aG>T5|n2)2MI`L31-vMel{VDm-q`?y-NT6P#%Go5ru
zZlAEeBYOCz*3vDjF>NIxKs&o4<2z!NkcXCyn8`e3TKNiKPvn~49>7d_a_1zF<^C3g
z@aKzm*Nolxrh7Z}_ON>UH8D@M#V(IBxm6dO!@y>?-3Y%xy5#_7V?WAvfI9wtv_}{7
zH2tK?TtJUCLmXg&eKP9pp(G2-a<wXq@?uCKR1{GBoNL*6_QIlppMuO~cHTA_en3rG
zL8{ciD!x;iR>uO)4W+^4VW?rP0ZJ+klEPb%f7re6X^%M8syZ>RQJB$VzfE$l=?B0M
zUn`RANb78S0fzQ5%MY;3Cy^Ev)56b%pmox#*NB;xnHeEGCpV>ts}JI(c@7UK@B5IR
zL_pj81mJ__m2Ch*VJkzUP3yo*uLU{sJFfa=e+89uE8gSNE~fhDgx-{|9Tn<XWwUss
zt#-Yq`4(Y4XF<Ds9Jfi1`c8VzQqR7m$7R~Wg@{HrGsEqec+04y<%BKC5wCSS?N_8%
znv8ZTQz|yO^A?$)TpXX$RW_p^1k}BwQYf3MMfoMnsN%}ng2QPmI{C?!qVB<*WY{i@
zDwt%^=l8zlWLv!QG^J<Q+lYnKh#R(8jV8IqUoJ9TTedQ?o44jJD<&(*-g(QS59t||
zX`hXgm{as(AE+ZWy}kF^O~WrI_56g<$i)XRl6VF?$R2!w!W?%6>>Xi`lOOPpk+B%*
z2#JT(23Xvp4^uMXx?BJ{>H3uAOISev=(MDZXI-JimK)(9x^yG|7#gEbs*@J${DN(W
ziJfV>{5j~#5kRS%`Sr1gMy1;jOr4;oR)uvVoO=Naz{|X3dOI6uopl?MFJ~N3F7CW=
zA2X4n=!<Q5ECP$s&rZNJ<&u@=<!~4HCB(#D^3eGE*U%%=@ve3W_&vPj;*tyRh_~=(
z4s(1^=-h+R0*BukA((_4vy_~X?|N!FD?Ei>tl2TDCQZmVEh~1K6k}H;3I>f`$IzH{
z?a<F{exscVDV=*hW8>zHQZ~iQw^uxU>bHgtLLVO+Bt9(jI8ICjh6uMNeRicyo$_gF
z2{mm7K*gE(oS{3hnk!=8Ig=u=t#xRC@=VwY@S6yq5m#(YhC`>SiRQT!2w<@q+7O4z
z>Eph}Bgbp*9GNUZFvA5>eC${Hf-6h!7*Cv0@?@KqgrrYW6=>QgnC;Wr;WJzV321yu
zQ`$5U@`l<m2%ekJi!MPFk8hR{I}HZ`N^W@-__`!l-{!T(PG5{;o0=^Iko@L-S((v=
z7}0O@dMD}QeCea)EzrSd?of8|O^(tf6McDxtrEK=`tZtWeC9=#!CkJ+q`tSCv?_`L
ziY=1AWyf81!CUT+HzUQ!pq{2Ag6o0TewQ<80mGeJZ+zF_mJDL^Eu3Gs2wWcPdt*_{
zz_JT0*KA>x9-gXgTK*XpQa<Uk-Fo=bHh#NH6YLPIlR>!C*z~Om=FrKfu$pcx<=0^z
zERf!V;)Hc0$Mz9EpAz2u{M~O)NYuY^!Ty(!AET1Bx6f@pam4J^W`mZfn|Ghm)_7$a
zckSPU@X+kVmM4h<y5{Y37B$^>ErS9$q!d`Wn4neuZ#&k7)b0Lx#6b8Cck6-jltD+M
zEE<sP$7aYd<wDiCsW5ITCi(yDzUa?8uHO24t{ll|=)K1Ql6a|qdD_?2j=xkjmmV0V
z34a_Q{&kz=ss1lj{|$hU)b7t-!|Iz?461}}+#j}4*Q<FiC2eWYcly*Sr5{-nRWdGT
z{KbM#`hP4}Cns_|j?^-XTwWi_B#|2=@h5Wxgn&a*g_EenbR{oNcY0g7np;AGi4Rr(
zcCbXv2XkP|564G*){T(lt&XyI0yZq;AhqUn*VbZWA8BR!nn#K^fZNcO-gM2mF3DOD
zs?}^aM%6Pq2b2);LinziCeeJ#=N>o;+PjqLSM<KvG5z5{cVY?$`6l4h*h`y6m_1%%
z4zns4pVL(|A!k3|2rIfr+gA&-ddyE<@aR_n4>c=k)#SEqS9im<_OUU*5hvih+E$As
z%zR%XYFz%YrL+7K6b79wc)xm%=uqwTh6c-kdIOQKkP%NS9p=@8R}fJYjm|Jz6lSb)
z&d%d5hcXbJsMv&Qk0FszWhTITZ+s$Hk--R3Y3N}4JZ%;Pf9^{~I0;|zo>+)vKMDR+
z)>?#iCErF&be2q3R^ac=`wg%ZicF||xGjy)0DsSI>I9TE>2TE0)FU@z;QeW0b2MG>
zk^a%n0sFweE~R~QBUC4}iL6%gApu=V!m&!k<}9|*#R;3o{hS%COwvn=RJW_mRIhev
zr~D}PMypYoGZBV1q3}j)`h2Jzn<?=&?Q)zTGXE`dIR~puhn^;{N;^w`aROB@<3pr}
zXDospE`AkK5toVt2OLR^Sg_=JCLYyNN&WI((3m5fwb;|A!47K49L^<VwE-6Nh>nHC
zF;xW8k}dvk_}PC00mLwn0}`TF-*zpV5%w47{&MZdX8#TRr?Z5v-Em~CsK$EZ^Gm;Y
zy&G)2t0nx|OZb!ZGU4E9mG1uDJ5SaojCH!_p`VrW_TVSq_7A-<$_ckRq_p?B(qk@c
zf!SP)DSSL&EQZpw0H;?R`lvWJkC`OLk%4Z2y;hiXF}w}v2+F)xb15<(<?vxESZ^Qs
zwZIG}$q`PBBVZYT-gX@}BOZb@rpqezz=%}x+IJNS-+1tFKvEFT)ard8^RW*3iWRk)
ziKR%-!>IV1sd^Uuw|WdT%|Jd0F4_?w{KfS@*<J-95g!k6$5*Gmg+SJk{^AxJ_@9{j
zN1dh7)#I2QN^9=Q-rwZ4bKTbmy6eS<kMF2;oSZTul_5-xiA3NM?#2y7nd|zED_g=-
z;^RMGQQx*^Mfl(T4Z`@`1?m`uh{c2q>$5*lhJDhqATEpS&*1q<&O<;e1Ox<Q?HLw7
z#F`<T*)cLvwGz!^88AQUxGbCJnVkI2%TI|*u~@*1YPSM8Ecn8Cu76zmGZLN5Np`q6
zn>D)3VS9yRT0;(kUXC*Iyg|tfrqblc+{k_<`AC%9OUa<+9{^mC%R&?n3&Q|x)Pzc#
zU~y)IT@iS%^qrc-as3LpNv-2R%D&nA<t0)snU1HVNDDzzuUr+>EKFqQgZYn%A3y>b
z2gd`UjMe%)A9I)1Sq1Z0qLwXI0m|0om906S(z`N|KyFD$f53cXXYT_&u|0WCHy?e%
z=&gxV?fc1#jKx<HJ)i1jNf+fmAXKn3XcE9}+>*t|SYPi1Co#$8VU55P@|~r10BuLG
zHM&)GI9#p8=v`=-p|!Vvsj*T0E*N`@RkDEdgxElq2ALXC#ovGlL$1OCV>Atj6QE^>
zs|vfIz)8EE!cz>rmo<OBC-Ugr>$3@}(?zPv^q3My7tFQqlnVYCq_Um;Hx*WftXmm#
zbnP{k4JLxw#NChX7er5KGral*dny(3V8Jcg&nJ(zzi)Dts%5eWu-P;GG3h3qoLwVY
zGz<87bPHC*Z-F_5lqT<ZDVH#5$AzY(N&32_)kg9b&8xte8s;uVw3^sLO~kd*7H>^X
z9h`8C8v!yuz2oc0zn`BhmHnHW=<BlM`!P+k$j{K?JIcB$bBEC1dQ-kQk9|$MM7-t|
zhPrA6Om%O;c6z;t{_?&#XQFu6ow+NsrZ5w6p!vhByp?@$5#NrJZ*pX;6S~PUL)qJJ
zhL0+sp0OV5-~+2DR%tLL(Ap@w?b+PDW+krNa!TNnyCF$pwv$<HVKrOI5OS`V`H>|1
zZ$Ykoj?Uv&-1b@IQ2PPshE$2Fyf1UR=IVj3^ov{L^4e|F#0p^E*Jlv`STFZ-6VE0o
z-lwy^!g@!y2j~030jzbmJmV5aVQe!LY&==pC%}9VBW6Cu#4Fpq-kv#laz6B1(DGB6
z_GjWle-yacqAeoz(QlIThg13s@KMq!tc&6qEc})!<ly$$09=UWb*UU)-{*F0EJhjI
zIjNLa)NCLvl}~FtDKfS-FW*2va4nD8RYzbCE2-VLuxyqH`b4$jK3gii=0LNHSiO?9
zi<V+QPAnw`VS-4Af-+A7IgWp}&DCEk?{kuF`|WglVRi6>*(RS}S%4zf6?6EOhn($r
z&O!DH%GFB&s5O}7!}3}9fX;pW+=T?5v{ue}Qf%1b*{tdFF8(C>RnZRO?{GCmr7Rr6
z`4o=ZkV27WxK<>yAEFrX^NmN+wNfVMO)+!2_Xxk`%?8ZYUu$ghBLy_n&KHMU?J#AJ
z+EBb=!>4t#866~wX{wQUvT}UtjPV#PR?;(Je#iN5*rB;v6KCLZ{0DyWtbNUg#wl)8
z`BxdMnoU_Wa&pl!hsHLJ+M+%koTw*iU85M(W$Gi2>eXIIeq1}x3^B0@jf-cH0;DrF
zGpPo%*Mkj@5Tawq4-qsPd=f*sxq-vYXpjnO5kwK&fRt~;d9zSla^4-QgpLK-AT4Oh
zP8l%HZeANs=auw;S`JnMcmspR+%f+FbQ^F0apM>Vko4(y+XFYiTTv=T_lB^(A(M;B
z@vet~%svnBR?1LjGZs;Lxyd%fa6#j2(6_9R6FPt!_xCele}paMbb`TZZi#&)qfx_`
zMB&(_IR<?e+cZ|TEv)%2Cq+b>Z#3pNW)qZsEvr5&2iJBjc*oxw&w+_Pdzg)Gl}YN;
z29mtI2ys}{wu~p&*r9)0&_+DI1(C^eu0$9{N;I-Gl|L2VVsv*1Kt-xe!IoU@iWD!8
zE-WfV+<U^0vOA#Iu<fGTe6wnT+`RoO@3(Q49%C{VgFI%3krgfa#imf_2!)HV)EVU*
zYDy4`i7G$O`EoG&pkuPvNm;c^-+2DIrK+9p5u1icT4;K0@vx}HISz&vy(ZLS@5paf
z;sYj!)@4u@_rrO2eLO;J&=(Q=0v&}jP@Ww;Nf+ELByhHTtZvONUN@ULU!XklP{QzY
zJ*c3JRvWPj&^_9G;Ws$3o;lhYQl_P~OVa(hx4n*)-Xr%Z@_y8})@0A*gi3#xzA@2&
zmPtEa7B>(_U1#!+S<uMEN0A*saxM&EuyBy#L2j!M>p=$SmOA9*wUOcg9Fcq#!v<>^
zBQP$(!g{hC$|=6w4WDbS0cClq3V44PK5S^hzohvr+@=Oh&WqaeVFB+wV0-2kwFhYs
zwVv}4+pLj?_@w7)?HFfL5NecQ2N&Xt&sr2&vSp>QTeSXmEiA`WQ6_qr=Zl{fRoacn
zF)K-3Rjd46Fc$Wk-5hlxow3pH#QY6KsF$w>m*PJ4irb4s4Q<|TLGw(D!Y#kLwbElx
z=+<d;R^>VZaw0fRYuilgi?!}%BN7vtBmP!3&47brnQQ*pQptg_VjI~btTKgsc3>1W
zHgi%mX8Z=Z-uLSQZHI)H#N#}D@l-tV1hi#s@ZQe5WG{}=G3S{MTakhj-&*N!y%O?s
z>Vqzr2vlAx`>ok8X=X3U`z`BS`v%3dz5|Y3uRq}(aWveFR}a*EBQz+)Y;JbZ|68UD
z|3R<4;DvYX!{kFE1z3VSG%9fhWiwUG?bm4I@s=eUK>LfvW&?NhP&aw<43Ne~+{D=0
z7n3V4+JBD{D9atoeYOI6fSFL28S(;eGJRUsqWD<-n3#<N=lPbvC=J!T1ZKf2Nj>-p
zY)kI@;k6Y4Yk?O55Lv*~k0|-K?WepOc~u{SCerYBCS%KHII;onlCTUysi<u4{0K^A
zI2<`&v7^sY_8KV;-jKp<CWY4ni<)EKWer>}?!yKgAU6kaBZ?B9>96>{qBMg*K#;Nv
zpIHJHuSdjv8fgPJqWh;xnR_okwhM(f;I2(}<`li1`J|kj)HyR>(iq^-4eI<+$%|#L
zsM{QfeQt8ybkj$EPb!sNGR`<;Ze%uh-e!s*k2pqCJ~9lTCKq1k!IB`8{xn?f)=mRM
z_SX5J+eJH(Tch`!WoXDy^6x|S$!X^p)+1X)Qv9%~hWUh@hWj%4_$e*3%%Dxj-WP9E
zlj0nDp1Q-EpyUcI01l{yG)Fl;acDSSa<(N|!z;?9WaZ<u0Hf*>)L7h*gyG2#3v+Xi
zn?G9vSnp4o6&~FK!iTe6kGnDmA-V2_$izZX#bK|jv~2pD_Q(c?ck&e%3~kEgdM>yn
zdO~}(y7;@B!B4S1M+V@Z$}_ipWJtCJ>g0CPic$|Stk91c*%xy5&Pgj*6yuNOY|7%}
zd*PH-MLpP1Q+vUA7AZ8>4Z~j%^q!~yF9L5M#Y2w=S&d0n<v4!erd&A;rlxp4Dit5w
z%5y7WL?8=b`fqo1G~@{CjuF-slrRFi>%=iRd~5^N2-a@qPaM-fQV7hUPv{rbHp4SL
zb||A-0Y9)BO2f_Jr~15K<t4Jcnx0iQ<~bM{feqJMg^%Pa7Wu@n?ICB%?=B1vE~vA>
zG7Ubkbc@Qkds9&K(B)Rqd=4iHp?^1rR60}mFgfLl4T*hFtHELfmRS)a;t*fC++L4&
zE^Lv+2yL?anCfN$uH@NpTxllGTS9A;MpnvxRWVFi7m!}ADu~wdYDC9Lj-+4|{Xh6k
z2kf!VeVXO5{aLI3(Cq$C-k(apfW<k7qnMiSEACqw*c3<BgKm%DM6*_6>|D0)Q8nQ_
z;N;&p6DNorujJzuBlV^NU>Gxlwm|*aK$+>%<%Z8`A;yK0z0P@Gi4{3pA~HDE+`*vX
znl0jG&caU2xc7OKrCdOh?osg_akE}I)eO*qmnsE~p41edzZreB-9_6P?ZRT0+)v5Q
zoV_5}U(_{O-7qw;${HZM)Uz&M-0_-v=TJXSp6P_S_9oj!Q+(j5K-pu)mPH)LEFN8m
zFO3$(Ui7+?W68&mK(R7l9XWQ=FtM7sh{?9wM}+b**TE>ekb59oa)IshF_>|Vq9koH
zF*ect`2!ktnRK^VD>E;_L+9HKK+2P6Gly>uxIX5~Viupk2M{@AJ3<A?Ae?<S7rb&4
z_P1X1Zx^|x@x(NHXalOXn>QcxIdl`4#j407w2@smTtS{;1>G_7L%y#jyV`p_pqb5u
zpuv?)NSh>2C#BBP-%qc}giW7$Ps8Dzzf>x)x+jf_4iax5r?Y1RPzxRRxN_?wI%WDl
zMV#R+<3KarZ6>B>Yc>7gZ&{DCK;16f^RY?n4P*+etViaP8)l&4ICqgu&V9|oxR>7(
z2m-{v8_id*qbcOPLci~A*h*R`I-#FMv*>+oVPFVmfj-Inp!h__>+k49k)Fg#w+HA@
z?juHSM@WJB(|b%sUFl;NrGT8*SxDt~b~Y*8+l{P86^r+*5=P%MndcK01m21)b_K(p
zg2`5-JoQbwXj@DSn19$9ta^Md4f?LnCZxSC)C&rKT?q;LP-$M)H$&;}7HJ}|pW{Xe
z(Qbf<ZwB+KB~){q7n0VNOAN|C+XF{i;216>PV9J0MQ=1~P%!O#W-!T88|!uD7)Wot
zvE#ZRU+cL-!(`t_;UJ(xLjs(npQ7Uc2lmTnlm~(Z``vV#hQ<MhvAL{zfNx<?si|mO
zNgFW^^)-=c=IfVc@;^{eWBq<%^}v*lh`UDQmWhP(4&-w-$@10|8BLyLPSjYi12HWa
z+vX#mEQqP=C26&MbMU8ZjbVJ~>kkZQOPTN2?}<0+33@23_180!_xId*1M{`w2#2TX
ze+_Xnw*BL9^*>1qhq%=uYax&|qC0u<thEO{yH366`S3s6LId}{^5Gq?i0ptsRu}wL
zVqEBdQo?`K`F&8{tGni;<$swWe9GfVV!#|j;#8e2PPR8tE2U#9;_b?fZy-;&9G|~`
zx)Nwwi2;FLCLvlLlr2-VibBN?b#tbNs*(7m5$*?ePbETNqxWG=H7~53ILw-U4wRG?
zMs*++F*znSYf(m_{I1T9(*Og!iQ&#qlE_GMrGP&>)_~!@VM!I>W|a=8HIHqh#GDn_
z=kySBdyt%G{>gT(m*E|`PQ=sA$$*+Z2LtdqB<%$YP^Bbx%@aM%t1!w%pmuWt3AiaW
z@7BB*R<x-{bWDat8-;7mF5)Iei5jCvF$HU4d<wR(g)`(24;oeK-!p>LJ3}>S-F09V
zV8IDsu9*lLb;M+<>?HLR9uzcQsv`$OCU|ive$_2L<{SmmQ!59m(J46lMODzE?Nfq(
z>8{=f3y;R&?q6NkfEWCR0iS$%ho(zO?(!LM1W(D<c0fsz>pt#43OX47Da*ZQXYf6Z
zx~Z3cJgf>lv5i1}X7Z7g0nQ=Sn6|V1TsiwGw^HqeoWMH`6Z9M6#Bs!_<mu<E%ChI|
zxnw@EYbHA6UQi0#ukx#EMI0Zz2h44?2j=sfh}G#)=KBNzlfBhaqi&N5$;2nzJ+Nj6
zj+i+G`Sy{0w4k=~V6PgT+>;hRTO>bxzSp>(9I7qv15-jjXg*l7Q|4wRjgmAk(S^9Q
zQ-S8coN}I$FZqmxD3a}2!#<jluyvL}>rQa2C;QF68wtw+#r%G&7_4-MMWIm+k6Khi
zYtb$Ka5i|_fEq|aHX=^5sPncCPY3d-7~{f8F;!ZoQo<0@3v=u_AO8%7CL0+Oc$ctM
z&EyxeiYk1_XnP&FzrrR4Mr3glKjoH3&VTEbqHqT$SIj@?T~+$6belg=6N@KOM=g@-
z6Xq`fNhD4+;7_wNgV`NHr@>SN0WA7h!FTu8ju-*j(4^LR%<N7aUITr<Ji~8nCUE>r
z@IbnpoE7lLqxy5scC<vkp%ETo4`tnwcE-yWqG$5VD<dT;wqUCH)d&QleTqNWxoTn^
z;SQy*YF_22BX!OVj(|1JzQUb^C8g$N?gZodN&e~~Aze`|GF=!bA>$POTn(caLGhs#
zji?cRlkbX|F<ndW74(Hlkx((S6t0J320E;ed3k(MvNY&;3N?O?NGqB<JaK;#q+F`Q
zq=7d6)AMN=7P2x*^xeE%XZ7YC4gR)+&$_-ztN|&PXPLq;%9p_Rsu7nTY@Ww>+TUuZ
zD+y};D3qwR)J+<w1>TeD9BTGi;KL_Z6zRc0+01i|eYnH@W%hKtijkm@fo{=l)s%&=
zk9Cv36Z;pj2*@Z8-%y`>1~m%%V+sRh8+_1BtFnr6&nW-t$f77#rnj#~YB6|pduH9D
zC_FrwPmo&V+gk!75+Q~;O5oLyu;_2~6rIYdzd5ysYC)VY_1+FA%tqMFuWZL-BXQ&n
z{%+Y>T@?yBgF-S~cuyEgV7`{2mLo~LSEjJ!i`#V8wVNDg%;$YYH_Vh1lg5yk-7d3S
zL)DS`lq-p!ryTcd1vkzTSrdM%v7gg#_9|<aamoJqj6}nPd!+T%xQMltZaNO2+Rb)n
z8M`Y2iyjuI#RFYIqRhU$lgX5bF{vk0qjFcgBz+C`eX^n0(Vsl3sf2+U*tpktFC0$h
z%OXdeS@L;Uz%-Z!<5s?ij<H~{g9F)*P$m1i2)lT9T}pygf%p6}K{CHx>if6dtvKOe
z2Q$C6q+f%-xpQvx^Nb0C1kzE;ZP8*yPcbC9o4f!+5djo!(qBRAIa%}Wi6d7@ejz!m
zkQQtz>p5zIkK;?=M$BlCtj?rnR1>PZj_gv)l;FKIiNnNbXigG(vvEW(Tt<ScpZj&G
z_-96VReT4~kIu?zqRuAegr+#r{#IijU)uTQ;}eyqbrvoCy|SvAwDHbtR#5X@%4*pP
z*ud==Of-6%@MQr>+b?k_0rYQ$F+Ki`F!I<(^80D_@o6wDnsd4L*|dt6+H)8=Zw88=
zGThM67+Ux!F+xE=?jFwuyT{9n3fsF+x`B^+cY6Vg!5>Auv+?IAkgN1+zIvx0T)fZ7
z&hTimwKLd3&p?jrizs1?C5u(AkTO)dbRzltQOz>BWL%<U8$F|+TV{;=QZPndz?zLR
z_2efQ{LWYSy5eUTBT0R%$7ij{EtJ)8I}m;VLv{E4=<H6bK4vuP^%k@Qge&2mEv_f5
zH2egkY&7(E6WxmQ*adzug0d<7hO_0`1dIV^gpfJ!!)H$beSgjeKn(^qJW8<th8Yk}
zWuEes4Wtyp)Jc)$QVQVV6!PF=@HnA0Iw9N{?~tDN>2=^bNAA?kh}rU2agr^B{hLVF
zIk}*Is5~~kp}jlRQRL<;SIKW4l*8NgaCz^gQfvss&?0+-&Al*xz#}T2UdEz4)plw0
zP9wJp@N-sIEkpe|89=II3EOIog^tDk$q)l&jwNx@WS)O01lDz(E}sv!unP~s2;Ncg
zY@1M`CK37VEbzP=TQBSlECD@`6nZVnDU<SoGRx?U=&K{UZ$1^N&7!$iT>|aE{?ou+
z!IRKtAJvhKJz_ygt>6>)@I&2&7JYQ)mXM=zVD>eB$}D?Pjk4G+{sQ=X^)S#|hp!C+
z`WKm2e>VC5I(?~J_3OE<@u8B-<bea7%^Jog_QP2GXrEdA^uT(ux7j7|MS+hdW;l00
zIc=6w8g-gVE81GB8yodV(P;STCF9}e<?EWyXYtMpwqH#h?D3k9N}de}d>}!)%2s-Y
zr!tD+^=2V)(J}tbQacCwG$>IW=H=S!-B!9_T~ss)iA?Tc4puLIP8Me77<HobZRi8N
zSz_*aW^Rsc4(Vix?sF<;gXCG*Sg3(M^t53-vzH9KR-ySqW=g+44LW;dK!z}hC<BfG
zQLF5ScxMH}m+H-?;(e49Cmqc|gnj5RMH8K<O-Fyv!xs%Pl}hCLJRB^_c-{lDjxvqx
zyc-dr_jVUCQ1YJR!moa5>IK}=j@{9r)}p!t8?53_*XJn<2w>{mCv((*O}v~Sns?f^
z1b3O8T|ZUu=E~lpM{DVAZ*S^F-!0!riKC|!ChX|I5fv<mR>8^>pRGWc0Yk8f;}b>c
zyY@0v&VOd`Y*Avw@nnk50aaT{ri`+`etVFM!Th3b13Eo)66_DTTl7h}I%eSRSwIhy
zI@n)@jzb--Nm1}!ft!3m3S>MP>B#npzEp>I!#%RhlDDQO^3^&hWqzlj$f-3Z0{paL
zWJlQ<MKJZ#+?lLdeaX?|4xhC9Ze(3gPMAfUc|lzkoUDdZ?y9guMJ14BOTDN2kIkFs
z*pj@`Lx(2p%66clgCfgQb7q@@wy$ztUK@M_pD{3BHXk!!(9Q^8-pS0pMbL}S+7w*p
z6KsQz<(<k&nxoBGM>qv)fsj|XxjVB-sb7Ro?0WvXfhCyy<IU)Qk`~^;c2#(NQHR_*
zA6>QbQPs*E`wUarleH@!J=w5rmqOq&Vf5zUalL1^YggDkH$7_+fD=30Ns&+ZKrOwI
zer%54=HQCI==RuvVrw!k-KftHf26I+u5RS0eOkfA>0cF)7t~5InV42VG*_yhJcmD!
z4w{0C`(J_AuP{)8$O*js3sg2{gTR>x#CmW+EPxZ6OW`qapr!!J71$)tTyl0x3}(Vp
z!S`6WNAD^hcqwQ%nk4DAp*hmwi{1uS@K6w_(H1KFwzt~?ydjp2P2&*;2v<o*e)FSI
z^wa4u3{{7?iHH(D{DaLKJ-7P}Z$?YQaC0M8II}4`z6geRrIN?M2o~NjvpQ%!ON8B5
zWLXOKI0LT%KObKA^M+XHwEv*a1ui_g;qnfi2SvKVLcp$;o2CTg<sJy6Y{Q?L@8}(8
zl{H>}=XVeIPbvWddD5=P@OxdHUa{O20$CpUS1q?4`OgggSFNRCN`u#kaAxL~+sCe~
zTpgyIQxHUTTDk7XuKmmIsSAUMSL>6)OrZNtYRbbV_6ffXTVfS3a-j9G(Rx5s5)Ow)
z*aRG}I1CClW*Wun%cto*oibqe_S-B{=qvTf2^c8n?R&BJbLU@*O$Ac;8dubS@AJQ>
zT^Ez(xjOv0`O_Vn$Q%vS!jJ67Pg(rox_-`hyX4zu6Ibnbbe`{86iK`arlo8pQ*7oC
zlmQakR|u>>#&a;=_-b&Oi$VDywkHV2hu_0bpzjH~KQSc0_+houb;SWag>t}T#nBx3
zbL^REB0+h}qcY2>kl69QA4SzU5oObp8T`4@ndAfOZ0i5ys1rv#5WW~PoIj1@QR){*
z3)SJtcKBkWZ#J-wwGDF@7WJRmGz2?7)J1d5g09J3wZ(RJ1rU|R<Ey|fjFF$T_xu1y
zEg8DMA2m*PSs%a{P{wq{H-NE6%5lRLGx3}t+KeEjTnF$$MF)cXY&Sh3Xwv*~4GF8-
z<Xk~OgyQqJYABiy;5xyAShKwtpB*C3M%xo4knKUS)jG;W&$||a7VltosC;#E<@Krz
zTdxKRg%=7VrcZ{9gfM#8t-R<=cjO>4(zY5D1^Z`6v@%-)%5LS742`KcQGW6>d8-zG
z%WW8c2%9FvNdv1t%LCKI3%FW%XZt<W_182Rp?q~CEFJB94}Wwz0>;nV%pa1(ELIC~
z!j$0Zk8F%FkOkh`#CO-IhVNRE*)El32)AB{1rILA*fmbu{1(ASPP0ktIPfhqDMj~5
z`xkq!c21M`IHoR@aE|dhi3bs887Xrb0$<mETvtWjn&*PQz?gDP+``;5Wpx<F6uCT?
zWi!egSlHNrVY*#<$Wf*CV`lXNn56g8cplze4sSZ~l2bNfHX`3^V*xm<$o&G71rLN@
z8p1~5PZ_Mc16D3JTvA;y&>h4^Vb=LU09Q_#{wv!}O9F$sz$;XPp{8lcX~`z|p1Ip9
z)UXGpYV67bOur40hKp{)_ua`0^73`usH{zQw#$diYm^qG)+<`?7&zGhEy~O24<7Vl
zl*Q{yZF7F4QS(>uKKpxaP*M?z)_o>r&cXpu6fVOIQki|^a|5Hh0(2&7d=HWfiZWor
z#k+88pN0=OQ*4?jh6ja!sgP5r06*h#Bi^F*^&{R8P`>o$S6P5F!_>YGsu89wnlY0o
z7~8Jm1JM$?$V1J|1)!WM5Ta0kzx*5aSY;6>JE(EjTcd($(E2D~Ne`7O<0}V#hV1}z
z{W;E&pQ_=>kuCh_O+<<Aah!@4e`E%kkrIDCVMsn2)8_rVlrWB-R*L|;^wor3Vwtd1
z`Gg@05U!1>0he502)+-~3D%Db*Hv_a4TB&X9&H#cz<V!R&_Oc}X`of^P2+TQ17<4W
zs-DcwlJ{3fMS&^%xB4K3yG*ZL2PJNEN3$AcgozpFGqX8H@|`)ZGK0A06SO(dIjH4(
z#Ix(d$%THZSLdXxpk`*!a|>IhZ75eIfU{OaPkM58jw&DLa0{<5WjBkl?qDxCXbFI{
zy=5g|@xc%<LX!gf{*vqIBM{}w2WtSwOwpbJA-n;0=;gXK0B2hMbR{|dZt3(SS9FmX
zg>SbbQ!F~d)&b-mB}_*985syz&EQ0)_lQt0tp{-5@GtLI+{J9*pK$j1rp1pOg0WCy
zi}Hi=w?KJCY9aMia`>!peL3x~Zh25R-R^(B3A^Q&VOGP&n@<QQf(h69ybVtaHy7^-
zo4i85GHGn^WZf&V35Y@MxY;N1&Ce5HT0xSmejkS3ftT`>eH+$DN){2asHLR=t-UET
zu7Q1L<gWJ?BapXl{KoC%wSLQ!2`!w=zKTKkV!>kk!ezZ+xO2N~)Lq+JW;Da{@=;o8
zrNl%r6HP}O%?2>F2N7$_p68P~A^jQo$GbS&yesY41Z5uJvsk&FCj8iBk6fvRtLeuD
zNkMPr%06W8^$CqDhbV=SLQ|qwd(;%zC2RW_wMEWL`d6;@$h@WiwFj^EDku^lLdCF4
ziRRa2h)GtXYYgNvy|yl8<;OU5HVYmnJ0B$2P8g*vKd<*PD~Z>udtJI?Gc|ha@iska
zQ~C>+@-w->Z$|=w=w5v`sTZU5jhnh$J%IJ16cg|EIAM8<zTHkP(K|~c5AwWu>wUm4
z>hSfgRrTFpddYLJS1|_&+qERFOaV2W8c29BU3%F^pM3QTTs7Ib=ayNp%aEwe*thez
z(qdE?t76NCx>(WswVp>$W1Kf=WJ)7;^`6;v>;4+Ww=A702AL#+qK(Qa2#YRq`~+;b
z38vanvWpinP*x31TbRy8(|b{(t?2JC6xfwq;U@A976bW?Jq4Mv*aKNm+<1$-X_c|y
z!LnDtanW;_-M_^Due3<L;}K3G5=ah$2ZnE^U~tDvyrO{v?Oc-x`E#JRfFdBs+jNrU
zkeY{9t^<}YsI|l13N-w#M%+KI_zsf*WY(@L`?@Y>1b72*k`3$*ZoI5(@&O})O;UNj
zN+n4F#y*VbX-Td?*dZdVj!IB!M=7!c!X)xNXy}xl_{gnkB72^!*l6}<ut%$S`s+kG
z6MU|&_TaV~@yghP);!aRp#;*NA7aa{Jk~PPi46wg{&abNRu0|uYWSMK=Xw5(VdV^&
zgf}8>BE-Y5{CyvwD|7uDYgY?BM?76$4Za&;>^LVI&amuJcv-8RLb+9TpRN-{M~DlX
z4*WiJ#Z`vbS9_jPkBqQYK*Rld#Qi_<YIcz(T2PJJMeDi-uD#;LvP7-GE;nP`23}bx
zL-!-Dz~K@qF`id(y>3ak+F!L&Jm2hdp@m<weE5`RTv*q_V2MGwT*K!=woN<}diR?#
zTPa)2jg@M!Lz3CQK&|#)l%oo|Hk7AFiu7lE#6Suk8XUfIprA)M12*rkes7rfKkxN^
zENSm`a+lHAw&KdM{dbI4{@C~5Il4d0H0<2U@N+A}&aLP+GS9Gjrdd$O;dh5RPI7D~
zb8sVFm1auh1~ZOViRL3@Cp;w-Y%;k`O*aQ)D9cFZWq?BbGSb;HKyp=1vcJG2bYF33
z&jQ}eQ;<)EU4?ZOned_ouL`c<<>;`hDqXn4+~}lDeG+tTfNEDp0XKTbrannJH@bXZ
zv0~2x64nx5z>B7B>XQ=Y=}Ju<%LWvXs~FM#0y~LOn>_G-fw6}W5D4FoQxO8>n_V*j
z1?DP7ybvHcp63F_T#^hv8%yXEm>4S7r=9>~EN`PS9Ka2{FRaTf`CPT6GVs1eOO28#
zxWW0#03&`8+FIUkG8|GX?c{(nErVZO^WEp{fMBEZ6|^mdZ}&iBQ1Du>4BWxH9ke8D
z>=lXzsYWZPp${m_;nYyr6}Fk7PB~pOkZrc^o53FNp<uRsS-;whTq_*;%n$!n?>sQq
z*YiL_ojP#k>tUcGVUnGmiko3J<vzmiyU#33W+1P_YaBMs&+>EpPTFmH6fFD*o<fpT
zjs18T0DJ{=NaUn%JG4hCL+SG@)i6%w*|U2=peh8eQ}#3fGyR6$^mMX(f2Z&jO30Ko
zh~-|P$j2mYm2pul$G+QJbvl8V_(I|aeZv5HyzCThLnmM5>Z1%qML@iB5TB;roNS1r
z>dZjVL~aY$Ba2o~YJSqR;7pmu7KHf;4E4~LWs=YYi$n%WIPKw|J7JYP9>V=rdfet-
ztnf83q8fj>FEi|)YyNvu;bpt$y!kSX&Bi}gcmG)0U4Oa?vTA9bt8m_{cvZ;FquK}8
zz}<r_p3Q+z6C3ljDvS&(W$Q`>vqzr)-%oe{bKd*^O+>b`b3(dBULf5Ly4==l!D<NP
z_q_=B5=3um{9FtK{0Mb^gw3}cG63AB#xKPH@kiJUG0y-1G3{h7++1B^gxf2ojb?&}
zJ{vxwVqi-lQnJNI*Nz2Ip$G&L9(qisfpJ3+=w4x=E;YgxcC`HOWb~6LEEgs2Yd^)5
zZSj1M4=}Dy1A2oKuNc)V1SnoZ;}`HLOL6jZRG1qt6OSJ30jBUOyedEXB-63Blr>Lg
z++CC_PKOGL#tsU{+ybarXMPbLQS}mNCu?1SV&i?Xs#OnVNkbr-3a%F~`Cc+VqwkD#
zS9Q9Eyy~JF=<fN$PYhv!o=(ngF1|ajx*%LVpu3r6_}x2QuR(X)95z=s_dMqEo9n4y
zZx_qpvlpF%-JJEV?S>hxHVo7k8gO^<b=n!|e$&H8KM=b6hh2SPd?{OP_s$;>UpMIP
zBTEO|dCC0T&SOY#mz{@I)m5C;wbgfOYp7~y9n#U!Ik;0(T|-?>T~kd%Q$<5ZUrSS8
zU47>t+is)P!kD4=wd?v9j-UMFaKaRH_iw(wp89HP0RaK30a~g^Z-knLo}S*48BI+U
zAwtC`$ivquP{qSX;ddi{vvb_V$JyJ})7KU0v2)3;(^aIOFLd|rr33xB{c&FIo_`+5
z!{-m~ge<BBI(e#TsH&^|X<4XfDC9){n750QFVg!W5_!|;_cK4~>g^JM^mg;vdCc<g
zP7R@!@b8fBp`GSV&aNK5NT1&f)&5cQucG{A)aAI7uZxk8Dj`W4DjJ6`YUt@7($GJw
ze);e8e+T`8x;gTi>-C`jPF+i1Q|Ax$zXScDZm71z&fl^1qbin8^dIv76^qxL|0L1V
z&-><&y1M49=5o`;-NnP#M@Xc`e<kvov;K9Yx4V<Ck*m8C!bQ!~17WE4SLQ!0-|wXs
z`ijs^)&BI;zZLz@`u#tN{KfnKiTU4+{yNA{k^76TUv&Kx13v}+<z2t%`Y8r}3jE8v
ze$n+)4Ez-Mmv{Z5>!%p_Dey1v`bF1IG4NC1U*7eLuAgGyr@+6w>la-=#lTO2e|gt0
zx_*j*p925#u3vQh6azm6{^ec2==v!JehU1{yMEF2Qw;nR_?LJ6qU)y^_$lx&@A^g8
zPciUQ;9uVLi>{wy;HSX9yz3WTKgGaLfq!||FS>q;fu92Z@~&TW{S*T~1^(q-zv%iY
z27U_s%e#Kj^-~P|6!@Qd*XqAkez<rDmwN;V*L9eRXXQg6J0YgWk6aY459+r-I<pfL
zxfzCxmuE^fKXh&LeH7XIM#|CUeEosEy3K3X=)UNV{d5JVYHU3(`lej89k+8<;+=NM
zTB+<FU$L);8cVzTvQA$PjQf_hVr9}RCzBgeZHyZhu3IU!)}elTX3p)Al;m(AN4vid
z=|%6^N)1`y1ATfh*wR-FD;G|7EEoRI+J0n}uuQx5i$EZImhFW=Zryn$e7F6R^|3<X
z#@ibq5aXlgL?Mt<D^CkER{aA1V&j)@{AwxxPFFD8^g-g5Yd@#=*~#O+nc273cEZ4J
z*4wGwkXvKxW8VpLL(chaxS8d3{LF!zA(;S1-}}-#ah*2;7$(Ob-3xF3;AVSoZq5g{
z%DRWc3F_Eu?0RoN<fHXv`dO{rQM-pf4qt%0(>Su~Rzd5HfZz=?rpIrZe66-F%d>Mo
z0r?*HYMC*;peH%my3A)YPLfE6uc;Qhr77&;Zm2MKL!<ADFUJl%ybownMXo@FecSg7
znf<PgttU=HHJ3@=`m}^g>tOUD3k<|#nob;;+Py_jT`15zD7ntqJ-;W}<M@u_+HZ3n
zrE+Y<s`NL-Lf+jC>1IZo8PN~!4o)2!{D0c}@_4AbzwgmSt`e?MsBAT|#Mt*GQX^L=
zRJIuVlBGe6u?*wK6%(PdM)qVkmTY57_H5brB|Bq@5ym#p(R2Uq`~LHJ{{Q_q%=v!L
z=X}=p=Y7s=j>QQpO;PuS+CNg+?lm^Z!;)jYzLnxfpzk2@FC$nW=n@`iSEc{*q%p!n
zqw!yi_B8SD!N1ESt}^jMd#e}UF!QEgzd_?_0y1#fJLXK^SY>5A9;4By<|57c!9bS{
z;?(k839_2aF{<gQ@s_bP@ySz0h?9oynN&|O-^am?wLkxcz(dn8kb!q^XurT#1Zk!#
zaeLt--iN5&B@>MK;n7Nmq1#S#2OfVJw>wzU5%kolOeq}yY{GTqt%3oGclwZ|n3eIv
zf=~8t^6W3~yy3+pB@7HUdvt^ydi<qtaw{-XbmM6Kz7$L)hZuqGtK73&L*e8SHjfUU
zoy;f|qbp3KDD%z3r*p_FQ{uoZ`r2mL+Eh)$uZK&j<J^YGrkB)Rxk<A@8Eps2t4s&#
zDQzyD#18o4Rl^~Lu%ok-*$gOjT<XK3RYNFn5?G#_smBb3LXne8k8^z1v^G7xr9YgY
z-|nM{tRLL)m|OhICrxz|Wph#{GdG^H*LdZjI}4>pfqGeES1M(qq-Ge{Z4y87Dt{`e
z(!c6>Ks{+L{s(%tE=sXiFOYG-Z_~_U`mn=mKWKAeRe5}G>h-#>OG`%m2?~MW#BE73
zsT@l(>6~235;O10cv85lHb|$vVvN`!?3?l$ERiY;yL0A$WOG2P^)_0_Ld;RB8G{?(
zNe#~+BCe6lA#u1@!O>42=^&GCdTWlQ)zkXGRWf4j9u;_W_i>y5&>?hdrhF+3uI<uV
zVctqlL3hLQC^ND@WSBK3@m?N@u(=-6(KW)RcnL(&-LEK=mT%-*_4ssn5D!kZd=p7E
zr0y)_o!U~aaSc|o@tB;niI_`RQt=|8ut!l9b2F{ekwH53uczF3@kY1;PkR9vlU2Fs
zS2*`Pj~rd*_z0>@Y0}$sbm)HG<Y=U`D#4p}Hqlv~4Hc1Y>h&7$a;8tMb7=5Givhv|
zmfr7(NmfVbSXd$d)GVUenD*mkqLOgL;vkQMZT+3(lopK?fA0l}q`i&ihRAxJJ;Iew
z73jV2{TU6DUcXH-YjD|9e+r$bkwAfG7W<$_b3~kLxY<NWM>%Tyx@U+)3ezLwOn-7T
zriRJdn?_~Z$*<25a~4|cQpbh1A5=1OS8|yQZ=XIgf6Q3wdqnCXFy4nkgQn~7d(;!=
z$BYHzb$fQo(|!WP&B;WfS$3E~b${e)Fq7!qSr4U@!@Jmi1?5o3JCEjvlQqpqH)1*7
ziINaa^31WiAmH+glPWe^_HjppPr{@x_#eW6(WM8yBkR1pty76>b15|<@M44QHv>6E
z|JW8p51I6#4W9ZpszxkaD69TvlMuB1MmoaLDZK5>g5K0<;8T`piw801fP5iTlDTFQ
zb*3LDimoYYBDO7IpImtdi|yA7{jN`Rz03-n!=S$7Zo7Og^L_Sm7zut(Yv5fft<&<!
zq+B}Hd`h%zV(;_hM+V@5&85?E<60}gruCi@e;T1FjOO*LidNoSnRxsZ|Mc>rT5;|V
zPxgnOlnb|S8_uXLYd?AnmX>zRbJFUiTV%PWZ-;cYJQ}T!RrDuqaP%Jb<{on}WqMf4
zpb&8i_x+XFs=rR<lJt?cwI$X>&6DeL74FMXswkQRZ_U@gCOAy^N~s85xz}wsL4Fp?
zXs5I}88$^OMNfZ-{e>R?@)KV2Cd%`l4UO`xrDmM@ctf@YW#Jg4;v$E<_=QHeOKJYD
zv5hL}ehs&$C+yJJ{AdsDGO^+wwxg-PyYvv2M;0{0`I!w=Md3ORj+dKPoy8d+L!&La
zIwhH(Z7(>d*$x$zQX9cN&-E0mPfPEvFw$e}{7@%}OFEyFk4B%#KkN1>P{^%`z`i?z
z%e~U!9e+)B4R(?xQ=RXXTRQR9F+S<|%xe7in!fA0(0cdJ52bCpBC9%5gyoVN(hG{U
z0F^vOo+oq}6YmGL$(Gcj1efHi45Uhi)kaC^?c*$2A?L>~K%MW8dHe}G?)+jWduN2I
zo|2Pr^#i1a57PEt-E-s4V?H_V(shePwxdmjk4opaTA{rke)&ez=e1wZ5#d<whFM`^
zyKPQB*r{MhbMJJf!w2K%=pRdHoEvKEHo<6#%;?5QlCvycMz7Bw&B|VPphJ4Z$lia?
zG;2HoyD@qCMyZz{JGO^+#WYn4yc3<imK2<Dv5J>Xu5TJ3zYc5+U;D0>t~Wap)$8h7
zlzm6&bNx->8RXSn`GVu~)z58%8yFX5T19Z-JaJx{*4)D{ZQZiYIDK^6oYn_Vdrl4M
zTNT74M?SfjIHI3mfb?G^7nXL4(HfxjRRnJcHe7YUx>WTuMXIDcH{QaJvcCy9AG7lD
zHM@RO-~~<2Y6)Z}%fsAN{+M-aS4nmoV~e{APyPk9bMd2~?no72<w)dID_dEvg7HB5
zsCX6licl@;5t`<4g6G^=P7HFCc@?1>DAQM2ar6?N;<u~6vZQ>A(tk#X29;wtYlO`7
zNqB;U47>u-VN)HLI^gTimc=KVf6I>|<kQo`W&{-vtC330qkVHRI>6+8&AuWx^?;lc
zNo{sHc{ak8UwGUWTa~<OgygeGI;Z)ifGhdv<`gwV)pXog5xm0xAd-6Nc)HHW%J%jZ
zN+4~2q1C56+I$%xe%O}1d2@CB0dkGH7<O9IIQ_OHBkH`a%=OfT9#3PTn<uLnw`VAp
zfd;i@A)2Ob0cnU631sH|<$kfb44wLX;w6iF03m!H+~7ns(Ld(&@6}%w`79W4{uG9&
zfuga)<~G~wTJ(lIG@)ig^UNvKde3D2;k0D$7a|k@jiB}T!bXX(slaX%6Df}vA80Sq
z<^iO`4&VpfkDaEO4*`;a7qJCo0#p((9BoP?cE_H{ND3ecS5~lI>vNir+t<N|DDdG6
z+9M_){08X$4EyxY$O6;^nLrqx8<9U9EdmBz9Cc-5`*=82yIi*ymzjduq0~2@xYQZl
zRxefB-!dsC@0!CGp62cUDrHFy4-T>$RCg}vb^Q*Y#AKT+wf24%SPlRrHpTih@Q74e
zhEtfJeAIx+6}1-ioH_|BqdW~TSy69l<%?Js&HXDtU22C3694U){IW(<dvr)*9_>H^
z5GuOY<a;qhSRJ&YpMWKt&x1x(Fs~xjn#Lgb^lQnxhB;N0ju5uHV1(W2V0ia2fS-y$
zVHS%0p1QJk+6(&{@y|r_<5vgy0+i$T&H<ew>pTS?=$;8!(bnV~H`Qg#`(!vfa;(l;
zd}fjRwq|^^f)`Dglk^f+#psIc2RhVeD)m^Re53BfHzuiq3S;s=8ggDb>SA{TTB+UL
z9|ew`#B88lx_TzoQkruIOdtj;&yvSFH7q>I1&}NvIH=Lq93#!C4M6PsED!6tyVo&V
zoW9Dfq_1Cr8-@cvGTz@$QYuX$?}y>S?CYtHyBEJ~C&kL|S^}$r=eN>Bjjz|@_bXRn
zY!;8U_mA;LKDytyT6d5IAiwtWFw#ejn*rBaLm=Kqdy<^KN?!4yhx985d1G-GcmEPn
zFwBwNzUF2ydy^T6hm#nb$nJD<7ltvpC{+kD-v?<(*jM?9rp7tQC#eWLvnFRf7gPga
z1yvXm0H5z822$GpFyt+{?iUWMob=0-p)c&$nov0Jtlq0RC2z<I@PU$sgPwV<T)FMY
z``mvMUR+*KRAPqtKHo*jZ|aw!d1tSEW6sLYojWV_+nE7Cmol57L;@!%3u6Sh-z{%a
zA?$@*h{;<zd{E6v#!-f#w9Iy72XzuZOHrL<k%61480K({u6mMeI2QsR&9|yLmMOJT
z!0o!|R(pXuqy*tT)p+OD(N7}7slq|kVd?K;tuEq%@+`S`GKo2gocHqHTb{M9m`95$
zcMv^}uOy!z1cXO+P=Qf+;?I)$s`?^U3geD)=(92<rHXYU_-*j}2{}Z(0!gDu%pSWD
z6hH0g)pavsMWZTW>E$|p-}?m0#~v&=XQ3w$tPT=5<kN5-F<|1`Ix<SkbSr;Vaq%XP
zs6sX|B7S!1)>S5-VxoI<vVJk_+C(hy-pAhr_RW<pINndtXLo&RHb@8m;va1?U<v)S
zu8n3lZhGBqB|{420O6|Jtv15^>HAeo3{ihrqDu%(*`sdF=H1Lxip*?FI}d_3`pvYw
zT*g?@K>p7$xfOlnmzssfmRzQ5O8uPC1S>;y0XsLx3k{I-Ai8~-MV}2Oqr8n;3m-M5
z(7nkG{_)_Jm<ZulmL9S|0J@c79LpV|4-=&Mase1;1r*hLvi1(6av$@G&di{F^x2F4
zq=e(7a?b@mMn{XzCw;gF$4P`n!mL;gZU5;59aQB@Y*}%V5z6A};9wWb%CA}z3I&Nz
zkhyKM^+kP49|zl#WgQ1}^B!9~+ph!VF!;4vrK?Q4E~QnH`7DQmG|tKW@h4|p-qy2<
zK5k8)TqSi1<n6)IhaEAVyyMaC0*j@Q-EKD1d2aI@Lk|@c>N@u@3FMf;uu&zgsCTV#
z6iU|uzY23u7l;e|+R|jF>Nn@VP3Pey1bde0lbY5F1<Mnkl|_a-(sScJ_M`H<Uz>x8
z*5o%vhM4Z2p1eYuPcN2SbQ1J3x-R&t5_x!zvXAQHdi<&S(g0&hA<0MfrN@bTKggxa
zx5RLp-?2+dTkSY%-uptziR#hymJ~mkes|&R6G~5ct3JEikM1NT{kSjDr|oMAg|D9}
z>FN?L`Joba<>+X_$x3~`AqP6z<D1~E9<?ufnOmfq<MH+{g$Ncx2W&$r=OPy$#3)s3
z5>k(zhIsGUu}q(xiYd<@&I&+qz0dgnBkaUql2e{Xg7ra+xc?WQH<eF>#E+R-bL#Nx
z8`3xjfKK`%bdNV(Vc~HLB}D@m&I2m*JQReJDonJFswBthe+hcpAl57s1G;zxX(rYx
zSI;cwfKH4zJy97e4NMtl-Zi*g^x}<*%2lQW2I3IPreXQVg{=LVzA6|jS-r`@Ms9m<
ze5$QtEXgT_I(_oV*KN``oY#uQxFBl$!!tIDQ^|XrbI;EsJU$99|9Z_y{)0K14Ep_D
zUf*!!f(0un_yIqd*?CftHauSB0(|_~$TbPH6jz|Nbf!zQ*htuH(9yjUFKNz+f$LQ(
z*s$#`ipe_g8oBjjbu;lz&h;f86L<LqPsEWj%zw%e(+y)7r57IfF&;^}JL6!Z#%u&#
z6x5UJ$rXhdF&B6)U4yB-^7*I5*5@xM50E;ere79w+QL9_uk$a;MZSq1`_^--T}dJ4
zTYaP)`WyGc52z6|kmXBPi$41oEFdKOZ6-r(pT=~zeC9?pc_mu{eVwul8g35Rvw_dm
zo5X;4md)2cn*1CYjc%o3mDq_ODx9xBrbAudyn&QUTY{IkVxw`UO!5HMiMNNWAw7%t
zZ}U<|UJWbp&0W!|`{p(wik*yvUqIS}v<}|Z{XC>-LCsdVStfFBT;Z_>#Tr;`Mo?9U
z+*jPSzkBF6>CL0gc96iz*i2$m_WX-L--5c-+3`p2b+B;sVK|&*X^N)l)BpvjX)x*I
z9DezMR9c;dTksB5j4(CSN&TRWT=v*qDjPH5Rw3$fUaR0uH1Dr&rnsEH&+Z<2ASc5A
z7TYy_ggGf)Zy9t?=0?cUXDg_;yMrFmlVMdMVvY2`$?v-(=BhqCo2KTWZaOLgr9!*-
z@U}TmtuQwas0ka&V$m4U7QLX<q>xCrsplN6B)Q!~U=CRZ-ksUiH#>SZG`|dRJ=?Cm
z9reL^#NgB72AGl^lzYLuPy-?<67WgDb1xHyt2l_7MJ%0q=_r0+k+Wk?e=d_UmOuUS
zn!27-xc%e#WT4LT=GRH_97L~3jmCx(<&Z{D)B2B=DEpyzcgYE{nc{*AI5xDHusQZj
z+n<^PVH^grn;%!t#7AQF0@JS>*Yd@c^lhhws1pv2+0o0$t$i`JDq3&<4Q2+FGFGkg
zyp$8&6{n3Ab@9&n;gxiz@vx`Q{}R;DO^+CIB<mPVoxUpZYobmfmQCm&S-K<nMoQun
zY1$3Y)fnynEWzTDddnoygR!b~)T4u1kpnZ#lKFYv*i;19gIv*oaLGa<Wbu>U&-mKW
z&@LxIQ$1b05sIC#{M3X3V_=91Y0{ueN#GY0`7CRp7|4RQ+2`t*|5dKyyjX=*N7h7n
z7YxaTI|c8F_;{J<jd&+?w-W94k?wjgY5Jkj*%@wwbVYi!nZGQjTDMvKdRjX~VWCPP
zU3BK9&$tKl8<iRBgII3}>S>@%jbo!moV0UA&p75k3;Nk!5{933EiYoSuFEy+eX(pC
z`0fWrS3>R8!Kl-RU^*@%rZmn)7t;orutig38KGZUTV`$JE2}W0D3+Vm^_JQz;)_2z
zBwy!=22^d=6<5U`mu>=A?OzQIo^A*Qg5{kG20e{2)2`=_A6IJD(LWk1P)xMy$xiQ4
z{btznhtM@aJ;U8wmc8B1t`|B}L3o8z?SN%71gFUDKb5lasfb(evzlhZ^F$%pnGUk=
zYeUt!EM5WwkAk#j<V1`m*+2Se)SK&Ur0K^`DXLzd|51u94tCgK;P#Csq|?LSry`Q7
z-rBxBm15#SDEH?Qqcpn)>)`aM{LZQS1c@UigRoSD-?~i8)&Xi!oVj&Z=cy{lpV;Os
zA1%1`!a{>v-pu2`zAlv1+6Hm1dO?c@MLOkBO%z|_9}cQtTA}W$W4A{Q0Sw>W9z2t4
z{5qq@{2qCeD&FrNS?{H=<hYn?j;4WkUNgh>c!7XwffoA?s>mh6%q`bbXCB+9h2aW>
z&)B`U#IPSgx5)Fw^dNPeQjSuw^qseL(>Dxc1s|AUxuV$34UsK(lIpOmJ^tn@7lr~j
zzWy4FoZWjJ0+nz8lqj@!x{0F?%iU>NqteO`o3-e_JAY}h_dzJ=GzT0p5p%!zTB_3y
z&uQ5%bNwnGmcP)r886njF=V82w2>jKQp*bEK{QdP!AQV;`Ku`43P5JO$Ng92?5{*J
z9^U}qzeq){PrH(vx>}Cv+|97$;iN6oFRwkKjp&8P_0wYyfR3$z^^T8Pc8Po8^w2H9
zW1b?t(OK>}{AGe}#Y!qjtmPf07n{j%MFD_O+lw6@p;d3(cv$$J9TU~qW{!(<1{pjF
z+dyw|j+SreU#U&XS3E0dz|e}p4Q&|d+N6zA$zJ?JfQ_;m+X5f!-|Y(}s*<+>!CO(;
zJ1y;g#S;TyzINdif5Xou+(nS!DLvfi&+7DrCu#Xv!IRG;u=1nTZ$*CUwy3)vRO9#O
zt}^v2h2i`0&z_iSh|Ev6gHT+Z-X2izsnC{(zfEl-E*l~tPHJ)vjUeaUSNXg)iQiX8
zaQ3(+gjxFZh`s!D=ni)uEr(TaQ7eIn07{h3`WPT9W{RT}F1!`?Q5`GaWQRxo*Ne(9
zY`)?CgX+5B%Hmw$g-LC9`sdmdAJ|q8vZpx!KFvplSsQA+w-yBeQUUP|>yU`o+EBem
z`_fldI*i)6*d|WCp++-n79D<_46pq^v@?Kn<p&>~Ela_f!V@QJcJw}DJy)&hYEghN
zM1H3|+FOzc5!}4Ij@T_j{^C9WNd6V*66)7~4c$K(6HE{uO6li2*g8mO3S@!5ieMpq
z1TP$T+RLBl+WUMJr05NRF%d&<2M#t|S&8KWBN5JjPko!304UyV>cM#Unv<_*a~i$3
z_>76V>ah2P>T2DA_hWrOg1~ly5f2;M!jsL-!qMARu`{Uu7{9M)<12+^PdGqd4vxb;
z?-Dedu@ZLnN)USbFBHn1i@dSeAE;B{{4*F06D&pnIO`g<s5DJkoI63{=nVfsu}E<+
z(gWCIp<1Fpt5P#tRFK_Ef}78LJ&Jdl&*NlcY+UQ1JW_8U>2U?h4J1`d4|Q2iC||N$
zxeA!$6P>9DfU;TzsK<ml%KjXcjBEXYJJ#u~v?p4;Ol~%_Hbp}Rrk}~ncg1m1S6D*^
zL~Jh6Rg2`!_+^09v~^}N138$MJ5D<1sG)0ByC(C{y4l~UnmjZqKjtT(xH&0&bacv0
zbFSB2oD^2+`T7f_#$SL$XUeE7{j8r=8(U~xnO4;#X<)3UyV7$AqXf68H*ONib!<PE
zfV20i<^OHyuvAbjal(URHIcheJWf2kcS;jyP`WX(Pp(v5)Cw%U2JZSKJkb4yEGuff
z*HP^VqKB=F-K5u>=c(x*Y#m-aLp^45(#hIPFq4FeNAy(6p<M9CjssP1rK|M^lV^ls
zy?I2)Q2#Uec)+|zc^%sk_0$wP&G$lELG8AO4p%#>^r7-c1kW1@1hSA;uaykq%X5V+
zfLL2U=@%3cryM*Wvs!+%r?5R?ja%j~eijvv>fu{m%B83=$30bN8=>Vh`s?ndk&dvq
zp~H}+M>X!4XVJ91>!Eqw(*qg9+r1@qkl}B8O}T4vuCM4pv6%f+Grv@GNvMmsgPHT~
zaM|JZ+j_AwoIg^EofZiwF?e34P`~ppI)J)<#dPVf0z8%{YCD*8LTW)r10VU)k~?n2
zWcqFs`9%8MiahLLobDZ7GoJ1$j;}26e^Q%##+^8uqT2oA1za=x;|Q_^8PY{AEUYE>
zpUF%IfnrelT3&FKKS>=CxAPCUT#h;R^eljsd5dq__QFDn0JF<!MxtArrse4Qt|Y5g
z5gInchgCj2Hq?(R(zZ`aM3e#4Qe-1Q7pdQ?FMQs<lr}6q)uZzDn@iBQA!+HG4wx&$
zArE*3i%&{68v6FmC>&tRQ>950pNs*+)$xd6SRC}bDhGzk<`4t;5-%wmsOvhiDH{k)
z%!lzS3+)e-EGg|WaFax<&W`*U$dZ^|y~gm+414Rb;Yx!EhF$kTF<4eQb(~$R+N}BE
zS4ko~&e9V)7ud?Z;O-X-s~-vq)Ct#0&UGD`1bF3T>gO0j3w<ZZZFX(MKY2tCOL+Va
z7WxWhI$q54s1Tg>z6h-?b+j~oMY_AI7{9n#F<7}kCS08=?@T<%V^h2wr>q0An}56e
z#2D}*M7bA2Q#VlIV)V!jdOhWGU(17fKZ(bN4zb@Kd$vvWvWv}~lIwm+2|kVruCZ&m
zi9_v@VU^+7Y~$WL@=*>wZ!spJ{=EGr_Y7~=-_z4oyji-hc2X;NzV3KbsJbkDV}C<Z
z30(xLfvm>RgJmFX{eBmZma4sd@DEHEPc(yJBz3w+%RJ*#_t(BExOv5L1Hj;Bs4EqH
zwX<7p?c__711_yE?zC85a$z#@yo>^}KeBY{4)xzEWhH8g8v=#$nT%K#b!tVZ9tv?&
ziKc=pr@R`WwECFmlgjQEL6y*zi*^5A8t_L4D5Sf*vz856$)eS<#tR*~INhH)bJ%6W
zD~8Wcj<W%=#@<T@sxcr3yDcwKIUj;9T{-ZPtvfeae>c=jCy?b-@BCwtqq{xv#?%Ti
z&6k<<VA}*l)I-0cja`iO;grXC`mK{+ONpNY8cRo<jK2H}j|ZGbHGl=6%T8dZxhGaQ
zHBV$CG%GKM6ZSn;2-oX#>T~nPU*Wfuar~63h;*-)#L7>xdEFHkoA3UW$K5?H=H;Bj
zVEctw`U9S5PjI`c!w;%hwXIn>a2hwTIdqz2vJ!L#sO{suN85`rWX~xg$8k!H-y8)*
zZD`8LoNDuaY51tz3LO64q~%!sEMALW%Hzgj<`t-FB%T>mJw*BQFY+actL^!X+1nib
zlWn`pL`Qd$J;P<siYOcx*;Tb<vj=5LmD#aZpa3kfL?EOG0>l9}o0g1i<fwBcgtu6x
zUX%@PDQuAix&JI!f0alV+0|#9m<JHd2xtRmf2F;w)|;HTX(SAc=0I?}ti#Wv?%DrY
zIz#{$3UF7881CqpL+PFgW*Wa#z1alzyNoLZn;uS~$EZK{tVqE#Xs_)oFR(W?2gqL&
z9HUH$OB?bgGi)}B&vdCV8`VE;w@qc9>-(Os?7^u~Uf+EKW%fDsit(4qjTU7qx3uHj
z?m^gxW|0syz&WUsTXjN{eq=JRj=)<#YU}WaZGRhINtxMISInq|G-s!zdGRvIEM~((
z)r^X9R;A^OXHa|fU?_})^CkWT09~sNbt@$uB=^~%qyi4Z%0misJ-aFp)s8r{UrLy5
z%qV@Z3PXBb{f!xl6v6#ZN@zFj-icV_59)~0)s03GE)9en&mD}gw^0IO>nN+EoE+(W
z%*ox;$JnvQ|FroORc`s{`kZ!hGPte=O>vD^T`>iLhNDfxr=<BIxG}<O&#)eB6!lk$
z6pDLqp*gV!JzE<DfA&pkBaf`ajVmuS-rj?I`v$ZH@2)?olpIsWUN-)oI6f>6NHf4l
zwbiMH?ZRPGN$56<OH__65AHNK?(Gz<UeZ`PlQ_MirgM31i=Og(>}5Hsr@JM;SX~5j
zN=kD`PfxnrW|!B`p-Hg+Emmi|aY&5l2Yb^J?Mo7;fVW5GaQMN~t_`7T*;u}qX<gav
zSCq-N;I0S#mI=+J_~k+8n?E}ucu7w<MRSGUQk4@ZHJK>WTbwRz_HWVH1NZ$am*^r+
zM0yll=(i5UJ5l-FKW}G?sGZxrTI(e_`YO-x@23gvVFc^#S(4X5Jxs-P<13al+lW2q
zRVY{3UMBDsExpKJuST^?*7VPqdYwNvfOqcJ>a9~6R)}y`!@G4B{nZe?c;F`}-mV%E
zJ1Wv1)G2T7KzNT^LsVVI*aL?Uqh3HA%gi$%YS?7$j4oL9GVvx7=sHJ}$YgS^Q$Wr{
zmAk#008X-sXH>OBD~Zr#dMmuP<!f+a{+RE=9jc0}Thv75kD|=rP|}B#6vBejY;eqF
z9VeB1w+t{sQ2VZKx-6Uj#W(1fWU*ZsyzM?>4gR7nX-^X}0%vm%VDJsk09bX<R{SFQ
z9VDQNC3>c$wnYtbAy+i$5%<z{c8CS)LT!d@tm4T@`@A4q1&obM)?1UY8@*j3y%_^3
zGWLj0HIj<0Upl{_j5PTB3`90El~%oO^7YWw$-EVLXCVd%{7o8W;2xjWw95Ondri|K
z)UT#<aM;xjvzi89K8Q0L7hh$!*_=2G94t6HEgy#e#JT|qP`?;G!w+2ANEWLvUEoR&
zfd{41_7^$t3l&|EhZIQ%vS>RIdKoQqgd)k^+>kGi{?ybBE_y<D{T#$dF>gwbBPQPm
z6C)7ihEUEYzGf_vyx#s_lf`$TY<ww2@;n8azr~GUDJy<-y8S8;bqJM+z|*rDmPDMT
zh_}Z4sAYl3hDES+3XOMUT~X8`?|Kd1VSyBR)ACh@yEOLohYB0B3rh){gN!(X9)d$y
zZb$T&O<yEv`fLYAG(&Fumx3(J;9UM3!dyVXfNyJ12JKbS%Qv);{A+hNv%_O}d@!Q`
zdLWKURwWH4j1kh-1h*&X>-|5?&Os8@HO{eF65RfRM&^lHzf3}e{}#X_Iy?L+Aa9l5
zOY_c(!^(vUZDKez*xo(N6a9GM-?P5my*k$x%dDDL{w8Ki+VS$~^cfk5=L01f9zWXW
z{SmKuXVscxo~&eyIIV$09r-neXTI2hBNev$p4MXzkkC!Hq`Rlf{XH8dTGUq(Z1~XY
z#}(fwdpf$II3-MDQ40F(mNDAj+MC2LxB7@}yK+LSi-+T%AlsC^2($rRFhM;IC)Q}d
z8)|#P7_><8E)H*8>Z)ab&jvX6+;@x`PAxuNCW>LsDvv5w??51^yBe>?jH)C0Y<2j-
z>57irj>=3xUllfDKf?Zd)~EED_^>pu5NI(HeN*Z(qUl6&Gjjg7$x;!|^Zj%~D@R;%
zc%YF$IZy51(tY$Fd<jqZ?f8Mf<WRMhuTl5qz)^}a!)6mwn&-{mdZXoYw9W{8glLMo
z&kJrj%&Qcd3Mn35)<-r;djESh9PH7e`9o(<!~c{tC~^KRlMy$k0dlB{qGxk=GIvK0
zvF2>`-~Lt1mD!QIBKq8!eMR!$QS&f%8ri1~0_Gj?z_g6$Hlo&HaeT~H1h2`iZ%u&v
z@VkG@dR>sU&7cMBVKgcvZGkSfcvwEZpE4BuKi?zg+HK@Y{Nl=8++wqURQ&Ea4qgAP
z{lGrPWbF+N*-L~qD`qyQ_`v^p@WD-v2n=v8lzg9fHOp_409J-kE$5>^lpSIx-Rq=J
z<L%3j{kE}B?EkI#;8f`hfhd&CzZ{fcXMtYtzhoW!U$Rd2Mcu!9JK_JP7_hSexjh@6
z%K#3c8p-_r>purE|8o%YKL;`YUk+maCsO|ZB4uB7*eLgh6ZF<R$TpDs>JJfxcPs+`
E4?61LhX4Qo

literal 0
HcmV?d00001

diff --git a/www/wp-content/plugins/cas-maestro/js/admin.js b/www/wp-content/plugins/cas-maestro/js/admin.js
new file mode 100644
index 0000000..7000ef8
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/admin.js
@@ -0,0 +1,42 @@
+jQuery(document).ready( function($) {
+    // close postboxes that should be closed
+    $('.if-js-closed').removeClass('if-js-closed').addClass('closed');
+    // postboxes setup
+    postboxes.add_postbox_toggles('<?php echo $this->settings_hook ?>');
+    $('#cas_version_inp').select2();
+    $('.to_select_2').select2({placeholder: casmaestro.choose_role});
+    $('#ldap_proto').select2();
+
+    $('input[name=e-mail_registration]').change(function () {
+        if ($(this).val() == 3)
+            $('#ldap_container').slideDown();
+        else
+            $('#ldap_container').slideUp();
+    });
+
+    if($('input[name=e-mail_registration]:checked').val() == 3)
+        $('#ldap_container').show();
+    
+
+    $('#welcome_mail_tab').click(function () {
+
+        $(this).addClass('active');
+        $('#wait_for_access_tab').removeClass('active');
+
+        $('#welcome_mail').show();
+        $('#wait_for_access').hide();
+
+        return false;
+    }).addClass('active').find('a').click(function () {$('#welcome_mail_tab').click(); return false;});
+
+    $('#wait_for_access_tab').click(function () {
+
+        $('#welcome_mail_tab').removeClass('active');
+        $(this).addClass('active');
+
+        $('#welcome_mail').hide();
+        $('#wait_for_access').show();
+
+        return false;
+    }).find('a').click(function () {$('#wait_for_access_tab').click();return false;});
+});
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/js/autoinput.js b/www/wp-content/plugins/cas-maestro/js/autoinput.js
new file mode 100644
index 0000000..f287a44
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/autoinput.js
@@ -0,0 +1,63 @@
+jQuery(document).ready(function($) {
+    
+    var MaxTextBoxes = 99;
+    $(function () {
+        //answer choices
+        BindChoiceEvents();
+    });
+
+    function BindChoiceEvents() {
+        $('table#autoAdd input:text').unbind('keyup');
+        //bind appropriate events
+        $('table#autoAdd input.istid:last').bind('focusout', BindAnswers);
+        var penultimateTextBox = $('table#autoAdd input#txt'+(CurrentTextboxes-1)).bind('keyup', RemoveLastChoice);
+    }
+
+    function BindAnswers() {
+        var lastTxtBox = $('table#autoAdd input.istid:last');
+        var numOfChars = $(lastTxtBox).val().length;
+        var options = "<option></option>";
+        for (var i=0;i<roles.length;i++)
+        {
+            options = options + "<option value='" + roles[i] + "'>"+ roles_name[i] +"</option>";
+        }
+        if (CurrentTextboxes < MaxTextBoxes && numOfChars > 0) {
+            //new answer possible, just add a new textbox
+            CurrentTextboxes++;
+            var newTxtBox = '<tr><td class="prefix"><input type="text" class="istid" name="username['+CurrentTextboxes+']" id="txt' + CurrentTextboxes + '" style="width: 150px;"></input></td><td><select name="role['+CurrentTextboxes+']" style="width: 180px;">'+options+'</select></td></tr>';
+            
+            var newTxtBox1 = $('<input>').addClass('istid').attr('type', 'text').attr('name','username[' + CurrentTextboxes + ']').width(150).attr('id','txt' + CurrentTextboxes);
+            var newTxtBox2 = $('<select>').attr('name','role[' + CurrentTextboxes + ']').width(180).html(options);
+
+            newTxtBox = $('<tr>').append($('<td>').append(newTxtBox1)).append($('<td>').append(newTxtBox2));
+
+            add_new_row('#autoAdd',newTxtBox);
+
+            //rebind
+            BindChoiceEvents();
+        }
+    }
+
+    function RemoveLastChoice() {
+        //remove if there's more than one textbox and penultimate textbox is empty
+        if (CurrentTextboxes > 1) {
+            var penultimateTxtBox = $('table#autoAdd input#txt'+(CurrentTextboxes-1));
+            var numOfChars = $(penultimateTxtBox).val().length;
+
+            if (numOfChars == 0) { 
+                $('table#autoAdd tr:last').remove();
+                CurrentTextboxes--;
+                //rebind
+                BindChoiceEvents();
+            }
+        }
+    }
+
+    function add_new_row(table,rowcontent){
+        if ($(table).length>0){
+            if ($(table+' > tbody').length==0) $(table).append('<tbody />');
+            ($(table+' > tr').length>0)?$(table).children('tbody:last').children('tr:last').append(rowcontent):$(table).children('tbody:last').append(rowcontent);
+            rowcontent.find('select').select2({placeholder: casmaestro.choose_role});
+        }
+    }
+});
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/LICENSE b/www/wp-content/plugins/cas-maestro/js/select2/LICENSE
new file mode 100644
index 0000000..df5cc0c
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/select2/LICENSE
@@ -0,0 +1,485 @@
+Copyright 2012 Igor Vaynberg
+ 
+Version: @@ver@@ Timestamp: @@timestamp@@
+
+This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNU 
+General Public License version 2 (the "GPL License"). You may choose either license to govern your 
+use of this software only upon the condition that you accept all of the terms of either the Apache 
+License or the GPL License. 
+
+You may obtain a copy of the Apache License and the GPL License at:
+
+http://www.apache.org/licenses/LICENSE-2.0
+http://www.gnu.org/licenses/gpl-2.0.html
+
+Unless required by applicable law or agreed to in writing, software distributed under the Apache License 
+or the GPL Licesnse is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, 
+either express or implied. See the Apache License and the GPL License for the specific language governing 
+permissions and limitations under the Apache License and the GPL License.
+
+LICENSE #1: Apache License, Version 2.0
+
+LICENSE #2: GPL v2
+
+************************************************************
+
+LICENSE #1:
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+************************************************************
+
+LICENSE #2:
+
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 2, June 1991
+
+ Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
+ 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The licenses for most software are designed to take away your
+freedom to share and change it.  By contrast, the GNU General Public
+License is intended to guarantee your freedom to share and change free
+software--to make sure the software is free for all its users.  This
+General Public License applies to most of the Free Software
+Foundation's software and to any other program whose authors commit to
+using it.  (Some other Free Software Foundation software is covered by
+the GNU Lesser General Public License instead.)  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+this service if you wish), that you receive source code or can get it
+if you want it, that you can change the software or use pieces of it
+in new free programs; and that you know you can do these things.
+
+  To protect your rights, we need to make restrictions that forbid
+anyone to deny you these rights or to ask you to surrender the rights.
+These restrictions translate to certain responsibilities for you if you
+distribute copies of the software, or if you modify it.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must give the recipients all the rights that
+you have.  You must make sure that they, too, receive or can get the
+source code.  And you must show them these terms so they know their
+rights.
+
+  We protect your rights with two steps: (1) copyright the software, and
+(2) offer you this license which gives you legal permission to copy,
+distribute and/or modify the software.
+
+  Also, for each author's protection and ours, we want to make certain
+that everyone understands that there is no warranty for this free
+software.  If the software is modified by someone else and passed on, we
+want its recipients to know that what they have is not the original, so
+that any problems introduced by others will not reflect on the original
+authors' reputations.
+
+  Finally, any free program is threatened constantly by software
+patents.  We wish to avoid the danger that redistributors of a free
+program will individually obtain patent licenses, in effect making the
+program proprietary.  To prevent this, we have made it clear that any
+patent must be licensed for everyone's free use or not licensed at all.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                    GNU GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License applies to any program or other work which contains
+a notice placed by the copyright holder saying it may be distributed
+under the terms of this General Public License.  The "Program", below,
+refers to any such program or work, and a "work based on the Program"
+means either the Program or any derivative work under copyright law:
+that is to say, a work containing the Program or a portion of it,
+either verbatim or with modifications and/or translated into another
+language.  (Hereinafter, translation is included without limitation in
+the term "modification".)  Each licensee is addressed as "you".
+
+Activities other than copying, distribution and modification are not
+covered by this License; they are outside its scope.  The act of
+running the Program is not restricted, and the output from the Program
+is covered only if its contents constitute a work based on the
+Program (independent of having been made by running the Program).
+Whether that is true depends on what the Program does.
+
+  1. You may copy and distribute verbatim copies of the Program's
+source code as you receive it, in any medium, provided that you
+conspicuously and appropriately publish on each copy an appropriate
+copyright notice and disclaimer of warranty; keep intact all the
+notices that refer to this License and to the absence of any warranty;
+and give any other recipients of the Program a copy of this License
+along with the Program.
+
+You may charge a fee for the physical act of transferring a copy, and
+you may at your option offer warranty protection in exchange for a fee.
+
+  2. You may modify your copy or copies of the Program or any portion
+of it, thus forming a work based on the Program, and copy and
+distribute such modifications or work under the terms of Section 1
+above, provided that you also meet all of these conditions:
+
+    a) You must cause the modified files to carry prominent notices
+    stating that you changed the files and the date of any change.
+
+    b) You must cause any work that you distribute or publish, that in
+    whole or in part contains or is derived from the Program or any
+    part thereof, to be licensed as a whole at no charge to all third
+    parties under the terms of this License.
+
+    c) If the modified program normally reads commands interactively
+    when run, you must cause it, when started running for such
+    interactive use in the most ordinary way, to print or display an
+    announcement including an appropriate copyright notice and a
+    notice that there is no warranty (or else, saying that you provide
+    a warranty) and that users may redistribute the program under
+    these conditions, and telling the user how to view a copy of this
+    License.  (Exception: if the Program itself is interactive but
+    does not normally print such an announcement, your work based on
+    the Program is not required to print an announcement.)
+
+These requirements apply to the modified work as a whole.  If
+identifiable sections of that work are not derived from the Program,
+and can be reasonably considered independent and separate works in
+themselves, then this License, and its terms, do not apply to those
+sections when you distribute them as separate works.  But when you
+distribute the same sections as part of a whole which is a work based
+on the Program, the distribution of the whole must be on the terms of
+this License, whose permissions for other licensees extend to the
+entire whole, and thus to each and every part regardless of who wrote it.
+
+Thus, it is not the intent of this section to claim rights or contest
+your rights to work written entirely by you; rather, the intent is to
+exercise the right to control the distribution of derivative or
+collective works based on the Program.
+
+In addition, mere aggregation of another work not based on the Program
+with the Program (or with a work based on the Program) on a volume of
+a storage or distribution medium does not bring the other work under
+the scope of this License.
+
+  3. You may copy and distribute the Program (or a work based on it,
+under Section 2) in object code or executable form under the terms of
+Sections 1 and 2 above provided that you also do one of the following:
+
+    a) Accompany it with the complete corresponding machine-readable
+    source code, which must be distributed under the terms of Sections
+    1 and 2 above on a medium customarily used for software interchange; or,
+
+    b) Accompany it with a written offer, valid for at least three
+    years, to give any third party, for a charge no more than your
+    cost of physically performing source distribution, a complete
+    machine-readable copy of the corresponding source code, to be
+    distributed under the terms of Sections 1 and 2 above on a medium
+    customarily used for software interchange; or,
+
+    c) Accompany it with the information you received as to the offer
+    to distribute corresponding source code.  (This alternative is
+    allowed only for noncommercial distribution and only if you
+    received the program in object code or executable form with such
+    an offer, in accord with Subsection b above.)
+
+The source code for a work means the preferred form of the work for
+making modifications to it.  For an executable work, complete source
+code means all the source code for all modules it contains, plus any
+associated interface definition files, plus the scripts used to
+control compilation and installation of the executable.  However, as a
+special exception, the source code distributed need not include
+anything that is normally distributed (in either source or binary
+form) with the major components (compiler, kernel, and so on) of the
+operating system on which the executable runs, unless that component
+itself accompanies the executable.
+
+If distribution of executable or object code is made by offering
+access to copy from a designated place, then offering equivalent
+access to copy the source code from the same place counts as
+distribution of the source code, even though third parties are not
+compelled to copy the source along with the object code.
+
+  4. You may not copy, modify, sublicense, or distribute the Program
+except as expressly provided under this License.  Any attempt
+otherwise to copy, modify, sublicense or distribute the Program is
+void, and will automatically terminate your rights under this License.
+However, parties who have received copies, or rights, from you under
+this License will not have their licenses terminated so long as such
+parties remain in full compliance.
+
+  5. You are not required to accept this License, since you have not
+signed it.  However, nothing else grants you permission to modify or
+distribute the Program or its derivative works.  These actions are
+prohibited by law if you do not accept this License.  Therefore, by
+modifying or distributing the Program (or any work based on the
+Program), you indicate your acceptance of this License to do so, and
+all its terms and conditions for copying, distributing or modifying
+the Program or works based on it.
+
+  6. Each time you redistribute the Program (or any work based on the
+Program), the recipient automatically receives a license from the
+original licensor to copy, distribute or modify the Program subject to
+these terms and conditions.  You may not impose any further
+restrictions on the recipients' exercise of the rights granted herein.
+You are not responsible for enforcing compliance by third parties to
+this License.
+
+  7. If, as a consequence of a court judgment or allegation of patent
+infringement or for any other reason (not limited to patent issues),
+conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot
+distribute so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you
+may not distribute the Program at all.  For example, if a patent
+license would not permit royalty-free redistribution of the Program by
+all those who receive copies directly or indirectly through you, then
+the only way you could satisfy both it and this License would be to
+refrain entirely from distribution of the Program.
+
+If any portion of this section is held invalid or unenforceable under
+any particular circumstance, the balance of the section is intended to
+apply and the section as a whole is intended to apply in other
+circumstances.
+
+It is not the purpose of this section to induce you to infringe any
+patents or other property right claims or to contest validity of any
+such claims; this section has the sole purpose of protecting the
+integrity of the free software distribution system, which is
+implemented by public license practices.  Many people have made
+generous contributions to the wide range of software distributed
+through that system in reliance on consistent application of that
+system; it is up to the author/donor to decide if he or she is willing
+to distribute software through any other system and a licensee cannot
+impose that choice.
+
+This section is intended to make thoroughly clear what is believed to
+be a consequence of the rest of this License.
+
+  8. If the distribution and/or use of the Program is restricted in
+certain countries either by patents or by copyrighted interfaces, the
+original copyright holder who places the Program under this License
+may add an explicit geographical distribution limitation excluding
+those countries, so that distribution is permitted only in or among
+countries not thus excluded.  In such case, this License incorporates
+the limitation as if written in the body of this License.
+
+  9. The Free Software Foundation may publish revised and/or new versions
+of the General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Program
+specifies a version number of this License which applies to it and "any
+later version", you have the option of following the terms and conditions
+either of that version or of any later version published by the Free
+Software Foundation.  If the Program does not specify a version number of
+this License, you may choose any version ever published by the Free Software
+Foundation.
+
+  10. If you wish to incorporate parts of the Program into other free
+programs whose distribution conditions are different, write to the author
+to ask for permission.  For software which is copyrighted by the Free
+Software Foundation, write to the Free Software Foundation; we sometimes
+make exceptions for this.  Our decision will be guided by the two goals
+of preserving the free status of all derivatives of our free software and
+of promoting the sharing and reuse of software generally.
+
+                            NO WARRANTY
+
+  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
+FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
+OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
+PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
+OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
+TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
+PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
+REPAIR OR CORRECTION.
+
+  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
+REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
+INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
+OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
+TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
+YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
+PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/README.md b/www/wp-content/plugins/cas-maestro/js/select2/README.md
new file mode 100644
index 0000000..31025c7
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/select2/README.md
@@ -0,0 +1,74 @@
+Select2
+=================
+
+Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results. Look and feel of Select2 is based on the excellent [Chosen](http://harvesthq.github.com/chosen/) library.
+
+To get started -- checkout http://ivaynberg.github.com/select2!
+
+What Does Select2 Support That Chosen Does Not?
+-------------------------------------------------
+
+* Working with large datasets: Chosen requires the entire dataset to be loaded as `option` tags in the DOM, which limits
+it to working with small-ish datasets. Select2 uses a function to find results on-the-fly, which allows it to partially
+load results.
+* Paging of results: Since Select2 works with large datasets and only loads a small amount of matching results at a time
+it has to support paging. Select2 will call the search function when the user scrolls to the bottom of currently loaded
+result set allowing for the 'infinite scrolling' of results.
+* Custom markup for results: Chosen only supports rendering text results because that is the only markup supported by
+`option` tags. Select2 provides an extension point which can be used to produce any kind of markup to represent results.
+* Ability to add results on the fly: Select2 provides the ability to add results from the search term entered by the user, which allows it to be used for
+tagging.
+
+Browser Compatibility
+--------------------
+* IE 8+ (7 mostly works except for [issue with z-index](https://github.com/ivaynberg/select2/issues/37))
+* Chrome 8+
+* Firefox 3.5+
+* Safari 3+
+* Opera 10.6+
+
+Integrations
+------------
+
+* [Wicket-Select2](https://github.com/ivaynberg/wicket-select2) (Java / Apache Wicket)
+* [select2-rails](https://github.com/argerim/select2-rails) (Ruby on Rails)
+* [AngularUI](http://angular-ui.github.com/#directives-select2) ([AngularJS](angularjs.org))
+* [Django](https://github.com/applegrew/django-select2)
+
+Bug tracker
+-----------
+
+Have a bug? Please create an issue here on GitHub!
+
+https://github.com/ivaynberg/select2/issues
+
+
+Mailing list
+------------
+
+Have a question? Ask on our mailing list!
+
+select2@googlegroups.com
+
+https://groups.google.com/d/forum/select2
+
+
+Copyright and License
+---------------------
+
+Copyright 2012 Igor Vaynberg
+
+This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNU 
+General Public License version 2 (the "GPL License"). You may choose either license to govern your 
+use of this software only upon the condition that you accept all of the terms of either the Apache 
+License or the GPL License. 
+
+You may obtain a copy of the Apache License and the GPL License in the LICENSE file, or at:
+
+http://www.apache.org/licenses/LICENSE-2.0
+http://www.gnu.org/licenses/gpl-2.0.html
+
+Unless required by applicable law or agreed to in writing, software distributed under the Apache License 
+or the GPL Licesnse is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, 
+either express or implied. See the Apache License and the GPL License for the specific language governing 
+permissions and limitations under the Apache License and the GPL License.
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/component.json b/www/wp-content/plugins/cas-maestro/js/select2/component.json
new file mode 100644
index 0000000..caf4759
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/select2/component.json
@@ -0,0 +1,8 @@
+{
+    "name": "select2",
+    "version": "3.3.1",
+    "main": ["select2.js", "select2.css", "select2.png", "select2x2.png", "spinner.gif"],
+    "dependencies": {
+        "jquery": "~1.4.4"
+    }
+}
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/release.sh b/www/wp-content/plugins/cas-maestro/js/select2/release.sh
new file mode 100644
index 0000000..3b007ed
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/select2/release.sh
@@ -0,0 +1,72 @@
+#!/bin/bash
+set -e
+
+echo -n "Enter the version for this release: "
+
+read ver
+
+if [ ! $ver ]; then 
+	echo "Invalid version."
+	exit
+fi
+
+name="select2"
+js="$name.js"
+mini="$name.min.js"
+css="$name.css"
+release="$name-$ver"
+tag="$ver"
+branch="build-$ver"
+curbranch=`git branch | grep "*" | sed "s/* //"`
+timestamp=$(date)
+tokens="s/@@ver@@/$ver/g;s/\@@timestamp@@/$timestamp/g"
+remote="github"
+
+echo "Updating Version Identifiers"
+
+sed -E -e "s/\"version\": \"([0-9\.]+)\",/\"version\": \"$ver\",/g" -i "" component.json select2.jquery.json
+git add component.json
+git add select2.jquery.json
+git commit -m "modified version identifiers in descriptors for release $ver"
+git push
+ 
+git branch "$branch"
+git checkout "$branch"
+
+echo "Tokenizing..."
+
+find . -name "$js" | xargs -I{} sed -e "$tokens" -i "" {} 
+find . -name "$css" | xargs -I{} sed -e "$tokens" -i "" {}
+sed -e "s/latest/$ver/g" -i "" component.json
+
+git add "$js"
+git add "$css"
+
+echo "Minifying..."
+
+echo "/*" > "$mini"
+cat LICENSE | sed "$tokens" >> "$mini"
+echo "*/" >> "$mini"
+
+curl -s \
+	-d compilation_level=SIMPLE_OPTIMIZATIONS \
+	-d output_format=text \
+	-d output_info=compiled_code \
+	--data-urlencode "js_code@$js" \
+	http://closure-compiler.appspot.com/compile \
+	>> "$mini"
+
+git add "$mini"
+	
+git commit -m "release $ver"
+
+echo "Tagging..."
+git tag -a "$tag" -m "tagged version $ver"
+git push "$remote" --tags
+
+echo "Cleaning Up..."
+
+git checkout "$curbranch"
+git branch -D "$branch"
+
+echo "Done"
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/select2-spinner.gif b/www/wp-content/plugins/cas-maestro/js/select2/select2-spinner.gif
new file mode 100644
index 0000000000000000000000000000000000000000..5b33f7e54f4e55b6b8774d86d96895db9af044b4
GIT binary patch
literal 1849
zcma*odr(tX9tZI2z31lM+(&YVk%mZ}5P~KlG2s=WSbGzm0!x7^P##Mnh7t-jP!X0Q
zk_SQ}Po-L1tlDK;6l?(>v)e5ZBQx4|Y-Q?nr@Px3?9h(3ZWr3^tj=`TP57gKr87N$
zp2wWee1GRRCwo_xahnw)5cxNPJbCg2L6DV|6`#+yw6v6!mDS$f9-JvFD^n;GQ&UrZ
zzh5jCkByB101O60U0q#p_1BM>Cv-vP?&s4@g_((4_1L=L$(a91)0=J91Gas#R{McE
znYG^9*0A5YZ>#;~+Wkn(W5B0^yELIYLP!K}mB~<)AM@1&nqekynuaEGqP<JE0#l+(
z*R9joTN$nZ{F;;f_Nv(QpzP65;W)SYC;1+?>rzoH|KodRXJy)%+w_fu3nE5>@Bd_b
zqC$EQ;{c`T&?EsNO|igL9gC7Ygxv?aQUEXMq?~>wg{EyW;VcJ37CUF#HjrT=KQO_*
zS>M9yydXk18D(+QDJ1>r);Lav_uYKp$T?4vr{Q$lTo&pKv^?(>L-)G2*lwH!Ah7k?
z7oH<8h-(KTKt5V6$8gF)C7Io&P5=SjTh)=zV=E2EUhQZ<Wjvi)ks6lL7NUI41Suec
z%#@RZvp$b|KCxLd`PA8_!Ub^;+J%TE^_K&d6(i&k---epB#nC`b3_`MdhtuWMEe%I
z(wJ2$`EGgJTz=trW>P##L8S{d%UK>>+y82>+FV+#^BzW7u3F)Bb>=lYQ%%j`F>ASe
zo*cw@V#u6T`A2He;70mR(V&iV&-7{qP~=SRf&jm9-T{*ZeZ}$rd0#6c&fLG^xJcf5
z+p<`wJYgW+_s*V{uI$nMB;%8`S_3>PfGOj3Rq}@Cx^+j?rk92fANSFDBYnOqQ>Vdj
z)(|$AhP4t&Lb=Gvo2#3Gl%9<=Gv`Mz?Po@P4iLF!x}GUWJICDlFk-hS^Whyh7x~VH
z@0vD1>HYD4&e+~yzS*-sFR{9`{QEEZO1zg7>R&7cHts-6j!xHVdA8eI+ZlVzd%`es
zJT@$#GX(gvCJ1oJN%yLBK}{V=V;seo;!w|Yte!W1%5qLNFWqvZW>h&IiH+oPT=b@E
zPhGzv5=(Un*X>v`><w7vN-j#h05gB-F9AZf<&Z~SLlC&Nz^-G6DuPj|`n3d!<l7n!
z^9j1qeh2{s+i0tZ4@>%8h_nj^NdY<en;#4d>cE6NHS_ifkCV$*D)Tqrbu`s;<=t<4
zAHNqNV?6(g<1PY-w@#I-WYFViz?9TrkMr)u0g`O`u|>T;k|2sV*YF^pun<C(O34ry
z@yg-q+#%4rv$|41Y!PHPrjmV%@S3%TUelmz%~6?hLG4%mWKO9NB}mrI%KlhB`{^!g
zT?{Y#<ON%sq<!{buD;iH%`hL}N;>vT;$SuTy{j3Gv)yqD!R_CF>yR)MzmmYS5v+~R
zXAdD<Jm>%ng9?df;wd8GxR#%3O+gz};Vo;)sK%Bj-q>Oq%R7JU-KD?vYu>#2UjaDo
z&8$>5xW~?KPD_#XFToU1hIb*VOMidUr6iYiO0N|i-7s`T8!cFT`rN!^1Pt78J93i6
z5HI1wIM$94m{3SLDvISDe6$ZG1;eq_D9RTaaC>=cO{@Bs>$IlP<c+8wUtK_tPUz3j
z)>CPJJ$h$)-3vzNUQ6<Wm&Z5JfeG_o#I^S?ZP9*QGjsiJM3jH{?94}z{@d%97nOVw
zacge+X&InNUL3U(BUlor87ff?2qEf2c|yCI=Id~LI~<KyVA#R%nwHS3S<^IBTu|Jj
zW^-Xv#UBDqOwy>OsN#_zWxey!_9%hxwH2_dEJi=yY|1c7nDm2_Lm!Cof8-R_+9UkS
zcBE(o47yE)oMR(Q=dp1a2wTX5Kv<M)VDKP@wb$5DNEX!VTUn1Pd`taYrL9bpe}d9v
zqx3tu5NTGv8=X63WXPWMm1T8=ujh#QvSw5|(EZJ3$quU9*?0NxQKGsTrnFNF-ygOt
zYWPggi66%$nuj|v6!Ow2)>vGyLqlWTa7V&!A*|w|)ax~1_~aJ0=_Lilg*0iQk7#ZD
EAHN$8j{pDw

literal 0
HcmV?d00001

diff --git a/www/wp-content/plugins/cas-maestro/js/select2/select2.css b/www/wp-content/plugins/cas-maestro/js/select2/select2.css
new file mode 100644
index 0000000..1ff2abb
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/select2/select2.css
@@ -0,0 +1,603 @@
+/*
+Version: 3.3.1 Timestamp: Wed Feb 20 09:57:22 PST 2013
+*/
+.select2-container {
+    position: relative;
+    display: inline-block;
+    /* inline-block for ie7 */
+    zoom: 1;
+    *display: inline;
+    vertical-align: top;
+}
+
+.select2-container,
+.select2-drop,
+.select2-search,
+.select2-search input{
+  /*
+    Force border-box so that % widths fit the parent
+    container without overlap because of margin/padding.
+
+    More Info : http://www.quirksmode.org/css/box.html
+  */
+  -webkit-box-sizing: border-box; /* webkit */
+   -khtml-box-sizing: border-box; /* konqueror */
+     -moz-box-sizing: border-box; /* firefox */
+      -ms-box-sizing: border-box; /* ie */
+          box-sizing: border-box; /* css3 */
+}
+
+.select2-container .select2-choice {
+    display: block;
+    height: 26px;
+    padding: 0 0 0 8px;
+    overflow: hidden;
+    position: relative;
+
+    border: 1px solid #aaa;
+    white-space: nowrap;
+    line-height: 26px;
+    color: #444;
+    text-decoration: none;
+
+    -webkit-border-radius: 4px;
+       -moz-border-radius: 4px;
+            border-radius: 4px;
+
+    -webkit-background-clip: padding-box;
+       -moz-background-clip: padding;
+            background-clip: padding-box;
+
+    -webkit-touch-callout: none;
+      -webkit-user-select: none;
+       -khtml-user-select: none;
+         -moz-user-select: none;
+          -ms-user-select: none;
+              user-select: none;
+
+    background-color: #fff;
+    background-image: -webkit-gradient(linear, left bottom, left top, color-stop(0, #eeeeee), color-stop(0.5, white));
+    background-image: -webkit-linear-gradient(center bottom, #eeeeee 0%, white 50%);
+    background-image: -moz-linear-gradient(center bottom, #eeeeee 0%, white 50%);
+    background-image: -o-linear-gradient(bottom, #eeeeee 0%, #ffffff 50%);
+    background-image: -ms-linear-gradient(top, #ffffff 0%, #eeeeee 50%);
+    filter: progid:DXImageTransform.Microsoft.gradient(startColorstr = '#ffffff', endColorstr = '#eeeeee', GradientType = 0);
+    background-image: linear-gradient(top, #ffffff 0%, #eeeeee 50%);
+}
+
+.select2-container.select2-drop-above .select2-choice {
+    border-bottom-color: #aaa;
+
+    -webkit-border-radius:0 0 4px 4px;
+       -moz-border-radius:0 0 4px 4px;
+            border-radius:0 0 4px 4px;
+
+    background-image: -webkit-gradient(linear, left bottom, left top, color-stop(0, #eeeeee), color-stop(0.9, white));
+    background-image: -webkit-linear-gradient(center bottom, #eeeeee 0%, white 90%);
+    background-image: -moz-linear-gradient(center bottom, #eeeeee 0%, white 90%);
+    background-image: -o-linear-gradient(bottom, #eeeeee 0%, white 90%);
+    background-image: -ms-linear-gradient(top, #eeeeee 0%,#ffffff 90%);
+    filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#ffffff', endColorstr='#eeeeee',GradientType=0 );
+    background-image: linear-gradient(top, #eeeeee 0%,#ffffff 90%);
+}
+
+.select2-container .select2-choice span {
+    margin-right: 26px;
+    display: block;
+    overflow: hidden;
+
+    white-space: nowrap;
+
+    -ms-text-overflow: ellipsis;
+     -o-text-overflow: ellipsis;
+        text-overflow: ellipsis;
+}
+
+.select2-container .select2-choice abbr {
+    display: block;
+    width: 12px;
+    height: 12px;
+    position: absolute;
+    right: 26px;
+    top: 8px;
+
+    font-size: 1px;
+    text-decoration: none;
+
+    border: 0;
+    background: url('select2.png') right top no-repeat;
+    cursor: pointer;
+    outline: 0;
+}
+.select2-container .select2-choice abbr:hover {
+    background-position: right -11px;
+    cursor: pointer;
+}
+
+.select2-drop-mask {
+    position: absolute;
+    left: 0;
+    top: 0;
+    z-index: 9998;
+    opacity: 0;
+}
+
+.select2-drop {
+    width: 100%;
+    margin-top:-1px;
+    position: absolute;
+    z-index: 9999;
+    top: 100%;
+
+    background: #fff;
+    color: #000;
+    border: 1px solid #aaa;
+    border-top: 0;
+
+    -webkit-border-radius: 0 0 4px 4px;
+       -moz-border-radius: 0 0 4px 4px;
+            border-radius: 0 0 4px 4px;
+
+    -webkit-box-shadow: 0 4px 5px rgba(0, 0, 0, .15);
+       -moz-box-shadow: 0 4px 5px rgba(0, 0, 0, .15);
+            box-shadow: 0 4px 5px rgba(0, 0, 0, .15);
+}
+
+.select2-drop.select2-drop-above {
+    margin-top: 1px;
+    border-top: 1px solid #aaa;
+    border-bottom: 0;
+
+    -webkit-border-radius: 4px 4px 0 0;
+       -moz-border-radius: 4px 4px 0 0;
+            border-radius: 4px 4px 0 0;
+
+    -webkit-box-shadow: 0 -4px 5px rgba(0, 0, 0, .15);
+       -moz-box-shadow: 0 -4px 5px rgba(0, 0, 0, .15);
+            box-shadow: 0 -4px 5px rgba(0, 0, 0, .15);
+}
+
+.select2-container .select2-choice div {
+    display: block;
+    width: 18px;
+    height: 100%;
+    position: absolute;
+    right: 0;
+    top: 0;
+
+    border-left: 1px solid #aaa;
+    -webkit-border-radius: 0 4px 4px 0;
+       -moz-border-radius: 0 4px 4px 0;
+            border-radius: 0 4px 4px 0;
+
+    -webkit-background-clip: padding-box;
+       -moz-background-clip: padding;
+            background-clip: padding-box;
+
+    background: #ccc;
+    background-image: -webkit-gradient(linear, left bottom, left top, color-stop(0, #ccc), color-stop(0.6, #eee));
+    background-image: -webkit-linear-gradient(center bottom, #ccc 0%, #eee 60%);
+    background-image: -moz-linear-gradient(center bottom, #ccc 0%, #eee 60%);
+    background-image: -o-linear-gradient(bottom, #ccc 0%, #eee 60%);
+    background-image: -ms-linear-gradient(top, #cccccc 0%, #eeeeee 60%);
+    filter: progid:DXImageTransform.Microsoft.gradient(startColorstr = '#eeeeee', endColorstr = '#cccccc', GradientType = 0);
+    background-image: linear-gradient(top, #cccccc 0%, #eeeeee 60%);
+}
+
+.select2-container .select2-choice div b {
+    display: block;
+    width: 100%;
+    height: 100%;
+    background: url('select2.png') no-repeat 0 1px;
+}
+
+.select2-search {
+    display: inline-block;
+    width: 100%;
+    min-height: 26px;
+    margin: 0;
+    padding-left: 4px;
+    padding-right: 4px;
+
+    position: relative;
+    z-index: 10000;
+
+    white-space: nowrap;
+}
+
+.select2-search-hidden {
+    display: block;
+    position: absolute;
+    left: -10000px;
+}
+
+.select2-search input {
+    width: 100%;
+    height: auto !important;
+    min-height: 26px;
+    padding: 4px 20px 4px 5px;
+    margin: 0;
+
+    outline: 0;
+    font-family: sans-serif;
+    font-size: 1em;
+
+    border: 1px solid #aaa;
+    -webkit-border-radius: 0;
+       -moz-border-radius: 0;
+            border-radius: 0;
+
+    -webkit-box-shadow: none;
+       -moz-box-shadow: none;
+            box-shadow: none;
+
+    background: #fff url('select2.png') no-repeat 100% -22px;
+    background: url('select2.png') no-repeat 100% -22px, -webkit-gradient(linear, left bottom, left top, color-stop(0.85, white), color-stop(0.99, #eeeeee));
+    background: url('select2.png') no-repeat 100% -22px, -webkit-linear-gradient(center bottom, white 85%, #eeeeee 99%);
+    background: url('select2.png') no-repeat 100% -22px, -moz-linear-gradient(center bottom, white 85%, #eeeeee 99%);
+    background: url('select2.png') no-repeat 100% -22px, -o-linear-gradient(bottom, white 85%, #eeeeee 99%);
+    background: url('select2.png') no-repeat 100% -22px, -ms-linear-gradient(top, #ffffff 85%, #eeeeee 99%);
+    background: url('select2.png') no-repeat 100% -22px, linear-gradient(top, #ffffff 85%, #eeeeee 99%);
+}
+
+.select2-drop.select2-drop-above .select2-search input {
+    margin-top: 4px;
+}
+
+.select2-search input.select2-active {
+    background: #fff url('select2-spinner.gif') no-repeat 100%;
+    background: url('select2-spinner.gif') no-repeat 100%, -webkit-gradient(linear, left bottom, left top, color-stop(0.85, white), color-stop(0.99, #eeeeee));
+    background: url('select2-spinner.gif') no-repeat 100%, -webkit-linear-gradient(center bottom, white 85%, #eeeeee 99%);
+    background: url('select2-spinner.gif') no-repeat 100%, -moz-linear-gradient(center bottom, white 85%, #eeeeee 99%);
+    background: url('select2-spinner.gif') no-repeat 100%, -o-linear-gradient(bottom, white 85%, #eeeeee 99%);
+    background: url('select2-spinner.gif') no-repeat 100%, -ms-linear-gradient(top, #ffffff 85%, #eeeeee 99%);
+    background: url('select2-spinner.gif') no-repeat 100%, linear-gradient(top, #ffffff 85%, #eeeeee 99%);
+}
+
+.select2-container-active .select2-choice,
+.select2-container-active .select2-choices {
+    border: 1px solid #5897fb;
+    outline: none;
+
+    -webkit-box-shadow: 0 0 5px rgba(0,0,0,.3);
+       -moz-box-shadow: 0 0 5px rgba(0,0,0,.3);
+            box-shadow: 0 0 5px rgba(0,0,0,.3);
+}
+
+.select2-dropdown-open .select2-choice {
+    border-bottom-color: transparent;
+    -webkit-box-shadow: 0 1px 0 #fff inset;
+       -moz-box-shadow: 0 1px 0 #fff inset;
+            box-shadow: 0 1px 0 #fff inset;
+
+    -webkit-border-bottom-left-radius: 0;
+        -moz-border-radius-bottomleft: 0;
+            border-bottom-left-radius: 0;
+
+    -webkit-border-bottom-right-radius: 0;
+        -moz-border-radius-bottomright: 0;
+            border-bottom-right-radius: 0;
+
+    background-color: #eee;
+    background-image: -webkit-gradient(linear, left bottom, left top, color-stop(0, white), color-stop(0.5, #eeeeee));
+    background-image: -webkit-linear-gradient(center bottom, white 0%, #eeeeee 50%);
+    background-image: -moz-linear-gradient(center bottom, white 0%, #eeeeee 50%);
+    background-image: -o-linear-gradient(bottom, white 0%, #eeeeee 50%);
+    background-image: -ms-linear-gradient(top, #ffffff 0%,#eeeeee 50%);
+    filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#eeeeee', endColorstr='#ffffff',GradientType=0 );
+    background-image: linear-gradient(top, #ffffff 0%,#eeeeee 50%);
+}
+
+.select2-dropdown-open .select2-choice div {
+    background: transparent;
+    border-left: none;
+    filter: none;
+}
+.select2-dropdown-open .select2-choice div b {
+    background-position: -18px 1px;
+}
+
+/* results */
+.select2-results {
+    max-height: 200px;
+    padding: 0 0 0 4px;
+    margin: 4px 4px 4px 0;
+    position: relative;
+    overflow-x: hidden;
+    overflow-y: auto;
+    -webkit-tap-highlight-color: rgba(0,0,0,0);
+}
+
+.select2-results ul.select2-result-sub {
+    margin: 0;
+}
+
+.select2-results ul.select2-result-sub > li .select2-result-label { padding-left: 20px }
+.select2-results ul.select2-result-sub ul.select2-result-sub > li .select2-result-label { padding-left: 40px }
+.select2-results ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub > li .select2-result-label { padding-left: 60px }
+.select2-results ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub > li .select2-result-label { padding-left: 80px }
+.select2-results ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub > li .select2-result-label { padding-left: 100px }
+.select2-results ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub > li .select2-result-label { padding-left: 110px }
+.select2-results ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub ul.select2-result-sub > li .select2-result-label { padding-left: 120px }
+
+.select2-results li {
+    list-style: none;
+    display: list-item;
+    background-image: none;
+}
+
+.select2-results li.select2-result-with-children > .select2-result-label {
+    font-weight: bold;
+}
+
+.select2-results .select2-result-label {
+    padding: 3px 7px 4px;
+    margin: 0;
+    cursor: pointer;
+
+    -webkit-touch-callout: none;
+      -webkit-user-select: none;
+       -khtml-user-select: none;
+         -moz-user-select: none;
+          -ms-user-select: none;
+              user-select: none;
+}
+
+.select2-results .select2-highlighted {
+    background: #3875d7;
+    color: #fff;
+}
+
+.select2-results li em {
+    background: #feffde;
+    font-style: normal;
+}
+
+.select2-results .select2-highlighted em {
+    background: transparent;
+}
+
+.select2-results .select2-highlighted ul {
+    background: white;
+    color: #000;
+}
+
+
+.select2-results .select2-no-results,
+.select2-results .select2-searching,
+.select2-results .select2-selection-limit {
+    background: #f4f4f4;
+    display: list-item;
+}
+
+/*
+disabled look for disabled choices in the results dropdown
+*/
+.select2-results .select2-disabled.select2-highlighted {
+    color: #666;
+    background: #f4f4f4;
+    display: list-item;
+    cursor: default;
+}
+.select2-results .select2-disabled {
+  background: #f4f4f4;
+  display: list-item;
+  cursor: default;
+}
+
+.select2-results .select2-selected {
+    display: none;
+}
+
+.select2-more-results.select2-active {
+    background: #f4f4f4 url('select2-spinner.gif') no-repeat 100%;
+}
+
+.select2-more-results {
+    background: #f4f4f4;
+    display: list-item;
+}
+
+/* disabled styles */
+
+.select2-container.select2-container-disabled .select2-choice {
+    background-color: #f4f4f4;
+    background-image: none;
+    border: 1px solid #ddd;
+    cursor: default;
+}
+
+.select2-container.select2-container-disabled .select2-choice div {
+    background-color: #f4f4f4;
+    background-image: none;
+    border-left: 0;
+}
+
+.select2-container.select2-container-disabled .select2-choice abbr {
+    display: none
+}
+
+
+/* multiselect */
+
+.select2-container-multi .select2-choices {
+    height: auto !important;
+    height: 1%;
+    margin: 0;
+    padding: 0;
+    position: relative;
+
+    border: 1px solid #aaa;
+    cursor: text;
+    overflow: hidden;
+
+    background-color: #fff;
+    background-image: -webkit-gradient(linear, 0% 0%, 0% 100%, color-stop(1%, #eeeeee), color-stop(15%, #ffffff));
+    background-image: -webkit-linear-gradient(top, #eeeeee 1%, #ffffff 15%);
+    background-image: -moz-linear-gradient(top, #eeeeee 1%, #ffffff 15%);
+    background-image: -o-linear-gradient(top, #eeeeee 1%, #ffffff 15%);
+    background-image: -ms-linear-gradient(top, #eeeeee 1%, #ffffff 15%);
+    background-image: linear-gradient(top, #eeeeee 1%, #ffffff 15%);
+}
+
+.select2-locked {
+  padding: 3px 5px 3px 5px !important;
+}
+
+.select2-container-multi .select2-choices {
+    min-height: 26px;
+}
+
+.select2-container-multi.select2-container-active .select2-choices {
+    border: 1px solid #5897fb;
+    outline: none;
+
+    -webkit-box-shadow: 0 0 5px rgba(0,0,0,.3);
+       -moz-box-shadow: 0 0 5px rgba(0,0,0,.3);
+            box-shadow: 0 0 5px rgba(0,0,0,.3);
+}
+.select2-container-multi .select2-choices li {
+    float: left;
+    list-style: none;
+}
+.select2-container-multi .select2-choices .select2-search-field {
+    margin: 0;
+    padding: 0;
+    white-space: nowrap;
+}
+
+.select2-container-multi .select2-choices .select2-search-field input {
+    padding: 5px;
+    margin: 1px 0;
+
+    font-family: sans-serif;
+    font-size: 100%;
+    color: #666;
+    outline: 0;
+    border: 0;
+    -webkit-box-shadow: none;
+       -moz-box-shadow: none;
+            box-shadow: none;
+    background: transparent !important;
+}
+
+.select2-container-multi .select2-choices .select2-search-field input.select2-active {
+    background: #fff url('select2-spinner.gif') no-repeat 100% !important;
+}
+
+.select2-default {
+    color: #999 !important;
+}
+
+.select2-container-multi .select2-choices .select2-search-choice {
+    padding: 3px 5px 3px 18px;
+    margin: 3px 0 3px 5px;
+    position: relative;
+
+    line-height: 13px;
+    color: #333;
+    cursor: default;
+    border: 1px solid #aaaaaa;
+
+    -webkit-border-radius: 3px;
+       -moz-border-radius: 3px;
+            border-radius: 3px;
+
+    -webkit-box-shadow: 0 0 2px #ffffff inset, 0 1px 0 rgba(0,0,0,0.05);
+       -moz-box-shadow: 0 0 2px #ffffff inset, 0 1px 0 rgba(0,0,0,0.05);
+            box-shadow: 0 0 2px #ffffff inset, 0 1px 0 rgba(0,0,0,0.05);
+
+    -webkit-background-clip: padding-box;
+       -moz-background-clip: padding;
+            background-clip: padding-box;
+
+    -webkit-touch-callout: none;
+      -webkit-user-select: none;
+       -khtml-user-select: none;
+         -moz-user-select: none;
+          -ms-user-select: none;
+              user-select: none;
+
+    background-color: #e4e4e4;
+    filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#eeeeee', endColorstr='#f4f4f4', GradientType=0 );
+    background-image: -webkit-gradient(linear, 0% 0%, 0% 100%, color-stop(20%, #f4f4f4), color-stop(50%, #f0f0f0), color-stop(52%, #e8e8e8), color-stop(100%, #eeeeee));
+    background-image: -webkit-linear-gradient(top, #f4f4f4 20%, #f0f0f0 50%, #e8e8e8 52%, #eeeeee 100%);
+    background-image: -moz-linear-gradient(top, #f4f4f4 20%, #f0f0f0 50%, #e8e8e8 52%, #eeeeee 100%);
+    background-image: -o-linear-gradient(top, #f4f4f4 20%, #f0f0f0 50%, #e8e8e8 52%, #eeeeee 100%);
+    background-image: -ms-linear-gradient(top, #f4f4f4 20%, #f0f0f0 50%, #e8e8e8 52%, #eeeeee 100%);
+    background-image: linear-gradient(top, #f4f4f4 20%, #f0f0f0 50%, #e8e8e8 52%, #eeeeee 100%);
+}
+.select2-container-multi .select2-choices .select2-search-choice span {
+    cursor: default;
+}
+.select2-container-multi .select2-choices .select2-search-choice-focus {
+    background: #d4d4d4;
+}
+
+.select2-search-choice-close {
+    display: block;
+    width: 12px;
+    height: 13px;
+    position: absolute;
+    right: 3px;
+    top: 4px;
+
+    font-size: 1px;
+    outline: none;
+    background: url('select2.png') right top no-repeat;
+}
+
+.select2-container-multi .select2-search-choice-close {
+    left: 3px;
+}
+
+.select2-container-multi .select2-choices .select2-search-choice .select2-search-choice-close:hover {
+  background-position: right -11px;
+}
+.select2-container-multi .select2-choices .select2-search-choice-focus .select2-search-choice-close {
+    background-position: right -11px;
+}
+
+/* disabled styles */
+.select2-container-multi.select2-container-disabled .select2-choices{
+    background-color: #f4f4f4;
+    background-image: none;
+    border: 1px solid #ddd;
+    cursor: default;
+}
+
+.select2-container-multi.select2-container-disabled .select2-choices .select2-search-choice {
+    padding: 3px 5px 3px 5px;
+    border: 1px solid #ddd;
+    background-image: none;
+    background-color: #f4f4f4;
+}
+
+.select2-container-multi.select2-container-disabled .select2-choices .select2-search-choice .select2-search-choice-close {
+    display: none;
+}
+/* end multiselect */
+
+
+.select2-result-selectable .select2-match,
+.select2-result-unselectable .select2-match {
+    text-decoration: underline;
+}
+
+.select2-offscreen {
+    position: absolute;
+    left: -10000px;
+}
+
+/* Retina-ize icons */
+
+@media only screen and (-webkit-min-device-pixel-ratio: 1.5), only screen and (min-resolution: 144dpi)  {
+  .select2-search input, .select2-search-choice-close, .select2-container .select2-choice abbr, .select2-container .select2-choice div b {
+      background-image: url('select2x2.png') !important;
+      background-repeat: no-repeat !important;
+      background-size: 60px 40px !important;
+  }
+  .select2-search input {
+      background-position: 100% -21px !important;
+  }
+}
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/select2.jquery.json b/www/wp-content/plugins/cas-maestro/js/select2/select2.jquery.json
new file mode 100644
index 0000000..f2b697f
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/select2/select2.jquery.json
@@ -0,0 +1,36 @@
+{
+    "name": "select2",
+    "title": "Select2",
+    "description": "Select2 is a jQuery based replacement for select boxes. It supports searching, remote data sets, and infinite scrolling of results.",
+    "keywords": [
+        "select",
+        "autocomplete",
+        "typeahead",
+        "dropdown",
+        "multiselect",
+        "tag",
+        "tagging"
+    ],
+    "version": "3.3.1",
+    "author": {
+        "name": "Igor Vaynberg",
+        "url": "https://github.com/ivaynberg"
+    },
+    "licenses": [
+        {
+            "type": "Apache",
+            "url": "http://www.apache.org/licenses/LICENSE-2.0"
+        },
+        {
+            "type": "GPL v2",
+            "url": "http://www.gnu.org/licenses/gpl-2.0.html"
+        }
+    ],
+    "bugs": "https://github.com/ivaynberg/select2/issues",
+    "homepage": "http://ivaynberg.github.com/select2",
+    "docs": "http://ivaynberg.github.com/select2/",
+    "download": "https://github.com/ivaynberg/select2/tags",
+    "dependencies": {
+        "jquery": ">=1.4.6"
+    }
+}
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/select2.js b/www/wp-content/plugins/cas-maestro/js/select2/select2.js
new file mode 100644
index 0000000..8be2c7e
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/select2/select2.js
@@ -0,0 +1,2711 @@
+/*
+Copyright 2012 Igor Vaynberg
+
+Version: 3.3.1 Timestamp: Wed Feb 20 09:57:22 PST 2013
+
+This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNU
+General Public License version 2 (the "GPL License"). You may choose either license to govern your
+use of this software only upon the condition that you accept all of the terms of either the Apache
+License or the GPL License.
+
+You may obtain a copy of the Apache License and the GPL License at:
+
+    http://www.apache.org/licenses/LICENSE-2.0
+    http://www.gnu.org/licenses/gpl-2.0.html
+
+Unless required by applicable law or agreed to in writing, software distributed under the
+Apache License or the GPL Licesnse is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
+CONDITIONS OF ANY KIND, either express or implied. See the Apache License and the GPL License for
+the specific language governing permissions and limitations under the Apache License and the GPL License.
+*/
+ (function ($) {
+ 	if(typeof $.fn.each2 == "undefined"){
+ 		$.fn.extend({
+ 			/*
+			* 4-10 times faster .each replacement
+			* use it carefully, as it overrides jQuery context of element on each iteration
+			*/
+			each2 : function (c) {
+				var j = $([0]), i = -1, l = this.length;
+				while (
+					++i < l
+					&& (j.context = j[0] = this[i])
+					&& c.call(j[0], i, j) !== false //"this"=DOM, i=index, j=jQuery object
+				);
+				return this;
+			}
+ 		});
+ 	}
+})(jQuery);
+
+(function ($, undefined) {
+    "use strict";
+    /*global document, window, jQuery, console */
+
+    if (window.Select2 !== undefined) {
+        return;
+    }
+
+    var KEY, AbstractSelect2, SingleSelect2, MultiSelect2, nextUid, sizer,
+        lastMousePosition, $document;
+
+    KEY = {
+        TAB: 9,
+        ENTER: 13,
+        ESC: 27,
+        SPACE: 32,
+        LEFT: 37,
+        UP: 38,
+        RIGHT: 39,
+        DOWN: 40,
+        SHIFT: 16,
+        CTRL: 17,
+        ALT: 18,
+        PAGE_UP: 33,
+        PAGE_DOWN: 34,
+        HOME: 36,
+        END: 35,
+        BACKSPACE: 8,
+        DELETE: 46,
+        isArrow: function (k) {
+            k = k.which ? k.which : k;
+            switch (k) {
+            case KEY.LEFT:
+            case KEY.RIGHT:
+            case KEY.UP:
+            case KEY.DOWN:
+                return true;
+            }
+            return false;
+        },
+        isControl: function (e) {
+            var k = e.which;
+            switch (k) {
+            case KEY.SHIFT:
+            case KEY.CTRL:
+            case KEY.ALT:
+                return true;
+            }
+
+            if (e.metaKey) return true;
+
+            return false;
+        },
+        isFunctionKey: function (k) {
+            k = k.which ? k.which : k;
+            return k >= 112 && k <= 123;
+        }
+    };
+
+    $document = $(document);
+
+    nextUid=(function() { var counter=1; return function() { return counter++; }; }());
+
+    function indexOf(value, array) {
+        var i = 0, l = array.length;
+        for (; i < l; i = i + 1) {
+            if (equal(value, array[i])) return i;
+        }
+        return -1;
+    }
+
+    /**
+     * Compares equality of a and b
+     * @param a
+     * @param b
+     */
+    function equal(a, b) {
+        if (a === b) return true;
+        if (a === undefined || b === undefined) return false;
+        if (a === null || b === null) return false;
+        if (a.constructor === String) return a === b+'';
+        if (b.constructor === String) return b === a+'';
+        return false;
+    }
+
+    /**
+     * Splits the string into an array of values, trimming each value. An empty array is returned for nulls or empty
+     * strings
+     * @param string
+     * @param separator
+     */
+    function splitVal(string, separator) {
+        var val, i, l;
+        if (string === null || string.length < 1) return [];
+        val = string.split(separator);
+        for (i = 0, l = val.length; i < l; i = i + 1) val[i] = $.trim(val[i]);
+        return val;
+    }
+
+    function getSideBorderPadding(element) {
+        return element.outerWidth(false) - element.width();
+    }
+
+    function installKeyUpChangeEvent(element) {
+        var key="keyup-change-value";
+        element.bind("keydown", function () {
+            if ($.data(element, key) === undefined) {
+                $.data(element, key, element.val());
+            }
+        });
+        element.bind("keyup", function () {
+            var val= $.data(element, key);
+            if (val !== undefined && element.val() !== val) {
+                $.removeData(element, key);
+                element.trigger("keyup-change");
+            }
+        });
+    }
+
+    $document.bind("mousemove", function (e) {
+        lastMousePosition = {x: e.pageX, y: e.pageY};
+    });
+
+    /**
+     * filters mouse events so an event is fired only if the mouse moved.
+     *
+     * filters out mouse events that occur when mouse is stationary but
+     * the elements under the pointer are scrolled.
+     */
+    function installFilteredMouseMove(element) {
+	    element.bind("mousemove", function (e) {
+            var lastpos = lastMousePosition;
+            if (lastpos === undefined || lastpos.x !== e.pageX || lastpos.y !== e.pageY) {
+                $(e.target).trigger("mousemove-filtered", e);
+            }
+        });
+    }
+
+    /**
+     * Debounces a function. Returns a function that calls the original fn function only if no invocations have been made
+     * within the last quietMillis milliseconds.
+     *
+     * @param quietMillis number of milliseconds to wait before invoking fn
+     * @param fn function to be debounced
+     * @param ctx object to be used as this reference within fn
+     * @return debounced version of fn
+     */
+    function debounce(quietMillis, fn, ctx) {
+        ctx = ctx || undefined;
+        var timeout;
+        return function () {
+            var args = arguments;
+            window.clearTimeout(timeout);
+            timeout = window.setTimeout(function() {
+                fn.apply(ctx, args);
+            }, quietMillis);
+        };
+    }
+
+    /**
+     * A simple implementation of a thunk
+     * @param formula function used to lazily initialize the thunk
+     * @return {Function}
+     */
+    function thunk(formula) {
+        var evaluated = false,
+            value;
+        return function() {
+            if (evaluated === false) { value = formula(); evaluated = true; }
+            return value;
+        };
+    };
+
+    function installDebouncedScroll(threshold, element) {
+        var notify = debounce(threshold, function (e) { element.trigger("scroll-debounced", e);});
+        element.bind("scroll", function (e) {
+            if (indexOf(e.target, element.get()) >= 0) notify(e);
+        });
+    }
+
+    function focus($el) {
+        if ($el[0] === document.activeElement) return;
+
+        /* set the focus in a 0 timeout - that way the focus is set after the processing
+            of the current event has finished - which seems like the only reliable way
+            to set focus */
+        window.setTimeout(function() {
+            var el=$el[0], pos=$el.val().length, range;
+
+            $el.focus();
+
+            /* after the focus is set move the caret to the end, necessary when we val()
+                just before setting focus */
+            if(el.setSelectionRange)
+            {
+                el.setSelectionRange(pos, pos);
+            }
+            else if (el.createTextRange) {
+                range = el.createTextRange();
+                range.collapse(true);
+                range.moveEnd('character', pos);
+                range.moveStart('character', pos);
+                range.select();
+            }
+
+        }, 0);
+    }
+
+    function killEvent(event) {
+        event.preventDefault();
+        event.stopPropagation();
+    }
+    function killEventImmediately(event) {
+        event.preventDefault();
+        event.stopImmediatePropagation();
+    }
+
+    function measureTextWidth(e) {
+        if (!sizer){
+        	var style = e[0].currentStyle || window.getComputedStyle(e[0], null);
+        	sizer = $(document.createElement("div")).css({
+	            position: "absolute",
+	            left: "-10000px",
+	            top: "-10000px",
+	            display: "none",
+	            fontSize: style.fontSize,
+	            fontFamily: style.fontFamily,
+	            fontStyle: style.fontStyle,
+	            fontWeight: style.fontWeight,
+	            letterSpacing: style.letterSpacing,
+	            textTransform: style.textTransform,
+	            whiteSpace: "nowrap"
+	        });
+            sizer.attr("class","select2-sizer");
+        	$("body").append(sizer);
+        }
+        sizer.text(e.val());
+        return sizer.width();
+    }
+
+    function syncCssClasses(dest, src, adapter) {
+        var classes, replacements = [], adapted;
+
+        classes = dest.attr("class");
+        if (typeof classes === "string") {
+            $(classes.split(" ")).each2(function() {
+                if (this.indexOf("select2-") === 0) {
+                    replacements.push(this);
+                }
+            });
+        }
+        classes = src.attr("class");
+        if (typeof classes === "string") {
+            $(classes.split(" ")).each2(function() {
+                if (this.indexOf("select2-") !== 0) {
+                    adapted = adapter(this);
+                    if (typeof adapted === "string" && adapted.length > 0) {
+                        replacements.push(this);
+                    }
+                }
+            });
+        }
+        dest.attr("class", replacements.join(" "));
+    }
+
+
+    function markMatch(text, term, markup, escapeMarkup) {
+        var match=text.toUpperCase().indexOf(term.toUpperCase()),
+            tl=term.length;
+
+        if (match<0) {
+            markup.push(escapeMarkup(text));
+            return;
+        }
+
+        markup.push(escapeMarkup(text.substring(0, match)));
+        markup.push("<span class='select2-match'>");
+        markup.push(escapeMarkup(text.substring(match, match + tl)));
+        markup.push("</span>");
+        markup.push(escapeMarkup(text.substring(match + tl, text.length)));
+    }
+
+    /**
+     * Produces an ajax-based query function
+     *
+     * @param options object containing configuration paramters
+     * @param options.transport function that will be used to execute the ajax request. must be compatible with parameters supported by $.ajax
+     * @param options.url url for the data
+     * @param options.data a function(searchTerm, pageNumber, context) that should return an object containing query string parameters for the above url.
+     * @param options.dataType request data type: ajax, jsonp, other datatatypes supported by jQuery's $.ajax function or the transport function if specified
+     * @param options.traditional a boolean flag that should be true if you wish to use the traditional style of param serialization for the ajax request
+     * @param options.quietMillis (optional) milliseconds to wait before making the ajaxRequest, helps debounce the ajax function if invoked too often
+     * @param options.results a function(remoteData, pageNumber) that converts data returned form the remote request to the format expected by Select2.
+     *      The expected format is an object containing the following keys:
+     *      results array of objects that will be used as choices
+     *      more (optional) boolean indicating whether there are more results available
+     *      Example: {results:[{id:1, text:'Red'},{id:2, text:'Blue'}], more:true}
+     */
+    function ajax(options) {
+        var timeout, // current scheduled but not yet executed request
+            requestSequence = 0, // sequence used to drop out-of-order responses
+            handler = null,
+            quietMillis = options.quietMillis || 100,
+            ajaxUrl = options.url,
+            self = this;
+
+        return function (query) {
+            window.clearTimeout(timeout);
+            timeout = window.setTimeout(function () {
+                requestSequence += 1; // increment the sequence
+                var requestNumber = requestSequence, // this request's sequence number
+                    data = options.data, // ajax data function
+                    url = ajaxUrl, // ajax url string or function
+                    transport = options.transport || $.ajax,
+                    type = options.type || 'GET', // set type of request (GET or POST)
+                    params = {};
+
+                data = data ? data.call(self, query.term, query.page, query.context) : null;
+                url = (typeof url === 'function') ? url.call(self, query.term, query.page, query.context) : url;
+
+                if( null !== handler) { handler.abort(); }
+
+                if (options.params) {
+                    if ($.isFunction(options.params)) {
+                        $.extend(params, options.params.call(self));
+                    } else {
+                        $.extend(params, options.params);
+                    }
+                }
+
+                $.extend(params, {
+                    url: url,
+                    dataType: options.dataType,
+                    data: data,
+                    type: type,
+                    cache: false,
+                    success: function (data) {
+                        if (requestNumber < requestSequence) {
+                            return;
+                        }
+                        // TODO - replace query.page with query so users have access to term, page, etc.
+                        var results = options.results(data, query.page);
+                        query.callback(results);
+                    }
+                });
+                handler = transport.call(self, params);
+            }, quietMillis);
+        };
+    }
+
+    /**
+     * Produces a query function that works with a local array
+     *
+     * @param options object containing configuration parameters. The options parameter can either be an array or an
+     * object.
+     *
+     * If the array form is used it is assumed that it contains objects with 'id' and 'text' keys.
+     *
+     * If the object form is used ti is assumed that it contains 'data' and 'text' keys. The 'data' key should contain
+     * an array of objects that will be used as choices. These objects must contain at least an 'id' key. The 'text'
+     * key can either be a String in which case it is expected that each element in the 'data' array has a key with the
+     * value of 'text' which will be used to match choices. Alternatively, text can be a function(item) that can extract
+     * the text.
+     */
+    function local(options) {
+        var data = options, // data elements
+            dataText,
+            tmp,
+            text = function (item) { return ""+item.text; }; // function used to retrieve the text portion of a data item that is matched against the search
+
+		 if ($.isArray(data)) {
+            tmp = data;
+            data = { results: tmp };
+        }
+
+		 if ($.isFunction(data) === false) {
+            tmp = data;
+            data = function() { return tmp; };
+        }
+
+        var dataItem = data();
+        if (dataItem.text) {
+            text = dataItem.text;
+            // if text is not a function we assume it to be a key name
+            if (!$.isFunction(text)) {
+                dataText = data.text; // we need to store this in a separate variable because in the next step data gets reset and data.text is no longer available
+                text = function (item) { return item[dataText]; };
+            }
+        }
+
+        return function (query) {
+            var t = query.term, filtered = { results: [] }, process;
+            if (t === "") {
+                query.callback(data());
+                return;
+            }
+
+            process = function(datum, collection) {
+                var group, attr;
+                datum = datum[0];
+                if (datum.children) {
+                    group = {};
+                    for (attr in datum) {
+                        if (datum.hasOwnProperty(attr)) group[attr]=datum[attr];
+                    }
+                    group.children=[];
+                    $(datum.children).each2(function(i, childDatum) { process(childDatum, group.children); });
+                    if (group.children.length || query.matcher(t, text(group), datum)) {
+                        collection.push(group);
+                    }
+                } else {
+                    if (query.matcher(t, text(datum), datum)) {
+                        collection.push(datum);
+                    }
+                }
+            };
+
+            $(data().results).each2(function(i, datum) { process(datum, filtered.results); });
+            query.callback(filtered);
+        };
+    }
+
+    // TODO javadoc
+    function tags(data) {
+        var isFunc = $.isFunction(data);
+        return function (query) {
+            var t = query.term, filtered = {results: []};
+            $(isFunc ? data() : data).each(function () {
+                var isObject = this.text !== undefined,
+                    text = isObject ? this.text : this;
+                if (t === "" || query.matcher(t, text)) {
+                    filtered.results.push(isObject ? this : {id: this, text: this});
+                }
+            });
+            query.callback(filtered);
+        };
+    }
+
+    /**
+     * Checks if the formatter function should be used.
+     *
+     * Throws an error if it is not a function. Returns true if it should be used,
+     * false if no formatting should be performed.
+     *
+     * @param formatter
+     */
+    function checkFormatter(formatter, formatterName) {
+        if ($.isFunction(formatter)) return true;
+        if (!formatter) return false;
+        throw new Error("formatterName must be a function or a falsy value");
+    }
+
+    function evaluate(val) {
+        return $.isFunction(val) ? val() : val;
+    }
+
+    function countResults(results) {
+        var count = 0;
+        $.each(results, function(i, item) {
+            if (item.children) {
+                count += countResults(item.children);
+            } else {
+                count++;
+            }
+        });
+        return count;
+    }
+
+    /**
+     * Default tokenizer. This function uses breaks the input on substring match of any string from the
+     * opts.tokenSeparators array and uses opts.createSearchChoice to create the choice object. Both of those
+     * two options have to be defined in order for the tokenizer to work.
+     *
+     * @param input text user has typed so far or pasted into the search field
+     * @param selection currently selected choices
+     * @param selectCallback function(choice) callback tho add the choice to selection
+     * @param opts select2's opts
+     * @return undefined/null to leave the current input unchanged, or a string to change the input to the returned value
+     */
+    function defaultTokenizer(input, selection, selectCallback, opts) {
+        var original = input, // store the original so we can compare and know if we need to tell the search to update its text
+            dupe = false, // check for whether a token we extracted represents a duplicate selected choice
+            token, // token
+            index, // position at which the separator was found
+            i, l, // looping variables
+            separator; // the matched separator
+
+        if (!opts.createSearchChoice || !opts.tokenSeparators || opts.tokenSeparators.length < 1) return undefined;
+
+        while (true) {
+            index = -1;
+
+            for (i = 0, l = opts.tokenSeparators.length; i < l; i++) {
+                separator = opts.tokenSeparators[i];
+                index = input.indexOf(separator);
+                if (index >= 0) break;
+            }
+
+            if (index < 0) break; // did not find any token separator in the input string, bail
+
+            token = input.substring(0, index);
+            input = input.substring(index + separator.length);
+
+            if (token.length > 0) {
+                token = opts.createSearchChoice(token, selection);
+                if (token !== undefined && token !== null && opts.id(token) !== undefined && opts.id(token) !== null) {
+                    dupe = false;
+                    for (i = 0, l = selection.length; i < l; i++) {
+                        if (equal(opts.id(token), opts.id(selection[i]))) {
+                            dupe = true; break;
+                        }
+                    }
+
+                    if (!dupe) selectCallback(token);
+                }
+            }
+        }
+
+        if (original!==input) return input;
+    }
+
+    /**
+     * Creates a new class
+     *
+     * @param superClass
+     * @param methods
+     */
+    function clazz(SuperClass, methods) {
+        var constructor = function () {};
+        constructor.prototype = new SuperClass;
+        constructor.prototype.constructor = constructor;
+        constructor.prototype.parent = SuperClass.prototype;
+        constructor.prototype = $.extend(constructor.prototype, methods);
+        return constructor;
+    }
+
+    AbstractSelect2 = clazz(Object, {
+
+        // abstract
+        bind: function (func) {
+            var self = this;
+            return function () {
+                func.apply(self, arguments);
+            };
+        },
+
+        // abstract
+        init: function (opts) {
+            var results, search, resultsSelector = ".select2-results", mask;
+
+            // prepare options
+            this.opts = opts = this.prepareOpts(opts);
+
+            this.id=opts.id;
+
+            // destroy if called on an existing component
+            if (opts.element.data("select2") !== undefined &&
+                opts.element.data("select2") !== null) {
+                this.destroy();
+            }
+
+            this.enabled=true;
+            this.container = this.createContainer();
+
+            this.containerId="s2id_"+(opts.element.attr("id") || "autogen"+nextUid());
+            this.containerSelector="#"+this.containerId.replace(/([;&,\.\+\*\~':"\!\^#$%@\[\]\(\)=>\|])/g, '\\$1');
+            this.container.attr("id", this.containerId);
+
+            // cache the body so future lookups are cheap
+            this.body = thunk(function() { return opts.element.closest("body"); });
+
+            syncCssClasses(this.container, this.opts.element, this.opts.adaptContainerCssClass);
+
+            this.container.css(evaluate(opts.containerCss));
+            this.container.addClass(evaluate(opts.containerCssClass));
+
+            this.elementTabIndex = this.opts.element.attr("tabIndex");
+
+            // swap container for the element
+            this.opts.element
+                .data("select2", this)
+                .addClass("select2-offscreen")
+                .bind("focus.select2", function() { $(this).select2("focus"); })
+                .attr("tabIndex", "-1")
+                .before(this.container);
+            this.container.data("select2", this);
+
+            this.dropdown = this.container.find(".select2-drop");
+            this.dropdown.addClass(evaluate(opts.dropdownCssClass));
+            this.dropdown.data("select2", this);
+
+            this.results = results = this.container.find(resultsSelector);
+            this.search = search = this.container.find("input.select2-input");
+
+            search.attr("tabIndex", this.elementTabIndex);
+
+            this.resultsPage = 0;
+            this.context = null;
+
+            // initialize the container
+            this.initContainer();
+
+            installFilteredMouseMove(this.results);
+            this.dropdown.delegate(resultsSelector, "mousemove-filtered touchstart touchmove touchend", this.bind(this.highlightUnderEvent));
+
+            installDebouncedScroll(80, this.results);
+            this.dropdown.delegate(resultsSelector, "scroll-debounced", this.bind(this.loadMoreIfNeeded));
+
+            // if jquery.mousewheel plugin is installed we can prevent out-of-bounds scrolling of results via mousewheel
+            if ($.fn.mousewheel) {
+                results.mousewheel(function (e, delta, deltaX, deltaY) {
+                    var top = results.scrollTop(), height;
+                    if (deltaY > 0 && top - deltaY <= 0) {
+                        results.scrollTop(0);
+                        killEvent(e);
+                    } else if (deltaY < 0 && results.get(0).scrollHeight - results.scrollTop() + deltaY <= results.height()) {
+                        results.scrollTop(results.get(0).scrollHeight - results.height());
+                        killEvent(e);
+                    }
+                });
+            }
+
+            installKeyUpChangeEvent(search);
+            search.bind("keyup-change input paste", this.bind(this.updateResults));
+            search.bind("focus", function () { search.addClass("select2-focused"); });
+            search.bind("blur", function () { search.removeClass("select2-focused");});
+
+            this.dropdown.delegate(resultsSelector, "mouseup", this.bind(function (e) {
+                if ($(e.target).closest(".select2-result-selectable").length > 0) {
+                    this.highlightUnderEvent(e);
+                    this.selectHighlighted(e);
+                }
+            }));
+
+            // trap all mouse events from leaving the dropdown. sometimes there may be a modal that is listening
+            // for mouse events outside of itself so it can close itself. since the dropdown is now outside the select2's
+            // dom it will trigger the popup close, which is not what we want
+            this.dropdown.bind("click mouseup mousedown", function (e) { e.stopPropagation(); });
+
+            if ($.isFunction(this.opts.initSelection)) {
+                // initialize selection based on the current value of the source element
+                this.initSelection();
+
+                // if the user has provided a function that can set selection based on the value of the source element
+                // we monitor the change event on the element and trigger it, allowing for two way synchronization
+                this.monitorSource();
+            }
+
+            if (opts.element.is(":disabled") || opts.element.is("[readonly='readonly']")) this.disable();
+        },
+
+        // abstract
+        destroy: function () {
+            var select2 = this.opts.element.data("select2");
+
+            if (this.propertyObserver) { delete this.propertyObserver; this.propertyObserver = null; }
+
+            if (select2 !== undefined) {
+
+                select2.container.remove();
+                select2.dropdown.remove();
+                select2.opts.element
+                    .removeClass("select2-offscreen")
+                    .removeData("select2")
+                    .unbind(".select2")
+                    .attr({"tabIndex": this.elementTabIndex})
+                    .show();
+            }
+        },
+
+        // abstract
+        prepareOpts: function (opts) {
+            var element, select, idKey, ajaxUrl;
+
+            element = opts.element;
+
+            if (element.get(0).tagName.toLowerCase() === "select") {
+                this.select = select = opts.element;
+            }
+
+            if (select) {
+                // these options are not allowed when attached to a select because they are picked up off the element itself
+                $.each(["id", "multiple", "ajax", "query", "createSearchChoice", "initSelection", "data", "tags"], function () {
+                    if (this in opts) {
+                        throw new Error("Option '" + this + "' is not allowed for Select2 when attached to a <select> element.");
+                    }
+                });
+            }
+
+            opts = $.extend({}, {
+                populateResults: function(container, results, query) {
+                    var populate,  data, result, children, id=this.opts.id, self=this;
+
+                    populate=function(results, container, depth) {
+
+                        var i, l, result, selectable, disabled, compound, node, label, innerContainer, formatted;
+
+                        results = opts.sortResults(results, container, query);
+
+                        for (i = 0, l = results.length; i < l; i = i + 1) {
+
+                            result=results[i];
+
+                            disabled = (result.disabled === true);
+                            selectable = (!disabled) && (id(result) !== undefined);
+
+                            compound=result.children && result.children.length > 0;
+
+                            node=$("<li></li>");
+                            node.addClass("select2-results-dept-"+depth);
+                            node.addClass("select2-result");
+                            node.addClass(selectable ? "select2-result-selectable" : "select2-result-unselectable");
+                            if (disabled) { node.addClass("select2-disabled"); }
+                            if (compound) { node.addClass("select2-result-with-children"); }
+                            node.addClass(self.opts.formatResultCssClass(result));
+
+                            label=$(document.createElement("div"));
+                            label.addClass("select2-result-label");
+
+                            formatted=opts.formatResult(result, label, query, self.opts.escapeMarkup);
+                            if (formatted!==undefined) {
+                                label.html(formatted);
+                            }
+
+                            node.append(label);
+
+                            if (compound) {
+
+                                innerContainer=$("<ul></ul>");
+                                innerContainer.addClass("select2-result-sub");
+                                populate(result.children, innerContainer, depth+1);
+                                node.append(innerContainer);
+                            }
+
+                            node.data("select2-data", result);
+                            container.append(node);
+                        }
+                    };
+
+                    populate(results, container, 0);
+                }
+            }, $.fn.select2.defaults, opts);
+
+            if (typeof(opts.id) !== "function") {
+                idKey = opts.id;
+                opts.id = function (e) { return e[idKey]; };
+            }
+
+            if ($.isArray(opts.element.data("select2Tags"))) {
+                if ("tags" in opts) {
+                    throw "tags specified as both an attribute 'data-select2-tags' and in options of Select2 " + opts.element.attr("id");
+                }
+                opts.tags=opts.element.attr("data-select2-tags");
+            }
+
+            if (select) {
+                opts.query = this.bind(function (query) {
+                    var data = { results: [], more: false },
+                        term = query.term,
+                        children, firstChild, process;
+
+                    process=function(element, collection) {
+                        var group;
+                        if (element.is("option")) {
+                            if (query.matcher(term, element.text(), element)) {
+                                collection.push({id:element.attr("value"), text:element.text(), element: element.get(), css: element.attr("class"), disabled: equal(element.attr("disabled"), "disabled") });
+                            }
+                        } else if (element.is("optgroup")) {
+                            group={text:element.attr("label"), children:[], element: element.get(), css: element.attr("class")};
+                            element.children().each2(function(i, elm) { process(elm, group.children); });
+                            if (group.children.length>0) {
+                                collection.push(group);
+                            }
+                        }
+                    };
+
+                    children=element.children();
+
+                    // ignore the placeholder option if there is one
+                    if (this.getPlaceholder() !== undefined && children.length > 0) {
+                        firstChild = children[0];
+                        if ($(firstChild).text() === "") {
+                            children=children.not(firstChild);
+                        }
+                    }
+
+                    children.each2(function(i, elm) { process(elm, data.results); });
+
+                    query.callback(data);
+                });
+                // this is needed because inside val() we construct choices from options and there id is hardcoded
+                opts.id=function(e) { return e.id; };
+                opts.formatResultCssClass = function(data) { return data.css; };
+            } else {
+                if (!("query" in opts)) {
+
+                    if ("ajax" in opts) {
+                        ajaxUrl = opts.element.data("ajax-url");
+                        if (ajaxUrl && ajaxUrl.length > 0) {
+                            opts.ajax.url = ajaxUrl;
+                        }
+                        opts.query = ajax.call(opts.element, opts.ajax);
+                    } else if ("data" in opts) {
+                        opts.query = local(opts.data);
+                    } else if ("tags" in opts) {
+                        opts.query = tags(opts.tags);
+                        if (opts.createSearchChoice === undefined) {
+                            opts.createSearchChoice = function (term) { return {id: term, text: term}; };
+                        }
+                        if (opts.initSelection === undefined) {
+                            opts.initSelection = function (element, callback) {
+                                var data = [];
+                                $(splitVal(element.val(), opts.separator)).each(function () {
+                                    var id = this, text = this, tags=opts.tags;
+                                    if ($.isFunction(tags)) tags=tags();
+                                    $(tags).each(function() { if (equal(this.id, id)) { text = this.text; return false; } });
+                                    data.push({id: id, text: text});
+                                });
+
+                                callback(data);
+                            };
+                        }
+                    }
+                }
+            }
+            if (typeof(opts.query) !== "function") {
+                throw "query function not defined for Select2 " + opts.element.attr("id");
+            }
+
+            return opts;
+        },
+
+        /**
+         * Monitor the original element for changes and update select2 accordingly
+         */
+        // abstract
+        monitorSource: function () {
+            var el = this.opts.element, sync;
+
+            el.bind("change.select2", this.bind(function (e) {
+                if (this.opts.element.data("select2-change-triggered") !== true) {
+                    this.initSelection();
+                }
+            }));
+
+            sync = this.bind(function () {
+
+                var enabled, readonly, self = this;
+
+                // sync enabled state
+
+                enabled = this.opts.element.attr("disabled") !== "disabled";
+                readonly = this.opts.element.attr("readonly") === "readonly";
+
+                enabled = enabled && !readonly;
+
+                if (this.enabled !== enabled) {
+                    if (enabled) {
+                        this.enable();
+                    } else {
+                        this.disable();
+                    }
+                }
+
+
+                syncCssClasses(this.container, this.opts.element, this.opts.adaptContainerCssClass);
+                this.container.addClass(evaluate(this.opts.containerCssClass));
+
+                syncCssClasses(this.dropdown, this.opts.element, this.opts.adaptDropdownCssClass);
+                this.dropdown.addClass(evaluate(this.opts.dropdownCssClass));
+
+            });
+
+            // mozilla and IE
+            el.bind("propertychange.select2 DOMAttrModified.select2", sync);
+            // safari and chrome
+            if (typeof WebKitMutationObserver !== "undefined") {
+                if (this.propertyObserver) { delete this.propertyObserver; this.propertyObserver = null; }
+                this.propertyObserver = new WebKitMutationObserver(function (mutations) {
+                    mutations.forEach(sync);
+                });
+                this.propertyObserver.observe(el.get(0), { attributes:true, subtree:false });
+            }
+        },
+
+        /**
+         * Triggers the change event on the source element
+         */
+        // abstract
+        triggerChange: function (details) {
+
+            details = details || {};
+            details= $.extend({}, details, { type: "change", val: this.val() });
+            // prevents recursive triggering
+            this.opts.element.data("select2-change-triggered", true);
+            this.opts.element.trigger(details);
+            this.opts.element.data("select2-change-triggered", false);
+
+            // some validation frameworks ignore the change event and listen instead to keyup, click for selects
+            // so here we trigger the click event manually
+            this.opts.element.click();
+
+            // ValidationEngine ignorea the change event and listens instead to blur
+            // so here we trigger the blur event manually if so desired
+            if (this.opts.blurOnChange)
+                this.opts.element.blur();
+        },
+
+        // abstract
+        enable: function() {
+            if (this.enabled) return;
+
+            this.enabled=true;
+            this.container.removeClass("select2-container-disabled");
+            this.opts.element.removeAttr("disabled");
+        },
+
+        // abstract
+        disable: function() {
+            if (!this.enabled) return;
+
+            this.close();
+
+            this.enabled=false;
+            this.container.addClass("select2-container-disabled");
+            this.opts.element.attr("disabled", "disabled");
+        },
+
+        // abstract
+        opened: function () {
+            return this.container.hasClass("select2-dropdown-open");
+        },
+
+        // abstract
+        positionDropdown: function() {
+            var offset = this.container.offset(),
+                height = this.container.outerHeight(false),
+                width = this.container.outerWidth(false),
+                dropHeight = this.dropdown.outerHeight(false),
+	            viewPortRight = $(window).scrollLeft() + $(window).width(),
+                viewportBottom = $(window).scrollTop() + $(window).height(),
+                dropTop = offset.top + height,
+                dropLeft = offset.left,
+                enoughRoomBelow = dropTop + dropHeight <= viewportBottom,
+                enoughRoomAbove = (offset.top - dropHeight) >= this.body().scrollTop(),
+	            dropWidth = this.dropdown.outerWidth(false),
+	            enoughRoomOnRight = dropLeft + dropWidth <= viewPortRight,
+                aboveNow = this.dropdown.hasClass("select2-drop-above"),
+                bodyOffset,
+                above,
+                css;
+
+            //console.log("below/ droptop:", dropTop, "dropHeight", dropHeight, "sum", (dropTop+dropHeight)+" viewport bottom", viewportBottom, "enough?", enoughRoomBelow);
+            //console.log("above/ offset.top", offset.top, "dropHeight", dropHeight, "top", (offset.top-dropHeight), "scrollTop", this.body().scrollTop(), "enough?", enoughRoomAbove);
+
+            // fix positioning when body has an offset and is not position: static
+
+            if (this.body().css('position') !== 'static') {
+                bodyOffset = this.body().offset();
+                dropTop -= bodyOffset.top;
+                dropLeft -= bodyOffset.left;
+            }
+
+            // always prefer the current above/below alignment, unless there is not enough room
+
+            if (aboveNow) {
+                above = true;
+                if (!enoughRoomAbove && enoughRoomBelow) above = false;
+            } else {
+                above = false;
+                if (!enoughRoomBelow && enoughRoomAbove) above = true;
+            }
+
+            if (!enoughRoomOnRight) {
+               dropLeft = offset.left + width - dropWidth;
+            }
+
+            if (above) {
+                dropTop = offset.top - dropHeight;
+                this.container.addClass("select2-drop-above");
+                this.dropdown.addClass("select2-drop-above");
+            }
+            else {
+                this.container.removeClass("select2-drop-above");
+                this.dropdown.removeClass("select2-drop-above");
+            }
+
+            css = $.extend({
+                top: dropTop,
+                left: dropLeft,
+                width: width
+            }, evaluate(this.opts.dropdownCss));
+
+            this.dropdown.css(css);
+        },
+
+        // abstract
+        shouldOpen: function() {
+            var event;
+
+            if (this.opened()) return false;
+
+            event = $.Event("opening");
+            this.opts.element.trigger(event);
+            return !event.isDefaultPrevented();
+        },
+
+        // abstract
+        clearDropdownAlignmentPreference: function() {
+            // clear the classes used to figure out the preference of where the dropdown should be opened
+            this.container.removeClass("select2-drop-above");
+            this.dropdown.removeClass("select2-drop-above");
+        },
+
+        /**
+         * Opens the dropdown
+         *
+         * @return {Boolean} whether or not dropdown was opened. This method will return false if, for example,
+         * the dropdown is already open, or if the 'open' event listener on the element called preventDefault().
+         */
+        // abstract
+        open: function () {
+
+            if (!this.shouldOpen()) return false;
+
+            window.setTimeout(this.bind(this.opening), 1);
+
+            return true;
+        },
+
+        /**
+         * Performs the opening of the dropdown
+         */
+        // abstract
+        opening: function() {
+            var cid = this.containerId,
+                scroll = "scroll." + cid,
+                resize = "resize."+cid,
+                orient = "orientationchange."+cid,
+                mask;
+
+            this.clearDropdownAlignmentPreference();
+
+            this.container.addClass("select2-dropdown-open").addClass("select2-container-active");
+
+
+            if(this.dropdown[0] !== this.body().children().last()[0]) {
+                this.dropdown.detach().appendTo(this.body());
+            }
+
+            this.updateResults(true);
+
+            // create the dropdown mask if doesnt already exist
+            mask = $("#select2-drop-mask");
+            if (mask.length == 0) {
+                mask = $(document.createElement("div"));
+                mask.attr("id","select2-drop-mask").attr("class","select2-drop-mask");
+                mask.hide();
+                mask.appendTo(this.body());
+                mask.bind("mousedown touchstart", function (e) {
+                    var dropdown = $("#select2-drop"), self;
+                    if (dropdown.length > 0) {
+                        self=dropdown.data("select2");
+                        if (self.opts.selectOnBlur) {
+                            self.selectHighlighted({noFocus: true});
+                        }
+                        self.close();
+                    }
+                });
+            }
+
+            // ensure the mask is always right before the dropdown
+            if (this.dropdown.prev()[0] !== mask[0]) {
+                this.dropdown.before(mask);
+            }
+
+            // move the global id to the correct dropdown
+            $("#select2-drop").removeAttr("id");
+            this.dropdown.attr("id", "select2-drop");
+
+            // show the elements
+            mask.css({
+                width: document.documentElement.scrollWidth,
+                height: document.documentElement.scrollHeight});
+            mask.show();
+            this.dropdown.show();
+            this.positionDropdown();
+
+            this.dropdown.addClass("select2-drop-active");
+            this.ensureHighlightVisible();
+
+            // attach listeners to events that can change the position of the container and thus require
+            // the position of the dropdown to be updated as well so it does not come unglued from the container
+            var that = this;
+            this.container.parents().add(window).each(function () {
+                $(this).bind(resize+" "+scroll+" "+orient, function (e) {
+                    $("#select2-drop-mask").css({
+                        width:document.documentElement.scrollWidth,
+                        height:document.documentElement.scrollHeight});
+                    that.positionDropdown();
+                });
+            });
+
+            this.focusSearch();
+        },
+
+        // abstract
+        close: function () {
+            if (!this.opened()) return;
+
+            var cid = this.containerId,
+                scroll = "scroll." + cid,
+                resize = "resize."+cid,
+                orient = "orientationchange."+cid;
+
+            // unbind event listeners
+            this.container.parents().add(window).each(function () { $(this).unbind(scroll).unbind(resize).unbind(orient); });
+
+            this.clearDropdownAlignmentPreference();
+
+            $("#select2-drop-mask").hide();
+            this.dropdown.removeAttr("id"); // only the active dropdown has the select2-drop id
+            this.dropdown.hide();
+            this.container.removeClass("select2-dropdown-open");
+            this.results.empty();
+            this.clearSearch();
+
+            this.opts.element.trigger($.Event("close"));
+        },
+
+        // abstract
+        clearSearch: function () {
+
+        },
+
+        //abstract
+        getMaximumSelectionSize: function() {
+            return evaluate(this.opts.maximumSelectionSize);
+        },
+
+        // abstract
+        ensureHighlightVisible: function () {
+            var results = this.results, children, index, child, hb, rb, y, more;
+
+            index = this.highlight();
+
+            if (index < 0) return;
+
+            if (index == 0) {
+
+                // if the first element is highlighted scroll all the way to the top,
+                // that way any unselectable headers above it will also be scrolled
+                // into view
+
+                results.scrollTop(0);
+                return;
+            }
+
+            children = this.findHighlightableChoices();
+
+            child = $(children[index]);
+
+            hb = child.offset().top + child.outerHeight(true);
+
+            // if this is the last child lets also make sure select2-more-results is visible
+            if (index === children.length - 1) {
+                more = results.find("li.select2-more-results");
+                if (more.length > 0) {
+                    hb = more.offset().top + more.outerHeight(true);
+                }
+            }
+
+            rb = results.offset().top + results.outerHeight(true);
+            if (hb > rb) {
+                results.scrollTop(results.scrollTop() + (hb - rb));
+            }
+            y = child.offset().top - results.offset().top;
+
+            // make sure the top of the element is visible
+            if (y < 0 && child.css('display') != 'none' ) {
+                results.scrollTop(results.scrollTop() + y); // y is negative
+            }
+        },
+
+        // abstract
+        findHighlightableChoices: function() {
+            var h=this.results.find(".select2-result-selectable:not(.select2-selected):not(.select2-disabled)");
+            return this.results.find(".select2-result-selectable:not(.select2-selected):not(.select2-disabled)");
+        },
+
+        // abstract
+        moveHighlight: function (delta) {
+            var choices = this.findHighlightableChoices(),
+                index = this.highlight();
+
+            while (index > -1 && index < choices.length) {
+                index += delta;
+                var choice = $(choices[index]);
+                if (choice.hasClass("select2-result-selectable") && !choice.hasClass("select2-disabled") && !choice.hasClass("select2-selected")) {
+                    this.highlight(index);
+                    break;
+                }
+            }
+        },
+
+        // abstract
+        highlight: function (index) {
+            var choices = this.findHighlightableChoices(),
+                choice,
+                data;
+
+            if (arguments.length === 0) {
+                return indexOf(choices.filter(".select2-highlighted")[0], choices.get());
+            }
+
+            if (index >= choices.length) index = choices.length - 1;
+            if (index < 0) index = 0;
+
+            this.results.find(".select2-highlighted").removeClass("select2-highlighted");
+
+            choice = $(choices[index]);
+            choice.addClass("select2-highlighted");
+
+            this.ensureHighlightVisible();
+
+            data = choice.data("select2-data");
+            if (data) {
+                this.opts.element.trigger({ type: "highlight", val: this.id(data), choice: data });
+            }
+        },
+
+        // abstract
+        countSelectableResults: function() {
+            return this.findHighlightableChoices().length;
+        },
+
+        // abstract
+        highlightUnderEvent: function (event) {
+            var el = $(event.target).closest(".select2-result-selectable");
+            if (el.length > 0 && !el.is(".select2-highlighted")) {
+        		var choices = this.findHighlightableChoices();
+                this.highlight(choices.index(el));
+            } else if (el.length == 0) {
+                // if we are over an unselectable item remove al highlights
+                this.results.find(".select2-highlighted").removeClass("select2-highlighted");
+            }
+        },
+
+        // abstract
+        loadMoreIfNeeded: function () {
+            var results = this.results,
+                more = results.find("li.select2-more-results"),
+                below, // pixels the element is below the scroll fold, below==0 is when the element is starting to be visible
+                offset = -1, // index of first element without data
+                page = this.resultsPage + 1,
+                self=this,
+                term=this.search.val(),
+                context=this.context;
+
+            if (more.length === 0) return;
+            below = more.offset().top - results.offset().top - results.height();
+
+            if (below <= this.opts.loadMorePadding) {
+                more.addClass("select2-active");
+                this.opts.query({
+                        element: this.opts.element,
+                        term: term,
+                        page: page,
+                        context: context,
+                        matcher: this.opts.matcher,
+                        callback: this.bind(function (data) {
+
+                    // ignore a response if the select2 has been closed before it was received
+                    if (!self.opened()) return;
+
+
+                    self.opts.populateResults.call(this, results, data.results, {term: term, page: page, context:context});
+
+                    if (data.more===true) {
+                        more.detach().appendTo(results).text(self.opts.formatLoadMore(page+1));
+                        window.setTimeout(function() { self.loadMoreIfNeeded(); }, 10);
+                    } else {
+                        more.remove();
+                    }
+                    self.positionDropdown();
+                    self.resultsPage = page;
+                    self.context = data.context;
+                })});
+            }
+        },
+
+        /**
+         * Default tokenizer function which does nothing
+         */
+        tokenize: function() {
+
+        },
+
+        /**
+         * @param initial whether or not this is the call to this method right after the dropdown has been opened
+         */
+        // abstract
+        updateResults: function (initial) {
+            var search = this.search, results = this.results, opts = this.opts, data, self=this, input;
+
+            // if the search is currently hidden we do not alter the results
+            if (initial !== true && (this.showSearchInput === false || !this.opened())) {
+                return;
+            }
+
+            search.addClass("select2-active");
+
+            function postRender() {
+                results.scrollTop(0);
+                search.removeClass("select2-active");
+                self.positionDropdown();
+            }
+
+            function render(html) {
+                results.html(html);
+                postRender();
+            }
+
+            var maxSelSize = this.getMaximumSelectionSize();
+            if (maxSelSize >=1) {
+                data = this.data();
+                if ($.isArray(data) && data.length >= maxSelSize && checkFormatter(opts.formatSelectionTooBig, "formatSelectionTooBig")) {
+            	    render("<li class='select2-selection-limit'>" + opts.formatSelectionTooBig(maxSelSize) + "</li>");
+            	    return;
+                }
+            }
+
+            if (search.val().length < opts.minimumInputLength) {
+                if (checkFormatter(opts.formatInputTooShort, "formatInputTooShort")) {
+                    render("<li class='select2-no-results'>" + opts.formatInputTooShort(search.val(), opts.minimumInputLength) + "</li>");
+                } else {
+                    render("");
+                }
+                return;
+            }
+            else if (opts.formatSearching() && initial===true) {
+                render("<li class='select2-searching'>" + opts.formatSearching() + "</li>");
+            }
+
+            if (opts.maximumInputLength && search.val().length > opts.maximumInputLength) {
+                if (checkFormatter(opts.formatInputTooLong, "formatInputTooLong")) {
+                    render("<li class='select2-no-results'>" + opts.formatInputTooLong(search.val(), opts.maximumInputLength) + "</li>");
+                } else {
+                    render("");
+                }
+                return;
+            }
+
+            // give the tokenizer a chance to pre-process the input
+            input = this.tokenize();
+            if (input != undefined && input != null) {
+                search.val(input);
+            }
+
+            this.resultsPage = 1;
+
+            opts.query({
+                element: opts.element,
+                    term: search.val(),
+                    page: this.resultsPage,
+                    context: null,
+                    matcher: opts.matcher,
+                    callback: this.bind(function (data) {
+                var def; // default choice
+
+                // ignore a response if the select2 has been closed before it was received
+                if (!this.opened()) return;
+
+                // save context, if any
+                this.context = (data.context===undefined) ? null : data.context;
+                // create a default choice and prepend it to the list
+                if (this.opts.createSearchChoice && search.val() !== "") {
+                    def = this.opts.createSearchChoice.call(null, search.val(), data.results);
+                    if (def !== undefined && def !== null && self.id(def) !== undefined && self.id(def) !== null) {
+                        if ($(data.results).filter(
+                            function () {
+                                return equal(self.id(this), self.id(def));
+                            }).length === 0) {
+                            data.results.unshift(def);
+                        }
+                    }
+                }
+
+                if (data.results.length === 0 && checkFormatter(opts.formatNoMatches, "formatNoMatches")) {
+                    render("<li class='select2-no-results'>" + opts.formatNoMatches(search.val()) + "</li>");
+                    return;
+                }
+
+                results.empty();
+                self.opts.populateResults.call(this, results, data.results, {term: search.val(), page: this.resultsPage, context:null});
+
+                if (data.more === true && checkFormatter(opts.formatLoadMore, "formatLoadMore")) {
+                    results.append("<li class='select2-more-results'>" + self.opts.escapeMarkup(opts.formatLoadMore(this.resultsPage)) + "</li>");
+                    window.setTimeout(function() { self.loadMoreIfNeeded(); }, 10);
+                }
+
+                this.postprocessResults(data, initial);
+
+                postRender();
+            })});
+        },
+
+        // abstract
+        cancel: function () {
+            this.close();
+        },
+
+        // abstract
+        blur: function () {
+            // if selectOnBlur == true, select the currently highlighted option
+            if (this.opts.selectOnBlur)
+                this.selectHighlighted({noFocus: true});
+
+            this.close();
+            this.container.removeClass("select2-container-active");
+            // synonymous to .is(':focus'), which is available in jquery >= 1.6
+            if (this.search[0] === document.activeElement) { this.search.blur(); }
+            this.clearSearch();
+            this.selection.find(".select2-search-choice-focus").removeClass("select2-search-choice-focus");
+        },
+
+        // abstract
+        focusSearch: function () {
+            focus(this.search);
+        },
+
+        // abstract
+        selectHighlighted: function (options) {
+            var index=this.highlight(),
+                highlighted=this.results.find(".select2-highlighted"),
+                data = highlighted.closest('.select2-result').data("select2-data");
+
+            if (data) {
+                this.highlight(index);
+                this.onSelect(data, options);
+            }
+        },
+
+        // abstract
+        getPlaceholder: function () {
+            return this.opts.element.attr("placeholder") ||
+                this.opts.element.attr("data-placeholder") || // jquery 1.4 compat
+                this.opts.element.data("placeholder") ||
+                this.opts.placeholder;
+        },
+
+        /**
+         * Get the desired width for the container element.  This is
+         * derived first from option `width` passed to select2, then
+         * the inline 'style' on the original element, and finally
+         * falls back to the jQuery calculated element width.
+         */
+        // abstract
+        initContainerWidth: function () {
+            function resolveContainerWidth() {
+                var style, attrs, matches, i, l;
+
+                if (this.opts.width === "off") {
+                    return null;
+                } else if (this.opts.width === "element"){
+                    return this.opts.element.outerWidth(false) === 0 ? 'auto' : this.opts.element.outerWidth(false) + 'px';
+                } else if (this.opts.width === "copy" || this.opts.width === "resolve") {
+                    // check if there is inline style on the element that contains width
+                    style = this.opts.element.attr('style');
+                    if (style !== undefined) {
+                        attrs = style.split(';');
+                        for (i = 0, l = attrs.length; i < l; i = i + 1) {
+                            matches = attrs[i].replace(/\s/g, '')
+                                .match(/width:(([-+]?([0-9]*\.)?[0-9]+)(px|em|ex|%|in|cm|mm|pt|pc))/);
+                            if (matches !== null && matches.length >= 1)
+                                return matches[1];
+                        }
+                    }
+
+                    if (this.opts.width === "resolve") {
+                        // next check if css('width') can resolve a width that is percent based, this is sometimes possible
+                        // when attached to input type=hidden or elements hidden via css
+                        style = this.opts.element.css('width');
+                        if (style.indexOf("%") > 0) return style;
+
+                        // finally, fallback on the calculated width of the element
+                        return (this.opts.element.outerWidth(false) === 0 ? 'auto' : this.opts.element.outerWidth(false) + 'px');
+                    }
+
+                    return null;
+                } else if ($.isFunction(this.opts.width)) {
+                    return this.opts.width();
+                } else {
+                    return this.opts.width;
+               }
+            };
+
+            var width = resolveContainerWidth.call(this);
+            if (width !== null) {
+                this.container.css("width", width);
+            }
+        }
+    });
+
+    SingleSelect2 = clazz(AbstractSelect2, {
+
+        // single
+
+		createContainer: function () {
+            var container = $(document.createElement("div")).attr({
+                "class": "select2-container"
+            }).html([
+                "<a href='javascript:void(0)' onclick='return false;' class='select2-choice' tabindex='-1'>",
+                "   <span></span><abbr class='select2-search-choice-close' style='display:none;'></abbr>",
+                "   <div><b></b></div>" ,
+                "</a>",
+                "<input class='select2-focusser select2-offscreen' type='text'/>",
+                "<div class='select2-drop' style='display:none'>" ,
+                "   <div class='select2-search'>" ,
+                "       <input type='text' autocomplete='off' class='select2-input'/>" ,
+                "   </div>" ,
+                "   <ul class='select2-results'>" ,
+                "   </ul>" ,
+                "</div>"].join(""));
+            return container;
+        },
+
+        // single
+        disable: function() {
+            if (!this.enabled) return;
+
+            this.parent.disable.apply(this, arguments);
+
+            this.focusser.attr("disabled", "disabled");
+        },
+
+        // single
+        enable: function() {
+            if (this.enabled) return;
+
+            this.parent.enable.apply(this, arguments);
+
+            this.focusser.removeAttr("disabled");
+        },
+
+        // single
+        opening: function () {
+            this.parent.opening.apply(this, arguments);
+            this.focusser.attr("disabled", "disabled");
+
+            this.opts.element.trigger($.Event("open"));
+        },
+
+        // single
+        close: function () {
+            if (!this.opened()) return;
+            this.parent.close.apply(this, arguments);
+            this.focusser.removeAttr("disabled");
+            focus(this.focusser);
+        },
+
+        // single
+        focus: function () {
+            if (this.opened()) {
+                this.close();
+            } else {
+                this.focusser.removeAttr("disabled");
+                this.focusser.focus();
+            }
+        },
+
+        // single
+        isFocused: function () {
+            return this.container.hasClass("select2-container-active");
+        },
+
+        // single
+        cancel: function () {
+            this.parent.cancel.apply(this, arguments);
+            this.focusser.removeAttr("disabled");
+            this.focusser.focus();
+        },
+
+        // single
+        initContainer: function () {
+
+            var selection,
+                container = this.container,
+                dropdown = this.dropdown,
+                clickingInside = false;
+
+            this.showSearch(this.opts.minimumResultsForSearch >= 0);
+
+            this.selection = selection = container.find(".select2-choice");
+
+            this.focusser = container.find(".select2-focusser");
+
+            this.search.bind("keydown", this.bind(function (e) {
+                if (!this.enabled) return;
+
+                if (e.which === KEY.PAGE_UP || e.which === KEY.PAGE_DOWN) {
+                    // prevent the page from scrolling
+                    killEvent(e);
+                    return;
+                }
+
+                switch (e.which) {
+                    case KEY.UP:
+                    case KEY.DOWN:
+                        this.moveHighlight((e.which === KEY.UP) ? -1 : 1);
+                        killEvent(e);
+                        return;
+                    case KEY.TAB:
+                    case KEY.ENTER:
+                        this.selectHighlighted();
+                        killEvent(e);
+                        return;
+                    case KEY.ESC:
+                        this.cancel(e);
+                        killEvent(e);
+                        return;
+                }
+            }));
+
+            this.focusser.bind("keydown", this.bind(function (e) {
+                if (!this.enabled) return;
+
+                if (e.which === KEY.TAB || KEY.isControl(e) || KEY.isFunctionKey(e) || e.which === KEY.ESC) {
+                    return;
+                }
+
+                if (this.opts.openOnEnter === false && e.which === KEY.ENTER) {
+                    killEvent(e);
+                    return;
+                }
+
+                if (e.which == KEY.DOWN || e.which == KEY.UP
+                    || (e.which == KEY.ENTER && this.opts.openOnEnter)) {
+                    this.open();
+                    killEvent(e);
+                    return;
+                }
+
+                if (e.which == KEY.DELETE || e.which == KEY.BACKSPACE) {
+                    if (this.opts.allowClear) {
+                        this.clear();
+                    }
+                    killEvent(e);
+                    return;
+                }
+            }));
+
+
+            installKeyUpChangeEvent(this.focusser);
+            this.focusser.bind("keyup-change input", this.bind(function(e) {
+                if (this.opened()) return;
+                this.open();
+                if (this.showSearchInput !== false) {
+                    this.search.val(this.focusser.val());
+                }
+                this.focusser.val("");
+                killEvent(e);
+            }));
+
+            selection.delegate("abbr", "mousedown", this.bind(function (e) {
+                if (!this.enabled) return;
+                this.clear();
+                killEventImmediately(e);
+                this.close();
+                this.selection.focus();
+            }));
+
+            selection.bind("mousedown", this.bind(function (e) {
+                clickingInside = true;
+
+                if (this.opened()) {
+                    this.close();
+                } else if (this.enabled) {
+                    this.open();
+                }
+
+                killEvent(e);
+
+                clickingInside = false;
+            }));
+
+            dropdown.bind("mousedown", this.bind(function() { this.search.focus(); }));
+
+            selection.bind("focus", this.bind(function(e) {
+                killEvent(e);
+            }));
+
+            this.focusser.bind("focus", this.bind(function(){
+                this.container.addClass("select2-container-active");
+            })).bind("blur", this.bind(function() {
+                if (!this.opened()) {
+                    this.container.removeClass("select2-container-active");
+                }
+            }));
+            this.search.bind("focus", this.bind(function(){
+                this.container.addClass("select2-container-active");
+            }))
+
+            this.initContainerWidth();
+            this.setPlaceholder();
+
+        },
+
+        // single
+        clear: function() {
+            var data=this.selection.data("select2-data");
+            this.opts.element.val("");
+            this.selection.find("span").empty();
+            this.selection.removeData("select2-data");
+            this.setPlaceholder();
+
+            this.opts.element.trigger({ type: "removed", val: this.id(data), choice: data });
+            this.triggerChange({removed:data});
+        },
+
+        /**
+         * Sets selection based on source element's value
+         */
+        // single
+        initSelection: function () {
+            var selected;
+            if (this.opts.element.val() === "" && this.opts.element.text() === "") {
+                this.close();
+                this.setPlaceholder();
+            } else {
+                var self = this;
+                this.opts.initSelection.call(null, this.opts.element, function(selected){
+                    if (selected !== undefined && selected !== null) {
+                        self.updateSelection(selected);
+                        self.close();
+                        self.setPlaceholder();
+                    }
+                });
+            }
+        },
+
+        // single
+        prepareOpts: function () {
+            var opts = this.parent.prepareOpts.apply(this, arguments);
+
+            if (opts.element.get(0).tagName.toLowerCase() === "select") {
+                // install the selection initializer
+                opts.initSelection = function (element, callback) {
+                    var selected = element.find(":selected");
+                    // a single select box always has a value, no need to null check 'selected'
+                    if ($.isFunction(callback))
+                        callback({id: selected.attr("value"), text: selected.text(), element:selected});
+                };
+            } else if ("data" in opts) {
+                // install default initSelection when applied to hidden input and data is local
+                opts.initSelection = opts.initSelection || function (element, callback) {
+                    var id = element.val();
+                    //search in data by id
+                    opts.query({
+                        matcher: function(term, text, el){
+                            return equal(id, opts.id(el));
+                        },
+                        callback: !$.isFunction(callback) ? $.noop : function(filtered) {
+                            callback(filtered.results.length ? filtered.results[0] : null);
+                        }
+                    });
+                };
+            }
+
+            return opts;
+        },
+
+        // single
+        getPlaceholder: function() {
+            // if a placeholder is specified on a single select without the first empty option ignore it
+            if (this.select) {
+                if (this.select.find("option").first().text() !== "") {
+                    return undefined;
+                }
+            }
+
+            return this.parent.getPlaceholder.apply(this, arguments);
+        },
+
+        // single
+        setPlaceholder: function () {
+            var placeholder = this.getPlaceholder();
+
+            if (this.opts.element.val() === "" && placeholder !== undefined) {
+
+                // check for a first blank option if attached to a select
+                if (this.select && this.select.find("option:first").text() !== "") return;
+
+                this.selection.find("span").html(this.opts.escapeMarkup(placeholder));
+
+                this.selection.addClass("select2-default");
+
+                this.selection.find("abbr").hide();
+            }
+        },
+
+        // single
+        postprocessResults: function (data, initial) {
+            var selected = 0, self = this, showSearchInput = true;
+
+            // find the selected element in the result list
+
+            this.findHighlightableChoices().each2(function (i, elm) {
+                if (equal(self.id(elm.data("select2-data")), self.opts.element.val())) {
+                    selected = i;
+                    return false;
+                }
+            });
+
+            // and highlight it
+
+            this.highlight(selected);
+
+            // hide the search box if this is the first we got the results and there are a few of them
+
+            if (initial === true) {
+                var min=this.opts.minimumResultsForSearch;
+                showSearchInput  = min < 0 ? false : countResults(data.results) >= min;
+                this.showSearch(showSearchInput);
+            }
+
+        },
+
+        // single
+        showSearch: function(showSearchInput) {
+            this.showSearchInput = showSearchInput;
+
+            this.dropdown.find(".select2-search")[showSearchInput ? "removeClass" : "addClass"]("select2-search-hidden");
+            //add "select2-with-searchbox" to the container if search box is shown
+            $(this.dropdown, this.container)[showSearchInput ? "addClass" : "removeClass"]("select2-with-searchbox");
+        },
+
+        // single
+        onSelect: function (data, options) {
+            var old = this.opts.element.val();
+
+            this.opts.element.val(this.id(data));
+            this.updateSelection(data);
+
+            this.opts.element.trigger({ type: "selected", val: this.id(data), choice: data });
+
+            this.close();
+
+            if (!options || !options.noFocus)
+                this.selection.focus();
+
+            if (!equal(old, this.id(data))) { this.triggerChange(); }
+        },
+
+        // single
+        updateSelection: function (data) {
+
+            var container=this.selection.find("span"), formatted;
+
+            this.selection.data("select2-data", data);
+
+            container.empty();
+            formatted=this.opts.formatSelection(data, container);
+            if (formatted !== undefined) {
+                container.append(this.opts.escapeMarkup(formatted));
+            }
+
+            this.selection.removeClass("select2-default");
+
+            if (this.opts.allowClear && this.getPlaceholder() !== undefined) {
+                this.selection.find("abbr").show();
+            }
+        },
+
+        // single
+        val: function () {
+            var val, triggerChange = false, data = null, self = this;
+
+            if (arguments.length === 0) {
+                return this.opts.element.val();
+            }
+
+            val = arguments[0];
+
+            if (arguments.length > 1) {
+                triggerChange = arguments[1];
+            }
+
+            if (this.select) {
+                this.select
+                    .val(val)
+                    .find(":selected").each2(function (i, elm) {
+                        data = {id: elm.attr("value"), text: elm.text()};
+                        return false;
+                    });
+                this.updateSelection(data);
+                this.setPlaceholder();
+                if (triggerChange) {
+                    this.triggerChange();
+                }
+            } else {
+                if (this.opts.initSelection === undefined) {
+                    throw new Error("cannot call val() if initSelection() is not defined");
+                }
+                // val is an id. !val is true for [undefined,null,'',0] - 0 is legal
+                if (!val && val !== 0) {
+                    this.clear();
+                    if (triggerChange) {
+                        this.triggerChange();
+                    }
+                    return;
+                }
+                this.opts.element.val(val);
+                this.opts.initSelection(this.opts.element, function(data){
+                    self.opts.element.val(!data ? "" : self.id(data));
+                    self.updateSelection(data);
+                    self.setPlaceholder();
+                    if (triggerChange) {
+                        self.triggerChange();
+                    }
+                });
+            }
+        },
+
+        // single
+        clearSearch: function () {
+            this.search.val("");
+            this.focusser.val("");
+        },
+
+        // single
+        data: function(value) {
+            var data;
+
+            if (arguments.length === 0) {
+                data = this.selection.data("select2-data");
+                if (data == undefined) data = null;
+                return data;
+            } else {
+                if (!value || value === "") {
+                    this.clear();
+                } else {
+                    this.opts.element.val(!value ? "" : this.id(value));
+                    this.updateSelection(value);
+                }
+            }
+        }
+    });
+
+    MultiSelect2 = clazz(AbstractSelect2, {
+
+        // multi
+        createContainer: function () {
+            var container = $(document.createElement("div")).attr({
+                "class": "select2-container select2-container-multi"
+            }).html([
+                "    <ul class='select2-choices'>",
+                //"<li class='select2-search-choice'><span>California</span><a href="javascript:void(0)" class="select2-search-choice-close"></a></li>" ,
+                "  <li class='select2-search-field'>" ,
+                "    <input type='text' autocomplete='off' class='select2-input'>" ,
+                "  </li>" ,
+                "</ul>" ,
+                "<div class='select2-drop select2-drop-multi' style='display:none;'>" ,
+                "   <ul class='select2-results'>" ,
+                "   </ul>" ,
+                "</div>"].join(""));
+			return container;
+        },
+
+        // multi
+        prepareOpts: function () {
+            var opts = this.parent.prepareOpts.apply(this, arguments);
+
+            // TODO validate placeholder is a string if specified
+
+            if (opts.element.get(0).tagName.toLowerCase() === "select") {
+                // install sthe selection initializer
+                opts.initSelection = function (element, callback) {
+
+                    var data = [];
+
+                    element.find(":selected").each2(function (i, elm) {
+                        data.push({id: elm.attr("value"), text: elm.text(), element: elm[0]});
+                    });
+                    callback(data);
+                };
+            } else if ("data" in opts) {
+                // install default initSelection when applied to hidden input and data is local
+                opts.initSelection = opts.initSelection || function (element, callback) {
+                    var ids = splitVal(element.val(), opts.separator);
+                    //search in data by array of ids
+                    opts.query({
+                        matcher: function(term, text, el){
+                            return $.grep(ids, function(id) {
+                                return equal(id, opts.id(el));
+                            }).length;
+                        },
+                        callback: !$.isFunction(callback) ? $.noop : function(filtered) {
+                            callback(filtered.results);
+                        }
+                    });
+                };
+            }
+
+            return opts;
+        },
+
+        // multi
+        initContainer: function () {
+
+            var selector = ".select2-choices", selection;
+
+            this.searchContainer = this.container.find(".select2-search-field");
+            this.selection = selection = this.container.find(selector);
+
+            this.search.bind("input paste", this.bind(function() {
+                if (!this.enabled) return;
+                if (!this.opened()) {
+                    this.open();
+                }
+            }));
+
+            this.search.bind("keydown", this.bind(function (e) {
+                if (!this.enabled) return;
+
+                if (e.which === KEY.BACKSPACE && this.search.val() === "") {
+                    this.close();
+
+                    var choices,
+                        selected = selection.find(".select2-search-choice-focus");
+                    if (selected.length > 0) {
+                        this.unselect(selected.first());
+                        this.search.width(10);
+                        killEvent(e);
+                        return;
+                    }
+
+                    choices = selection.find(".select2-search-choice:not(.select2-locked)");
+                    if (choices.length > 0) {
+                        choices.last().addClass("select2-search-choice-focus");
+                    }
+                } else {
+                    selection.find(".select2-search-choice-focus").removeClass("select2-search-choice-focus");
+                }
+
+                if (this.opened()) {
+                    switch (e.which) {
+                    case KEY.UP:
+                    case KEY.DOWN:
+                        this.moveHighlight((e.which === KEY.UP) ? -1 : 1);
+                        killEvent(e);
+                        return;
+                    case KEY.ENTER:
+                    case KEY.TAB:
+                        this.selectHighlighted();
+                        killEvent(e);
+                        return;
+                    case KEY.ESC:
+                        this.cancel(e);
+                        killEvent(e);
+                        return;
+                    }
+                }
+
+                if (e.which === KEY.TAB || KEY.isControl(e) || KEY.isFunctionKey(e)
+                 || e.which === KEY.BACKSPACE || e.which === KEY.ESC) {
+                    return;
+                }
+
+                if (e.which === KEY.ENTER) {
+                    if (this.opts.openOnEnter === false) {
+                        return;
+                    } else if (e.altKey || e.ctrlKey || e.shiftKey || e.metaKey) {
+                        return;
+                    }
+                }
+
+                this.open();
+
+                if (e.which === KEY.PAGE_UP || e.which === KEY.PAGE_DOWN) {
+                    // prevent the page from scrolling
+                    killEvent(e);
+                }
+            }));
+
+            this.search.bind("keyup", this.bind(this.resizeSearch));
+
+            this.search.bind("blur", this.bind(function(e) {
+                this.container.removeClass("select2-container-active");
+                this.search.removeClass("select2-focused");
+                if (!this.opened()) this.clearSearch();
+                e.stopImmediatePropagation();
+            }));
+
+            this.container.delegate(selector, "mousedown", this.bind(function (e) {
+                if (!this.enabled) return;
+                if ($(e.target).closest(".select2-search-choice").length > 0) {
+                    // clicked inside a select2 search choice, do not open
+                    return;
+                }
+                this.clearPlaceholder();
+                this.open();
+                this.focusSearch();
+                e.preventDefault();
+            }));
+
+            this.container.delegate(selector, "focus", this.bind(function () {
+                if (!this.enabled) return;
+                this.container.addClass("select2-container-active");
+                this.dropdown.addClass("select2-drop-active");
+                this.clearPlaceholder();
+            }));
+
+            this.initContainerWidth();
+
+            // set the placeholder if necessary
+            this.clearSearch();
+        },
+
+        // multi
+        enable: function() {
+            if (this.enabled) return;
+
+            this.parent.enable.apply(this, arguments);
+
+            this.search.removeAttr("disabled");
+        },
+
+        // multi
+        disable: function() {
+            if (!this.enabled) return;
+
+            this.parent.disable.apply(this, arguments);
+
+            this.search.attr("disabled", true);
+        },
+
+        // multi
+        initSelection: function () {
+            var data;
+            if (this.opts.element.val() === "" && this.opts.element.text() === "") {
+                this.updateSelection([]);
+                this.close();
+                // set the placeholder if necessary
+                this.clearSearch();
+            }
+            if (this.select || this.opts.element.val() !== "") {
+                var self = this;
+                this.opts.initSelection.call(null, this.opts.element, function(data){
+                    if (data !== undefined && data !== null) {
+                        self.updateSelection(data);
+                        self.close();
+                        // set the placeholder if necessary
+                        self.clearSearch();
+                    }
+                });
+            }
+        },
+
+        // multi
+        clearSearch: function () {
+            var placeholder = this.getPlaceholder();
+
+            if (placeholder !== undefined  && this.getVal().length === 0 && this.search.hasClass("select2-focused") === false) {
+                this.search.val(placeholder).addClass("select2-default");
+                // stretch the search box to full width of the container so as much of the placeholder is visible as possible
+                this.resizeSearch();
+            } else {
+                this.search.val("").width(10);
+            }
+        },
+
+        // multi
+        clearPlaceholder: function () {
+            if (this.search.hasClass("select2-default")) {
+                this.search.val("").removeClass("select2-default");
+            }
+        },
+
+        // multi
+        opening: function () {
+            this.parent.opening.apply(this, arguments);
+
+            this.clearPlaceholder();
+			this.resizeSearch();
+            this.focusSearch();
+
+            this.opts.element.trigger($.Event("open"));
+        },
+
+        // multi
+        close: function () {
+            if (!this.opened()) return;
+            this.parent.close.apply(this, arguments);
+        },
+
+        // multi
+        focus: function () {
+            this.close();
+            this.search.focus();
+            this.opts.element.triggerHandler("focus");
+        },
+
+        // multi
+        isFocused: function () {
+            return this.search.hasClass("select2-focused");
+        },
+
+        // multi
+        updateSelection: function (data) {
+            var ids = [], filtered = [], self = this;
+
+            // filter out duplicates
+            $(data).each(function () {
+                if (indexOf(self.id(this), ids) < 0) {
+                    ids.push(self.id(this));
+                    filtered.push(this);
+                }
+            });
+            data = filtered;
+
+            this.selection.find(".select2-search-choice").remove();
+            $(data).each(function () {
+                self.addSelectedChoice(this);
+            });
+            self.postprocessResults();
+        },
+
+        tokenize: function() {
+            var input = this.search.val();
+            input = this.opts.tokenizer(input, this.data(), this.bind(this.onSelect), this.opts);
+            if (input != null && input != undefined) {
+                this.search.val(input);
+                if (input.length > 0) {
+                    this.open();
+                }
+            }
+
+        },
+
+        // multi
+        onSelect: function (data, options) {
+            this.addSelectedChoice(data);
+
+            this.opts.element.trigger({ type: "selected", val: this.id(data), choice: data });
+
+            if (this.select || !this.opts.closeOnSelect) this.postprocessResults();
+
+            if (this.opts.closeOnSelect) {
+                this.close();
+                this.search.width(10);
+            } else {
+                if (this.countSelectableResults()>0) {
+                    this.search.width(10);
+                    this.resizeSearch();
+                    if (this.val().length >= this.getMaximumSelectionSize()) {
+                        // if we reached max selection size repaint the results so choices
+                        // are replaced with the max selection reached message
+                        this.updateResults(true);
+                    }
+                    this.positionDropdown();
+                } else {
+                    // if nothing left to select close
+                    this.close();
+                    this.search.width(10);
+                }
+            }
+
+            // since its not possible to select an element that has already been
+            // added we do not need to check if this is a new element before firing change
+            this.triggerChange({ added: data });
+
+            if (!options || !options.noFocus)
+                this.focusSearch();
+        },
+
+        // multi
+        cancel: function () {
+            this.close();
+            this.focusSearch();
+        },
+
+        addSelectedChoice: function (data) {
+            var enableChoice = !data.locked,
+                enabledItem = $(
+                    "<li class='select2-search-choice'>" +
+                    "    <div></div>" +
+                    "    <a href='#' onclick='return false;' class='select2-search-choice-close' tabindex='-1'></a>" +
+                    "</li>"),
+                disabledItem = $(
+                    "<li class='select2-search-choice select2-locked'>" +
+                    "<div></div>" +
+                    "</li>");
+            var choice = enableChoice ? enabledItem : disabledItem,
+                id = this.id(data),
+                val = this.getVal(),
+                formatted;
+
+            formatted=this.opts.formatSelection(data, choice.find("div"));
+            if (formatted != undefined) {
+                choice.find("div").replaceWith("<div>"+this.opts.escapeMarkup(formatted)+"</div>");
+            }
+
+            if(enableChoice){
+              choice.find(".select2-search-choice-close")
+                  .bind("mousedown", killEvent)
+                  .bind("click dblclick", this.bind(function (e) {
+                  if (!this.enabled) return;
+
+                  $(e.target).closest(".select2-search-choice").fadeOut('fast', this.bind(function(){
+                      this.unselect($(e.target));
+                      this.selection.find(".select2-search-choice-focus").removeClass("select2-search-choice-focus");
+                      this.close();
+                      this.focusSearch();
+                  })).dequeue();
+                  killEvent(e);
+              })).bind("focus", this.bind(function () {
+                  if (!this.enabled) return;
+                  this.container.addClass("select2-container-active");
+                  this.dropdown.addClass("select2-drop-active");
+              }));
+            }
+
+            choice.data("select2-data", data);
+            choice.insertBefore(this.searchContainer);
+
+            val.push(id);
+            this.setVal(val);
+        },
+
+        // multi
+        unselect: function (selected) {
+            var val = this.getVal(),
+                data,
+                index;
+
+            selected = selected.closest(".select2-search-choice");
+
+            if (selected.length === 0) {
+                throw "Invalid argument: " + selected + ". Must be .select2-search-choice";
+            }
+
+            data = selected.data("select2-data");
+
+            if (!data) {
+                // prevent a race condition when the 'x' is clicked really fast repeatedly the event can be queued
+                // and invoked on an element already removed
+                return;
+            }
+
+            index = indexOf(this.id(data), val);
+
+            if (index >= 0) {
+                val.splice(index, 1);
+                this.setVal(val);
+                if (this.select) this.postprocessResults();
+            }
+            selected.remove();
+
+            this.opts.element.trigger({ type: "removed", val: this.id(data), choice: data });
+            this.triggerChange({ removed: data });
+        },
+
+        // multi
+        postprocessResults: function () {
+            var val = this.getVal(),
+                choices = this.results.find(".select2-result"),
+                compound = this.results.find(".select2-result-with-children"),
+                self = this;
+
+            choices.each2(function (i, choice) {
+                var id = self.id(choice.data("select2-data"));
+                if (indexOf(id, val) >= 0) {
+                    choice.addClass("select2-selected");
+                    // mark all children of the selected parent as selected
+                    choice.find(".select2-result-selectable").addClass("select2-selected");
+                }
+            });
+
+            compound.each2(function(i, choice) {
+                // hide an optgroup if it doesnt have any selectable children
+                if (!choice.is('.select2-result-selectable')
+                    && choice.find(".select2-result-selectable:not(.select2-selected)").length === 0) {
+                    choice.addClass("select2-selected");
+                }
+            });
+
+            if (this.highlight() == -1){
+                self.highlight(0);
+            }
+
+        },
+
+        // multi
+        resizeSearch: function () {
+            var minimumWidth, left, maxWidth, containerLeft, searchWidth,
+            	sideBorderPadding = getSideBorderPadding(this.search);
+
+            minimumWidth = measureTextWidth(this.search) + 10;
+
+            left = this.search.offset().left;
+
+            maxWidth = this.selection.width();
+            containerLeft = this.selection.offset().left;
+
+            searchWidth = maxWidth - (left - containerLeft) - sideBorderPadding;
+
+            if (searchWidth < minimumWidth) {
+                searchWidth = maxWidth - sideBorderPadding;
+            }
+
+            if (searchWidth < 40) {
+                searchWidth = maxWidth - sideBorderPadding;
+            }
+
+            if (searchWidth <= 0) {
+              searchWidth = minimumWidth;
+            }
+
+            this.search.width(searchWidth);
+        },
+
+        // multi
+        getVal: function () {
+            var val;
+            if (this.select) {
+                val = this.select.val();
+                return val === null ? [] : val;
+            } else {
+                val = this.opts.element.val();
+                return splitVal(val, this.opts.separator);
+            }
+        },
+
+        // multi
+        setVal: function (val) {
+            var unique;
+            if (this.select) {
+                this.select.val(val);
+            } else {
+                unique = [];
+                // filter out duplicates
+                $(val).each(function () {
+                    if (indexOf(this, unique) < 0) unique.push(this);
+                });
+                this.opts.element.val(unique.length === 0 ? "" : unique.join(this.opts.separator));
+            }
+        },
+
+        // multi
+        val: function () {
+            var val, triggerChange = false, data = [], self=this;
+
+            if (arguments.length === 0) {
+                return this.getVal();
+            }
+
+            val = arguments[0];
+
+            if (arguments.length > 1) {
+                triggerChange = arguments[1];
+            }
+
+            // val is an id. !val is true for [undefined,null,'',0] - 0 is legal
+            if (!val && val !== 0) {
+                this.opts.element.val("");
+                this.updateSelection([]);
+                this.clearSearch();
+                if (triggerChange) {
+                    this.triggerChange();
+                }
+                return;
+            }
+
+            // val is a list of ids
+            this.setVal(val);
+
+            if (this.select) {
+                this.opts.initSelection(this.select, this.bind(this.updateSelection));
+                if (triggerChange) {
+                    this.triggerChange();
+                }
+            } else {
+                if (this.opts.initSelection === undefined) {
+                    throw new Error("val() cannot be called if initSelection() is not defined");
+                }
+
+                this.opts.initSelection(this.opts.element, function(data){
+                    var ids=$(data).map(self.id);
+                    self.setVal(ids);
+                    self.updateSelection(data);
+                    self.clearSearch();
+                    if (triggerChange) {
+                        self.triggerChange();
+                    }
+                });
+            }
+            this.clearSearch();
+        },
+
+        // multi
+        onSortStart: function() {
+            if (this.select) {
+                throw new Error("Sorting of elements is not supported when attached to <select>. Attach to <input type='hidden'/> instead.");
+            }
+
+            // collapse search field into 0 width so its container can be collapsed as well
+            this.search.width(0);
+            // hide the container
+            this.searchContainer.hide();
+        },
+
+        // multi
+        onSortEnd:function() {
+
+            var val=[], self=this;
+
+            // show search and move it to the end of the list
+            this.searchContainer.show();
+            // make sure the search container is the last item in the list
+            this.searchContainer.appendTo(this.searchContainer.parent());
+            // since we collapsed the width in dragStarted, we resize it here
+            this.resizeSearch();
+
+            // update selection
+
+            this.selection.find(".select2-search-choice").each(function() {
+                val.push(self.opts.id($(this).data("select2-data")));
+            });
+            this.setVal(val);
+            this.triggerChange();
+        },
+
+        // multi
+        data: function(values) {
+            var self=this, ids;
+            if (arguments.length === 0) {
+                 return this.selection
+                     .find(".select2-search-choice")
+                     .map(function() { return $(this).data("select2-data"); })
+                     .get();
+            } else {
+                if (!values) { values = []; }
+                ids = $.map(values, function(e) { return self.opts.id(e); });
+                this.setVal(ids);
+                this.updateSelection(values);
+                this.clearSearch();
+            }
+        }
+    });
+
+    $.fn.select2 = function () {
+
+        var args = Array.prototype.slice.call(arguments, 0),
+            opts,
+            select2,
+            value, multiple, allowedMethods = ["val", "destroy", "opened", "open", "close", "focus", "isFocused", "container", "onSortStart", "onSortEnd", "enable", "disable", "positionDropdown", "data"];
+
+        this.each(function () {
+            if (args.length === 0 || typeof(args[0]) === "object") {
+                opts = args.length === 0 ? {} : $.extend({}, args[0]);
+                opts.element = $(this);
+
+                if (opts.element.get(0).tagName.toLowerCase() === "select") {
+                    multiple = opts.element.attr("multiple");
+                } else {
+                    multiple = opts.multiple || false;
+                    if ("tags" in opts) {opts.multiple = multiple = true;}
+                }
+
+                select2 = multiple ? new MultiSelect2() : new SingleSelect2();
+                select2.init(opts);
+            } else if (typeof(args[0]) === "string") {
+
+                if (indexOf(args[0], allowedMethods) < 0) {
+                    throw "Unknown method: " + args[0];
+                }
+
+                value = undefined;
+                select2 = $(this).data("select2");
+                if (select2 === undefined) return;
+                if (args[0] === "container") {
+                    value=select2.container;
+                } else {
+                    value = select2[args[0]].apply(select2, args.slice(1));
+                }
+                if (value !== undefined) {return false;}
+            } else {
+                throw "Invalid arguments to select2 plugin: " + args;
+            }
+        });
+        return (value === undefined) ? this : value;
+    };
+
+    // plugin defaults, accessible to users
+    $.fn.select2.defaults = {
+        width: "copy",
+        loadMorePadding: 0,
+        closeOnSelect: true,
+        openOnEnter: true,
+        containerCss: {},
+        dropdownCss: {},
+        containerCssClass: "",
+        dropdownCssClass: "",
+        formatResult: function(result, container, query, escapeMarkup) {
+            var markup=[];
+            markMatch(result.text, query.term, markup, escapeMarkup);
+            return markup.join("");
+        },
+        formatSelection: function (data, container) {
+            return data ? data.text : undefined;
+        },
+        sortResults: function (results, container, query) {
+            return results;
+        },
+        formatResultCssClass: function(data) {return undefined;},
+        formatNoMatches: function () { return "No matches found"; },
+        formatInputTooShort: function (input, min) { var n = min - input.length; return "Please enter " + n + " more character" + (n == 1? "" : "s"); },
+        formatInputTooLong: function (input, max) { var n = input.length - max; return "Please enter " + n + " less character" + (n == 1? "" : "s"); },
+        formatSelectionTooBig: function (limit) { return "You can only select " + limit + " item" + (limit == 1 ? "" : "s"); },
+        formatLoadMore: function (pageNumber) { return "Loading more results..."; },
+        formatSearching: function () { return "Searching..."; },
+        minimumResultsForSearch: 0,
+        minimumInputLength: 0,
+        maximumInputLength: null,
+        maximumSelectionSize: 0,
+        id: function (e) { return e.id; },
+        matcher: function(term, text) {
+            return text.toUpperCase().indexOf(term.toUpperCase()) >= 0;
+        },
+        separator: ",",
+        tokenSeparators: [],
+        tokenizer: defaultTokenizer,
+        escapeMarkup: function (markup) {
+            var replace_map = {
+                '\\': '&#92;',
+                '&': '&amp;',
+                '<': '&lt;',
+                '>': '&gt;',
+                '"': '&quot;',
+                "'": '&apos;',
+                "/": '&#47;'
+            };
+
+            return String(markup).replace(/[&<>"'/\\]/g, function (match) {
+                    return replace_map[match[0]];
+            });
+        },
+        blurOnChange: false,
+        selectOnBlur: false,
+        adaptContainerCssClass: function(c) { return c; },
+        adaptDropdownCssClass: function(c) { return null; }
+    };
+
+    // exports
+    window.Select2 = {
+        query: {
+            ajax: ajax,
+            local: local,
+            tags: tags
+        }, util: {
+            debounce: debounce,
+            markMatch: markMatch
+        }, "class": {
+            "abstract": AbstractSelect2,
+            "single": SingleSelect2,
+            "multi": MultiSelect2
+        }
+    };
+
+}(jQuery));
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/select2.min.js b/www/wp-content/plugins/cas-maestro/js/select2/select2.min.js
new file mode 100644
index 0000000..1bea666
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/select2/select2.min.js
@@ -0,0 +1,564 @@
+/*
+Copyright 2012 Igor Vaynberg
+ 
+Version: 3.3.1 Timestamp: Wed Feb 20 09:57:22 PST 2013
+
+This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNU 
+General Public License version 2 (the "GPL License"). You may choose either license to govern your 
+use of this software only upon the condition that you accept all of the terms of either the Apache 
+License or the GPL License. 
+
+You may obtain a copy of the Apache License and the GPL License at:
+
+http://www.apache.org/licenses/LICENSE-2.0
+http://www.gnu.org/licenses/gpl-2.0.html
+
+Unless required by applicable law or agreed to in writing, software distributed under the Apache License 
+or the GPL Licesnse is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, 
+either express or implied. See the Apache License and the GPL License for the specific language governing 
+permissions and limitations under the Apache License and the GPL License.
+
+LICENSE #1: Apache License, Version 2.0
+
+LICENSE #2: GPL v2
+
+************************************************************
+
+LICENSE #1:
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+************************************************************
+
+LICENSE #2:
+
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 2, June 1991
+
+ Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
+ 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The licenses for most software are designed to take away your
+freedom to share and change it.  By contrast, the GNU General Public
+License is intended to guarantee your freedom to share and change free
+software--to make sure the software is free for all its users.  This
+General Public License applies to most of the Free Software
+Foundation's software and to any other program whose authors commit to
+using it.  (Some other Free Software Foundation software is covered by
+the GNU Lesser General Public License instead.)  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+this service if you wish), that you receive source code or can get it
+if you want it, that you can change the software or use pieces of it
+in new free programs; and that you know you can do these things.
+
+  To protect your rights, we need to make restrictions that forbid
+anyone to deny you these rights or to ask you to surrender the rights.
+These restrictions translate to certain responsibilities for you if you
+distribute copies of the software, or if you modify it.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must give the recipients all the rights that
+you have.  You must make sure that they, too, receive or can get the
+source code.  And you must show them these terms so they know their
+rights.
+
+  We protect your rights with two steps: (1) copyright the software, and
+(2) offer you this license which gives you legal permission to copy,
+distribute and/or modify the software.
+
+  Also, for each author's protection and ours, we want to make certain
+that everyone understands that there is no warranty for this free
+software.  If the software is modified by someone else and passed on, we
+want its recipients to know that what they have is not the original, so
+that any problems introduced by others will not reflect on the original
+authors' reputations.
+
+  Finally, any free program is threatened constantly by software
+patents.  We wish to avoid the danger that redistributors of a free
+program will individually obtain patent licenses, in effect making the
+program proprietary.  To prevent this, we have made it clear that any
+patent must be licensed for everyone's free use or not licensed at all.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                    GNU GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License applies to any program or other work which contains
+a notice placed by the copyright holder saying it may be distributed
+under the terms of this General Public License.  The "Program", below,
+refers to any such program or work, and a "work based on the Program"
+means either the Program or any derivative work under copyright law:
+that is to say, a work containing the Program or a portion of it,
+either verbatim or with modifications and/or translated into another
+language.  (Hereinafter, translation is included without limitation in
+the term "modification".)  Each licensee is addressed as "you".
+
+Activities other than copying, distribution and modification are not
+covered by this License; they are outside its scope.  The act of
+running the Program is not restricted, and the output from the Program
+is covered only if its contents constitute a work based on the
+Program (independent of having been made by running the Program).
+Whether that is true depends on what the Program does.
+
+  1. You may copy and distribute verbatim copies of the Program's
+source code as you receive it, in any medium, provided that you
+conspicuously and appropriately publish on each copy an appropriate
+copyright notice and disclaimer of warranty; keep intact all the
+notices that refer to this License and to the absence of any warranty;
+and give any other recipients of the Program a copy of this License
+along with the Program.
+
+You may charge a fee for the physical act of transferring a copy, and
+you may at your option offer warranty protection in exchange for a fee.
+
+  2. You may modify your copy or copies of the Program or any portion
+of it, thus forming a work based on the Program, and copy and
+distribute such modifications or work under the terms of Section 1
+above, provided that you also meet all of these conditions:
+
+    a) You must cause the modified files to carry prominent notices
+    stating that you changed the files and the date of any change.
+
+    b) You must cause any work that you distribute or publish, that in
+    whole or in part contains or is derived from the Program or any
+    part thereof, to be licensed as a whole at no charge to all third
+    parties under the terms of this License.
+
+    c) If the modified program normally reads commands interactively
+    when run, you must cause it, when started running for such
+    interactive use in the most ordinary way, to print or display an
+    announcement including an appropriate copyright notice and a
+    notice that there is no warranty (or else, saying that you provide
+    a warranty) and that users may redistribute the program under
+    these conditions, and telling the user how to view a copy of this
+    License.  (Exception: if the Program itself is interactive but
+    does not normally print such an announcement, your work based on
+    the Program is not required to print an announcement.)
+
+These requirements apply to the modified work as a whole.  If
+identifiable sections of that work are not derived from the Program,
+and can be reasonably considered independent and separate works in
+themselves, then this License, and its terms, do not apply to those
+sections when you distribute them as separate works.  But when you
+distribute the same sections as part of a whole which is a work based
+on the Program, the distribution of the whole must be on the terms of
+this License, whose permissions for other licensees extend to the
+entire whole, and thus to each and every part regardless of who wrote it.
+
+Thus, it is not the intent of this section to claim rights or contest
+your rights to work written entirely by you; rather, the intent is to
+exercise the right to control the distribution of derivative or
+collective works based on the Program.
+
+In addition, mere aggregation of another work not based on the Program
+with the Program (or with a work based on the Program) on a volume of
+a storage or distribution medium does not bring the other work under
+the scope of this License.
+
+  3. You may copy and distribute the Program (or a work based on it,
+under Section 2) in object code or executable form under the terms of
+Sections 1 and 2 above provided that you also do one of the following:
+
+    a) Accompany it with the complete corresponding machine-readable
+    source code, which must be distributed under the terms of Sections
+    1 and 2 above on a medium customarily used for software interchange; or,
+
+    b) Accompany it with a written offer, valid for at least three
+    years, to give any third party, for a charge no more than your
+    cost of physically performing source distribution, a complete
+    machine-readable copy of the corresponding source code, to be
+    distributed under the terms of Sections 1 and 2 above on a medium
+    customarily used for software interchange; or,
+
+    c) Accompany it with the information you received as to the offer
+    to distribute corresponding source code.  (This alternative is
+    allowed only for noncommercial distribution and only if you
+    received the program in object code or executable form with such
+    an offer, in accord with Subsection b above.)
+
+The source code for a work means the preferred form of the work for
+making modifications to it.  For an executable work, complete source
+code means all the source code for all modules it contains, plus any
+associated interface definition files, plus the scripts used to
+control compilation and installation of the executable.  However, as a
+special exception, the source code distributed need not include
+anything that is normally distributed (in either source or binary
+form) with the major components (compiler, kernel, and so on) of the
+operating system on which the executable runs, unless that component
+itself accompanies the executable.
+
+If distribution of executable or object code is made by offering
+access to copy from a designated place, then offering equivalent
+access to copy the source code from the same place counts as
+distribution of the source code, even though third parties are not
+compelled to copy the source along with the object code.
+
+  4. You may not copy, modify, sublicense, or distribute the Program
+except as expressly provided under this License.  Any attempt
+otherwise to copy, modify, sublicense or distribute the Program is
+void, and will automatically terminate your rights under this License.
+However, parties who have received copies, or rights, from you under
+this License will not have their licenses terminated so long as such
+parties remain in full compliance.
+
+  5. You are not required to accept this License, since you have not
+signed it.  However, nothing else grants you permission to modify or
+distribute the Program or its derivative works.  These actions are
+prohibited by law if you do not accept this License.  Therefore, by
+modifying or distributing the Program (or any work based on the
+Program), you indicate your acceptance of this License to do so, and
+all its terms and conditions for copying, distributing or modifying
+the Program or works based on it.
+
+  6. Each time you redistribute the Program (or any work based on the
+Program), the recipient automatically receives a license from the
+original licensor to copy, distribute or modify the Program subject to
+these terms and conditions.  You may not impose any further
+restrictions on the recipients' exercise of the rights granted herein.
+You are not responsible for enforcing compliance by third parties to
+this License.
+
+  7. If, as a consequence of a court judgment or allegation of patent
+infringement or for any other reason (not limited to patent issues),
+conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot
+distribute so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you
+may not distribute the Program at all.  For example, if a patent
+license would not permit royalty-free redistribution of the Program by
+all those who receive copies directly or indirectly through you, then
+the only way you could satisfy both it and this License would be to
+refrain entirely from distribution of the Program.
+
+If any portion of this section is held invalid or unenforceable under
+any particular circumstance, the balance of the section is intended to
+apply and the section as a whole is intended to apply in other
+circumstances.
+
+It is not the purpose of this section to induce you to infringe any
+patents or other property right claims or to contest validity of any
+such claims; this section has the sole purpose of protecting the
+integrity of the free software distribution system, which is
+implemented by public license practices.  Many people have made
+generous contributions to the wide range of software distributed
+through that system in reliance on consistent application of that
+system; it is up to the author/donor to decide if he or she is willing
+to distribute software through any other system and a licensee cannot
+impose that choice.
+
+This section is intended to make thoroughly clear what is believed to
+be a consequence of the rest of this License.
+
+  8. If the distribution and/or use of the Program is restricted in
+certain countries either by patents or by copyrighted interfaces, the
+original copyright holder who places the Program under this License
+may add an explicit geographical distribution limitation excluding
+those countries, so that distribution is permitted only in or among
+countries not thus excluded.  In such case, this License incorporates
+the limitation as if written in the body of this License.
+
+  9. The Free Software Foundation may publish revised and/or new versions
+of the General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Program
+specifies a version number of this License which applies to it and "any
+later version", you have the option of following the terms and conditions
+either of that version or of any later version published by the Free
+Software Foundation.  If the Program does not specify a version number of
+this License, you may choose any version ever published by the Free Software
+Foundation.
+
+  10. If you wish to incorporate parts of the Program into other free
+programs whose distribution conditions are different, write to the author
+to ask for permission.  For software which is copyrighted by the Free
+Software Foundation, write to the Free Software Foundation; we sometimes
+make exceptions for this.  Our decision will be guided by the two goals
+of preserving the free status of all derivatives of our free software and
+of promoting the sharing and reuse of software generally.
+
+                            NO WARRANTY
+
+  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
+FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
+OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
+PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
+OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
+TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
+PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
+REPAIR OR CORRECTION.
+
+  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
+REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
+INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
+OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
+TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
+YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
+PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+*/
+(function(e){"undefined"==typeof e.fn.each2&&e.fn.extend({each2:function(h){for(var n=e([0]),m=-1,w=this.length;++m<w&&(n.context=n[0]=this[m])&&!1!==h.call(n[0],m,n););return this}})})(jQuery);
+(function(e,h){function n(a,b){for(var c=0,d=b.length;c<d;c+=1)if(m(a,b[c]))return c;return-1}function m(a,b){return a===b?!0:a===h||b===h||null===a||null===b?!1:a.constructor===String?a===b+"":b.constructor===String?b===a+"":!1}function w(a,b){var c,d,g;if(null===a||1>a.length)return[];c=a.split(b);d=0;for(g=c.length;d<g;d+=1)c[d]=e.trim(c[d]);return c}function D(a){a.bind("keydown",function(){e.data(a,"keyup-change-value")===h&&e.data(a,"keyup-change-value",a.val())});a.bind("keyup",function(){var b=
+e.data(a,"keyup-change-value");b!==h&&a.val()!==b&&(e.removeData(a,"keyup-change-value"),a.trigger("keyup-change"))})}function E(a,b,c){c=c||h;var d;return function(){var g=arguments;window.clearTimeout(d);d=window.setTimeout(function(){b.apply(c,g)},a)}}function F(a){a[0]!==document.activeElement&&window.setTimeout(function(){var b=a[0],c=a.val().length;a.focus();b.setSelectionRange?b.setSelectionRange(c,c):b.createTextRange&&(b=b.createTextRange(),b.collapse(!0),b.moveEnd("character",c),b.moveStart("character",
+c),b.select())},0)}function k(a){a.preventDefault();a.stopPropagation()}function z(a,b,c){var d,g=[],p;d=a.attr("class");"string"===typeof d&&e(d.split(" ")).each2(function(){0===this.indexOf("select2-")&&g.push(this)});d=b.attr("class");"string"===typeof d&&e(d.split(" ")).each2(function(){0!==this.indexOf("select2-")&&(p=c(this),"string"===typeof p&&0<p.length&&g.push(this))});a.attr("class",g.join(" "))}function G(a,b,c,d){var g=a.toUpperCase().indexOf(b.toUpperCase());b=b.length;0>g?c.push(d(a)):
+(c.push(d(a.substring(0,g))),c.push("<span class='select2-match'>"),c.push(d(a.substring(g,g+b))),c.push("</span>"),c.push(d(a.substring(g+b,a.length))))}function H(a){var b,c=0,d=null,g=a.quietMillis||100,p=a.url,l=this;return function(j){window.clearTimeout(b);b=window.setTimeout(function(){var b=c+=1,g=a.data,x=p,h=a.transport||e.ajax,f=a.type||"GET",k={},g=g?g.call(l,j.term,j.page,j.context):null,x="function"===typeof x?x.call(l,j.term,j.page,j.context):x;null!==d&&d.abort();a.params&&(e.isFunction(a.params)?
+e.extend(k,a.params.call(l)):e.extend(k,a.params));e.extend(k,{url:x,dataType:a.dataType,data:g,type:f,cache:!1,success:function(d){b<c||(d=a.results(d,j.page),j.callback(d))}});d=h.call(l,k)},g)}}function I(a){var b=a,c,d,g=function(a){return""+a.text};e.isArray(b)&&(d=b,b={results:d});!1===e.isFunction(b)&&(d=b,b=function(){return d});a=b();a.text&&(g=a.text,e.isFunction(g)||(c=b.text,g=function(a){return a[c]}));return function(a){var c=a.term,d={results:[]},h;""===c?a.callback(b()):(h=function(b,
+d){var j,f;b=b[0];if(b.children){j={};for(f in b)b.hasOwnProperty(f)&&(j[f]=b[f]);j.children=[];e(b.children).each2(function(a,b){h(b,j.children)});(j.children.length||a.matcher(c,g(j),b))&&d.push(j)}else a.matcher(c,g(b),b)&&d.push(b)},e(b().results).each2(function(a,b){h(b,d.results)}),a.callback(d))}}function J(a){var b=e.isFunction(a);return function(c){var d=c.term,g={results:[]};e(b?a():a).each(function(){var a=this.text!==h,b=a?this.text:this;if(""===d||c.matcher(d,b))g.results.push(a?this:
+{id:this,text:this})});c.callback(g)}}function y(a){if(e.isFunction(a))return!0;if(!a)return!1;throw Error("formatterName must be a function or a falsy value");}function r(a){return e.isFunction(a)?a():a}function K(a){var b=0;e.each(a,function(a,d){d.children?b+=K(d.children):b++});return b}function N(a,b,c,d){var g=a,e=!1,l,j,f,q;if(!d.createSearchChoice||!d.tokenSeparators||1>d.tokenSeparators.length)return h;for(;;){e=-1;j=0;for(f=d.tokenSeparators.length;j<f&&!(q=d.tokenSeparators[j],e=a.indexOf(q),
+0<=e);j++);if(0>e)break;l=a.substring(0,e);a=a.substring(e+q.length);if(0<l.length&&(l=d.createSearchChoice(l,b),l!==h&&null!==l&&d.id(l)!==h&&null!==d.id(l))){e=!1;j=0;for(f=b.length;j<f;j++)if(m(d.id(l),d.id(b[j]))){e=!0;break}e||c(l)}}if(g!==a)return a}function A(a,b){var c=function(){};c.prototype=new a;c.prototype.constructor=c;c.prototype.parent=a.prototype;c.prototype=e.extend(c.prototype,b);return c}if(window.Select2===h){var f,u,B,C,L,v,M;f={TAB:9,ENTER:13,ESC:27,SPACE:32,LEFT:37,UP:38,RIGHT:39,
+DOWN:40,SHIFT:16,CTRL:17,ALT:18,PAGE_UP:33,PAGE_DOWN:34,HOME:36,END:35,BACKSPACE:8,DELETE:46,isArrow:function(a){a=a.which?a.which:a;switch(a){case f.LEFT:case f.RIGHT:case f.UP:case f.DOWN:return!0}return!1},isControl:function(a){switch(a.which){case f.SHIFT:case f.CTRL:case f.ALT:return!0}return a.metaKey?!0:!1},isFunctionKey:function(a){a=a.which?a.which:a;return 112<=a&&123>=a}};u=e(document);var O=1;L=function(){return O++};u.bind("mousemove",function(a){M={x:a.pageX,y:a.pageY}});u=A(Object,
+{bind:function(a){var b=this;return function(){a.apply(b,arguments)}},init:function(a){var b,c;this.opts=a=this.prepareOpts(a);this.id=a.id;a.element.data("select2")!==h&&null!==a.element.data("select2")&&this.destroy();this.enabled=!0;this.container=this.createContainer();this.containerId="s2id_"+(a.element.attr("id")||"autogen"+L());this.containerSelector="#"+this.containerId.replace(/([;&,\.\+\*\~':"\!\^#$%@\[\]\(\)=>\|])/g,"\\$1");this.container.attr("id",this.containerId);var d=!1,g;this.body=
+function(){!1===d&&(g=a.element.closest("body"),d=!0);return g};z(this.container,this.opts.element,this.opts.adaptContainerCssClass);this.container.css(r(a.containerCss));this.container.addClass(r(a.containerCssClass));this.elementTabIndex=this.opts.element.attr("tabIndex");this.opts.element.data("select2",this).addClass("select2-offscreen").bind("focus.select2",function(){e(this).select2("focus")}).attr("tabIndex","-1").before(this.container);this.container.data("select2",this);this.dropdown=this.container.find(".select2-drop");
+this.dropdown.addClass(r(a.dropdownCssClass));this.dropdown.data("select2",this);this.results=b=this.container.find(".select2-results");this.search=c=this.container.find("input.select2-input");c.attr("tabIndex",this.elementTabIndex);this.resultsPage=0;this.context=null;this.initContainer();this.results.bind("mousemove",function(a){var b=M;(b===h||b.x!==a.pageX||b.y!==a.pageY)&&e(a.target).trigger("mousemove-filtered",a)});this.dropdown.delegate(".select2-results","mousemove-filtered touchstart touchmove touchend",
+this.bind(this.highlightUnderEvent));var p=this.results,l=E(80,function(a){p.trigger("scroll-debounced",a)});p.bind("scroll",function(a){0<=n(a.target,p.get())&&l(a)});this.dropdown.delegate(".select2-results","scroll-debounced",this.bind(this.loadMoreIfNeeded));e.fn.mousewheel&&b.mousewheel(function(a,c,d,g){c=b.scrollTop();0<g&&0>=c-g?(b.scrollTop(0),k(a)):0>g&&b.get(0).scrollHeight-b.scrollTop()+g<=b.height()&&(b.scrollTop(b.get(0).scrollHeight-b.height()),k(a))});D(c);c.bind("keyup-change input paste",
+this.bind(this.updateResults));c.bind("focus",function(){c.addClass("select2-focused")});c.bind("blur",function(){c.removeClass("select2-focused")});this.dropdown.delegate(".select2-results","mouseup",this.bind(function(a){0<e(a.target).closest(".select2-result-selectable").length&&(this.highlightUnderEvent(a),this.selectHighlighted(a))}));this.dropdown.bind("click mouseup mousedown",function(a){a.stopPropagation()});e.isFunction(this.opts.initSelection)&&(this.initSelection(),this.monitorSource());
+(a.element.is(":disabled")||a.element.is("[readonly='readonly']"))&&this.disable()},destroy:function(){var a=this.opts.element.data("select2");this.propertyObserver&&(delete this.propertyObserver,this.propertyObserver=null);a!==h&&(a.container.remove(),a.dropdown.remove(),a.opts.element.removeClass("select2-offscreen").removeData("select2").unbind(".select2").attr({tabIndex:this.elementTabIndex}).show())},prepareOpts:function(a){var b,c,d;b=a.element;"select"===b.get(0).tagName.toLowerCase()&&(this.select=
+c=a.element);c&&e.each("id multiple ajax query createSearchChoice initSelection data tags".split(" "),function(){if(this in a)throw Error("Option '"+this+"' is not allowed for Select2 when attached to a <select> element.");});a=e.extend({},{populateResults:function(b,c,d){var j,f=this.opts.id,q=this;j=function(b,c,g){var p,k,m,n,r,t,s;b=a.sortResults(b,c,d);p=0;for(k=b.length;p<k;p+=1)m=b[p],r=!0===m.disabled,n=!r&&f(m)!==h,t=m.children&&0<m.children.length,s=e("<li></li>"),s.addClass("select2-results-dept-"+
+g),s.addClass("select2-result"),s.addClass(n?"select2-result-selectable":"select2-result-unselectable"),r&&s.addClass("select2-disabled"),t&&s.addClass("select2-result-with-children"),s.addClass(q.opts.formatResultCssClass(m)),n=e(document.createElement("div")),n.addClass("select2-result-label"),r=a.formatResult(m,n,d,q.opts.escapeMarkup),r!==h&&n.html(r),s.append(n),t&&(t=e("<ul></ul>"),t.addClass("select2-result-sub"),j(m.children,t,g+1),s.append(t)),s.data("select2-data",m),c.append(s)};j(c,b,
+0)}},e.fn.select2.defaults,a);"function"!==typeof a.id&&(d=a.id,a.id=function(a){return a[d]});if(e.isArray(a.element.data("select2Tags"))){if("tags"in a)throw"tags specified as both an attribute 'data-select2-tags' and in options of Select2 "+a.element.attr("id");a.tags=a.element.attr("data-select2-tags")}if(c)a.query=this.bind(function(a){var c={results:[],more:!1},d=a.term,j,f,q;q=function(b,c){var e;b.is("option")?a.matcher(d,b.text(),b)&&c.push({id:b.attr("value"),text:b.text(),element:b.get(),
+css:b.attr("class"),disabled:m(b.attr("disabled"),"disabled")}):b.is("optgroup")&&(e={text:b.attr("label"),children:[],element:b.get(),css:b.attr("class")},b.children().each2(function(a,b){q(b,e.children)}),0<e.children.length&&c.push(e))};j=b.children();this.getPlaceholder()!==h&&0<j.length&&(f=j[0],""===e(f).text()&&(j=j.not(f)));j.each2(function(a,b){q(b,c.results)});a.callback(c)}),a.id=function(a){return a.id},a.formatResultCssClass=function(a){return a.css};else if(!("query"in a))if("ajax"in
+a){if((c=a.element.data("ajax-url"))&&0<c.length)a.ajax.url=c;a.query=H.call(a.element,a.ajax)}else"data"in a?a.query=I(a.data):"tags"in a&&(a.query=J(a.tags),a.createSearchChoice===h&&(a.createSearchChoice=function(a){return{id:a,text:a}}),a.initSelection===h&&(a.initSelection=function(b,c){var d=[];e(w(b.val(),a.separator)).each(function(){var b=this,c=this,g=a.tags;e.isFunction(g)&&(g=g());e(g).each(function(){if(m(this.id,b))return c=this.text,!1});d.push({id:b,text:c})});c(d)}));if("function"!==
+typeof a.query)throw"query function not defined for Select2 "+a.element.attr("id");return a},monitorSource:function(){var a=this.opts.element,b;a.bind("change.select2",this.bind(function(){!0!==this.opts.element.data("select2-change-triggered")&&this.initSelection()}));b=this.bind(function(){var a,b;a="disabled"!==this.opts.element.attr("disabled");b="readonly"===this.opts.element.attr("readonly");a=a&&!b;this.enabled!==a&&(a?this.enable():this.disable());z(this.container,this.opts.element,this.opts.adaptContainerCssClass);
+this.container.addClass(r(this.opts.containerCssClass));z(this.dropdown,this.opts.element,this.opts.adaptDropdownCssClass);this.dropdown.addClass(r(this.opts.dropdownCssClass))});a.bind("propertychange.select2 DOMAttrModified.select2",b);"undefined"!==typeof WebKitMutationObserver&&(this.propertyObserver&&(delete this.propertyObserver,this.propertyObserver=null),this.propertyObserver=new WebKitMutationObserver(function(a){a.forEach(b)}),this.propertyObserver.observe(a.get(0),{attributes:!0,subtree:!1}))},
+triggerChange:function(a){a=a||{};a=e.extend({},a,{type:"change",val:this.val()});this.opts.element.data("select2-change-triggered",!0);this.opts.element.trigger(a);this.opts.element.data("select2-change-triggered",!1);this.opts.element.click();this.opts.blurOnChange&&this.opts.element.blur()},enable:function(){this.enabled||(this.enabled=!0,this.container.removeClass("select2-container-disabled"),this.opts.element.removeAttr("disabled"))},disable:function(){this.enabled&&(this.close(),this.enabled=
+!1,this.container.addClass("select2-container-disabled"),this.opts.element.attr("disabled","disabled"))},opened:function(){return this.container.hasClass("select2-dropdown-open")},positionDropdown:function(){var a=this.container.offset(),b=this.container.outerHeight(!1),c=this.container.outerWidth(!1),d=this.dropdown.outerHeight(!1),g=e(window).scrollLeft()+e(window).width(),p=e(window).scrollTop()+e(window).height(),b=a.top+b,f=a.left,p=b+d<=p,j=a.top-d>=this.body().scrollTop(),h=this.dropdown.outerWidth(!1),
+g=f+h<=g,q=this.dropdown.hasClass("select2-drop-above"),k;"static"!==this.body().css("position")&&(k=this.body().offset(),b-=k.top,f-=k.left);q?(q=!0,!j&&p&&(q=!1)):(q=!1,!p&&j&&(q=!0));g||(f=a.left+c-h);q?(b=a.top-d,this.container.addClass("select2-drop-above"),this.dropdown.addClass("select2-drop-above")):(this.container.removeClass("select2-drop-above"),this.dropdown.removeClass("select2-drop-above"));a=e.extend({top:b,left:f,width:c},r(this.opts.dropdownCss));this.dropdown.css(a)},shouldOpen:function(){var a;
+if(this.opened())return!1;a=e.Event("opening");this.opts.element.trigger(a);return!a.isDefaultPrevented()},clearDropdownAlignmentPreference:function(){this.container.removeClass("select2-drop-above");this.dropdown.removeClass("select2-drop-above")},open:function(){if(!this.shouldOpen())return!1;window.setTimeout(this.bind(this.opening),1);return!0},opening:function(){var a=this.containerId,b="scroll."+a,c="resize."+a,d="orientationchange."+a;this.clearDropdownAlignmentPreference();this.container.addClass("select2-dropdown-open").addClass("select2-container-active");
+this.dropdown[0]!==this.body().children().last()[0]&&this.dropdown.detach().appendTo(this.body());this.updateResults(!0);a=e("#select2-drop-mask");0==a.length&&(a=e(document.createElement("div")),a.attr("id","select2-drop-mask").attr("class","select2-drop-mask"),a.hide(),a.appendTo(this.body()),a.bind("mousedown touchstart",function(){var a=e("#select2-drop");0<a.length&&(a=a.data("select2"),a.opts.selectOnBlur&&a.selectHighlighted({noFocus:!0}),a.close())}));this.dropdown.prev()[0]!==a[0]&&this.dropdown.before(a);
+e("#select2-drop").removeAttr("id");this.dropdown.attr("id","select2-drop");a.css({width:document.documentElement.scrollWidth,height:document.documentElement.scrollHeight});a.show();this.dropdown.show();this.positionDropdown();this.dropdown.addClass("select2-drop-active");this.ensureHighlightVisible();var g=this;this.container.parents().add(window).each(function(){e(this).bind(c+" "+b+" "+d,function(){e("#select2-drop-mask").css({width:document.documentElement.scrollWidth,height:document.documentElement.scrollHeight});
+g.positionDropdown()})});this.focusSearch()},close:function(){if(this.opened()){var a=this.containerId,b="scroll."+a,c="resize."+a,d="orientationchange."+a;this.container.parents().add(window).each(function(){e(this).unbind(b).unbind(c).unbind(d)});this.clearDropdownAlignmentPreference();e("#select2-drop-mask").hide();this.dropdown.removeAttr("id");this.dropdown.hide();this.container.removeClass("select2-dropdown-open");this.results.empty();this.clearSearch();this.opts.element.trigger(e.Event("close"))}},
+clearSearch:function(){},getMaximumSelectionSize:function(){return r(this.opts.maximumSelectionSize)},ensureHighlightVisible:function(){var a=this.results,b,c,d,g;c=this.highlight();0>c||(0==c?a.scrollTop(0):(b=this.findHighlightableChoices(),d=e(b[c]),g=d.offset().top+d.outerHeight(!0),c===b.length-1&&(b=a.find("li.select2-more-results"),0<b.length&&(g=b.offset().top+b.outerHeight(!0))),b=a.offset().top+a.outerHeight(!0),g>b&&a.scrollTop(a.scrollTop()+(g-b)),g=d.offset().top-a.offset().top,0>g&&
+"none"!=d.css("display")&&a.scrollTop(a.scrollTop()+g)))},findHighlightableChoices:function(){this.results.find(".select2-result-selectable:not(.select2-selected):not(.select2-disabled)");return this.results.find(".select2-result-selectable:not(.select2-selected):not(.select2-disabled)")},moveHighlight:function(a){for(var b=this.findHighlightableChoices(),c=this.highlight();-1<c&&c<b.length;){var c=c+a,d=e(b[c]);if(d.hasClass("select2-result-selectable")&&!d.hasClass("select2-disabled")&&!d.hasClass("select2-selected")){this.highlight(c);
+break}}},highlight:function(a){var b=this.findHighlightableChoices();if(0===arguments.length)return n(b.filter(".select2-highlighted")[0],b.get());a>=b.length&&(a=b.length-1);0>a&&(a=0);this.results.find(".select2-highlighted").removeClass("select2-highlighted");b=e(b[a]);b.addClass("select2-highlighted");this.ensureHighlightVisible();(b=b.data("select2-data"))&&this.opts.element.trigger({type:"highlight",val:this.id(b),choice:b})},countSelectableResults:function(){return this.findHighlightableChoices().length},
+highlightUnderEvent:function(a){a=e(a.target).closest(".select2-result-selectable");if(0<a.length&&!a.is(".select2-highlighted")){var b=this.findHighlightableChoices();this.highlight(b.index(a))}else 0==a.length&&this.results.find(".select2-highlighted").removeClass("select2-highlighted")},loadMoreIfNeeded:function(){var a=this.results,b=a.find("li.select2-more-results"),c,d=this.resultsPage+1,g=this,e=this.search.val(),f=this.context;0!==b.length&&(c=b.offset().top-a.offset().top-a.height(),c<=this.opts.loadMorePadding&&
+(b.addClass("select2-active"),this.opts.query({element:this.opts.element,term:e,page:d,context:f,matcher:this.opts.matcher,callback:this.bind(function(c){g.opened()&&(g.opts.populateResults.call(this,a,c.results,{term:e,page:d,context:f}),!0===c.more?(b.detach().appendTo(a).text(g.opts.formatLoadMore(d+1)),window.setTimeout(function(){g.loadMoreIfNeeded()},10)):b.remove(),g.positionDropdown(),g.resultsPage=d,g.context=c.context)})})))},tokenize:function(){},updateResults:function(a){function b(){g.scrollTop(0);
+d.removeClass("select2-active");j.positionDropdown()}function c(a){g.html(a);b()}var d=this.search,g=this.results,f=this.opts,l,j=this;if(!(!0!==a&&(!1===this.showSearchInput||!this.opened()))){d.addClass("select2-active");var k=this.getMaximumSelectionSize();if(1<=k&&(l=this.data(),e.isArray(l)&&l.length>=k&&y(f.formatSelectionTooBig,"formatSelectionTooBig"))){c("<li class='select2-selection-limit'>"+f.formatSelectionTooBig(k)+"</li>");return}d.val().length<f.minimumInputLength?y(f.formatInputTooShort,
+"formatInputTooShort")?c("<li class='select2-no-results'>"+f.formatInputTooShort(d.val(),f.minimumInputLength)+"</li>"):c(""):(f.formatSearching()&&!0===a&&c("<li class='select2-searching'>"+f.formatSearching()+"</li>"),f.maximumInputLength&&d.val().length>f.maximumInputLength?y(f.formatInputTooLong,"formatInputTooLong")?c("<li class='select2-no-results'>"+f.formatInputTooLong(d.val(),f.maximumInputLength)+"</li>"):c(""):(l=this.tokenize(),l!=h&&null!=l&&d.val(l),this.resultsPage=1,f.query({element:f.element,
+term:d.val(),page:this.resultsPage,context:null,matcher:f.matcher,callback:this.bind(function(l){var k;this.opened()&&(this.context=l.context===h?null:l.context,this.opts.createSearchChoice&&""!==d.val()&&(k=this.opts.createSearchChoice.call(null,d.val(),l.results),k!==h&&null!==k&&j.id(k)!==h&&null!==j.id(k)&&0===e(l.results).filter(function(){return m(j.id(this),j.id(k))}).length&&l.results.unshift(k)),0===l.results.length&&y(f.formatNoMatches,"formatNoMatches")?c("<li class='select2-no-results'>"+
+f.formatNoMatches(d.val())+"</li>"):(g.empty(),j.opts.populateResults.call(this,g,l.results,{term:d.val(),page:this.resultsPage,context:null}),!0===l.more&&y(f.formatLoadMore,"formatLoadMore")&&(g.append("<li class='select2-more-results'>"+j.opts.escapeMarkup(f.formatLoadMore(this.resultsPage))+"</li>"),window.setTimeout(function(){j.loadMoreIfNeeded()},10)),this.postprocessResults(l,a),b()))})})))}},cancel:function(){this.close()},blur:function(){this.opts.selectOnBlur&&this.selectHighlighted({noFocus:!0});
+this.close();this.container.removeClass("select2-container-active");this.search[0]===document.activeElement&&this.search.blur();this.clearSearch();this.selection.find(".select2-search-choice-focus").removeClass("select2-search-choice-focus")},focusSearch:function(){F(this.search)},selectHighlighted:function(a){var b=this.highlight(),c=this.results.find(".select2-highlighted").closest(".select2-result").data("select2-data");c&&(this.highlight(b),this.onSelect(c,a))},getPlaceholder:function(){return this.opts.element.attr("placeholder")||
+this.opts.element.attr("data-placeholder")||this.opts.element.data("placeholder")||this.opts.placeholder},initContainerWidth:function(){var a=function(){var a,c,d,g;if("off"===this.opts.width)return null;if("element"===this.opts.width)return 0===this.opts.element.outerWidth(!1)?"auto":this.opts.element.outerWidth(!1)+"px";if("copy"===this.opts.width||"resolve"===this.opts.width){a=this.opts.element.attr("style");if(a!==h){a=a.split(";");d=0;for(g=a.length;d<g;d+=1)if(c=a[d].replace(/\s/g,"").match(/width:(([-+]?([0-9]*\.)?[0-9]+)(px|em|ex|%|in|cm|mm|pt|pc))/),
+null!==c&&1<=c.length)return c[1]}return"resolve"===this.opts.width?(a=this.opts.element.css("width"),0<a.indexOf("%")?a:0===this.opts.element.outerWidth(!1)?"auto":this.opts.element.outerWidth(!1)+"px"):null}return e.isFunction(this.opts.width)?this.opts.width():this.opts.width}.call(this);null!==a&&this.container.css("width",a)}});B=A(u,{createContainer:function(){return e(document.createElement("div")).attr({"class":"select2-container"}).html("<a href='javascript:void(0)' onclick='return false;' class='select2-choice' tabindex='-1'>   <span></span><abbr class='select2-search-choice-close' style='display:none;'></abbr>   <div><b></b></div></a><input class='select2-focusser select2-offscreen' type='text'/><div class='select2-drop' style='display:none'>   <div class='select2-search'>       <input type='text' autocomplete='off' class='select2-input'/>   </div>   <ul class='select2-results'>   </ul></div>")},
+disable:function(){this.enabled&&(this.parent.disable.apply(this,arguments),this.focusser.attr("disabled","disabled"))},enable:function(){this.enabled||(this.parent.enable.apply(this,arguments),this.focusser.removeAttr("disabled"))},opening:function(){this.parent.opening.apply(this,arguments);this.focusser.attr("disabled","disabled");this.opts.element.trigger(e.Event("open"))},close:function(){this.opened()&&(this.parent.close.apply(this,arguments),this.focusser.removeAttr("disabled"),F(this.focusser))},
+focus:function(){this.opened()?this.close():(this.focusser.removeAttr("disabled"),this.focusser.focus())},isFocused:function(){return this.container.hasClass("select2-container-active")},cancel:function(){this.parent.cancel.apply(this,arguments);this.focusser.removeAttr("disabled");this.focusser.focus()},initContainer:function(){var a,b=this.container,c=this.dropdown;this.showSearch(0<=this.opts.minimumResultsForSearch);this.selection=a=b.find(".select2-choice");this.focusser=b.find(".select2-focusser");
+this.search.bind("keydown",this.bind(function(a){if(this.enabled)if(a.which===f.PAGE_UP||a.which===f.PAGE_DOWN)k(a);else switch(a.which){case f.UP:case f.DOWN:this.moveHighlight(a.which===f.UP?-1:1);k(a);break;case f.TAB:case f.ENTER:this.selectHighlighted();k(a);break;case f.ESC:this.cancel(a),k(a)}}));this.focusser.bind("keydown",this.bind(function(a){if(this.enabled&&!(a.which===f.TAB||f.isControl(a)||f.isFunctionKey(a)||a.which===f.ESC))if(!1===this.opts.openOnEnter&&a.which===f.ENTER)k(a);else if(a.which==
+f.DOWN||a.which==f.UP||a.which==f.ENTER&&this.opts.openOnEnter)this.open(),k(a);else if(a.which==f.DELETE||a.which==f.BACKSPACE)this.opts.allowClear&&this.clear(),k(a)}));D(this.focusser);this.focusser.bind("keyup-change input",this.bind(function(a){this.opened()||(this.open(),!1!==this.showSearchInput&&this.search.val(this.focusser.val()),this.focusser.val(""),k(a))}));a.delegate("abbr","mousedown",this.bind(function(a){this.enabled&&(this.clear(),a.preventDefault(),a.stopImmediatePropagation(),
+this.close(),this.selection.focus())}));a.bind("mousedown",this.bind(function(a){this.opened()?this.close():this.enabled&&this.open();k(a)}));c.bind("mousedown",this.bind(function(){this.search.focus()}));a.bind("focus",this.bind(function(a){k(a)}));this.focusser.bind("focus",this.bind(function(){this.container.addClass("select2-container-active")})).bind("blur",this.bind(function(){this.opened()||this.container.removeClass("select2-container-active")}));this.search.bind("focus",this.bind(function(){this.container.addClass("select2-container-active")}));
+this.initContainerWidth();this.setPlaceholder()},clear:function(){var a=this.selection.data("select2-data");this.opts.element.val("");this.selection.find("span").empty();this.selection.removeData("select2-data");this.setPlaceholder();this.opts.element.trigger({type:"removed",val:this.id(a),choice:a});this.triggerChange({removed:a})},initSelection:function(){if(""===this.opts.element.val()&&""===this.opts.element.text())this.close(),this.setPlaceholder();else{var a=this;this.opts.initSelection.call(null,
+this.opts.element,function(b){b!==h&&null!==b&&(a.updateSelection(b),a.close(),a.setPlaceholder())})}},prepareOpts:function(){var a=this.parent.prepareOpts.apply(this,arguments);"select"===a.element.get(0).tagName.toLowerCase()?a.initSelection=function(a,c){var d=a.find(":selected");e.isFunction(c)&&c({id:d.attr("value"),text:d.text(),element:d})}:"data"in a&&(a.initSelection=a.initSelection||function(b,c){var d=b.val();a.query({matcher:function(b,c,e){return m(d,a.id(e))},callback:!e.isFunction(c)?
+e.noop:function(a){c(a.results.length?a.results[0]:null)}})});return a},getPlaceholder:function(){return this.select&&""!==this.select.find("option").first().text()?h:this.parent.getPlaceholder.apply(this,arguments)},setPlaceholder:function(){var a=this.getPlaceholder();""===this.opts.element.val()&&a!==h&&!(this.select&&""!==this.select.find("option:first").text())&&(this.selection.find("span").html(this.opts.escapeMarkup(a)),this.selection.addClass("select2-default"),this.selection.find("abbr").hide())},
+postprocessResults:function(a,b){var c=0,d=this,e=!0;this.findHighlightableChoices().each2(function(a,b){if(m(d.id(b.data("select2-data")),d.opts.element.val()))return c=a,!1});this.highlight(c);!0===b&&(e=this.opts.minimumResultsForSearch,e=0>e?!1:K(a.results)>=e,this.showSearch(e))},showSearch:function(a){this.showSearchInput=a;this.dropdown.find(".select2-search")[a?"removeClass":"addClass"]("select2-search-hidden");e(this.dropdown,this.container)[a?"addClass":"removeClass"]("select2-with-searchbox")},
+onSelect:function(a,b){var c=this.opts.element.val();this.opts.element.val(this.id(a));this.updateSelection(a);this.opts.element.trigger({type:"selected",val:this.id(a),choice:a});this.close();(!b||!b.noFocus)&&this.selection.focus();m(c,this.id(a))||this.triggerChange()},updateSelection:function(a){var b=this.selection.find("span");this.selection.data("select2-data",a);b.empty();a=this.opts.formatSelection(a,b);a!==h&&b.append(this.opts.escapeMarkup(a));this.selection.removeClass("select2-default");
+this.opts.allowClear&&this.getPlaceholder()!==h&&this.selection.find("abbr").show()},val:function(){var a,b=!1,c=null,d=this;if(0===arguments.length)return this.opts.element.val();a=arguments[0];1<arguments.length&&(b=arguments[1]);if(this.select)this.select.val(a).find(":selected").each2(function(a,b){c={id:b.attr("value"),text:b.text()};return!1}),this.updateSelection(c),this.setPlaceholder(),b&&this.triggerChange();else{if(this.opts.initSelection===h)throw Error("cannot call val() if initSelection() is not defined");
+!a&&0!==a?(this.clear(),b&&this.triggerChange()):(this.opts.element.val(a),this.opts.initSelection(this.opts.element,function(a){d.opts.element.val(!a?"":d.id(a));d.updateSelection(a);d.setPlaceholder();b&&d.triggerChange()}))}},clearSearch:function(){this.search.val("");this.focusser.val("")},data:function(a){var b;if(0===arguments.length)return b=this.selection.data("select2-data"),b==h&&(b=null),b;!a||""===a?this.clear():(this.opts.element.val(!a?"":this.id(a)),this.updateSelection(a))}});C=A(u,
+{createContainer:function(){return e(document.createElement("div")).attr({"class":"select2-container select2-container-multi"}).html("    <ul class='select2-choices'>  <li class='select2-search-field'>    <input type='text' autocomplete='off' class='select2-input'>  </li></ul><div class='select2-drop select2-drop-multi' style='display:none;'>   <ul class='select2-results'>   </ul></div>")},prepareOpts:function(){var a=this.parent.prepareOpts.apply(this,arguments);"select"===a.element.get(0).tagName.toLowerCase()?
+a.initSelection=function(a,c){var d=[];a.find(":selected").each2(function(a,b){d.push({id:b.attr("value"),text:b.text(),element:b[0]})});c(d)}:"data"in a&&(a.initSelection=a.initSelection||function(b,c){var d=w(b.val(),a.separator);a.query({matcher:function(b,c,f){return e.grep(d,function(b){return m(b,a.id(f))}).length},callback:!e.isFunction(c)?e.noop:function(a){c(a.results)}})});return a},initContainer:function(){var a;this.searchContainer=this.container.find(".select2-search-field");this.selection=
+a=this.container.find(".select2-choices");this.search.bind("input paste",this.bind(function(){this.enabled&&(this.opened()||this.open())}));this.search.bind("keydown",this.bind(function(b){if(this.enabled){if(b.which===f.BACKSPACE&&""===this.search.val()){this.close();var c;c=a.find(".select2-search-choice-focus");if(0<c.length){this.unselect(c.first());this.search.width(10);k(b);return}c=a.find(".select2-search-choice:not(.select2-locked)");0<c.length&&c.last().addClass("select2-search-choice-focus")}else a.find(".select2-search-choice-focus").removeClass("select2-search-choice-focus");
+if(this.opened())switch(b.which){case f.UP:case f.DOWN:this.moveHighlight(b.which===f.UP?-1:1);k(b);return;case f.ENTER:case f.TAB:this.selectHighlighted();k(b);return;case f.ESC:this.cancel(b);k(b);return}b.which===f.TAB||f.isControl(b)||f.isFunctionKey(b)||b.which===f.BACKSPACE||b.which===f.ESC||b.which===f.ENTER&&(!1===this.opts.openOnEnter||b.altKey||b.ctrlKey||b.shiftKey||b.metaKey)||(this.open(),(b.which===f.PAGE_UP||b.which===f.PAGE_DOWN)&&k(b))}}));this.search.bind("keyup",this.bind(this.resizeSearch));
+this.search.bind("blur",this.bind(function(a){this.container.removeClass("select2-container-active");this.search.removeClass("select2-focused");this.opened()||this.clearSearch();a.stopImmediatePropagation()}));this.container.delegate(".select2-choices","mousedown",this.bind(function(a){this.enabled&&!(0<e(a.target).closest(".select2-search-choice").length)&&(this.clearPlaceholder(),this.open(),this.focusSearch(),a.preventDefault())}));this.container.delegate(".select2-choices","focus",this.bind(function(){this.enabled&&
+(this.container.addClass("select2-container-active"),this.dropdown.addClass("select2-drop-active"),this.clearPlaceholder())}));this.initContainerWidth();this.clearSearch()},enable:function(){this.enabled||(this.parent.enable.apply(this,arguments),this.search.removeAttr("disabled"))},disable:function(){this.enabled&&(this.parent.disable.apply(this,arguments),this.search.attr("disabled",!0))},initSelection:function(){""===this.opts.element.val()&&""===this.opts.element.text()&&(this.updateSelection([]),
+this.close(),this.clearSearch());if(this.select||""!==this.opts.element.val()){var a=this;this.opts.initSelection.call(null,this.opts.element,function(b){b!==h&&null!==b&&(a.updateSelection(b),a.close(),a.clearSearch())})}},clearSearch:function(){var a=this.getPlaceholder();a!==h&&0===this.getVal().length&&!1===this.search.hasClass("select2-focused")?(this.search.val(a).addClass("select2-default"),this.resizeSearch()):this.search.val("").width(10)},clearPlaceholder:function(){this.search.hasClass("select2-default")&&
+this.search.val("").removeClass("select2-default")},opening:function(){this.parent.opening.apply(this,arguments);this.clearPlaceholder();this.resizeSearch();this.focusSearch();this.opts.element.trigger(e.Event("open"))},close:function(){this.opened()&&this.parent.close.apply(this,arguments)},focus:function(){this.close();this.search.focus();this.opts.element.triggerHandler("focus")},isFocused:function(){return this.search.hasClass("select2-focused")},updateSelection:function(a){var b=[],c=[],d=this;
+e(a).each(function(){0>n(d.id(this),b)&&(b.push(d.id(this)),c.push(this))});a=c;this.selection.find(".select2-search-choice").remove();e(a).each(function(){d.addSelectedChoice(this)});d.postprocessResults()},tokenize:function(){var a=this.search.val(),a=this.opts.tokenizer(a,this.data(),this.bind(this.onSelect),this.opts);null!=a&&a!=h&&(this.search.val(a),0<a.length&&this.open())},onSelect:function(a,b){this.addSelectedChoice(a);this.opts.element.trigger({type:"selected",val:this.id(a),choice:a});
+(this.select||!this.opts.closeOnSelect)&&this.postprocessResults();this.opts.closeOnSelect?(this.close(),this.search.width(10)):0<this.countSelectableResults()?(this.search.width(10),this.resizeSearch(),this.val().length>=this.getMaximumSelectionSize()&&this.updateResults(!0),this.positionDropdown()):(this.close(),this.search.width(10));this.triggerChange({added:a});(!b||!b.noFocus)&&this.focusSearch()},cancel:function(){this.close();this.focusSearch()},addSelectedChoice:function(a){var b=!a.locked,
+c=e("<li class='select2-search-choice'>    <div></div>    <a href='#' onclick='return false;' class='select2-search-choice-close' tabindex='-1'></a></li>"),d=e("<li class='select2-search-choice select2-locked'><div></div></li>"),c=b?c:d,d=this.id(a),g=this.getVal(),f;f=this.opts.formatSelection(a,c.find("div"));f!=h&&c.find("div").replaceWith("<div>"+this.opts.escapeMarkup(f)+"</div>");b&&c.find(".select2-search-choice-close").bind("mousedown",k).bind("click dblclick",this.bind(function(a){this.enabled&&
+(e(a.target).closest(".select2-search-choice").fadeOut("fast",this.bind(function(){this.unselect(e(a.target));this.selection.find(".select2-search-choice-focus").removeClass("select2-search-choice-focus");this.close();this.focusSearch()})).dequeue(),k(a))})).bind("focus",this.bind(function(){this.enabled&&(this.container.addClass("select2-container-active"),this.dropdown.addClass("select2-drop-active"))}));c.data("select2-data",a);c.insertBefore(this.searchContainer);g.push(d);this.setVal(g)},unselect:function(a){var b=
+this.getVal(),c,d;a=a.closest(".select2-search-choice");if(0===a.length)throw"Invalid argument: "+a+". Must be .select2-search-choice";if(c=a.data("select2-data"))d=n(this.id(c),b),0<=d&&(b.splice(d,1),this.setVal(b),this.select&&this.postprocessResults()),a.remove(),this.opts.element.trigger({type:"removed",val:this.id(c),choice:c}),this.triggerChange({removed:c})},postprocessResults:function(){var a=this.getVal(),b=this.results.find(".select2-result"),c=this.results.find(".select2-result-with-children"),
+d=this;b.each2(function(b,c){var e=d.id(c.data("select2-data"));0<=n(e,a)&&(c.addClass("select2-selected"),c.find(".select2-result-selectable").addClass("select2-selected"))});c.each2(function(a,b){!b.is(".select2-result-selectable")&&0===b.find(".select2-result-selectable:not(.select2-selected)").length&&b.addClass("select2-selected")});-1==this.highlight()&&d.highlight(0)},resizeSearch:function(){var a,b,c,d,f=this.search.outerWidth(!1)-this.search.width();a=this.search;v||(c=a[0].currentStyle||
+window.getComputedStyle(a[0],null),v=e(document.createElement("div")).css({position:"absolute",left:"-10000px",top:"-10000px",display:"none",fontSize:c.fontSize,fontFamily:c.fontFamily,fontStyle:c.fontStyle,fontWeight:c.fontWeight,letterSpacing:c.letterSpacing,textTransform:c.textTransform,whiteSpace:"nowrap"}),v.attr("class","select2-sizer"),e("body").append(v));v.text(a.val());a=v.width()+10;b=this.search.offset().left;c=this.selection.width();d=this.selection.offset().left;b=c-(b-d)-f;b<a&&(b=
+c-f);40>b&&(b=c-f);0>=b&&(b=a);this.search.width(b)},getVal:function(){var a;if(this.select)return a=this.select.val(),null===a?[]:a;a=this.opts.element.val();return w(a,this.opts.separator)},setVal:function(a){var b;this.select?this.select.val(a):(b=[],e(a).each(function(){0>n(this,b)&&b.push(this)}),this.opts.element.val(0===b.length?"":b.join(this.opts.separator)))},val:function(){var a,b=!1,c=this;if(0===arguments.length)return this.getVal();a=arguments[0];1<arguments.length&&(b=arguments[1]);
+if(!a&&0!==a)this.opts.element.val(""),this.updateSelection([]),this.clearSearch(),b&&this.triggerChange();else{this.setVal(a);if(this.select)this.opts.initSelection(this.select,this.bind(this.updateSelection)),b&&this.triggerChange();else{if(this.opts.initSelection===h)throw Error("val() cannot be called if initSelection() is not defined");this.opts.initSelection(this.opts.element,function(a){var f=e(a).map(c.id);c.setVal(f);c.updateSelection(a);c.clearSearch();b&&c.triggerChange()})}this.clearSearch()}},
+onSortStart:function(){if(this.select)throw Error("Sorting of elements is not supported when attached to <select>. Attach to <input type='hidden'/> instead.");this.search.width(0);this.searchContainer.hide()},onSortEnd:function(){var a=[],b=this;this.searchContainer.show();this.searchContainer.appendTo(this.searchContainer.parent());this.resizeSearch();this.selection.find(".select2-search-choice").each(function(){a.push(b.opts.id(e(this).data("select2-data")))});this.setVal(a);this.triggerChange()},
+data:function(a){var b=this,c;if(0===arguments.length)return this.selection.find(".select2-search-choice").map(function(){return e(this).data("select2-data")}).get();a||(a=[]);c=e.map(a,function(a){return b.opts.id(a)});this.setVal(c);this.updateSelection(a);this.clearSearch()}});e.fn.select2=function(){var a=Array.prototype.slice.call(arguments,0),b,c,d,f,k="val destroy opened open close focus isFocused container onSortStart onSortEnd enable disable positionDropdown data".split(" ");this.each(function(){if(0===
+a.length||"object"===typeof a[0])b=0===a.length?{}:e.extend({},a[0]),b.element=e(this),"select"===b.element.get(0).tagName.toLowerCase()?f=b.element.attr("multiple"):(f=b.multiple||!1,"tags"in b&&(b.multiple=f=!0)),c=f?new C:new B,c.init(b);else if("string"===typeof a[0]){if(0>n(a[0],k))throw"Unknown method: "+a[0];d=h;c=e(this).data("select2");if(c!==h&&(d="container"===a[0]?c.container:c[a[0]].apply(c,a.slice(1)),d!==h))return!1}else throw"Invalid arguments to select2 plugin: "+a;});return d===
+h?this:d};e.fn.select2.defaults={width:"copy",loadMorePadding:0,closeOnSelect:!0,openOnEnter:!0,containerCss:{},dropdownCss:{},containerCssClass:"",dropdownCssClass:"",formatResult:function(a,b,c,d){b=[];G(a.text,c.term,b,d);return b.join("")},formatSelection:function(a){return a?a.text:h},sortResults:function(a){return a},formatResultCssClass:function(){return h},formatNoMatches:function(){return"No matches found"},formatInputTooShort:function(a,b){var c=b-a.length;return"Please enter "+c+" more character"+
+(1==c?"":"s")},formatInputTooLong:function(a,b){var c=a.length-b;return"Please enter "+c+" less character"+(1==c?"":"s")},formatSelectionTooBig:function(a){return"You can only select "+a+" item"+(1==a?"":"s")},formatLoadMore:function(){return"Loading more results..."},formatSearching:function(){return"Searching..."},minimumResultsForSearch:0,minimumInputLength:0,maximumInputLength:null,maximumSelectionSize:0,id:function(a){return a.id},matcher:function(a,b){return 0<=b.toUpperCase().indexOf(a.toUpperCase())},
+separator:",",tokenSeparators:[],tokenizer:N,escapeMarkup:function(a){var b={"\\":"&#92;","&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&apos;","/":"&#47;"};return String(a).replace(/[&<>"'/\\]/g,function(a){return b[a[0]]})},blurOnChange:!1,selectOnBlur:!1,adaptContainerCssClass:function(a){return a},adaptDropdownCssClass:function(){return null}};window.Select2={query:{ajax:H,local:I,tags:J},util:{debounce:E,markMatch:G},"class":{"abstract":u,single:B,multi:C}}}})(jQuery);
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/select2.png b/www/wp-content/plugins/cas-maestro/js/select2/select2.png
new file mode 100644
index 0000000000000000000000000000000000000000..1d804ffb99699b9e030f1010314de0970b5a000d
GIT binary patch
literal 613
zcmV-r0-F7aP)<h;3K|Lk000e1NJLTq002Ay001Zm1^@s6qPv;@0006kNkl<Zc-rmR
z&r1|x9LMps2uh5F)-GaQDk#Z_4iR>#WY!I$JQV$)A5aAS1BM||2XVJl=+L1^1S1H%
zM-&lx?NZpUrHhn>fk<>POqf2sh40}xxGZfc+t+#Eb(q<Oecn6I%nq|DNy|zSyexzN
z$5AL0?&Dan9pN5UxC<ug5`<4^!bTJ!40{Z2#(M~pn1C$$pw}f`kJpeHM`McNHFyg?
zK;|>Hy9_3*1(U%t9t)QDnI#YAL(|ACV(>)>6WD-t!8tutHkdb^#3`HzoJG3A2@T`%
zA|K@o*b!`R#(7)PWrMFn2))Ca3MR4(zaT`Zr61*kZK5NPnZwQszxh$fyv3?&4c>$q
z2m=+yc0dRXRAsPDxF6sD;@rK4JGdR_``1S~o6Xi@2&aR6hcSrEp9HVRzEqVDqB<bN
zXhRETAUt&UJ4{pqo<W$!4+ziE?D9@4ilQ3gUO=XZ)oyPsiQA7akeNo#WiVk!@H1G(
zkAmgh?J@W$gqNtpN{mA2@w%j2(GYBBaKPD;E<cjsBsd99f~(<?&RR6i%jfeou7io}
z!W3j)q1|OLVRs>n<1%hR=D4e1f^ra^A|34Cjc=Gny{F(o#MrvPYgZuTJOz(n)-F<|
zj()qR;C={)N<0RRvDZ^@6ND+W*}gh-Lip(MDt!(zMSO)!j2j+*hxgzC-e3$@(O2p*
zu;+gddm(cZwXTCLx*Ky4THOa*^b^F`woveIeCK^0aR|TJ00000NkvXXu0mjfA#WC6

literal 0
HcmV?d00001

diff --git a/www/wp-content/plugins/cas-maestro/js/select2/select2_locale_es.js b/www/wp-content/plugins/cas-maestro/js/select2/select2_locale_es.js
new file mode 100644
index 0000000..1b0a021
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/select2/select2_locale_es.js
@@ -0,0 +1,15 @@
+/**
+ * Select2 Spanish translation
+ */
+(function ($) {
+    "use strict";
+
+    $.extend($.fn.select2.defaults, {
+        formatNoMatches: function () { return "No se encontraron resultados"; },
+        formatInputTooShort: function (input, min) { var n = min - input.length; return "Por favor adicione " + n + " caracter" + (n == 1? "" : "es"); },
+        formatInputTooLong: function (input, max) { var n = input.length - max; return "Por favor elimine " + n + " caracter" + (n == 1? "" : "es"); },
+        formatSelectionTooBig: function (limit) { return "Solo puede seleccionar " + limit + " elemento" + (limit == 1 ? "" : "s"); },
+        formatLoadMore: function (pageNumber) { return "Cargando más resultados..."; },
+        formatSearching: function () { return "Buscando..."; }
+    });
+})(jQuery);
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/select2_locale_hu.js b/www/wp-content/plugins/cas-maestro/js/select2/select2_locale_hu.js
new file mode 100644
index 0000000..572dea9
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/select2/select2_locale_hu.js
@@ -0,0 +1,15 @@
+/**
+ * Select2 Hungarian translation
+ */
+(function ($) {
+    "use strict";
+
+    $.extend($.fn.select2.defaults, {
+        formatNoMatches: function () { return "Nincs találat."; },
+        formatInputTooShort: function (input, min) { var n = min - input.length; return "Túl rövid. Még " + n + " karakter hiányzik."; },
+        formatInputTooLong: function (input, max) { var n = input.length - max; return "Túl hosszú. " + n + " kerekterrel több mint kellene."; },
+        formatSelectionTooBig: function (limit) { return "Csak " + limit + " elemet lehet kiválasztani."; },
+        formatLoadMore: function (pageNumber) { return "Töltés..."; },
+        formatSearching: function () { return "Keresés..."; }
+    });
+})(jQuery);
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/select2_locale_it.js b/www/wp-content/plugins/cas-maestro/js/select2/select2_locale_it.js
new file mode 100644
index 0000000..98369dd
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/select2/select2_locale_it.js
@@ -0,0 +1,15 @@
+/**
+ * Select2 Italian translation
+ */
+(function ($) {
+    "use strict";
+
+    $.extend($.fn.select2.defaults, {
+        formatNoMatches: function () { return "Nessuna corrispondenza trovata"; },
+        formatInputTooShort: function (input, min) { var n = min - input.length; return "Inserisci ancora " + n + " caratter" + (n == 1? "e" : "i"); },
+        formatInputTooLong: function (input, max) { var n = input.length - max; return "Inserisci " + n + " caratter" + (n == 1? "e" : "i") + " in meno"; },
+        formatSelectionTooBig: function (limit) { return "Puoi selezionare solo " + limit + " element" + (limit == 1 ? "o" : "i"); },
+        formatLoadMore: function (pageNumber) { return "Caricamento in corso..."; },
+        formatSearching: function () { return "Ricerca..."; }
+    });
+})(jQuery);
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/js/select2/select2x2.png b/www/wp-content/plugins/cas-maestro/js/select2/select2x2.png
new file mode 100644
index 0000000000000000000000000000000000000000..4bdd5c961d452c49dfa0789c2c7ffb82c238fc24
GIT binary patch
literal 845
zcmV-T1G4;yP)<h;3K|Lk000e1NJLTq004LZ002-31^@s6(wnh~0009NNkl<Zc-rlq
zv2GJV5I`eA5ebSzqy-%%f8hdLP~9h_qV^Xci^>upQ6WKflyv?C|ADVW!U!t`EpA+x
zB)5#EjWk-_X77YJZtQo`E0SF)^1bZr%<ScI;+%s6=ICz#f&syRU}(wBHJi=KJtvV%
z&q1&qv^eJpB{$ANuo1Mlh~(%T1ltp=DYaY#8zmuerN1Ub+fTAw3X&{)g1bmADU*y5
zUblqhl?+n{vw|Hrl|2~9qJcUX=wx*w)_|YxX&9mxeE=mzu0C`g40D>)B7Cd`*OK*r
z5WG-7e-R9G9^69ksDt29&oyHqxPSt|-S>xi3%PTd+GjY+BGF|nWC(7D-sd(kxqd9~
zS@2YF5vB+>dP8+$l^{oO3-lEWiGA*QI<ZQyKyWv~v4m^Xqu?O1N>U)Wds#9M6RZ9N
zcQ4y4)xqQOxD=vwu%7cz1nY#$lT&y8HCmkWgpwQP#3dhnYj9|2aS_R}IUF_^6s#$=
zTm%~>A#oM?KIg$kh=<`gJkeoHa2LrulVy$Yx+N_0R3$4I!R*0677f(FKqm`2_o4~W
z0h}fQZ`lC^1A+m;fM7uI(R1`S0KtG@KrkQ}5DW+&@cTnDVIow56KciMk7a899t0bC
zC1KI<NAq=n6MhK=f(@YLo(pv#^;)>{TsMe5NAR%GD_5`B-@<p{rSMpIB)k$<!Y=ql
zC=fhg{GPi}!nVSD;k03YekgqMb862<$PheS!4oBGC%j9%)a;J%LAX>ad4k~K3SO%H
z_M31|`HV?E6)u$E3c&*<*n20+V@mRCop>R5;DWuZCmjSo7p@R&OYl<!6QXYf&j`^5
z2wIX~h5Ie!o(UI9@DjnpE|YYF<D+mlkwJf^OtRPLs6AUR@T@`Z1L2FXRdRPirluiy
zpsh;Xe!LWZ2ycXE!VBT8@Kdi`MTuYwhYjIDL;SG8HBchh)^TC22*vJVk`Zj@z<=2w
zxbkC}P{t%9`0)R&U5Q}xg42=_Y+Z0#a)n^ig42=_Y+P_C8Nv2R^{Fc*c#2>^@G<ZQ
XF(xQ&SEjMs00000NkvXXu0mjf{}FjY

literal 0
HcmV?d00001

diff --git a/www/wp-content/plugins/cas-maestro/js/validations.js b/www/wp-content/plugins/cas-maestro/js/validations.js
new file mode 100644
index 0000000..dc410d0
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/js/validations.js
@@ -0,0 +1,111 @@
+var last_cas_server_data, aux_last_cas_server_data;
+var last_ldap_server_data, aux_last_ldap_server_data;
+//result texts
+var characters_error = 'Minimum amount of chars is 3';
+var checking_html = casmaestro.checking_html;
+
+jQuery(document).ready(function() {
+		//the min chars for username	
+
+		// CAS init
+		last_cas_server_data = {
+			s: jQuery('#server_hostname_inp').val(),
+			p: jQuery('#server_port_inp').val()
+		};
+
+		aux_last_cas_server_data = jQuery.extend({}, last_cas_server_data);
+
+		// LDAP init
+		last_ldap_server_data = {
+			s: jQuery('#ldap_server').val(), 
+			v: jQuery('#ldap_proto').val(), 
+			u: jQuery('#ldap_user').val(), 
+			pw: jQuery('#ldap_pass').val(), 
+			bdn: jQuery('#ldap_bdn').val()
+		}
+
+		aux_last_ldap_server_data = jQuery.extend({}, last_ldap_server_data);
+
+		//when button is clicked
+		jQuery('#server_hostname_inp, #server_port_inp').focusout(function() {
+			//run the character number check
+			
+			//else show the cheking_text and run the function to check
+			aux_last_cas_server_data.s = jQuery('#server_hostname_inp').val();
+			aux_last_cas_server_data.p = jQuery('#server_port_inp').val();
+
+			check_cas();
+		});
+
+		jQuery('#ldap_proto, #ldap_server, #ldap_user, #ldap_pass, #ldap_bdn').focusout(function(){
+			//run the character number check
+			
+			//else show the cheking_text and run the function to check
+			aux_last_ldap_server_data.s = jQuery('#ldap_server').val();
+			aux_last_ldap_server_data.v = jQuery('#ldap_proto').val();
+			aux_last_ldap_server_data.u = jQuery('#ldap_user').val();
+			aux_last_ldap_server_data.pw = jQuery('#ldap_pass').val();
+			aux_last_ldap_server_data.bdn = jQuery('#ldap_bdn').val();
+
+			check_ldap();
+		});
+
+  });
+
+//function to check username availability
+function check_cas(){
+
+	//get the username
+	if ((last_cas_server_data.s == aux_last_cas_server_data.s && last_cas_server_data.p == aux_last_cas_server_data.p) || !aux_last_cas_server_data.s || !aux_last_cas_server_data.p) {
+		if (!aux_last_cas_server_data.s || !aux_last_cas_server_data.p) 
+			jQuery('#username_availability_result').html('').removeClass('checking not-responding avaiable');
+		return;
+	}
+
+	jQuery('#username_availability_result').html(checking_html).addClass('checking').removeClass('not-responding avaiable');
+
+	var dir = casmaestro.url + 'ajax/validate_cas.php';
+	//use ajax to run the check
+	jQuery.post(dir, aux_last_cas_server_data,
+		function(result){
+			//if the result is 1
+			if(result=='1'){
+				//show that the username is available
+				jQuery('#username_availability_result').html(casmaestro.cas_respond).addClass('avaiable').removeClass('not-responding checking');
+			} else {
+				//show that the username is NOT available
+				jQuery('#username_availability_result').html(casmaestro.cas_not_respond).addClass('not-responding').removeClass('avaiable checking');
+			}
+		}
+	);
+
+	last_cas_server_data = jQuery.extend({}, aux_last_cas_server_data);
+}
+
+function check_ldap(){
+	//get the username
+	if ((last_ldap_server_data.s == aux_last_ldap_server_data.s && last_ldap_server_data.v == aux_last_ldap_server_data.v && last_ldap_server_data.u == aux_last_ldap_server_data.u && last_ldap_server_data.pw == aux_last_ldap_server_data.pw && last_ldap_server_data.bdn == aux_last_ldap_server_data.bdn) || !aux_last_ldap_server_data.s || !aux_last_ldap_server_data.v || !aux_last_ldap_server_data.u) {
+		if (!aux_last_ldap_server_data.s || !aux_last_ldap_server_data.v || !aux_last_ldap_server_data.u)
+			jQuery('#ldap_availability_result').html('').removeClass('checking not-responding avaiable');
+		return;
+	}
+
+	jQuery('#ldap_availability_result').html(checking_html).addClass('checking').removeClass('not-responding avaiable');
+
+	var dir = casmaestro.url + 'ajax/validate_ldap.php';
+	//use ajax to run the check
+	jQuery.post(dir, aux_last_ldap_server_data,
+		function(result){
+			//if the result is 1
+			if(result == 1){
+				//show that the username is available
+				jQuery('#ldap_availability_result').html(casmaestro.ldap_respond).addClass('avaiable').removeClass('not-responding checking');
+
+			}else{
+				//show that the username is NOT available
+				jQuery('#ldap_availability_result').html(casmaestro.ldap_not_respond).addClass('not-responding').removeClass('avaiable checking');
+			}
+	});
+
+	last_ldap_server_data = jQuery.extend({}, aux_last_ldap_server_data);
+}
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/lang/CAS_Maestro-pt_PT.mo b/www/wp-content/plugins/cas-maestro/lang/CAS_Maestro-pt_PT.mo
new file mode 100644
index 0000000000000000000000000000000000000000..91ffeb3359b8dd94ac6c500671e832606d4ce763
GIT binary patch
literal 8956
zcmbW6Ym6M(S%y!D1FRvC+j0wpvnIy&X1YCNulLfv?2hf(m5Ilmc)T$|M5F4iGt*^P
z*J)Q(&v+t4mLEi{6jmUFLSR9$_z|r{5NHWf7Oeoa5E6<K5J>z0p=godZ!RK=#6>*s
zIaS>~hJ;JWHE&ndsdK*beeZWG|HC^D{i@+u<NRUH%im^90_KPK!|~;}81ud0SHRx^
z-}LRqtb@M`eh2t(pal<cp;wNA-vvGjz6*RD{4n@_@W;Vdz=y%V1m6z+6R7duXz<W?
z8uNWzzYXM;IR<L|li>G*PlFxs7I+x^dGKxEFM+=R-Uq)2eDon>ehz#JybJyj_*-Cy
zmo)$9!FPcF*j#@d)Ov447`AF21|{FS!5;-X;E#aopw_zs{t);xAWNE0fL-uY;4gz;
z1bble-Nw8Vd>Q1Q`91z<|F46Of`1K4j{g8P@7v#M3@SB8K<)bk$W-R32G^SV9{~Ah
z68=bT-{2m2kL!<uhu(x<!I!!Ica-ut`0Gq6{rnZE{e2018vH8wgWxHI;HS9?qB8T-
z;7i~(_$%PQfS&<h<mD~!354&!nNNV4_s=l;=fJ-K#iN(ltmOMLcpUr&DE&Ty5wx#k
z;Jd-o;269Po&x^_lzd+UCC^(hzUF_p!S{l)%V|(@Zi3?5he6F(f?e<>Q187C$_}3g
z{~r7j$X3kjKLB^YFMyJF3nly-_@|)k@>3XD<3^zT<7YwH?>9j0>-U@M&w=9i7r|rT
z*Flyr??D*h<DhtQ4U}BBz+VJE2A%`o#pK%02SCkx7u5Ru;0f^Kpyv5Q5K+w+K<)dV
z8~h5W_x=@>e%}mPHSQr$dN~3@1@i=`ackg<;5ztK@NdCC0RQ4W#ykgp6k(*VKL@q$
z-+`;(*T5eG&)E3<L!j(90zV1vgZIIAK4Q!tgP#RI22PF;J3t+5Iry;jv3ST%Ixca(
znNxaxA7^{8HM7hq|5$BqKHlIOD1K?LvV#ukM+dGIbchH+H{uiK4F}r^hq$Jr348Hk
z;qMuKA6vNAo-OBP&LvK^X-;!u_7Inz0pH6BeS@E01f}<<IZ<`6g?MnDQ~DIg#Csi2
zMler+k8z&mJj!{JQ-|!*9_N}L;)?8qE1C<Om@&kkr@$3X9pZyIzL(WQd$h8?<nIZy
zn&)<uWO-$i(%H%twcRfL$R>7DWOpawR_e;Gy*bP(J?DZK_HF3~ncH=?@O8GG4U#(Z
zg>}tTxhw0e*s<HJQn)=ksa(klMS7AO$)L`5!}w~+x~fk4S)Nrxm)icmt%r`c^4#y~
z{edsGvz<v9Mt2dmc4fiEuFLnA?7p7_QL1b-&i8GaRY^a0VT!&RCc7Dn`E7e?b<?gV
zEL3`%RL$&F&s<C@XD?qf7ad~iwWPMG+s=wids(u3WmY?sWG?!2-z?0s_}gx}T3f9S
z+^m|LcF2N#=L$O+r%CNngm$$gEZs5GS!bv}D_DON6&QploJ%WPd)~C$jBsi9e>Zy^
zhMh192CBxsNRchP%-sj>>|zr(YAy}k;10vOUEUvhk5*)b=dl?wmOgjpQt8sHuFP6T
z2DV9>G8ZaruB*xRc6KjVxkyIt8MDUdFbU#Ig)%+lNy@=6aDqE?O`B&YXhARb%yX`A
zWs=XedSyG9IfHivMB8tu6j&@N19@tA<JsO$RzVO85%s9r=W2xJAvCnsD}GW(PPO_L
zg$7Aslf3c>7=+H?EW$*g$EDXEy5`Dg?8`b~B9!aQm4f%sR6Bt*o(u+PC9Dl`Yx&YB
zDUuyTO7SE_OzbGD4v<;|t>s$de6o|lI!Qiv0Cq5jCkUS79?p(kDYCe<cR+&F7jL}q
z$=cp2{2qJB!z>UkS(2Y;g-!jWUq_E=CX<ACVi?J+6-tZzs4_W`JXfNK_7DNCpn`(g
z<o}DxPG$~{kz)X8`C$X+?oKk;)3u8lYvtXOKAEl2`~$C}ya}7Z)5p1!vIj$vGsGv!
z=ErhWIT+!hYpz~i-O!Q`kiWgX!2WP6?n-nh91#geScltk7hz@AT`{q_A0&D9k>H%%
zsVb~#`@{o8j-pGD%@7v9`E$9Fx#mNlwS&^d>8^V}CIT`6(Pxi9A^nx5N7EZgRqdf`
zvk~pxQVWK07a65At(<#EV{dVD1L4d@)RWXX8OskKJuat+D@8S?Z=y7G(k8G>4S8Uo
zucGaPL2%e+T(gv7c<^Jb8xz42UOZ;+5{Sj{h4R6WeZ#eMk5MJkJj_$NktczKZDfUh
z5P*Xo(o`YuM(fWabjTo2H}_&b;36wXA3R+Q&Nt@MrZ8_%`*L4i)~viZRCa4M+1POL
zRxsP_zI?z!z*@n<YzCjO<D?$WeiI+s-)#cmI;ICZf=*^LOI<%H&E}+k8_CSg8H*44
zRJ-9NIkVq`8tom8!*E1k@?~S0CeVeLSWWuXpv?Nn+Jr6=nNoh?t-CjH!DYH(;YJ~Q
z%0a#$fofjmW?)-!RF;|h|3bt@9w^(SCc8Qt+?qP(GF%ZqcQfxre+uB40v^6R^E>(M
zE?!2A2t@{$%GJdVA|>f=R;e;@g9HlLCLL($FpFXw@eQviW$LCXP>m5ov5&r?Y(?nZ
z8P?h)sU#D@q<!&9233;Es^S<?TpEwcon;h!EClI2*RLoFaG98vxLMqZkB~Y<_d2;V
z-!hw=1=(|n9hPqU{E-pirS`p})sYL$d~9<>*}<+8*m~|{aslDU7HNv3c(hdpIhXA1
zNkx6uZaz=A>gNd}xZFXox@(>fbw(Q+jVRnC#>Q!MCv5m!((hyAtj^u}W5;i}9IIja
z%ZPzLPhv%O4b_}DcHze5Ye>cT3t`5}uFjRzx~aL9ko1)|qVmlxmk&Jq+A$w$vaBp9
z+t2e`?eDmv>Y;tqDzT2vGEb`;-CeRrTSLtU=uQY+VLPfYjuKk)gR{&A=~2k*-5?Ik
z#MTsvkiAJe_-xloRMlVdErrqcA(uN`mN@V%Wm6+4A5b^h!w=bbJTx=2>}xOO+2D>1
z5ng81tPM3ouxzUf8)Rz2vntSP7+H1Dqk<zZCNI&yYoC?Q3t#My`~=^Lktr^N^A9sJ
zz#tS5%8c;e6@IcaT(TsKCjM?`E~n&t<As;8bg2B^c;PogkmgpKjC3oot!wtiiVIL)
zGqy4+$;Sl5)XGasc84q#6IB}!!=$q}VrYtagCYS2XH;V3ztSr{cCMtI55_9Bw;1CO
zZ(P6Gp(YJ+rgNFXx@S)<ubl3zEO(Yq+vTTvryhIX^2+iu13NbyA%yhzz_^vi?8;-k
zGiN%>9EY#sN}Zc!QdGEsFMIYU{PefI-Eb*Q!=|GVDzn61BFs2&BPn+%?CiPQ<M`_t
zoTfXe^X|C5z+AWwyy)C?$*5<qt*_a01y%8XH>PLD_14DC!|PYp*XCPY=`J6>6f4Ni
z&HXXEtKGf&<Ty{V;w)8AQlifD&)<Bu^W=P-gx_{$XN_p6jNG$N_Otr%Pj+HW9d@<h
zRma<v?wRfrJc*Z`_q%-+8`V`L?Afie5MArFxK&W7oZWI~x3>6Kv`@E+-pbOcvs=ZW
z_t;>GpYsXTSt&F2Z1?a+PWzU3;OGcHFGxCER_9NhRYK<H`QwFs<h)%uad!UxCWXYn
zU5fkc*|^b}xSOGm*kJz7vQ{w12{Ve{xUO2-n?Chi5b#yU$sc4&SL|kq9^k-}5ixP(
zRG~XNeXYm_zH8U0wQZe@`qNiN)I!v`)B6k?IOWnfmDYjrq2HZ;diq&<1ZFGzF4Iov
z<tP+WTFJ_~lgJYL+&FG2c!?@^B1%jDgl9-rIif9+EcUm=JnoP>8#zLY>#A^<H7mvH
zgieRKVqc;so_uRBQAoDkE|=}(c7#^uJ?|>BOLzhpe-&|pEYus6r`3STm>q2zC_naQ
zv1q#74iDRB!FhXaRyAic+kbtm(4O#VVNg@nOIHcyuj&$3L;58<MB`02995$a5LD-g
znUUwwHO8c_p`jiOvot|t|JMa+agn!>-kXMi?v^{r?6NcpIT|2su5OxD8!8vRag=J2
z*J$8!rDPwvG1_6qJwLNPz4G)GoXpcL>tl(Vewvw_jjeKz(vMa-+zI8i?aWG$*fx`1
z$nb-q%ZNOXnx3!pg9-K40ZYj?*F1C*0dhw@VGbDPIojx~qWrXEEOpKjU#i0kB8v_X
zR*FvfoD*C{wO=wJU|^$Y2jq{n5a|m}5hoCS32Th(U2LiF7+FnU-4Ll|?joV4pR#=E
z!IJn(f$+h74#=V1tH(vF5(#;6QdZYR<!&c7sVQzJ)6b+H;}h7u<>OCm%$-^+n)0CB
zU|}3B@Lwef*#%G*uh^L^!qeJKUyCteH^Yj2^cqpb!NLbz6h|RA#DZB(&n_Dm6;)IO
zrw{R_^)*^4`Zv$_5uDLSvZ=Y6BxJ)THl>P1ajF<+Xp<rN^nNEtImj8=SxxWrtqYap
za^;B@m83y_xY;$=XNF-%#5Dz@g;*pFvhbK#CCxUT6N82Cm)TBIPhTywz;(^<!UvwN
zqDU)vGyyhy;Pu#@FX6Ch_)wV0y-^=ZtY~pUnR3w2!mUL|yUO~JVAA}2a~gP%&TMW?
zF_<q->!CZp+BD`3Kk2R2UxjF8Q*208NeUh{VIQfyr7?^l|631RaOF)V;OouY38H#T
z)46-K9ViXa)weIS?KdJX6eD0BTwrfIlLCtQre)`6=-OqTxK&k}f#+H-rk0jwv)mQZ
z5LFggArkQ56L?q3P;-}3_=xvr3GYBE5+@IGU48fLP6%@0!xR%igsdcpBsg&~OoFW2
zK3hl`X~N6;2*;=y)91pts%_xC`Jm4=O3j;Ecz*J#z6a=@`gVmMe!;r9zJhd<*9fdc
zF``-A+1#!N?=Ki~aYz%B@lAS@p*I_f9uKfhHD7czv#!rT&~GuXnTtt@qOVeTQo)df
zstNgvMB&E`AKQ5O%@jdqcjZXmmx*kA0}5e5;Z!|(m_yO^wz6fK4X9p2=>mzH*o)Cd
z^2it}5wGd{(VC-vzTRrBn!Xx7u`9-?W>9P#dkS}6X`=yYSl`7LHz>W&LXF~#y*ztu
zMvjz>9W!H$&Vd-MLr-6cJ$*t6Q#Q{ja!Q|0KEemq*s?pyEs_(ViRHr%+pH1O6``Ga
z6<Lt>TSsthc}_It%@BGB+uC@O%a};fCla(nFIt4KK5ObpmTayfVPag#43nh?tG+yx
zAC0H0E-USJvddrIP>ZkdI&1yprcH-G@9aa=_O@9qHu)Q3aBE?lZKD69nD2viV#JnH
zPhZRHY(%vbTYY|vY@ec^+SRPKB^7gsf`pI86NB#Np1}S21p@#7J^{>%9WuCxII9h2
ziZ;_1;2rb~YKt+D|3^ux&Mx^P;Y(#x*fyI*ZdK~B5N6Wpt7*1F2E~%I4+D+6t8fVX
z<iXj+?*a#&lMH8461x_@3@i={9|fSrd~DZTQ|TA};{b1zB^%G6;;_>fn{sq|UrBT3
z3Vfew2Z!kiwjq?kuX!%|AHEZaa0yj_4Ic`^G;_`?H%DjhT4EJ#J5_e5J<8zUb5UXd
z3gMx3szqnUlayV_A%S`^IVHvP)k54-fN3j?;}WR#$KXvoBF^BNnVj~7s+a7Zh#v}3
zW?rC{z9Xn)Z9g6?vh}*k>Nc1!I_gZH(lv28x|m7~t;uW^*%I@pO>t!T2cuT--|!!X
Yq1uUwL#kjPnGRlsj|_v1(zt8>6CAn-vj6}9

literal 0
HcmV?d00001

diff --git a/www/wp-content/plugins/cas-maestro/lang/CAS_Maestro-pt_PT.po b/www/wp-content/plugins/cas-maestro/lang/CAS_Maestro-pt_PT.po
new file mode 100644
index 0000000..ff9d54c
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/lang/CAS_Maestro-pt_PT.po
@@ -0,0 +1,370 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: CAS Maestro\n"
+"POT-Creation-Date: 2013-10-03 09:24+0100\n"
+"PO-Revision-Date: 2013-10-14 14:55-0000\n"
+"Last-Translator: João Pedro Sequeria Correia Pargana <jpargana@ist.utl.pt>\n"
+"Language-Team: NME <nme@ist.utl.pt>\n"
+"Language: pt_PT\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Poedit 1.5.7\n"
+"X-Poedit-KeywordsList: _;gettext;gettext_noop;_e;__;__ngettext;_n:1,2;"
+"_nc:4c,1,2\n"
+"X-Poedit-Basepath: .\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Poedit-SourceCharset: UTF-8\n"
+"X-Poedit-SearchPath-0: .\n"
+
+#: ../cas_error.php:14
+msgid "Ooops, there was an error."
+msgstr "Ooops, ocorreu um erro."
+
+#: ../cas_error.php:19
+#, php-format
+msgid ""
+"The username %s isn't allowed to register in this website. If you think this "
+"is a mistake, please contact the <a href=\"mailto:%s\">website "
+"administrator</a>."
+msgstr ""
+"O utilizador %s não está autorizado a registar-se neste website. Se "
+"considera que isto se trata de um erro, por favor contacte o <a href="
+"\"mailto:%s\">administrador do website</a>."
+
+#: ../cas-maestro.php:148
+msgid ""
+"wpCAS is not configured. Please, login, go to the settings and configure "
+"with your credentials."
+msgstr ""
+"O CAS Maestro não está configurado. Por favor, inicie a sessão, aceda as "
+"definições e configure o plugin com as suas credenciais."
+
+#: ../cas-maestro.php:365
+#, php-format
+msgid ""
+"You don't have a email set. You need to set a email to get ride of this "
+"message... \n"
+"\t       \t<a href=\"%s\"> Click here </a> to access your profile. "
+msgstr ""
+"Não tem um email definido. É necessário configurar um email para remover "
+"esta mensagem... \n"
+"\t       \t<a href=\"%s\"> Clique aqui </a> para aceder ao seu perfil. "
+
+#: ../cas-maestro.php:376 ../views/admin_interface.php:3
+msgid "CAS Maestro Settings"
+msgstr "Definições do CAS Maestro"
+
+#: ../cas-maestro.php:377 ../cas-maestro.php:386 ../cas-maestro.php:387
+msgid "CAS Maestro"
+msgstr "CAS Maestro"
+
+#: ../cas-maestro.php:400
+msgid "General Settings"
+msgstr "Definições Gerais"
+
+#: ../cas-maestro.php:410
+msgid "Registration"
+msgstr "Registo"
+
+#: ../cas-maestro.php:420
+msgid "Mailing"
+msgstr "Definições de Email"
+
+#: ../cas-maestro.php:431
+msgid "Important note"
+msgstr "Aviso importante"
+
+#: ../cas-maestro.php:441
+msgid "Credits"
+msgstr "Créditos"
+
+#: ../cas-maestro.php:471
+msgid "CAS is responding"
+msgstr "CAS a responder"
+
+#: ../cas-maestro.php:472
+msgid "CAS is not responding"
+msgstr "CAS não responde"
+
+#: ../cas-maestro.php:473
+msgid "LDAP is responding"
+msgstr "LDAP a responder"
+
+#: ../cas-maestro.php:474
+msgid "LDAP is not responding"
+msgstr "LDAP não responde"
+
+#: ../cas-maestro.php:475
+msgid "Checking..."
+msgstr "A verificar..."
+
+#: ../cas-maestro.php:476
+msgid "Choose the User's role"
+msgstr "Escolher o perfil do Utilizador"
+
+#: ../views/admin_interface.php:7
+msgid "CAS Maestro settings has been updated."
+msgstr "As definições do CAS Maestro foram actualizadas."
+
+#: ../views/admin_interface.php:9
+msgid ""
+"CAS Maestro settings has been updated, yet there's still information that "
+"needs to be filled."
+msgstr ""
+"As definições do CAS Maestro foram actualizadas, no entanto, há informação "
+"que necessita de ser preenchida."
+
+#: ../views/metaboxes/registration.php:18
+msgid "User registration"
+msgstr "Registo de Utilizadores"
+
+#: ../views/metaboxes/registration.php:22
+msgid ""
+"In order to register a new user an email address is required. In case you "
+"don’t want to set the email address manually, please chose from the options "
+"below."
+msgstr ""
+"O registo de um novo utilizador pressupõe o preenchimento obrigatório do seu "
+"e-mail. Caso não pretenda o preenchimento manual, indique a forma a usar"
+
+#: ../views/metaboxes/registration.php:24
+msgid "No mail creation"
+msgstr "Sem geração de e-mail"
+
+#: ../views/metaboxes/registration.php:25
+msgid "E-mail suffix username@"
+msgstr "Sufixo de email - username@"
+
+#: ../views/metaboxes/registration.php:26
+msgid "LDAP server connection"
+msgstr "Ligação a um servidor LDAP"
+
+#: ../views/metaboxes/registration.php:29
+msgid ""
+"You should finish this configuration with LDAP server data. For anonymous "
+"server access, which could not be enough, leave the fields “RDN User” and "
+"“Password” blank."
+msgstr ""
+"Deve finalizar esta configuração com os dados do servidor de LDAP. Para "
+"acesso anónimo ao servidor (que poderá não ser suficiente), deixe o Nome de "
+"Utilizador RDN e a Password em branco."
+
+#: ../views/metaboxes/registration.php:43 ../views/metaboxes/general.php:17
+msgid "Server hostname"
+msgstr "Endereço"
+
+#: ../views/metaboxes/registration.php:43
+#, php-format
+msgid "(with %s or %s)"
+msgstr "(com %s ou %s)"
+
+#: ../views/metaboxes/registration.php:47
+msgid "Username <abbr title='(Relative Distinguished Name)'>RDN</abbr>"
+msgstr "Utilizador <abbr title='(Relative Distinguished Name)'>RDN</abbr>"
+
+#: ../views/metaboxes/registration.php:51
+msgid "Password"
+msgstr "Password"
+
+#: ../views/metaboxes/registration.php:55
+msgid "Base DN"
+msgstr "Base DN"
+
+#: ../views/metaboxes/registration.php:64
+msgid ""
+"The option to register all users, allows all users to be added to the system "
+"with subscriber profile, with no exception."
+msgstr ""
+"A opção de registar todos os utilizadores, permite que, todos sem exceção, "
+"sejam adicionados ao sistema com o perfil de subscritores."
+
+#: ../views/metaboxes/registration.php:65
+msgid "Register all users?"
+msgstr "Registar todos os utilizadores?"
+
+#: ../views/metaboxes/registration.php:70
+msgid "Users Allowed to Register"
+msgstr "Utilizadores com registo autorizado"
+
+#: ../views/metaboxes/registration.php:71
+msgid ""
+"If you indentify users with the ability to register on the system upfront "
+"without confirmation you can also set their names and profile."
+msgstr ""
+"Se identificar previamente utilizadores que deverão ter autorização de "
+"registo ao sistema, sem qualquer confirmação, poderá acrescentar à lista os "
+"nomes de utilizadores e o perfil que pretende que seja atribuído."
+
+#: ../views/metaboxes/registration.php:120
+msgid "To add another user, just fill the last blank element."
+msgstr "Para adicionar outro utilizador, preencha o último elemento em branco."
+
+#: ../views/metaboxes/registration.php:124 ../views/metaboxes/general.php:46
+#: ../views/metaboxes/mail.php:69
+msgid "Update options"
+msgstr "Actualizar opções"
+
+#: ../views/metaboxes/help_metabox.php:1
+msgid ""
+"In case you can not access the content manager due to a misconfiguration of "
+"this plugin, the following steps should be performed:"
+msgstr ""
+"No caso de não conseguir aceder ao gestor de conteúdos devido a uma má "
+"configuração deste plugin, devem ser realizados os seguintes passos:"
+
+#: ../views/metaboxes/help_metabox.php:3
+msgid "Remove the directory of plugin CAS Maestro"
+msgstr "Remover a diretoria do plugin CAS Maestro"
+
+#: ../views/metaboxes/help_metabox.php:4
+msgid "Perform access according to the login WordPess"
+msgstr "Realizar o acesso segundo o login do WordPress"
+
+#: ../views/metaboxes/help_metabox.php:5
+msgid "Reinstall CAS Maestro"
+msgstr "Voltar a instalar "
+
+#: ../views/metaboxes/help_metabox.php:7
+msgid ""
+"Alternatively, you may simply disable the behavior of CAS Maestro as follows:"
+msgstr ""
+"Alternativamente, poderá simplesmente desativar o comportamento do Cas "
+"Maestro do seguinte modo:"
+
+#: ../views/metaboxes/help_metabox.php:9
+#, php-format
+msgid "Edit the file %s and search for %s definition"
+msgstr "Edite o ficheiro %s e procure a definição %s"
+
+#: ../views/metaboxes/help_metabox.php:10
+#, php-format
+msgid "Before that definition, write %s"
+msgstr "Antes dessa definição, acrescentar  %s"
+
+#: ../views/metaboxes/help_metabox.php:11
+msgid "Reconfigure the plugin and remove the line that was added."
+msgstr "Reconfigurar o plugin e retirar a linha que foi acrescentada"
+
+#: ../views/metaboxes/general.php:1
+msgid "Server settings"
+msgstr "Definições do Servidor"
+
+#: ../views/metaboxes/general.php:3
+msgid ""
+"The plugin will only be active after the CAS server definitions are filled. "
+"After the configuration is done, please verify if the connection is valid. "
+"This is strongly advised because If you fill the data incorrrectly, your "
+"access to WordPress might be denied."
+msgstr ""
+"O plugin só estará ativo depois de preenchidas as definições do servidor "
+"CAS. Depois de configurado, verifique se a ligação é valida porque se "
+"introduzir incorretamente os dados poderá ficar impedido de aceder ao gestor "
+"de conteúdos."
+
+#: ../views/metaboxes/general.php:4
+msgid ""
+"In case you don’t know all the data, or in doubt, you should contact the "
+"person responsible for the CAS server."
+msgstr ""
+"Caso não possua todos os dados, deverá requisitá-los ao responsável pelo seu "
+"servidor de CAS."
+
+#: ../views/metaboxes/general.php:8
+msgid "CAS version"
+msgstr "Versão do CAS"
+
+#: ../views/metaboxes/general.php:21
+msgid "Server port"
+msgstr "Porta"
+
+#: ../views/metaboxes/general.php:27
+msgid "Server path"
+msgstr "Caminho"
+
+#: ../views/metaboxes/general.php:35
+msgid "Menu localization"
+msgstr "Localização do menu"
+
+#: ../views/metaboxes/general.php:38
+msgid "Sidebar"
+msgstr "Barra Lateral"
+
+#: ../views/metaboxes/general.php:41
+msgid "Settings menu"
+msgstr "Menu de definições"
+
+#: ../views/metaboxes/mail.php:2
+msgid "Sender"
+msgstr "Remetente"
+
+#: ../views/metaboxes/mail.php:6
+msgid ""
+"All mails are sent from a unique sender. This sender may recieve "
+"notification emails alerting for new users and/or activations, estabilished "
+"by the following configuration."
+msgstr ""
+"Todos os mails serão enviados de um remetente único. Este também poderá "
+"receber mails com notificações de novos utilizadores e/ou activações, "
+"conforme a configuração seguinte."
+
+#: ../views/metaboxes/mail.php:9
+msgid "E-mail address:"
+msgstr "Endereço de E-mail:"
+
+#: ../views/metaboxes/mail.php:13
+msgid "Full name:"
+msgstr "Nome completo:"
+
+#: ../views/metaboxes/mail.php:18
+msgid "Mails"
+msgstr "E-Mails"
+
+#: ../views/metaboxes/mail.php:19
+msgid ""
+"Please set up on witch actions should emails be sent. It’s possible to send "
+"emails to the user and the sender, depending on your configuration."
+msgstr ""
+"Defina em que ações devem ser enviados mails. Podem ser enviados mails para "
+"o utilizador e para o remetente, conforme a sua configuração."
+
+#: ../views/metaboxes/mail.php:23
+msgid "Welcoming"
+msgstr "Boas-vindas"
+
+#: ../views/metaboxes/mail.php:24
+msgid "Wait for access"
+msgstr "À espera de acesso"
+
+#: ../views/metaboxes/mail.php:30
+msgid "Send to the User"
+msgstr "Enviar para o Utilizador"
+
+#: ../views/metaboxes/mail.php:30
+msgid "Send to the Sender"
+msgstr "Enviar para o Remetente"
+
+#: ../views/metaboxes/mail.php:31 ../views/metaboxes/mail.php:48
+msgid "Subject"
+msgstr "Assunto"
+
+#: ../views/metaboxes/mail.php:33 ../views/metaboxes/mail.php:50
+msgid "Body"
+msgstr "Corpo"
+
+#: ../views/metaboxes/mail.php:36 ../views/metaboxes/mail.php:53
+msgid "Message body sent to the User"
+msgstr "Corpo da mensagem enviada ao Utilizador"
+
+#: ../views/metaboxes/mail.php:40 ../views/metaboxes/mail.php:57
+msgid "Message body sent to the Sender"
+msgstr "Corpo da mensagem enviada ao Remetente"
+
+#: ../views/metaboxes/mail.php:63
+msgid ""
+"You can use the following tokens: %sitename% for the website name, %username"
+"% for the user’s name and %realname% for the user’s real name."
+msgstr ""
+"Poderá utilizar os seguintes códigos: %sitename% para o nome do site; "
+"%username% para o nome de utilizador e %realname% para o nome real do "
+"utilizador."
diff --git a/www/wp-content/plugins/cas-maestro/lang/cas-maestro.pot b/www/wp-content/plugins/cas-maestro/lang/cas-maestro.pot
new file mode 100644
index 0000000..c7cfa25
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/lang/cas-maestro.pot
@@ -0,0 +1,332 @@
+msgid ""
+msgstr ""
+"Project-Id-Version: CAS Maestro\n"
+"POT-Creation-Date: 2013-10-03 09:24+0100\n"
+"PO-Revision-Date: 2013-10-03 09:25+0100\n"
+"Last-Translator: \n"
+"Language-Team: NME <nme@ist.utl.pt>\n"
+"Language: en_US\n"
+"MIME-Version: 1.0\n"
+"Content-Type: text/plain; charset=UTF-8\n"
+"Content-Transfer-Encoding: 8bit\n"
+"X-Generator: Poedit 1.5.4\n"
+"X-Poedit-KeywordsList: _;gettext;gettext_noop;_e;__;__ngettext;_n:1,2;"
+"_nc:4c,1,2\n"
+"X-Poedit-Basepath: .\n"
+"Plural-Forms: nplurals=2; plural=(n != 1);\n"
+"X-Poedit-SourceCharset: UTF-8\n"
+"X-Poedit-SearchPath-0: ..\n"
+
+#: ../cas_error.php:14
+msgid "Ooops, there was an error."
+msgstr ""
+
+#: ../cas_error.php:19
+#, php-format
+msgid ""
+"The username %s isn't allowed to register in this website. If you think this "
+"is a mistake, please contact the <a href=\"mailto:%s\">website "
+"administrator</a>."
+msgstr ""
+
+#: ../cas-maestro.php:148
+msgid ""
+"wpCAS is not configured. Please, login, go to the settings and configure "
+"with your credentials."
+msgstr ""
+
+#: ../cas-maestro.php:365
+#, php-format
+msgid ""
+"You don't have a email set. You need to set a email to get ride of this "
+"message... \n"
+"\t       \t<a href=\"%s\"> Click here </a> to access your profile. "
+msgstr ""
+
+#: ../cas-maestro.php:376 ../views/admin_interface.php:3
+msgid "CAS Maestro Settings"
+msgstr ""
+
+#: ../cas-maestro.php:377 ../cas-maestro.php:386 ../cas-maestro.php:387
+msgid "CAS Maestro"
+msgstr ""
+
+#: ../cas-maestro.php:400
+msgid "General Settings"
+msgstr ""
+
+#: ../cas-maestro.php:410
+msgid "Registration"
+msgstr ""
+
+#: ../cas-maestro.php:420
+msgid "Mailing"
+msgstr ""
+
+#: ../cas-maestro.php:431
+msgid "Important note"
+msgstr ""
+
+#: ../cas-maestro.php:441
+msgid "Credits"
+msgstr ""
+
+#: ../cas-maestro.php:471
+msgid "CAS is responding"
+msgstr ""
+
+#: ../cas-maestro.php:472
+msgid "CAS is not responding"
+msgstr ""
+
+#: ../cas-maestro.php:473
+msgid "LDAP is responding"
+msgstr ""
+
+#: ../cas-maestro.php:474
+msgid "LDAP is not responding"
+msgstr ""
+
+#: ../cas-maestro.php:475
+msgid "Checking..."
+msgstr ""
+
+#: ../cas-maestro.php:476
+msgid "Choose the User's role"
+msgstr ""
+
+#: ../views/admin_interface.php:7
+msgid "CAS Maestro settings has been updated."
+msgstr ""
+
+#: ../views/admin_interface.php:9
+msgid ""
+"CAS Maestro settings has been updated, yet there's still information that "
+"needs to be filled."
+msgstr ""
+
+#: ../views/metaboxes/registration.php:18
+msgid "User registration"
+msgstr ""
+
+#: ../views/metaboxes/registration.php:22
+msgid ""
+"In order to register a new user an email address is required. In case you "
+"don’t want to set the email address manually, please chose from the options "
+"below."
+msgstr ""
+
+#: ../views/metaboxes/registration.php:24
+msgid "No mail creation"
+msgstr ""
+
+#: ../views/metaboxes/registration.php:25
+msgid "E-mail suffix username@"
+msgstr ""
+
+#: ../views/metaboxes/registration.php:26
+msgid "LDAP server connection"
+msgstr ""
+
+#: ../views/metaboxes/registration.php:29
+msgid ""
+"You should finish this configuration with LDAP server data. For anonymous "
+"server access, which could not be enough, leave the fields “RDN User” and "
+"“Password” blank."
+msgstr ""
+
+#: ../views/metaboxes/registration.php:43 ../views/metaboxes/general.php:17
+msgid "Server hostname"
+msgstr ""
+
+#: ../views/metaboxes/registration.php:43
+#, php-format
+msgid "(with %s or %s)"
+msgstr ""
+
+#: ../views/metaboxes/registration.php:47
+msgid "Username <abbr title='(Relative Distinguished Name)'>RDN</abbr>"
+msgstr ""
+
+#: ../views/metaboxes/registration.php:51
+msgid "Password"
+msgstr ""
+
+#: ../views/metaboxes/registration.php:55
+msgid "Base DN"
+msgstr ""
+
+#: ../views/metaboxes/registration.php:64
+msgid ""
+"The option to register all users, allows all users to be added to the system "
+"with subscriber profile, with no exception."
+msgstr ""
+
+#: ../views/metaboxes/registration.php:65
+msgid "Register all users?"
+msgstr ""
+
+#: ../views/metaboxes/registration.php:70
+msgid "Users Allowed to Register"
+msgstr ""
+
+#: ../views/metaboxes/registration.php:71
+msgid ""
+"If you indentify users with the ability to register on the system upfront "
+"without confirmation you can also set their names and profile."
+msgstr ""
+
+#: ../views/metaboxes/registration.php:120
+msgid "To add another user, just fill the last blank element."
+msgstr ""
+
+#: ../views/metaboxes/registration.php:124 ../views/metaboxes/general.php:46
+#: ../views/metaboxes/mail.php:69
+msgid "Update options"
+msgstr ""
+
+#: ../views/metaboxes/help_metabox.php:1
+msgid ""
+"In case you can not access the content manager due to a misconfiguration of "
+"this plugin, the following steps should be performed:"
+msgstr ""
+
+#: ../views/metaboxes/help_metabox.php:3
+msgid "Remove the directory of plugin CAS Maestro"
+msgstr ""
+
+#: ../views/metaboxes/help_metabox.php:4
+msgid "Perform access according to the login WordPess"
+msgstr ""
+
+#: ../views/metaboxes/help_metabox.php:5
+msgid "Reinstall CAS Maestro"
+msgstr ""
+
+#: ../views/metaboxes/help_metabox.php:7
+msgid ""
+"Alternatively, you may simply disable the behavior of CAS Maestro as follows:"
+msgstr ""
+
+#: ../views/metaboxes/help_metabox.php:9
+#, php-format
+msgid "Edit the file %s and search for %s definition"
+msgstr ""
+
+#: ../views/metaboxes/help_metabox.php:10
+#, php-format
+msgid "Before that definition, write %s"
+msgstr ""
+
+#: ../views/metaboxes/help_metabox.php:11
+msgid "Reconfigure the plugin and remove the line that was added."
+msgstr ""
+
+#: ../views/metaboxes/general.php:1
+msgid "Server settings"
+msgstr ""
+
+#: ../views/metaboxes/general.php:3
+msgid ""
+"The plugin will only be active after the CAS server definitions are filled. "
+"After the configuration is done, please verify if the connection is valid. "
+"This is strongly advised because If you fill the data incorrrectly, your "
+"access to WordPress might be denied."
+msgstr ""
+
+#: ../views/metaboxes/general.php:4
+msgid ""
+"In case you don’t know all the data, or in doubt, you should contact the "
+"person responsible for the CAS server."
+msgstr ""
+
+#: ../views/metaboxes/general.php:8
+msgid "CAS version"
+msgstr ""
+
+#: ../views/metaboxes/general.php:21
+msgid "Server port"
+msgstr ""
+
+#: ../views/metaboxes/general.php:27
+msgid "Server path"
+msgstr ""
+
+#: ../views/metaboxes/general.php:35
+msgid "Menu localization"
+msgstr ""
+
+#: ../views/metaboxes/general.php:38
+msgid "Sidebar"
+msgstr ""
+
+#: ../views/metaboxes/general.php:41
+msgid "Settings menu"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:2
+msgid "Sender"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:6
+msgid ""
+"All mails are sent from a unique sender. This sender may recieve "
+"notification emails alerting for new users and/or activations, estabilished "
+"by the following configuration."
+msgstr ""
+
+#: ../views/metaboxes/mail.php:9
+msgid "E-mail address:"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:13
+msgid "Full name:"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:18
+msgid "Mails"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:19
+msgid ""
+"Please set up on witch actions should emails be sent. It’s possible to send "
+"emails to the user and the sender, depending on your configuration."
+msgstr ""
+
+#: ../views/metaboxes/mail.php:23
+msgid "Welcoming"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:24
+msgid "Wait for access"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:30
+msgid "Send to the User"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:30
+msgid "Send to the Sender"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:31 ../views/metaboxes/mail.php:48
+msgid "Subject"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:33 ../views/metaboxes/mail.php:50
+msgid "Body"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:36 ../views/metaboxes/mail.php:53
+msgid "Message body sent to the User"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:40 ../views/metaboxes/mail.php:57
+msgid "Message body sent to the Sender"
+msgstr ""
+
+#: ../views/metaboxes/mail.php:63
+msgid ""
+"You can use the following tokens: %sitename% for the website name, %username"
+"% for the user’s name and %realname% for the user’s real name."
+msgstr ""
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS.php
new file mode 100644
index 0000000..33a46c0
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS.php
@@ -0,0 +1,1980 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ *
+ *
+ * Interface class of the phpCAS library
+ * PHP Version 5
+ *
+ * @file     CAS/CAS.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @author   Olivier Berger <olivier.berger@it-sudparis.eu>
+ * @author   Brett Bieber <brett.bieber@gmail.com>
+ * @author   Joachim Fritschi <jfritschi@freenet.de>
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ * @ingroup public
+ */
+
+
+//
+// hack by Vangelis Haniotakis to handle the absence of $_SERVER['REQUEST_URI']
+// in IIS
+//
+if (php_sapi_name() != 'cli') {
+    if (!isset($_SERVER['REQUEST_URI'])) {
+        $_SERVER['REQUEST_URI'] = $_SERVER['SCRIPT_NAME'] . '?' . $_SERVER['QUERY_STRING'];
+    }
+}
+
+// Add a E_USER_DEPRECATED for php versions <= 5.2
+if (!defined('E_USER_DEPRECATED')) {
+    define('E_USER_DEPRECATED', E_USER_NOTICE);
+}
+
+
+// ########################################################################
+//  CONSTANTS
+// ########################################################################
+
+// ------------------------------------------------------------------------
+//  CAS VERSIONS
+// ------------------------------------------------------------------------
+
+/**
+ * phpCAS version. accessible for the user by phpCAS::getVersion().
+ */
+define('PHPCAS_VERSION', '1.3.2');
+
+/**
+ * @addtogroup public
+ * @{
+ */
+
+/**
+ * CAS version 1.0
+ */
+define("CAS_VERSION_1_0", '1.0');
+/*!
+ * CAS version 2.0
+*/
+define("CAS_VERSION_2_0", '2.0');
+
+// ------------------------------------------------------------------------
+//  SAML defines
+// ------------------------------------------------------------------------
+
+/**
+ * SAML protocol
+ */
+define("SAML_VERSION_1_1", 'S1');
+
+/**
+ * XML header for SAML POST
+ */
+define("SAML_XML_HEADER", '<?xml version="1.0" encoding="UTF-8"?>');
+
+/**
+ * SOAP envelope for SAML POST
+ */
+define("SAML_SOAP_ENV", '<SOAP-ENV:Envelope xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"><SOAP-ENV:Header/>');
+
+/**
+ * SOAP body for SAML POST
+ */
+define("SAML_SOAP_BODY", '<SOAP-ENV:Body>');
+
+/**
+ * SAMLP request
+ */
+define("SAMLP_REQUEST", '<samlp:Request xmlns:samlp="urn:oasis:names:tc:SAML:1.0:protocol"  MajorVersion="1" MinorVersion="1" RequestID="_192.168.16.51.1024506224022" IssueInstant="2002-06-19T17:03:44.022Z">');
+define("SAMLP_REQUEST_CLOSE", '</samlp:Request>');
+
+/**
+ * SAMLP artifact tag (for the ticket)
+ */
+define("SAML_ASSERTION_ARTIFACT", '<samlp:AssertionArtifact>');
+
+/**
+ * SAMLP close
+ */
+define("SAML_ASSERTION_ARTIFACT_CLOSE", '</samlp:AssertionArtifact>');
+
+/**
+ * SOAP body close
+ */
+define("SAML_SOAP_BODY_CLOSE", '</SOAP-ENV:Body>');
+
+/**
+ * SOAP envelope close
+ */
+define("SAML_SOAP_ENV_CLOSE", '</SOAP-ENV:Envelope>');
+
+/**
+ * SAML Attributes
+ */
+define("SAML_ATTRIBUTES", 'SAMLATTRIBS');
+
+/** @} */
+/**
+ * @addtogroup publicPGTStorage
+ * @{
+ */
+// ------------------------------------------------------------------------
+//  FILE PGT STORAGE
+// ------------------------------------------------------------------------
+/**
+ * Default path used when storing PGT's to file
+ */
+define("CAS_PGT_STORAGE_FILE_DEFAULT_PATH", session_save_path());
+/** @} */
+// ------------------------------------------------------------------------
+// SERVICE ACCESS ERRORS
+// ------------------------------------------------------------------------
+/**
+ * @addtogroup publicServices
+ * @{
+ */
+
+/**
+ * phpCAS::service() error code on success
+ */
+define("PHPCAS_SERVICE_OK", 0);
+/**
+ * phpCAS::service() error code when the PT could not retrieve because
+ * the CAS server did not respond.
+ */
+define("PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE", 1);
+/**
+ * phpCAS::service() error code when the PT could not retrieve because
+ * the response of the CAS server was ill-formed.
+ */
+define("PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE", 2);
+/**
+ * phpCAS::service() error code when the PT could not retrieve because
+ * the CAS server did not want to.
+ */
+define("PHPCAS_SERVICE_PT_FAILURE", 3);
+/**
+ * phpCAS::service() error code when the service was not available.
+ */
+define("PHPCAS_SERVICE_NOT_AVAILABLE", 4);
+
+// ------------------------------------------------------------------------
+// SERVICE TYPES
+// ------------------------------------------------------------------------
+/**
+ * phpCAS::getProxiedService() type for HTTP GET
+ */
+define("PHPCAS_PROXIED_SERVICE_HTTP_GET", 'CAS_ProxiedService_Http_Get');
+/**
+ * phpCAS::getProxiedService() type for HTTP POST
+ */
+define("PHPCAS_PROXIED_SERVICE_HTTP_POST", 'CAS_ProxiedService_Http_Post');
+/**
+ * phpCAS::getProxiedService() type for IMAP
+ */
+define("PHPCAS_PROXIED_SERVICE_IMAP", 'CAS_ProxiedService_Imap');
+
+
+/** @} */
+// ------------------------------------------------------------------------
+//  LANGUAGES
+// ------------------------------------------------------------------------
+/**
+ * @addtogroup publicLang
+ * @{
+ */
+
+define("PHPCAS_LANG_ENGLISH", 'CAS_Languages_English');
+define("PHPCAS_LANG_FRENCH", 'CAS_Languages_French');
+define("PHPCAS_LANG_GREEK", 'CAS_Languages_Greek');
+define("PHPCAS_LANG_GERMAN", 'CAS_Languages_German');
+define("PHPCAS_LANG_JAPANESE", 'CAS_Languages_Japanese');
+define("PHPCAS_LANG_SPANISH", 'CAS_Languages_Spanish');
+define("PHPCAS_LANG_CATALAN", 'CAS_Languages_Catalan');
+
+/** @} */
+
+/**
+ * @addtogroup internalLang
+ * @{
+ */
+
+/**
+ * phpCAS default language (when phpCAS::setLang() is not used)
+ */
+define("PHPCAS_LANG_DEFAULT", PHPCAS_LANG_ENGLISH);
+
+/** @} */
+// ------------------------------------------------------------------------
+//  DEBUG
+// ------------------------------------------------------------------------
+/**
+ * @addtogroup publicDebug
+ * @{
+ */
+
+/**
+ * The default directory for the debug file under Unix.
+ */
+define('DEFAULT_DEBUG_DIR', '/tmp/');
+
+/** @} */
+
+// include the class autoloader
+require_once dirname(__FILE__) . '/CAS/Autoload.php';
+
+/**
+ * The phpCAS class is a simple container for the phpCAS library. It provides CAS
+ * authentication for web applications written in PHP.
+ *
+ * @ingroup public
+ * @class phpCAS
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @author   Olivier Berger <olivier.berger@it-sudparis.eu>
+ * @author   Brett Bieber <brett.bieber@gmail.com>
+ * @author   Joachim Fritschi <jfritschi@freenet.de>
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class phpCAS
+{
+
+    /**
+     * This variable is used by the interface class phpCAS.
+     *
+     * @hideinitializer
+     */
+    private static $_PHPCAS_CLIENT;
+
+    /**
+     * This variable is used to store where the initializer is called from
+     * (to print a comprehensive error in case of multiple calls).
+     *
+     * @hideinitializer
+     */
+    private static $_PHPCAS_INIT_CALL;
+
+    /**
+     * This variable is used to store phpCAS debug mode.
+     *
+     * @hideinitializer
+     */
+    private static $_PHPCAS_DEBUG;
+
+
+    // ########################################################################
+    //  INITIALIZATION
+    // ########################################################################
+
+    /**
+     * @addtogroup publicInit
+     * @{
+     */
+
+    /**
+     * phpCAS client initializer.
+     *
+     * @param string $server_version  the version of the CAS server
+     * @param string $server_hostname the hostname of the CAS server
+     * @param string $server_port     the port the CAS server is running on
+     * @param string $server_uri      the URI the CAS server is responding on
+     * @param bool   $changeSessionID Allow phpCAS to change the session_id (Single
+     * Sign Out/handleLogoutRequests is based on that change)
+     *
+     * @return a newly created CAS_Client object
+     * @note Only one of the phpCAS::client() and phpCAS::proxy functions should be
+     * called, only once, and before all other methods (except phpCAS::getVersion()
+     * and phpCAS::setDebug()).
+     */
+    public static function client($server_version, $server_hostname,
+        $server_port, $server_uri, $changeSessionID = true
+    ) {
+        phpCAS :: traceBegin();
+        if (is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error(self::$_PHPCAS_INIT_CALL['method'] . '() has already been called (at ' . self::$_PHPCAS_INIT_CALL['file'] . ':' . self::$_PHPCAS_INIT_CALL['line'] . ')');
+        }
+        if (gettype($server_version) != 'string') {
+            phpCAS :: error('type mismatched for parameter $server_version (should be `string\')');
+        }
+        if (gettype($server_hostname) != 'string') {
+            phpCAS :: error('type mismatched for parameter $server_hostname (should be `string\')');
+        }
+        if (gettype($server_port) != 'integer') {
+            phpCAS :: error('type mismatched for parameter $server_port (should be `integer\')');
+        }
+        if (gettype($server_uri) != 'string') {
+            phpCAS :: error('type mismatched for parameter $server_uri (should be `string\')');
+        }
+
+        // store where the initializer is called from
+        $dbg = debug_backtrace();
+        self::$_PHPCAS_INIT_CALL = array (
+            'done' => true,
+            'file' => $dbg[0]['file'],
+            'line' => $dbg[0]['line'],
+            'method' => __CLASS__ . '::' . __FUNCTION__
+        );
+
+        // initialize the object $_PHPCAS_CLIENT
+        self::$_PHPCAS_CLIENT = new CAS_Client(
+            $server_version, false, $server_hostname, $server_port, $server_uri,
+            $changeSessionID
+        );
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * phpCAS proxy initializer.
+     *
+     * @param string $server_version  the version of the CAS server
+     * @param string $server_hostname the hostname of the CAS server
+     * @param string $server_port     the port the CAS server is running on
+     * @param string $server_uri      the URI the CAS server is responding on
+     * @param bool   $changeSessionID Allow phpCAS to change the session_id (Single
+     * Sign Out/handleLogoutRequests is based on that change)
+     *
+     * @return a newly created CAS_Client object
+     * @note Only one of the phpCAS::client() and phpCAS::proxy functions should be
+     * called, only once, and before all other methods (except phpCAS::getVersion()
+     * and phpCAS::setDebug()).
+     */
+    public static function proxy($server_version, $server_hostname,
+        $server_port, $server_uri, $changeSessionID = true
+    ) {
+        phpCAS :: traceBegin();
+        if (is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error(self::$_PHPCAS_INIT_CALL['method'] . '() has already been called (at ' . self::$_PHPCAS_INIT_CALL['file'] . ':' . self::$_PHPCAS_INIT_CALL['line'] . ')');
+        }
+        if (gettype($server_version) != 'string') {
+            phpCAS :: error('type mismatched for parameter $server_version (should be `string\')');
+        }
+        if (gettype($server_hostname) != 'string') {
+            phpCAS :: error('type mismatched for parameter $server_hostname (should be `string\')');
+        }
+        if (gettype($server_port) != 'integer') {
+            phpCAS :: error('type mismatched for parameter $server_port (should be `integer\')');
+        }
+        if (gettype($server_uri) != 'string') {
+            phpCAS :: error('type mismatched for parameter $server_uri (should be `string\')');
+        }
+
+        // store where the initialzer is called from
+        $dbg = debug_backtrace();
+        self::$_PHPCAS_INIT_CALL = array (
+            'done' => true,
+            'file' => $dbg[0]['file'],
+            'line' => $dbg[0]['line'],
+            'method' => __CLASS__ . '::' . __FUNCTION__
+        );
+
+        // initialize the object $_PHPCAS_CLIENT
+        self::$_PHPCAS_CLIENT = new CAS_Client(
+            $server_version, true, $server_hostname, $server_port, $server_uri,
+            $changeSessionID
+        );
+        phpCAS :: traceEnd();
+    }
+
+    /** @} */
+    // ########################################################################
+    //  DEBUGGING
+    // ########################################################################
+
+    /**
+     * @addtogroup publicDebug
+     * @{
+     */
+
+    /**
+     * Set/unset debug mode
+     *
+     * @param string $filename the name of the file used for logging, or false
+     * to stop debugging.
+     *
+     * @return void
+     */
+    public static function setDebug($filename = '')
+    {
+        if ($filename != false && gettype($filename) != 'string') {
+            phpCAS :: error('type mismatched for parameter $dbg (should be false or the name of the log file)');
+        }
+        if ($filename === false) {
+            self::$_PHPCAS_DEBUG['filename'] = false;
+
+        } else {
+            if (empty ($filename)) {
+                if (preg_match('/^Win.*/', getenv('OS'))) {
+                    if (isset ($_ENV['TMP'])) {
+                        $debugDir = $_ENV['TMP'] . '/';
+                    } else {
+                        $debugDir = '';
+                    }
+                } else {
+                    $debugDir = DEFAULT_DEBUG_DIR;
+                }
+                $filename = $debugDir . 'phpCAS.log';
+            }
+
+            if (empty (self::$_PHPCAS_DEBUG['unique_id'])) {
+                self::$_PHPCAS_DEBUG['unique_id'] = substr(strtoupper(md5(uniqid(''))), 0, 4);
+            }
+
+            self::$_PHPCAS_DEBUG['filename'] = $filename;
+            self::$_PHPCAS_DEBUG['indent'] = 0;
+
+            phpCAS :: trace('START phpCAS-' . PHPCAS_VERSION . ' ******************');
+        }
+    }
+
+
+    /**
+     * Logs a string in debug mode.
+     *
+     * @param string $str the string to write
+     *
+     * @return void
+     * @private
+     */
+    public static function log($str)
+    {
+        $indent_str = ".";
+
+
+        if (!empty(self::$_PHPCAS_DEBUG['filename'])) {
+            // Check if file exists and modifiy file permissions to be only
+            // readable by the webserver
+            if (!file_exists(self::$_PHPCAS_DEBUG['filename'])) {
+                touch(self::$_PHPCAS_DEBUG['filename']);
+                // Chmod will fail on windows
+                @chmod(self::$_PHPCAS_DEBUG['filename'], 0600);
+            }
+            for ($i = 0; $i < self::$_PHPCAS_DEBUG['indent']; $i++) {
+
+                $indent_str .= '|    ';
+            }
+            // allow for multiline output with proper identing. Usefull for
+            // dumping cas answers etc.
+            $str2 = str_replace("\n", "\n" . self::$_PHPCAS_DEBUG['unique_id'] . ' ' . $indent_str, $str);
+            error_log(self::$_PHPCAS_DEBUG['unique_id'] . ' ' . $indent_str . $str2 . "\n", 3, self::$_PHPCAS_DEBUG['filename']);
+        }
+
+    }
+
+    /**
+     * This method is used by interface methods to print an error and where the
+     * function was originally called from.
+     *
+     * @param string $msg the message to print
+     *
+     * @return void
+     * @private
+     */
+    public static function error($msg)
+    {
+        $dbg = debug_backtrace();
+        $function = '?';
+        $file = '?';
+        $line = '?';
+        if (is_array($dbg)) {
+            for ($i = 1; $i < sizeof($dbg); $i++) {
+                if (is_array($dbg[$i]) && isset($dbg[$i]['class']) ) {
+                    if ($dbg[$i]['class'] == __CLASS__) {
+                        $function = $dbg[$i]['function'];
+                        $file = $dbg[$i]['file'];
+                        $line = $dbg[$i]['line'];
+                    }
+                }
+            }
+        }
+        echo "<br />\n<b>phpCAS error</b>: <font color=\"FF0000\"><b>" . __CLASS__ . "::" . $function . '(): ' . htmlentities($msg) . "</b></font> in <b>" . $file . "</b> on line <b>" . $line . "</b><br />\n";
+        phpCAS :: trace($msg);
+        phpCAS :: traceEnd();
+
+        throw new CAS_GracefullTerminationException(__CLASS__ . "::" . $function . '(): ' . $msg);
+    }
+
+    /**
+     * This method is used to log something in debug mode.
+     *
+     * @param string $str string to log
+     *
+     * @return void
+     */
+    public static function trace($str)
+    {
+        $dbg = debug_backtrace();
+        phpCAS :: log($str . ' [' . basename($dbg[0]['file']) . ':' . $dbg[0]['line'] . ']');
+    }
+
+    /**
+     * This method is used to indicate the start of the execution of a function in debug mode.
+     *
+     * @return void
+     */
+    public static function traceBegin()
+    {
+        $dbg = debug_backtrace();
+        $str = '=> ';
+        if (!empty ($dbg[1]['class'])) {
+            $str .= $dbg[1]['class'] . '::';
+        }
+        $str .= $dbg[1]['function'] . '(';
+        if (is_array($dbg[1]['args'])) {
+            foreach ($dbg[1]['args'] as $index => $arg) {
+                if ($index != 0) {
+                    $str .= ', ';
+                }
+                if (is_object($arg)) {
+                    $str .= get_class($arg);
+                } else {
+                    $str .= str_replace(array("\r\n", "\n", "\r"), "", var_export($arg, true));
+                }
+            }
+        }
+        if (isset($dbg[1]['file'])) {
+            $file = basename($dbg[1]['file']);
+        } else {
+            $file = 'unknown_file';
+        }
+        if (isset($dbg[1]['line'])) {
+            $line = $dbg[1]['line'];
+        } else {
+            $line = 'unknown_line';
+        }
+        $str .= ') [' . $file . ':' . $line . ']';
+        phpCAS :: log($str);
+        if (!isset(self::$_PHPCAS_DEBUG['indent'])) {
+            self::$_PHPCAS_DEBUG['indent'] = 0;
+        } else {
+            self::$_PHPCAS_DEBUG['indent']++;
+        }
+    }
+
+    /**
+     * This method is used to indicate the end of the execution of a function in
+     * debug mode.
+     *
+     * @param string $res the result of the function
+     *
+     * @return void
+     */
+    public static function traceEnd($res = '')
+    {
+        if (empty(self::$_PHPCAS_DEBUG['indent'])) {
+            self::$_PHPCAS_DEBUG['indent'] = 0;
+        } else {
+            self::$_PHPCAS_DEBUG['indent']--;
+        }
+        $dbg = debug_backtrace();
+        $str = '';
+        if (is_object($res)) {
+            $str .= '<= ' . get_class($res);
+        } else {
+            $str .= '<= ' . str_replace(array("\r\n", "\n", "\r"), "", var_export($res, true));
+        }
+
+        phpCAS :: log($str);
+    }
+
+    /**
+     * This method is used to indicate the end of the execution of the program
+     *
+     * @return void
+     */
+    public static function traceExit()
+    {
+        phpCAS :: log('exit()');
+        while (self::$_PHPCAS_DEBUG['indent'] > 0) {
+            phpCAS :: log('-');
+            self::$_PHPCAS_DEBUG['indent']--;
+        }
+    }
+
+    /** @} */
+    // ########################################################################
+    //  INTERNATIONALIZATION
+    // ########################################################################
+    /**
+    * @addtogroup publicLang
+    * @{
+    */
+
+    /**
+     * This method is used to set the language used by phpCAS.
+     *
+     * @param string $lang string representing the language.
+     *
+     * @return void
+     *
+     * @sa PHPCAS_LANG_FRENCH, PHPCAS_LANG_ENGLISH
+     * @note Can be called only once.
+     */
+    public static function setLang($lang)
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        if (gettype($lang) != 'string') {
+            phpCAS :: error('type mismatched for parameter $lang (should be `string\')');
+        }
+        self::$_PHPCAS_CLIENT->setLang($lang);
+    }
+
+    /** @} */
+    // ########################################################################
+    //  VERSION
+    // ########################################################################
+    /**
+    * @addtogroup public
+    * @{
+    */
+
+    /**
+     * This method returns the phpCAS version.
+     *
+     * @return the phpCAS version.
+     */
+    public static function getVersion()
+    {
+        return PHPCAS_VERSION;
+    }
+
+    /** @} */
+    // ########################################################################
+    //  HTML OUTPUT
+    // ########################################################################
+    /**
+    * @addtogroup publicOutput
+    * @{
+    */
+
+    /**
+     * This method sets the HTML header used for all outputs.
+     *
+     * @param string $header the HTML header.
+     *
+     * @return void
+     */
+    public static function setHTMLHeader($header)
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        if (gettype($header) != 'string') {
+            phpCAS :: error('type mismatched for parameter $header (should be `string\')');
+        }
+        self::$_PHPCAS_CLIENT->setHTMLHeader($header);
+    }
+
+    /**
+     * This method sets the HTML footer used for all outputs.
+     *
+     * @param string $footer the HTML footer.
+     *
+     * @return void
+     */
+    public static function setHTMLFooter($footer)
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        if (gettype($footer) != 'string') {
+            phpCAS :: error('type mismatched for parameter $footer (should be `string\')');
+        }
+        self::$_PHPCAS_CLIENT->setHTMLFooter($footer);
+    }
+
+    /** @} */
+    // ########################################################################
+    //  PGT STORAGE
+    // ########################################################################
+    /**
+    * @addtogroup publicPGTStorage
+    * @{
+    */
+
+    /**
+     * This method can be used to set a custom PGT storage object.
+     *
+     * @param CAS_PGTStorage $storage a PGT storage object that inherits from the
+     * CAS_PGTStorage class
+     *
+     * @return void
+     */
+    public static function setPGTStorage($storage)
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->isProxy()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called before ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() (called at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ')');
+        }
+        if ( !($storage instanceof CAS_PGTStorage) ) {
+            phpCAS :: error('type mismatched for parameter $storage (should be a CAS_PGTStorage `object\')');
+        }
+        self::$_PHPCAS_CLIENT->setPGTStorage($storage);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * This method is used to tell phpCAS to store the response of the
+     * CAS server to PGT requests in a database.
+     *
+     * @param string $dsn_or_pdo     a dsn string to use for creating a PDO
+     * object or a PDO object
+     * @param string $username       the username to use when connecting to the
+     * database
+     * @param string $password       the password to use when connecting to the
+     * database
+     * @param string $table          the table to use for storing and retrieving
+     * PGT's
+     * @param string $driver_options any driver options to use when connecting
+     * to the database
+     *
+     * @return void
+     */
+    public static function setPGTStorageDb($dsn_or_pdo, $username='',
+        $password='', $table='', $driver_options=null
+    ) {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->isProxy()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called before ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() (called at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ')');
+        }
+        if (gettype($username) != 'string') {
+            phpCAS :: error('type mismatched for parameter $username (should be `string\')');
+        }
+        if (gettype($password) != 'string') {
+            phpCAS :: error('type mismatched for parameter $password (should be `string\')');
+        }
+        if (gettype($table) != 'string') {
+            phpCAS :: error('type mismatched for parameter $table (should be `string\')');
+        }
+        self::$_PHPCAS_CLIENT->setPGTStorageDb($dsn_or_pdo, $username, $password, $table, $driver_options);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * This method is used to tell phpCAS to store the response of the
+     * CAS server to PGT requests onto the filesystem.
+     *
+     * @param string $path the path where the PGT's should be stored
+     *
+     * @return void
+     */
+    public static function setPGTStorageFile($path = '')
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->isProxy()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called before ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() (called at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ')');
+        }
+        if (gettype($path) != 'string') {
+            phpCAS :: error('type mismatched for parameter $path (should be `string\')');
+        }
+        self::$_PHPCAS_CLIENT->setPGTStorageFile($path);
+        phpCAS :: traceEnd();
+    }
+    /** @} */
+    // ########################################################################
+    // ACCESS TO EXTERNAL SERVICES
+    // ########################################################################
+    /**
+    * @addtogroup publicServices
+    * @{
+    */
+
+    /**
+     * Answer a proxy-authenticated service handler.
+     *
+     * @param string $type The service type. One of
+     * PHPCAS_PROXIED_SERVICE_HTTP_GET; PHPCAS_PROXIED_SERVICE_HTTP_POST;
+     * PHPCAS_PROXIED_SERVICE_IMAP
+     *
+     * @return CAS_ProxiedService
+     * @throws InvalidArgumentException If the service type is unknown.
+     */
+    public static function getProxiedService ($type)
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->isProxy()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called after the programmer is sure the user has been authenticated (by calling ' . __CLASS__ . '::checkAuthentication() or ' . __CLASS__ . '::forceAuthentication()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCallSuccessful()) {
+            phpCAS :: error('authentication was checked (by ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ') but the method returned false');
+        }
+        if (gettype($type) != 'string') {
+            phpCAS :: error('type mismatched for parameter $type (should be `string\')');
+        }
+
+        $res = self::$_PHPCAS_CLIENT->getProxiedService($type);
+
+        phpCAS :: traceEnd();
+        return $res;
+    }
+
+    /**
+     * Initialize a proxied-service handler with the proxy-ticket it should use.
+     *
+     * @param CAS_ProxiedService $proxiedService Proxied Service Handler
+     *
+     * @return void
+     * @throws CAS_ProxyTicketException If there is a proxy-ticket failure.
+     *      The code of the Exception will be one of:
+     *          PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE
+     *          PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE
+     *          PHPCAS_SERVICE_PT_FAILURE
+     */
+    public static function initializeProxiedService (CAS_ProxiedService $proxiedService)
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->isProxy()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called after the programmer is sure the user has been authenticated (by calling ' . __CLASS__ . '::checkAuthentication() or ' . __CLASS__ . '::forceAuthentication()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCallSuccessful()) {
+            phpCAS :: error('authentication was checked (by ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ') but the method returned false');
+        }
+
+        self::$_PHPCAS_CLIENT->initializeProxiedService($proxiedService);
+    }
+
+    /**
+     * This method is used to access an HTTP[S] service.
+     *
+     * @param string $url       the service to access.
+     * @param string &$err_code an error code Possible values are
+     * PHPCAS_SERVICE_OK (on success), PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE,
+     * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE, PHPCAS_SERVICE_PT_FAILURE,
+     * PHPCAS_SERVICE_NOT_AVAILABLE.
+     * @param string &$output   the output of the service (also used to give an
+     * error message on failure).
+     *
+     * @return bool true on success, false otherwise (in this later case,
+     * $err_code gives the reason why it failed and $output contains an error
+     * message).
+     */
+    public static function serviceWeb($url, & $err_code, & $output)
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->isProxy()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called after the programmer is sure the user has been authenticated (by calling ' . __CLASS__ . '::checkAuthentication() or ' . __CLASS__ . '::forceAuthentication()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCallSuccessful()) {
+            phpCAS :: error('authentication was checked (by ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ') but the method returned false');
+        }
+        if (gettype($url) != 'string') {
+            phpCAS :: error('type mismatched for parameter $url (should be `string\')');
+        }
+
+        $res = self::$_PHPCAS_CLIENT->serviceWeb($url, $err_code, $output);
+
+        phpCAS :: traceEnd($res);
+        return $res;
+    }
+
+    /**
+     * This method is used to access an IMAP/POP3/NNTP service.
+     *
+     * @param string $url       a string giving the URL of the service,
+     * including the mailing box for IMAP URLs, as accepted by imap_open().
+     * @param string $service   a string giving for CAS retrieve Proxy ticket
+     * @param string $flags     options given to imap_open().
+     * @param string &$err_code an error code Possible values are
+     * PHPCAS_SERVICE_OK (on success), PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE,
+     * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE, PHPCAS_SERVICE_PT_FAILURE,
+     * PHPCAS_SERVICE_NOT_AVAILABLE.
+     * @param string &$err_msg  an error message on failure
+     * @param string &$pt       the Proxy Ticket (PT) retrieved from the CAS
+     * server to access the URL on success, false on error).
+     *
+     * @return object IMAP stream on success, false otherwise (in this later
+     * case, $err_code gives the reason why it failed and $err_msg contains an
+     * error message).
+     */
+    public static function serviceMail($url, $service, $flags, & $err_code, & $err_msg, & $pt)
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->isProxy()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called after the programmer is sure the user has been authenticated (by calling ' . __CLASS__ . '::checkAuthentication() or ' . __CLASS__ . '::forceAuthentication()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCallSuccessful()) {
+            phpCAS :: error('authentication was checked (by ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ') but the method returned false');
+        }
+        if (gettype($url) != 'string') {
+            phpCAS :: error('type mismatched for parameter $url (should be `string\')');
+        }
+
+        if (gettype($flags) != 'integer') {
+            phpCAS :: error('type mismatched for parameter $flags (should be `integer\')');
+        }
+
+        $res = self::$_PHPCAS_CLIENT->serviceMail($url, $service, $flags, $err_code, $err_msg, $pt);
+
+        phpCAS :: traceEnd($res);
+        return $res;
+    }
+
+    /** @} */
+    // ########################################################################
+    //  AUTHENTICATION
+    // ########################################################################
+    /**
+    * @addtogroup publicAuth
+    * @{
+    */
+
+    /**
+     * Set the times authentication will be cached before really accessing the
+     * CAS server in gateway mode:
+     * - -1: check only once, and then never again (until you pree login)
+     * - 0: always check
+     * - n: check every "n" time
+     *
+     * @param int $n an integer.
+     *
+     * @return void
+     */
+    public static function setCacheTimesForAuthRecheck($n)
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        if (gettype($n) != 'integer') {
+            phpCAS :: error('type mismatched for parameter $n (should be `integer\')');
+        }
+        self::$_PHPCAS_CLIENT->setCacheTimesForAuthRecheck($n);
+    }
+
+    /**
+     * Set a callback function to be run when a user authenticates.
+     *
+     * The callback function will be passed a $logoutTicket as its first
+     * parameter, followed by any $additionalArgs you pass. The $logoutTicket
+     * parameter is an opaque string that can be used to map the session-id to
+     * logout request in order to support single-signout in applications that
+     * manage their own sessions (rather than letting phpCAS start the session).
+     *
+     * phpCAS::forceAuthentication() will always exit and forward client unless
+     * they are already authenticated. To perform an action at the moment the user
+     * logs in (such as registering an account, performing logging, etc), register
+     * a callback function here.
+     *
+     * @param string $function       Callback function
+     * @param array  $additionalArgs optional array of arguments
+     *
+     * @return void
+     */
+    public static function setPostAuthenticateCallback ($function, array $additionalArgs = array())
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+
+        self::$_PHPCAS_CLIENT->setPostAuthenticateCallback($function, $additionalArgs);
+    }
+
+    /**
+     * Set a callback function to be run when a single-signout request is
+     * received. The callback function will be passed a $logoutTicket as its
+     * first parameter, followed by any $additionalArgs you pass. The
+     * $logoutTicket parameter is an opaque string that can be used to map a
+     * session-id to the logout request in order to support single-signout in
+     * applications that manage their own sessions (rather than letting phpCAS
+     * start and destroy the session).
+     *
+     * @param string $function       Callback function
+     * @param array  $additionalArgs optional array of arguments
+     *
+     * @return void
+     */
+    public static function setSingleSignoutCallback ($function, array $additionalArgs = array())
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+
+        self::$_PHPCAS_CLIENT->setSingleSignoutCallback($function, $additionalArgs);
+    }
+
+    /**
+     * This method is called to check if the user is already authenticated
+     * locally or has a global cas session. A already existing cas session is
+     * determined by a cas gateway call.(cas login call without any interactive
+     * prompt)
+     *
+     * @return true when the user is authenticated, false when a previous
+     * gateway login failed or the function will not return if the user is
+     * redirected to the cas server for a gateway login attempt
+     */
+    public static function checkAuthentication()
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+
+        $auth = self::$_PHPCAS_CLIENT->checkAuthentication();
+
+        // store where the authentication has been checked and the result
+        self::$_PHPCAS_CLIENT->markAuthenticationCall($auth);
+
+        phpCAS :: traceEnd($auth);
+        return $auth;
+    }
+
+    /**
+     * This method is called to force authentication if the user was not already
+     * authenticated. If the user is not authenticated, halt by redirecting to
+     * the CAS server.
+     *
+     * @return bool Authentication
+     */
+    public static function forceAuthentication()
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+
+        $auth = self::$_PHPCAS_CLIENT->forceAuthentication();
+
+        // store where the authentication has been checked and the result
+        self::$_PHPCAS_CLIENT->markAuthenticationCall($auth);
+
+        /*      if (!$auth) {
+         phpCAS :: trace('user is not authenticated, redirecting to the CAS server');
+        self::$_PHPCAS_CLIENT->forceAuthentication();
+        } else {
+        phpCAS :: trace('no need to authenticate (user `' . phpCAS :: getUser() . '\' is already authenticated)');
+        }*/
+
+        phpCAS :: traceEnd();
+        return $auth;
+    }
+
+    /**
+     * This method is called to renew the authentication.
+     *
+     * @return void
+     **/
+    public static function renewAuthentication()
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        $auth = self::$_PHPCAS_CLIENT->renewAuthentication();
+
+        // store where the authentication has been checked and the result
+        self::$_PHPCAS_CLIENT->markAuthenticationCall($auth);
+
+        //self::$_PHPCAS_CLIENT->renewAuthentication();
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * This method is called to check if the user is authenticated (previously or by
+     * tickets given in the URL).
+     *
+     * @return true when the user is authenticated.
+     */
+    public static function isAuthenticated()
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+
+        // call the isAuthenticated method of the $_PHPCAS_CLIENT object
+        $auth = self::$_PHPCAS_CLIENT->isAuthenticated();
+
+        // store where the authentication has been checked and the result
+        self::$_PHPCAS_CLIENT->markAuthenticationCall($auth);
+
+        phpCAS :: traceEnd($auth);
+        return $auth;
+    }
+
+    /**
+     * Checks whether authenticated based on $_SESSION. Useful to avoid
+     * server calls.
+     *
+     * @return bool true if authenticated, false otherwise.
+     * @since 0.4.22 by Brendan Arnold
+     */
+    public static function isSessionAuthenticated()
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        return (self::$_PHPCAS_CLIENT->isSessionAuthenticated());
+    }
+
+    /**
+     * This method returns the CAS user's login name.
+     *
+     * @return string the login name of the authenticated user
+     * @warning should not be called only after phpCAS::forceAuthentication()
+     * or phpCAS::checkAuthentication().
+     * */
+    public static function getUser()
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::forceAuthentication() or ' . __CLASS__ . '::isAuthenticated()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCallSuccessful()) {
+            phpCAS :: error('authentication was checked (by ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ') but the method returned false');
+        }
+        return self::$_PHPCAS_CLIENT->getUser();
+    }
+
+    /**
+     * Answer attributes about the authenticated user.
+     *
+     * @warning should not be called only after phpCAS::forceAuthentication()
+     * or phpCAS::checkAuthentication().
+     *
+     * @return array
+     */
+    public static function getAttributes()
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::forceAuthentication() or ' . __CLASS__ . '::isAuthenticated()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCallSuccessful()) {
+            phpCAS :: error('authentication was checked (by ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ') but the method returned false');
+        }
+        return self::$_PHPCAS_CLIENT->getAttributes();
+    }
+
+    /**
+     * Answer true if there are attributes for the authenticated user.
+     *
+     * @warning should not be called only after phpCAS::forceAuthentication()
+     * or phpCAS::checkAuthentication().
+     *
+     * @return bool
+     */
+    public static function hasAttributes()
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::forceAuthentication() or ' . __CLASS__ . '::isAuthenticated()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCallSuccessful()) {
+            phpCAS :: error('authentication was checked (by ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ') but the method returned false');
+        }
+        return self::$_PHPCAS_CLIENT->hasAttributes();
+    }
+
+    /**
+     * Answer true if an attribute exists for the authenticated user.
+     *
+     * @param string $key attribute name
+     *
+     * @return bool
+     * @warning should not be called only after phpCAS::forceAuthentication()
+     * or phpCAS::checkAuthentication().
+     */
+    public static function hasAttribute($key)
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::forceAuthentication() or ' . __CLASS__ . '::isAuthenticated()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCallSuccessful()) {
+            phpCAS :: error('authentication was checked (by ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ') but the method returned false');
+        }
+        return self::$_PHPCAS_CLIENT->hasAttribute($key);
+    }
+
+    /**
+     * Answer an attribute for the authenticated user.
+     *
+     * @param string $key attribute name
+     *
+     * @return mixed string for a single value or an array if multiple values exist.
+     * @warning should not be called only after phpCAS::forceAuthentication()
+     * or phpCAS::checkAuthentication().
+     */
+    public static function getAttribute($key)
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCalled()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::forceAuthentication() or ' . __CLASS__ . '::isAuthenticated()');
+        }
+        if (!self::$_PHPCAS_CLIENT->wasAuthenticationCallSuccessful()) {
+            phpCAS :: error('authentication was checked (by ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerMethod() . '() at ' . self::$_PHPCAS_CLIENT->getAuthenticationCallerFile() . ':' . self::$_PHPCAS_CLIENT->getAuthenticationCallerLine() . ') but the method returned false');
+        }
+        return self::$_PHPCAS_CLIENT->getAttribute($key);
+    }
+
+    /**
+     * Handle logout requests.
+     *
+     * @param bool  $check_client    additional safety check
+     * @param array $allowed_clients array of allowed clients
+     *
+     * @return void
+     */
+    public static function handleLogoutRequests($check_client = true, $allowed_clients = false)
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        return (self::$_PHPCAS_CLIENT->handleLogoutRequests($check_client, $allowed_clients));
+    }
+
+    /**
+     * This method returns the URL to be used to login.
+     * or phpCAS::isAuthenticated().
+     *
+     * @return the login name of the authenticated user
+     */
+    public static function getServerLoginURL()
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        return self::$_PHPCAS_CLIENT->getServerLoginURL();
+    }
+
+    /**
+     * Set the login URL of the CAS server.
+     *
+     * @param string $url the login URL
+     *
+     * @return void
+     * @since 0.4.21 by Wyman Chan
+     */
+    public static function setServerLoginURL($url = '')
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after' . __CLASS__ . '::client()');
+        }
+        if (gettype($url) != 'string') {
+            phpCAS :: error('type mismatched for parameter $url (should be `string`)');
+        }
+        self::$_PHPCAS_CLIENT->setServerLoginURL($url);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * Set the serviceValidate URL of the CAS server.
+     * Used only in CAS 1.0 validations
+     *
+     * @param string $url the serviceValidate URL
+     *
+     * @return void
+     */
+    public static function setServerServiceValidateURL($url = '')
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after' . __CLASS__ . '::client()');
+        }
+        if (gettype($url) != 'string') {
+            phpCAS :: error('type mismatched for parameter $url (should be `string`)');
+        }
+        self::$_PHPCAS_CLIENT->setServerServiceValidateURL($url);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * Set the proxyValidate URL of the CAS server.
+     * Used for all CAS 2.0 validations
+     *
+     * @param string $url the proxyValidate URL
+     *
+     * @return void
+     */
+    public static function setServerProxyValidateURL($url = '')
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after' . __CLASS__ . '::client()');
+        }
+        if (gettype($url) != 'string') {
+            phpCAS :: error('type mismatched for parameter $url (should be `string`)');
+        }
+        self::$_PHPCAS_CLIENT->setServerProxyValidateURL($url);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * Set the samlValidate URL of the CAS server.
+     *
+     * @param string $url the samlValidate URL
+     *
+     * @return void
+     */
+    public static function setServerSamlValidateURL($url = '')
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after' . __CLASS__ . '::client()');
+        }
+        if (gettype($url) != 'string') {
+            phpCAS :: error('type mismatched for parameter $url (should be`string\')');
+        }
+        self::$_PHPCAS_CLIENT->setServerSamlValidateURL($url);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * This method returns the URL to be used to login.
+     * or phpCAS::isAuthenticated().
+     *
+     * @return the login name of the authenticated user
+     */
+    public static function getServerLogoutURL()
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should not be called before ' . __CLASS__ . '::client() or ' . __CLASS__ . '::proxy()');
+        }
+        return self::$_PHPCAS_CLIENT->getServerLogoutURL();
+    }
+
+    /**
+     * Set the logout URL of the CAS server.
+     *
+     * @param string $url the logout URL
+     *
+     * @return void
+     * @since 0.4.21 by Wyman Chan
+     */
+    public static function setServerLogoutURL($url = '')
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error(
+                'this method should only be called after' . __CLASS__ . '::client()'
+            );
+        }
+        if (gettype($url) != 'string') {
+            phpCAS :: error(
+                'type mismatched for parameter $url (should be `string`)'
+            );
+        }
+        self::$_PHPCAS_CLIENT->setServerLogoutURL($url);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * This method is used to logout from CAS.
+     *
+     * @param string $params an array that contains the optional url and
+     * service parameters that will be passed to the CAS server
+     *
+     * @return void
+     */
+    public static function logout($params = "")
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+        }
+        $parsedParams = array ();
+        if ($params != "") {
+            if (is_string($params)) {
+                phpCAS :: error('method `phpCAS::logout($url)\' is now deprecated, use `phpCAS::logoutWithUrl($url)\' instead');
+            }
+            if (!is_array($params)) {
+                phpCAS :: error('type mismatched for parameter $params (should be `array\')');
+            }
+            foreach ($params as $key => $value) {
+                if ($key != "service" && $key != "url") {
+                    phpCAS :: error('only `url\' and `service\' parameters are allowed for method `phpCAS::logout($params)\'');
+                }
+                $parsedParams[$key] = $value;
+            }
+        }
+        self::$_PHPCAS_CLIENT->logout($parsedParams);
+        // never reached
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * This method is used to logout from CAS. Halts by redirecting to the CAS
+     * server.
+     *
+     * @param service $service a URL that will be transmitted to the CAS server
+     *
+     * @return void
+     */
+    public static function logoutWithRedirectService($service)
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+        }
+        if (!is_string($service)) {
+            phpCAS :: error('type mismatched for parameter $service (should be `string\')');
+        }
+        self::$_PHPCAS_CLIENT->logout(array ( "service" => $service ));
+        // never reached
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * This method is used to logout from CAS. Halts by redirecting to the CAS
+     * server.
+     *
+     * @param string $url a URL that will be transmitted to the CAS server
+     *
+     * @return void
+     * @deprecated The url parameter has been removed from the CAS server as of
+     * version 3.3.5.1
+     */
+    public static function logoutWithUrl($url)
+    {
+        trigger_error('Function deprecated for cas servers >= 3.3.5.1', E_USER_DEPRECATED);
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+        }
+        if (!is_string($url)) {
+            phpCAS :: error('type mismatched for parameter $url (should be `string\')');
+        }
+        self::$_PHPCAS_CLIENT->logout(array ( "url" => $url ));
+        // never reached
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * This method is used to logout from CAS. Halts by redirecting to the CAS
+     * server.
+     *
+     * @param string $service a URL that will be transmitted to the CAS server
+     * @param string $url     a URL that will be transmitted to the CAS server
+     *
+     * @return void
+     *
+     * @deprecated The url parameter has been removed from the CAS server as of
+     * version 3.3.5.1
+     */
+    public static function logoutWithRedirectServiceAndUrl($service, $url)
+    {
+        trigger_error('Function deprecated for cas servers >= 3.3.5.1', E_USER_DEPRECATED);
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+        }
+        if (!is_string($service)) {
+            phpCAS :: error('type mismatched for parameter $service (should be `string\')');
+        }
+        if (!is_string($url)) {
+            phpCAS :: error('type mismatched for parameter $url (should be `string\')');
+        }
+        self::$_PHPCAS_CLIENT->logout(
+            array (
+                "service" => $service,
+                "url" => $url
+            )
+        );
+        // never reached
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * Set the fixed URL that will be used by the CAS server to transmit the
+     * PGT. When this method is not called, a phpCAS script uses its own URL
+     * for the callback.
+     *
+     * @param string $url the URL
+     *
+     * @return void
+     */
+    public static function setFixedCallbackURL($url = '')
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (!self::$_PHPCAS_CLIENT->isProxy()) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (gettype($url) != 'string') {
+            phpCAS :: error('type mismatched for parameter $url (should be `string\')');
+        }
+        self::$_PHPCAS_CLIENT->setCallbackURL($url);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * Set the fixed URL that will be set as the CAS service parameter. When this
+     * method is not called, a phpCAS script uses its own URL.
+     *
+     * @param string $url the URL
+     *
+     * @return void
+     */
+    public static function setFixedServiceURL($url)
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (gettype($url) != 'string') {
+            phpCAS :: error('type mismatched for parameter $url (should be `string\')');
+        }
+        self::$_PHPCAS_CLIENT->setURL($url);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * Get the URL that is set as the CAS service parameter.
+     *
+     * @return string Service Url
+     */
+    public static function getServiceURL()
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        return (self::$_PHPCAS_CLIENT->getURL());
+    }
+
+    /**
+     * Retrieve a Proxy Ticket from the CAS server.
+     *
+     * @param string $target_service Url string of service to proxy
+     * @param string &$err_code      error code
+     * @param string &$err_msg       error message
+     *
+     * @return string Proxy Ticket
+     */
+    public static function retrievePT($target_service, & $err_code, & $err_msg)
+    {
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::proxy()');
+        }
+        if (gettype($target_service) != 'string') {
+            phpCAS :: error('type mismatched for parameter $target_service(should be `string\')');
+        }
+        return (self::$_PHPCAS_CLIENT->retrievePT($target_service, $err_code, $err_msg));
+    }
+
+    /**
+     * Set the certificate of the CAS server CA and if the CN should be properly
+     * verified.
+     *
+     * @param string $cert        CA certificate file name
+     * @param bool   $validate_cn Validate CN in certificate (default true)
+     *
+     * @return void
+     */
+    public static function setCasServerCACert($cert, $validate_cn = true)
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+        }
+        if (gettype($cert) != 'string') {
+            phpCAS :: error('type mismatched for parameter $cert (should be `string\')');
+        }
+        if (gettype($validate_cn) != 'boolean') {
+            phpCAS :: error('type mismatched for parameter $validate_cn (should be `boolean\')');
+        }
+        self::$_PHPCAS_CLIENT->setCasServerCACert($cert, $validate_cn);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * Set no SSL validation for the CAS server.
+     *
+     * @return void
+     */
+    public static function setNoCasServerValidation()
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+        }
+        phpCAS :: trace('You have configured no validation of the legitimacy of the cas server. This is not recommended for production use.');
+        self::$_PHPCAS_CLIENT->setNoCasServerValidation();
+        phpCAS :: traceEnd();
+    }
+
+
+    /**
+     * Disable the removal of a CAS-Ticket from the URL when authenticating
+     * DISABLING POSES A SECURITY RISK:
+     * We normally remove the ticket by an additional redirect as a security
+     * precaution to prevent a ticket in the HTTP_REFERRER or be carried over in
+     * the URL parameter
+     *
+     * @return void
+     */
+    public static function setNoClearTicketsFromUrl()
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+        }
+        self::$_PHPCAS_CLIENT->setNoClearTicketsFromUrl();
+        phpCAS :: traceEnd();
+    }
+
+    /** @} */
+
+    /**
+     * Change CURL options.
+     * CURL is used to connect through HTTPS to CAS server
+     *
+     * @param string $key   the option key
+     * @param string $value the value to set
+     *
+     * @return void
+     */
+    public static function setExtraCurlOption($key, $value)
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+        }
+        self::$_PHPCAS_CLIENT->setExtraCurlOption($key, $value);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * If you want your service to be proxied you have to enable it (default
+     * disabled) and define an accepable list of proxies that are allowed to
+     * proxy your service.
+     *
+     * Add each allowed proxy definition object. For the normal CAS_ProxyChain
+     * class, the constructor takes an array of proxies to match. The list is in
+     * reverse just as seen from the service. Proxies have to be defined in reverse
+     * from the service to the user. If a user hits service A and gets proxied via
+     * B to service C the list of acceptable on C would be array(B,A). The definition
+     * of an individual proxy can be either a string or a regexp (preg_match is used)
+     * that will be matched against the proxy list supplied by the cas server
+     * when validating the proxy tickets. The strings are compared starting from
+     * the beginning and must fully match with the proxies in the list.
+     * Example:
+     *      phpCAS::allowProxyChain(new CAS_ProxyChain(array(
+     *              'https://app.example.com/'
+     *          )));
+     *      phpCAS::allowProxyChain(new CAS_ProxyChain(array(
+     *              '/^https:\/\/app[0-9]\.example\.com\/rest\//',
+     *              'http://client.example.com/'
+     *          )));
+     *
+     * For quick testing or in certain production screnarios you might want to
+     * allow allow any other valid service to proxy your service. To do so, add
+     * the "Any" chain:
+     *      phpcas::allowProxyChain(new CAS_ProxyChain_Any);
+     * THIS SETTING IS HOWEVER NOT RECOMMENDED FOR PRODUCTION AND HAS SECURITY
+     * IMPLICATIONS: YOU ARE ALLOWING ANY SERVICE TO ACT ON BEHALF OF A USER
+     * ON THIS SERVICE.
+     *
+     * @param CAS_ProxyChain_Interface $proxy_chain A proxy-chain that will be
+     * matched against the proxies requesting access
+     *
+     * @return void
+     */
+    public static function allowProxyChain(CAS_ProxyChain_Interface $proxy_chain)
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+        }
+        if (self::$_PHPCAS_CLIENT->getServerVersion() !== CAS_VERSION_2_0) {
+            phpCAS :: error('this method can only be used with the cas 2.0 protool');
+        }
+        self::$_PHPCAS_CLIENT->getAllowedProxyChains()->allowProxyChain($proxy_chain);
+        phpCAS :: traceEnd();
+    }
+
+    /**
+     * Answer an array of proxies that are sitting in front of this application.
+     * This method will only return a non-empty array if we have received and
+     * validated a Proxy Ticket.
+     *
+     * @return array
+     * @access public
+     * @since 6/25/09
+     */
+    public static function getProxies ()
+    {
+        if ( !is_object(self::$_PHPCAS_CLIENT) ) {
+            phpCAS::error('this method should only be called after '.__CLASS__.'::client()');
+        }
+
+        return(self::$_PHPCAS_CLIENT->getProxies());
+    }
+
+    // ########################################################################
+    // PGTIOU/PGTID and logoutRequest rebroadcasting
+    // ########################################################################
+
+    /**
+     * Add a pgtIou/pgtId and logoutRequest rebroadcast node.
+     *
+     * @param string $rebroadcastNodeUrl The rebroadcast node URL. Can be
+     * hostname or IP.
+     *
+     * @return void
+     */
+    public static function addRebroadcastNode($rebroadcastNodeUrl)
+    {
+        phpCAS::traceBegin();
+        phpCAS::log('rebroadcastNodeUrl:'.$rebroadcastNodeUrl);
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+        }
+        if ( !(bool)preg_match("/^(http|https):\/\/([A-Z0-9][A-Z0-9_-]*(?:\.[A-Z0-9][A-Z0-9_-]*)+):?(\d+)?\/?/i", $rebroadcastNodeUrl)) {
+            phpCAS::error('type mismatched for parameter $rebroadcastNodeUrl (should be `url\')');
+        }
+        self::$_PHPCAS_CLIENT->addRebroadcastNode($rebroadcastNodeUrl);
+        phpCAS::traceEnd();
+    }
+
+    /**
+     * This method is used to add header parameters when rebroadcasting
+     * pgtIou/pgtId or logoutRequest.
+     *
+     * @param String $header Header to send when rebroadcasting.
+     *
+     * @return void
+     */
+    public static function addRebroadcastHeader($header)
+    {
+        phpCAS :: traceBegin();
+        if (!is_object(self::$_PHPCAS_CLIENT)) {
+            phpCAS :: error('this method should only be called after ' . __CLASS__ . '::client() or' . __CLASS__ . '::proxy()');
+        }
+        self::$_PHPCAS_CLIENT->addRebroadcastHeader($header);
+        phpCAS :: traceEnd();
+    }
+}
+
+// ########################################################################
+// DOCUMENTATION
+// ########################################################################
+
+// ########################################################################
+//  MAIN PAGE
+
+/**
+ * @mainpage
+ *
+ * The following pages only show the source documentation.
+ *
+ */
+
+// ########################################################################
+//  MODULES DEFINITION
+
+/** @defgroup public User interface */
+
+/** @defgroup publicInit Initialization
+ *  @ingroup public */
+
+/** @defgroup publicAuth Authentication
+ *  @ingroup public */
+
+/** @defgroup publicServices Access to external services
+ *  @ingroup public */
+
+/** @defgroup publicConfig Configuration
+ *  @ingroup public */
+
+/** @defgroup publicLang Internationalization
+ *  @ingroup publicConfig */
+
+/** @defgroup publicOutput HTML output
+ *  @ingroup publicConfig */
+
+/** @defgroup publicPGTStorage PGT storage
+ *  @ingroup publicConfig */
+
+/** @defgroup publicDebug Debugging
+ *  @ingroup public */
+
+/** @defgroup internal Implementation */
+
+/** @defgroup internalAuthentication Authentication
+ *  @ingroup internal */
+
+/** @defgroup internalBasic CAS Basic client features (CAS 1.0, Service Tickets)
+ *  @ingroup internal */
+
+/** @defgroup internalProxy CAS Proxy features (CAS 2.0, Proxy Granting Tickets)
+ *  @ingroup internal */
+
+/** @defgroup internalSAML CAS SAML features (SAML 1.1)
+ *  @ingroup internal */
+
+/** @defgroup internalPGTStorage PGT storage
+ *  @ingroup internalProxy */
+
+/** @defgroup internalPGTStorageDb PGT storage in a database
+ *  @ingroup internalPGTStorage */
+
+/** @defgroup internalPGTStorageFile PGT storage on the filesystem
+ *  @ingroup internalPGTStorage */
+
+/** @defgroup internalCallback Callback from the CAS server
+ *  @ingroup internalProxy */
+
+/** @defgroup internalProxyServices Proxy other services
+ *  @ingroup internalProxy */
+
+/** @defgroup internalService CAS client features (CAS 2.0, Proxied service)
+ *  @ingroup internal */
+
+/** @defgroup internalConfig Configuration
+ *  @ingroup internal */
+
+/** @defgroup internalBehave Internal behaviour of phpCAS
+ *  @ingroup internalConfig */
+
+/** @defgroup internalOutput HTML output
+ *  @ingroup internalConfig */
+
+/** @defgroup internalLang Internationalization
+ *  @ingroup internalConfig
+ *
+ * To add a new language:
+ * - 1. define a new constant PHPCAS_LANG_XXXXXX in CAS/CAS.php
+ * - 2. copy any file from CAS/languages to CAS/languages/XXXXXX.php
+ * - 3. Make the translations
+ */
+
+/** @defgroup internalDebug Debugging
+ *  @ingroup internal */
+
+/** @defgroup internalMisc Miscellaneous
+ *  @ingroup internal */
+
+// ########################################################################
+//  EXAMPLES
+
+/**
+ * @example example_simple.php
+ */
+/**
+ * @example example_service.php
+ */
+/**
+ * @example example_service_that_proxies.php
+ */
+/**
+ * @example example_service_POST.php
+ */
+/**
+ * @example example_proxy_serviceWeb.php
+ */
+/**
+ * @example example_proxy_serviceWeb_chaining.php
+ */
+/**
+ * @example example_proxy_POST.php
+ */
+/**
+ * @example example_proxy_GET.php
+ */
+/**
+ * @example example_lang.php
+ */
+/**
+ * @example example_html.php
+ */
+/**
+ * @example example_pgt_storage_file.php
+ */
+/**
+ * @example example_pgt_storage_db.php
+ */
+/**
+ * @example example_gateway.php
+ */
+/**
+ * @example example_logout.php
+ */
+/**
+ * @example example_rebroadcast.php
+ */
+/**
+ * @example example_custom_urls.php
+ */
+/**
+ * @example example_advanced_saml11.php
+ */
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/AuthenticationException.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/AuthenticationException.php
new file mode 100644
index 0000000..801156e
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/AuthenticationException.php
@@ -0,0 +1,107 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/AuthenticationException.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Joachim Fritschi <jfritschi@freenet.de>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines methods that allow proxy-authenticated service handlers
+ * to interact with phpCAS.
+ *
+ * Proxy service handlers must implement this interface as well as call
+ * phpCAS::initializeProxiedService($this) at some point in their implementation.
+ *
+ * While not required, proxy-authenticated service handlers are encouraged to
+ * implement the CAS_ProxiedService_Testable interface to facilitate unit testing.
+ *
+ * @class    CAS_AuthenticationException
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Joachim Fritschi <jfritschi@freenet.de>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class CAS_AuthenticationException
+extends RuntimeException
+implements CAS_Exception
+{
+
+    /**
+     * This method is used to print the HTML output when the user was not
+     * authenticated.
+     *
+     * @param CAS_Client $client       phpcas client
+     * @param string     $failure      the failure that occured
+     * @param string     $cas_url      the URL the CAS server was asked for
+     * @param bool       $no_response  the response from the CAS server (other
+     * parameters are ignored if TRUE)
+     * @param bool       $bad_response bad response from the CAS server ($err_code
+     * and $err_msg ignored if TRUE)
+     * @param string     $cas_response the response of the CAS server
+     * @param int        $err_code     the error code given by the CAS server
+     * @param string     $err_msg      the error message given by the CAS server
+     */
+    public function __construct($client,$failure,$cas_url,$no_response,
+        $bad_response='',$cas_response='',$err_code='',$err_msg=''
+    ) {
+        phpCAS::traceBegin();
+        $lang = $client->getLangObj();
+        $client->printHTMLHeader($lang->getAuthenticationFailed());
+        printf(
+            $lang->getYouWereNotAuthenticated(),
+            htmlentities($client->getURL()),
+            $_SERVER['SERVER_ADMIN']
+        );
+        phpCAS::trace('CAS URL: '.$cas_url);
+        phpCAS::trace('Authentication failure: '.$failure);
+        if ( $no_response ) {
+            phpCAS::trace('Reason: no response from the CAS server');
+        } else {
+            if ( $bad_response ) {
+                phpCAS::trace('Reason: bad response from the CAS server');
+            } else {
+                switch ($client->getServerVersion()) {
+                case CAS_VERSION_1_0:
+                    phpCAS::trace('Reason: CAS error');
+                    break;
+                case CAS_VERSION_2_0:
+                    if ( empty($err_code) ) {
+                        phpCAS::trace('Reason: no CAS error');
+                    } else {
+                        phpCAS::trace('Reason: ['.$err_code.'] CAS error: '.$err_msg);
+                    }
+                    break;
+                }
+            }
+            phpCAS::trace('CAS response: '.$cas_response);
+        }
+        $client->printHTMLFooter();
+        phpCAS::traceExit();
+    }
+
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Autoload.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Autoload.php
new file mode 100644
index 0000000..c7d436e
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Autoload.php
@@ -0,0 +1,97 @@
+<?php
+
+/**
+ * Autoloader Class
+ *
+ *  PHP Version 5
+ *
+ * @file      CAS/Autoload.php
+ * @category  Authentication
+ * @package   SimpleCAS
+ * @author    Brett Bieber <brett.bieber@gmail.com>
+ * @copyright 2008 Regents of the University of Nebraska
+ * @license   http://www1.unl.edu/wdn/wiki/Software_License BSD License
+ * @link      http://code.google.com/p/simplecas/
+ **/
+
+/**
+ * Autoload a class
+ *
+ * @param string $class Classname to load
+ *
+ * @return bool
+ */
+function CAS_autoload($class)
+{
+    // Static to hold the Include Path to CAS
+    static $include_path;
+    // Setup the include path if it's not already set from a previous call
+    if (!$include_path) {
+        $include_path = dirname(dirname(__FILE__));
+    }
+    if (substr($class, 0, 4) !== 'CAS_') {
+        return false;
+    }
+    // Declare local variable to store the expected full path to the file
+    $file_path = $include_path . '/' . str_replace('_', '/', $class) . '.php';
+
+    $fp = @fopen($file_path, 'r', true);
+    if ($fp) {
+        fclose($fp);
+        include $file_path;
+        if (!class_exists($class, false) && !interface_exists($class, false)) {
+            die(
+                new Exception(
+                    'Class ' . $class . ' was not present in ' .
+                    $file_path .
+                    ' [CAS_autoload]'
+                )
+            );
+        }
+        return true;
+    }
+    $e = new Exception(
+        'Class ' . $class . ' could not be loaded from ' .
+        $file_path . ', file does not exist (Path="'
+        . $include_path .'") [CAS_autoload]'
+    );
+    $trace = $e->getTrace();
+    if (isset($trace[2]) && isset($trace[2]['function'])
+        && in_array($trace[2]['function'], array('class_exists', 'interface_exists'))
+    ) {
+        return false;
+    }
+    if (isset($trace[1]) && isset($trace[1]['function'])
+        && in_array($trace[1]['function'], array('class_exists', 'interface_exists'))
+    ) {
+        return false;
+    }
+    die ((string) $e);
+}
+
+// set up __autoload
+if (function_exists('spl_autoload_register')) {
+    if (!(spl_autoload_functions()) || !in_array('CAS_autoload', spl_autoload_functions())) {
+        spl_autoload_register('CAS_autoload');
+        if (function_exists('__autoload') && !in_array('__autoload', spl_autoload_functions())) {
+            // __autoload() was being used, but now would be ignored, add
+            // it to the autoload stack
+            spl_autoload_register('__autoload');
+        }
+    }
+} elseif (!function_exists('__autoload')) {
+
+    /**
+     * Autoload a class
+     *
+     * @param string $class Class name
+     *
+     * @return bool
+     */
+    function __autoload($class)
+    {
+        return CAS_autoload($class);
+    }
+}
+
+?>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Client.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Client.php
new file mode 100755
index 0000000..e645e23
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Client.php
@@ -0,0 +1,3403 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Client.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @author   Olivier Berger <olivier.berger@it-sudparis.eu>
+ * @author   Brett Bieber <brett.bieber@gmail.com>
+ * @author   Joachim Fritschi <jfritschi@freenet.de>
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * The CAS_Client class is a client interface that provides CAS authentication
+ * to PHP applications.
+ *
+ * @class    CAS_Client
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @author   Olivier Berger <olivier.berger@it-sudparis.eu>
+ * @author   Brett Bieber <brett.bieber@gmail.com>
+ * @author   Joachim Fritschi <jfritschi@freenet.de>
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ */
+
+class CAS_Client
+{
+
+    // ########################################################################
+    //  HTML OUTPUT
+    // ########################################################################
+    /**
+    * @addtogroup internalOutput
+    * @{
+    */
+
+    /**
+     * This method filters a string by replacing special tokens by appropriate values
+     * and prints it. The corresponding tokens are taken into account:
+     * - __CAS_VERSION__
+     * - __PHPCAS_VERSION__
+     * - __SERVER_BASE_URL__
+     *
+     * Used by CAS_Client::PrintHTMLHeader() and CAS_Client::printHTMLFooter().
+     *
+     * @param string $str the string to filter and output
+     *
+     * @return void
+     */
+    private function _htmlFilterOutput($str)
+    {
+        $str = str_replace('__CAS_VERSION__', $this->getServerVersion(), $str);
+        $str = str_replace('__PHPCAS_VERSION__', phpCAS::getVersion(), $str);
+        $str = str_replace('__SERVER_BASE_URL__', $this->_getServerBaseURL(), $str);
+        echo $str;
+    }
+
+    /**
+     * A string used to print the header of HTML pages. Written by
+     * CAS_Client::setHTMLHeader(), read by CAS_Client::printHTMLHeader().
+     *
+     * @hideinitializer
+     * @see CAS_Client::setHTMLHeader, CAS_Client::printHTMLHeader()
+     */
+    private $_output_header = '';
+
+    /**
+     * This method prints the header of the HTML output (after filtering). If
+     * CAS_Client::setHTMLHeader() was not used, a default header is output.
+     *
+     * @param string $title the title of the page
+     *
+     * @return void
+     * @see _htmlFilterOutput()
+     */
+    public function printHTMLHeader($title)
+    {
+        $this->_htmlFilterOutput(
+            str_replace(
+                '__TITLE__', $title,
+                (empty($this->_output_header)
+                ? '<html><head><title>__TITLE__</title></head><body><h1>__TITLE__</h1>'
+                : $this->_output_header)
+            )
+        );
+    }
+
+    /**
+     * A string used to print the footer of HTML pages. Written by
+     * CAS_Client::setHTMLFooter(), read by printHTMLFooter().
+     *
+     * @hideinitializer
+     * @see CAS_Client::setHTMLFooter, CAS_Client::printHTMLFooter()
+     */
+    private $_output_footer = '';
+
+    /**
+     * This method prints the footer of the HTML output (after filtering). If
+     * CAS_Client::setHTMLFooter() was not used, a default footer is output.
+     *
+     * @return void
+     * @see _htmlFilterOutput()
+     */
+    public function printHTMLFooter()
+    {
+        $lang = $this->getLangObj();
+        $this->_htmlFilterOutput(
+            empty($this->_output_footer)?
+            ('<hr><address>phpCAS __PHPCAS_VERSION__ '
+            .$lang->getUsingServer()
+            .' <a href="__SERVER_BASE_URL__">__SERVER_BASE_URL__</a> (CAS __CAS_VERSION__)</a></address></body></html>')
+            :$this->_output_footer
+        );
+    }
+
+    /**
+     * This method set the HTML header used for all outputs.
+     *
+     * @param string $header the HTML header.
+     *
+     * @return void
+     */
+    public function setHTMLHeader($header)
+    {
+        $this->_output_header = $header;
+    }
+
+    /**
+     * This method set the HTML footer used for all outputs.
+     *
+     * @param string $footer the HTML footer.
+     *
+     * @return void
+     */
+    public function setHTMLFooter($footer)
+    {
+        $this->_output_footer = $footer;
+    }
+
+
+    /** @} */
+
+
+    // ########################################################################
+    //  INTERNATIONALIZATION
+    // ########################################################################
+    /**
+    * @addtogroup internalLang
+    * @{
+    */
+    /**
+     * A string corresponding to the language used by phpCAS. Written by
+     * CAS_Client::setLang(), read by CAS_Client::getLang().
+
+     * @note debugging information is always in english (debug purposes only).
+     */
+    private $_lang = PHPCAS_LANG_DEFAULT;
+
+    /**
+     * This method is used to set the language used by phpCAS.
+     *
+     * @param string $lang representing the language.
+     *
+     * @return void
+     */
+    public function setLang($lang)
+    {
+        phpCAS::traceBegin();
+        $obj = new $lang();
+        if (!($obj instanceof CAS_Languages_LanguageInterface)) {
+            throw new CAS_InvalidArgumentException('$className must implement the CAS_Languages_LanguageInterface');
+        }
+        $this->_lang = $lang;
+        phpCAS::traceEnd();
+    }
+    /**
+     * Create the language
+     *
+     * @return CAS_Languages_LanguageInterface object implementing the class
+     */
+    public function getLangObj()
+    {
+        $classname = $this->_lang;
+        return new $classname();
+    }
+
+    /** @} */
+    // ########################################################################
+    //  CAS SERVER CONFIG
+    // ########################################################################
+    /**
+    * @addtogroup internalConfig
+    * @{
+    */
+
+    /**
+     * a record to store information about the CAS server.
+     * - $_server['version']: the version of the CAS server
+     * - $_server['hostname']: the hostname of the CAS server
+     * - $_server['port']: the port the CAS server is running on
+     * - $_server['uri']: the base URI the CAS server is responding on
+     * - $_server['base_url']: the base URL of the CAS server
+     * - $_server['login_url']: the login URL of the CAS server
+     * - $_server['service_validate_url']: the service validating URL of the
+     *   CAS server
+     * - $_server['proxy_url']: the proxy URL of the CAS server
+     * - $_server['proxy_validate_url']: the proxy validating URL of the CAS server
+     * - $_server['logout_url']: the logout URL of the CAS server
+     *
+     * $_server['version'], $_server['hostname'], $_server['port'] and
+     * $_server['uri'] are written by CAS_Client::CAS_Client(), read by
+     * CAS_Client::getServerVersion(), CAS_Client::_getServerHostname(),
+     * CAS_Client::_getServerPort() and CAS_Client::_getServerURI().
+     *
+     * The other fields are written and read by CAS_Client::_getServerBaseURL(),
+     * CAS_Client::getServerLoginURL(), CAS_Client::getServerServiceValidateURL(),
+     * CAS_Client::getServerProxyValidateURL() and CAS_Client::getServerLogoutURL().
+     *
+     * @hideinitializer
+     */
+    private $_server = array(
+        'version' => -1,
+        'hostname' => 'none',
+        'port' => -1,
+        'uri' => 'none');
+
+    /**
+     * This method is used to retrieve the version of the CAS server.
+     *
+     * @return string the version of the CAS server.
+     */
+    public function getServerVersion()
+    {
+        return $this->_server['version'];
+    }
+
+    /**
+     * This method is used to retrieve the hostname of the CAS server.
+     *
+     * @return string the hostname of the CAS server.
+     */
+    private function _getServerHostname()
+    {
+        return $this->_server['hostname'];
+    }
+
+    /**
+     * This method is used to retrieve the port of the CAS server.
+     *
+     * @return string the port of the CAS server.
+     */
+    private function _getServerPort()
+    {
+        return $this->_server['port'];
+    }
+
+    /**
+     * This method is used to retrieve the URI of the CAS server.
+     *
+     * @return string a URI.
+     */
+    private function _getServerURI()
+    {
+        return $this->_server['uri'];
+    }
+
+    /**
+     * This method is used to retrieve the base URL of the CAS server.
+     *
+     * @return string a URL.
+     */
+    private function _getServerBaseURL()
+    {
+        // the URL is build only when needed
+        if ( empty($this->_server['base_url']) ) {
+            $this->_server['base_url'] = 'https://' . $this->_getServerHostname();
+            if ($this->_getServerPort()!=443) {
+                $this->_server['base_url'] .= ':'
+                .$this->_getServerPort();
+            }
+            $this->_server['base_url'] .= $this->_getServerURI();
+        }
+        return $this->_server['base_url'];
+    }
+
+    /**
+     * This method is used to retrieve the login URL of the CAS server.
+     *
+     * @param bool $gateway true to check authentication, false to force it
+     * @param bool $renew   true to force the authentication with the CAS server
+     *
+     * @return a URL.
+     * @note It is recommended that CAS implementations ignore the "gateway"
+     * parameter if "renew" is set
+     */
+    public function getServerLoginURL($gateway=false,$renew=false)
+    {
+        phpCAS::traceBegin();
+        // the URL is build only when needed
+        if ( empty($this->_server['login_url']) ) {
+            $this->_server['login_url'] = $this->_getServerBaseURL();
+            $this->_server['login_url'] .= 'login?service=';
+            $this->_server['login_url'] .= urlencode($this->getURL());
+        }
+        $url = $this->_server['login_url'];
+        if ($renew) {
+            // It is recommended that when the "renew" parameter is set, its
+            // value be "true"
+            $url = $this->_buildQueryUrl($url, 'renew=true');
+        } elseif ($gateway) {
+            // It is recommended that when the "gateway" parameter is set, its
+            // value be "true"
+            $url = $this->_buildQueryUrl($url, 'gateway=true');
+        }
+        phpCAS::traceEnd($url);
+        return $url;
+    }
+
+    /**
+     * This method sets the login URL of the CAS server.
+     *
+     * @param string $url the login URL
+     *
+     * @return string login url
+     */
+    public function setServerLoginURL($url)
+    {
+        return $this->_server['login_url'] = $url;
+    }
+
+
+    /**
+     * This method sets the serviceValidate URL of the CAS server.
+     *
+     * @param string $url the serviceValidate URL
+     *
+     * @return string serviceValidate URL
+     */
+    public function setServerServiceValidateURL($url)
+    {
+        return $this->_server['service_validate_url'] = $url;
+    }
+
+
+    /**
+     * This method sets the proxyValidate URL of the CAS server.
+     *
+     * @param string $url the proxyValidate URL
+     *
+     * @return string proxyValidate URL
+     */
+    public function setServerProxyValidateURL($url)
+    {
+        return $this->_server['proxy_validate_url'] = $url;
+    }
+
+
+    /**
+     * This method sets the samlValidate URL of the CAS server.
+     *
+     * @param string $url the samlValidate URL
+     *
+     * @return string samlValidate URL
+     */
+    public function setServerSamlValidateURL($url)
+    {
+        return $this->_server['saml_validate_url'] = $url;
+    }
+
+
+    /**
+     * This method is used to retrieve the service validating URL of the CAS server.
+     *
+     * @return string serviceValidate URL.
+     */
+    public function getServerServiceValidateURL()
+    {
+        phpCAS::traceBegin();
+        // the URL is build only when needed
+        if ( empty($this->_server['service_validate_url']) ) {
+            switch ($this->getServerVersion()) {
+            case CAS_VERSION_1_0:
+                $this->_server['service_validate_url'] = $this->_getServerBaseURL()
+                .'validate';
+                break;
+            case CAS_VERSION_2_0:
+                $this->_server['service_validate_url'] = $this->_getServerBaseURL()
+                .'serviceValidate';
+                break;
+            }
+        }
+        $url = $this->_buildQueryUrl($this->_server['service_validate_url'], 'service='.urlencode($this->getURL()));
+        phpCAS::traceEnd($url);
+        return $url;
+    }
+    /**
+     * This method is used to retrieve the SAML validating URL of the CAS server.
+     *
+     * @return string samlValidate URL.
+     */
+    public function getServerSamlValidateURL()
+    {
+        phpCAS::traceBegin();
+        // the URL is build only when needed
+        if ( empty($this->_server['saml_validate_url']) ) {
+            switch ($this->getServerVersion()) {
+            case SAML_VERSION_1_1:
+                $this->_server['saml_validate_url'] = $this->_getServerBaseURL().'samlValidate';
+                break;
+            }
+        }
+
+        $url = $this->_buildQueryUrl($this->_server['saml_validate_url'], 'TARGET='.urlencode($this->getURL()));
+        phpCAS::traceEnd($url);
+        return $url;
+    }
+
+    /**
+     * This method is used to retrieve the proxy validating URL of the CAS server.
+     *
+     * @return string proxyValidate URL.
+     */
+    public function getServerProxyValidateURL()
+    {
+        phpCAS::traceBegin();
+        // the URL is build only when needed
+        if ( empty($this->_server['proxy_validate_url']) ) {
+            switch ($this->getServerVersion()) {
+            case CAS_VERSION_1_0:
+                $this->_server['proxy_validate_url'] = '';
+                break;
+            case CAS_VERSION_2_0:
+                $this->_server['proxy_validate_url'] = $this->_getServerBaseURL().'proxyValidate';
+                break;
+            }
+        }
+        $url = $this->_buildQueryUrl($this->_server['proxy_validate_url'], 'service='.urlencode($this->getURL()));
+        phpCAS::traceEnd($url);
+        return $url;
+    }
+
+
+    /**
+     * This method is used to retrieve the proxy URL of the CAS server.
+     *
+     * @return  string proxy URL.
+     */
+    public function getServerProxyURL()
+    {
+        // the URL is build only when needed
+        if ( empty($this->_server['proxy_url']) ) {
+            switch ($this->getServerVersion()) {
+            case CAS_VERSION_1_0:
+                $this->_server['proxy_url'] = '';
+                break;
+            case CAS_VERSION_2_0:
+                $this->_server['proxy_url'] = $this->_getServerBaseURL().'proxy';
+                break;
+            }
+        }
+        return $this->_server['proxy_url'];
+    }
+
+    /**
+     * This method is used to retrieve the logout URL of the CAS server.
+     *
+     * @return string logout URL.
+     */
+    public function getServerLogoutURL()
+    {
+        // the URL is build only when needed
+        if ( empty($this->_server['logout_url']) ) {
+            $this->_server['logout_url'] = $this->_getServerBaseURL().'logout';
+        }
+        return $this->_server['logout_url'];
+    }
+
+    /**
+     * This method sets the logout URL of the CAS server.
+     *
+     * @param string $url the logout URL
+     *
+     * @return string logout url
+     */
+    public function setServerLogoutURL($url)
+    {
+        return $this->_server['logout_url'] = $url;
+    }
+
+    /**
+     * An array to store extra curl options.
+     */
+    private $_curl_options = array();
+
+    /**
+     * This method is used to set additional user curl options.
+     *
+     * @param string $key   name of the curl option
+     * @param string $value value of the curl option
+     *
+     * @return void
+     */
+    public function setExtraCurlOption($key, $value)
+    {
+        $this->_curl_options[$key] = $value;
+    }
+
+    /** @} */
+
+    // ########################################################################
+    //  Change the internal behaviour of phpcas
+    // ########################################################################
+
+    /**
+     * @addtogroup internalBehave
+     * @{
+     */
+
+    /**
+     * The class to instantiate for making web requests in readUrl().
+     * The class specified must implement the CAS_Request_RequestInterface.
+     * By default CAS_Request_CurlRequest is used, but this may be overridden to
+     * supply alternate request mechanisms for testing.
+     */
+    private $_requestImplementation = 'CAS_Request_CurlRequest';
+
+    /**
+     * Override the default implementation used to make web requests in readUrl().
+     * This class must implement the CAS_Request_RequestInterface.
+     *
+     * @param string $className name of the RequestImplementation class
+     *
+     * @return void
+     */
+    public function setRequestImplementation ($className)
+    {
+        $obj = new $className;
+        if (!($obj instanceof CAS_Request_RequestInterface)) {
+            throw new CAS_InvalidArgumentException('$className must implement the CAS_Request_RequestInterface');
+        }
+        $this->_requestImplementation = $className;
+    }
+
+    /**
+     * @var boolean $_clearTicketsFromUrl; If true, phpCAS will clear session
+     * tickets from the URL after a successful authentication.
+     */
+    private $_clearTicketsFromUrl = true;
+
+    /**
+     * Configure the client to not send redirect headers and call exit() on
+     * authentication success. The normal redirect is used to remove the service
+     * ticket from the client's URL, but for running unit tests we need to
+     * continue without exiting.
+     *
+     * Needed for testing authentication
+     *
+     * @return void
+     */
+    public function setNoClearTicketsFromUrl ()
+    {
+        $this->_clearTicketsFromUrl = false;
+    }
+
+    /**
+     * @var callback $_postAuthenticateCallbackFunction;
+     */
+    private $_postAuthenticateCallbackFunction = null;
+
+    /**
+     * @var array $_postAuthenticateCallbackArgs;
+     */
+    private $_postAuthenticateCallbackArgs = array();
+
+    /**
+     * Set a callback function to be run when a user authenticates.
+     *
+     * The callback function will be passed a $logoutTicket as its first parameter,
+     * followed by any $additionalArgs you pass. The $logoutTicket parameter is an
+     * opaque string that can be used to map a session-id to the logout request
+     * in order to support single-signout in applications that manage their own
+     * sessions (rather than letting phpCAS start the session).
+     *
+     * phpCAS::forceAuthentication() will always exit and forward client unless
+     * they are already authenticated. To perform an action at the moment the user
+     * logs in (such as registering an account, performing logging, etc), register
+     * a callback function here.
+     *
+     * @param string $function       callback function to call
+     * @param array  $additionalArgs optional array of arguments
+     *
+     * @return void
+     */
+    public function setPostAuthenticateCallback ($function, array $additionalArgs = array())
+    {
+        $this->_postAuthenticateCallbackFunction = $function;
+        $this->_postAuthenticateCallbackArgs = $additionalArgs;
+    }
+
+    /**
+     * @var callback $_signoutCallbackFunction;
+     */
+    private $_signoutCallbackFunction = null;
+
+    /**
+     * @var array $_signoutCallbackArgs;
+     */
+    private $_signoutCallbackArgs = array();
+
+    /**
+     * Set a callback function to be run when a single-signout request is received.
+     *
+     * The callback function will be passed a $logoutTicket as its first parameter,
+     * followed by any $additionalArgs you pass. The $logoutTicket parameter is an
+     * opaque string that can be used to map a session-id to the logout request in
+     * order to support single-signout in applications that manage their own sessions
+     * (rather than letting phpCAS start and destroy the session).
+     *
+     * @param string $function       callback function to call
+     * @param array  $additionalArgs optional array of arguments
+     *
+     * @return void
+     */
+    public function setSingleSignoutCallback ($function, array $additionalArgs = array())
+    {
+        $this->_signoutCallbackFunction = $function;
+        $this->_signoutCallbackArgs = $additionalArgs;
+    }
+
+    // ########################################################################
+    //  Methods for supplying code-flow feedback to integrators.
+    // ########################################################################
+
+    /**
+     * Mark the caller of authentication. This will help client integraters determine
+     * problems with their code flow if they call a function such as getUser() before
+     * authentication has occurred.
+     *
+     * @param bool $auth True if authentication was successful, false otherwise.
+     *
+     * @return null
+     */
+    public function markAuthenticationCall ($auth)
+    {
+        // store where the authentication has been checked and the result
+        $dbg = debug_backtrace();
+        $this->_authentication_caller = array (
+            'file' => $dbg[1]['file'],
+            'line' => $dbg[1]['line'],
+            'method' => $dbg[1]['class'] . '::' . $dbg[1]['function'],
+            'result' => (boolean)$auth
+        );
+    }
+    private $_authentication_caller;
+
+    /**
+     * Answer true if authentication has been checked.
+     *
+     * @return bool
+     */
+    public function wasAuthenticationCalled ()
+    {
+        return !empty($this->_authentication_caller);
+    }
+
+    /**
+     * Answer the result of the authentication call.
+     *
+     * Throws a CAS_OutOfSequenceException if wasAuthenticationCalled() is false
+     * and markAuthenticationCall() didn't happen.
+     *
+     * @return bool
+     */
+    public function wasAuthenticationCallSuccessful ()
+    {
+        if (empty($this->_authentication_caller)) {
+            throw new CAS_OutOfSequenceException('markAuthenticationCall() hasn\'t happened.');
+        }
+        return $this->_authentication_caller['result'];
+    }
+
+    /**
+     * Answer information about the authentication caller.
+     *
+     * Throws a CAS_OutOfSequenceException if wasAuthenticationCalled() is false
+     * and markAuthenticationCall() didn't happen.
+     *
+     * @return array Keys are 'file', 'line', and 'method'
+     */
+    public function getAuthenticationCallerFile ()
+    {
+        if (empty($this->_authentication_caller)) {
+            throw new CAS_OutOfSequenceException('markAuthenticationCall() hasn\'t happened.');
+        }
+        return $this->_authentication_caller['file'];
+    }
+
+    /**
+     * Answer information about the authentication caller.
+     *
+     * Throws a CAS_OutOfSequenceException if wasAuthenticationCalled() is false
+     * and markAuthenticationCall() didn't happen.
+     *
+     * @return array Keys are 'file', 'line', and 'method'
+     */
+    public function getAuthenticationCallerLine ()
+    {
+        if (empty($this->_authentication_caller)) {
+            throw new CAS_OutOfSequenceException('markAuthenticationCall() hasn\'t happened.');
+        }
+        return $this->_authentication_caller['line'];
+    }
+
+    /**
+     * Answer information about the authentication caller.
+     *
+     * Throws a CAS_OutOfSequenceException if wasAuthenticationCalled() is false
+     * and markAuthenticationCall() didn't happen.
+     *
+     * @return array Keys are 'file', 'line', and 'method'
+     */
+    public function getAuthenticationCallerMethod ()
+    {
+        if (empty($this->_authentication_caller)) {
+            throw new CAS_OutOfSequenceException('markAuthenticationCall() hasn\'t happened.');
+        }
+        return $this->_authentication_caller['method'];
+    }
+
+    /** @} */
+
+    // ########################################################################
+    //  CONSTRUCTOR
+    // ########################################################################
+    /**
+    * @addtogroup internalConfig
+    * @{
+    */
+
+    /**
+     * CAS_Client constructor.
+     *
+     * @param string $server_version  the version of the CAS server
+     * @param bool   $proxy           true if the CAS client is a CAS proxy
+     * @param string $server_hostname the hostname of the CAS server
+     * @param int    $server_port     the port the CAS server is running on
+     * @param string $server_uri      the URI the CAS server is responding on
+     * @param bool   $changeSessionID Allow phpCAS to change the session_id (Single Sign Out/handleLogoutRequests is based on that change)
+     *
+     * @return a newly created CAS_Client object
+     */
+    public function __construct(
+        $server_version,
+        $proxy,
+        $server_hostname,
+        $server_port,
+        $server_uri,
+        $changeSessionID = true
+    ) {
+
+        phpCAS::traceBegin();
+
+        $this->_setChangeSessionID($changeSessionID); // true : allow to change the session_id(), false session_id won't be change and logout won't be handle because of that
+
+        // skip Session Handling for logout requests and if don't want it'
+        if (session_id()=="" && !$this->_isLogoutRequest()) {
+            phpCAS :: trace("Starting a new session");
+            session_start();
+        }
+
+        // are we in proxy mode ?
+        $this->_proxy = $proxy;
+
+        // Make cookie handling available.
+        if ($this->isProxy()) {
+            if (!isset($_SESSION['phpCAS'])) {
+                $_SESSION['phpCAS'] = array();
+            }
+            if (!isset($_SESSION['phpCAS']['service_cookies'])) {
+                $_SESSION['phpCAS']['service_cookies'] = array();
+            }
+            $this->_serviceCookieJar = new CAS_CookieJar($_SESSION['phpCAS']['service_cookies']);
+        }
+
+        //check version
+        switch ($server_version) {
+        case CAS_VERSION_1_0:
+            if ( $this->isProxy() ) {
+                phpCAS::error(
+                    'CAS proxies are not supported in CAS '.$server_version
+                );
+            }
+            break;
+        case CAS_VERSION_2_0:
+            break;
+        case SAML_VERSION_1_1:
+            break;
+        default:
+            phpCAS::error(
+                'this version of CAS (`'.$server_version
+                .'\') is not supported by phpCAS '.phpCAS::getVersion()
+            );
+        }
+        $this->_server['version'] = $server_version;
+
+        // check hostname
+        if ( empty($server_hostname)
+            || !preg_match('/[\.\d\-abcdefghijklmnopqrstuvwxyz]*/', $server_hostname)
+        ) {
+            phpCAS::error('bad CAS server hostname (`'.$server_hostname.'\')');
+        }
+        $this->_server['hostname'] = $server_hostname;
+
+        // check port
+        if ( $server_port == 0
+            || !is_int($server_port)
+        ) {
+            phpCAS::error('bad CAS server port (`'.$server_hostname.'\')');
+        }
+        $this->_server['port'] = $server_port;
+
+        // check URI
+        if ( !preg_match('/[\.\d\-_abcdefghijklmnopqrstuvwxyz\/]*/', $server_uri) ) {
+            phpCAS::error('bad CAS server URI (`'.$server_uri.'\')');
+        }
+        // add leading and trailing `/' and remove doubles
+        $server_uri = preg_replace('/\/\//', '/', '/'.$server_uri.'/');
+        $this->_server['uri'] = $server_uri;
+
+        // set to callback mode if PgtIou and PgtId CGI GET parameters are provided
+        if ( $this->isProxy() ) {
+            $this->_setCallbackMode(!empty($_GET['pgtIou'])&&!empty($_GET['pgtId']));
+        }
+
+        if ( $this->_isCallbackMode() ) {
+            //callback mode: check that phpCAS is secured
+            if ( !$this->_isHttps() ) {
+                phpCAS::error('CAS proxies must be secured to use phpCAS; PGT\'s will not be received from the CAS server');
+            }
+        } else {
+            //normal mode: get ticket and remove it from CGI parameters for
+            // developers
+            $ticket = (isset($_GET['ticket']) ? $_GET['ticket'] : null);
+            if (preg_match('/^[SP]T-/', $ticket) ) {
+                phpCAS::trace('Ticket \''.$ticket.'\' found');
+                $this->setTicket($ticket);
+                unset($_GET['ticket']);
+            } else if ( !empty($ticket) ) {
+                //ill-formed ticket, halt
+                phpCAS::error('ill-formed ticket found in the URL (ticket=`'.htmlentities($ticket).'\')');
+            }
+
+        }
+        phpCAS::traceEnd();
+    }
+
+    /** @} */
+
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+    // XX                                                                    XX
+    // XX                           Session Handling                         XX
+    // XX                                                                    XX
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+    /**
+     * @addtogroup internalConfig
+     * @{
+     */
+
+
+    /**
+     * A variable to whether phpcas will use its own session handling. Default = true
+     * @hideinitializer
+     */
+    private $_change_session_id = true;
+
+    /**
+     * Set a parameter whether to allow phpCas to change session_id
+     *
+     * @param bool $allowed allow phpCas to change session_id
+     *
+     * @return void
+     */
+    private function _setChangeSessionID($allowed)
+    {
+        $this->_change_session_id = $allowed;
+    }
+
+    /**
+     * Get whether phpCas is allowed to change session_id
+     *
+     * @return bool
+     */
+    public function getChangeSessionID()
+    {
+        return $this->_change_session_id;
+    }
+
+    /** @} */
+
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+    // XX                                                                    XX
+    // XX                           AUTHENTICATION                           XX
+    // XX                                                                    XX
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+    /**
+     * @addtogroup internalAuthentication
+     * @{
+     */
+
+    /**
+     * The Authenticated user. Written by CAS_Client::_setUser(), read by
+     * CAS_Client::getUser().
+     *
+     * @hideinitializer
+     */
+    private $_user = '';
+
+    /**
+     * This method sets the CAS user's login name.
+     *
+     * @param string $user the login name of the authenticated user.
+     *
+     * @return void
+     */
+    private function _setUser($user)
+    {
+        $this->_user = $user;
+    }
+
+    /**
+     * This method returns the CAS user's login name.
+     *
+     * @return string the login name of the authenticated user
+     *
+     * @warning should be called only after CAS_Client::forceAuthentication() or
+     * CAS_Client::isAuthenticated(), otherwise halt with an error.
+     */
+    public function getUser()
+    {
+        if ( empty($this->_user) ) {
+            phpCAS::error(
+                'this method should be used only after '.__CLASS__
+                .'::forceAuthentication() or '.__CLASS__.'::isAuthenticated()'
+            );
+        }
+        return $this->_user;
+    }
+
+    /**
+     * The Authenticated users attributes. Written by
+     * CAS_Client::setAttributes(), read by CAS_Client::getAttributes().
+     * @attention client applications should use phpCAS::getAttributes().
+     *
+     * @hideinitializer
+     */
+    private $_attributes = array();
+
+    /**
+     * Set an array of attributes
+     *
+     * @param array $attributes a key value array of attributes
+     *
+     * @return void
+     */
+    public function setAttributes($attributes)
+    {
+        $this->_attributes = $attributes;
+    }
+
+    /**
+     * Get an key values arry of attributes
+     *
+     * @return arry of attributes
+     */
+    public function getAttributes()
+    {
+        if ( empty($this->_user) ) {
+            // if no user is set, there shouldn't be any attributes also...
+            phpCAS::error(
+                'this method should be used only after '.__CLASS__
+                .'::forceAuthentication() or '.__CLASS__.'::isAuthenticated()'
+            );
+        }
+        return $this->_attributes;
+    }
+
+    /**
+     * Check whether attributes are available
+     *
+     * @return bool attributes available
+     */
+    public function hasAttributes()
+    {
+        return !empty($this->_attributes);
+    }
+    /**
+     * Check whether a specific attribute with a name is available
+     *
+     * @param string $key name of attribute
+     *
+     * @return bool is attribute available
+     */
+    public function hasAttribute($key)
+    {
+        return (is_array($this->_attributes)
+            && array_key_exists($key, $this->_attributes));
+    }
+
+    /**
+     * Get a specific attribute by name
+     *
+     * @param string $key name of attribute
+     *
+     * @return string attribute values
+     */
+    public function getAttribute($key)
+    {
+        if ($this->hasAttribute($key)) {
+            return $this->_attributes[$key];
+        }
+    }
+
+    /**
+     * This method is called to renew the authentication of the user
+     * If the user is authenticated, renew the connection
+     * If not, redirect to CAS
+     *
+     * @return  void
+     */
+    public function renewAuthentication()
+    {
+        phpCAS::traceBegin();
+        // Either way, the user is authenticated by CAS
+        if (isset( $_SESSION['phpCAS']['auth_checked'])) {
+            unset($_SESSION['phpCAS']['auth_checked']);
+        }
+        if ( $this->isAuthenticated() ) {
+            phpCAS::trace('user already authenticated; renew');
+            $this->redirectToCas(false, true);
+        } else {
+            $this->redirectToCas();
+        }
+        phpCAS::traceEnd();
+    }
+
+    /**
+     * This method is called to be sure that the user is authenticated. When not
+     * authenticated, halt by redirecting to the CAS server; otherwise return true.
+     *
+     * @return true when the user is authenticated; otherwise halt.
+     */
+    public function forceAuthentication()
+    {
+        phpCAS::traceBegin();
+
+        if ( $this->isAuthenticated() ) {
+            // the user is authenticated, nothing to be done.
+            phpCAS::trace('no need to authenticate');
+            $res = true;
+        } else {
+            // the user is not authenticated, redirect to the CAS server
+            if (isset($_SESSION['phpCAS']['auth_checked'])) {
+                unset($_SESSION['phpCAS']['auth_checked']);
+            }
+            $this->redirectToCas(false/* no gateway */);
+            // never reached
+            $res = false;
+        }
+        phpCAS::traceEnd($res);
+        return $res;
+    }
+
+    /**
+     * An integer that gives the number of times authentication will be cached
+     * before rechecked.
+     *
+     * @hideinitializer
+     */
+    private $_cache_times_for_auth_recheck = 0;
+
+    /**
+     * Set the number of times authentication will be cached before rechecked.
+     *
+     * @param int $n number of times to wait for a recheck
+     *
+     * @return void
+     */
+    public function setCacheTimesForAuthRecheck($n)
+    {
+        $this->_cache_times_for_auth_recheck = $n;
+    }
+
+    /**
+     * This method is called to check whether the user is authenticated or not.
+     *
+     * @return true when the user is authenticated, false when a previous
+     * gateway login failed or  the function will not return if the user is
+     * redirected to the cas server for a gateway login attempt
+     */
+    public function checkAuthentication()
+    {
+        phpCAS::traceBegin();
+        $res = false;
+        if ( $this->isAuthenticated() ) {
+            phpCAS::trace('user is authenticated');
+            /* The 'auth_checked' variable is removed just in case it's set. */
+            unset($_SESSION['phpCAS']['auth_checked']);
+            $res = true;
+        } else if (isset($_SESSION['phpCAS']['auth_checked'])) {
+            // the previous request has redirected the client to the CAS server
+            // with gateway=true
+            unset($_SESSION['phpCAS']['auth_checked']);
+            $res = false;
+        } else {
+            // avoid a check against CAS on every request
+            if (!isset($_SESSION['phpCAS']['unauth_count'])) {
+                $_SESSION['phpCAS']['unauth_count'] = -2; // uninitialized
+            }
+
+            if (($_SESSION['phpCAS']['unauth_count'] != -2
+                && $this->_cache_times_for_auth_recheck == -1)
+                || ($_SESSION['phpCAS']['unauth_count'] >= 0
+                && $_SESSION['phpCAS']['unauth_count'] < $this->_cache_times_for_auth_recheck)
+            ) {
+                $res = false;
+
+                if ($this->_cache_times_for_auth_recheck != -1) {
+                    $_SESSION['phpCAS']['unauth_count']++;
+                    phpCAS::trace(
+                        'user is not authenticated (cached for '
+                        .$_SESSION['phpCAS']['unauth_count'].' times of '
+                        .$this->_cache_times_for_auth_recheck.')'
+                    );
+                } else {
+                    phpCAS::trace('user is not authenticated (cached for until login pressed)');
+                }
+            } else {
+                $_SESSION['phpCAS']['unauth_count'] = 0;
+                $_SESSION['phpCAS']['auth_checked'] = true;
+                phpCAS::trace('user is not authenticated (cache reset)');
+                $this->redirectToCas(true/* gateway */);
+                // never reached
+                $res = false;
+            }
+        }
+        phpCAS::traceEnd($res);
+        return $res;
+    }
+
+    /**
+     * This method is called to check if the user is authenticated (previously or by
+     * tickets given in the URL).
+     *
+     * @return true when the user is authenticated. Also may redirect to the
+     * same URL without the ticket.
+     */
+    public function isAuthenticated()
+    {
+        phpCAS::traceBegin();
+        $res = false;
+        $validate_url = '';
+        if ( $this->_wasPreviouslyAuthenticated() ) {
+            if ($this->hasTicket()) {
+                // User has a additional ticket but was already authenticated
+                phpCAS::trace('ticket was present and will be discarded, use renewAuthenticate()');
+                if ($this->_clearTicketsFromUrl) {
+                    phpCAS::trace("Prepare redirect to : ".$this->getURL());
+                    header('Location: '.$this->getURL());
+                    flush();
+                    phpCAS::traceExit();
+                    throw new CAS_GracefullTerminationException();
+                } else {
+                    phpCAS::trace('Already authenticated, but skipping ticket clearing since setNoClearTicketsFromUrl() was used.');
+                    $res = true;
+                }
+            } else {
+                // the user has already (previously during the session) been
+                // authenticated, nothing to be done.
+                phpCAS::trace('user was already authenticated, no need to look for tickets');
+                $res = true;
+            }
+        } else {
+            if ($this->hasTicket()) {
+                switch ($this->getServerVersion()) {
+                case CAS_VERSION_1_0:
+                    // if a Service Ticket was given, validate it
+                    phpCAS::trace('CAS 1.0 ticket `'.$this->getTicket().'\' is present');
+                    $this->validateCAS10($validate_url, $text_response, $tree_response); // if it fails, it halts
+                    phpCAS::trace('CAS 1.0 ticket `'.$this->getTicket().'\' was validated');
+                    $_SESSION['phpCAS']['user'] = $this->getUser();
+                    $res = true;
+                    $logoutTicket = $this->getTicket();
+                    break;
+                case CAS_VERSION_2_0:
+                    // if a Proxy Ticket was given, validate it
+                    phpCAS::trace('CAS 2.0 ticket `'.$this->getTicket().'\' is present');
+                    $this->validateCAS20($validate_url, $text_response, $tree_response); // note: if it fails, it halts
+                    phpCAS::trace('CAS 2.0 ticket `'.$this->getTicket().'\' was validated');
+                    if ( $this->isProxy() ) {
+                        $this->_validatePGT($validate_url, $text_response, $tree_response); // idem
+                        phpCAS::trace('PGT `'.$this->_getPGT().'\' was validated');
+                        $_SESSION['phpCAS']['pgt'] = $this->_getPGT();
+                    }
+                    $_SESSION['phpCAS']['user'] = $this->getUser();
+                    if ($this->hasAttributes()) {
+                        $_SESSION['phpCAS']['attributes'] = $this->getAttributes();
+                    }
+                    $proxies = $this->getProxies();
+                    if (!empty($proxies)) {
+                        $_SESSION['phpCAS']['proxies'] = $this->getProxies();
+                    }
+                    $res = true;
+                    $logoutTicket = $this->getTicket();
+                    break;
+                case SAML_VERSION_1_1:
+                    // if we have a SAML ticket, validate it.
+                    phpCAS::trace('SAML 1.1 ticket `'.$this->getTicket().'\' is present');
+                    $this->validateSA($validate_url, $text_response, $tree_response); // if it fails, it halts
+                    phpCAS::trace('SAML 1.1 ticket `'.$this->getTicket().'\' was validated');
+                    $_SESSION['phpCAS']['user'] = $this->getUser();
+                    $_SESSION['phpCAS']['attributes'] = $this->getAttributes();
+                    $res = true;
+                    $logoutTicket = $this->getTicket();
+                    break;
+                default:
+                    phpCAS::trace('Protocoll error');
+                    break;
+                }
+            } else {
+                // no ticket given, not authenticated
+                phpCAS::trace('no ticket found');
+            }
+            if ($res) {
+                // Mark the auth-check as complete to allow post-authentication
+                // callbacks to make use of phpCAS::getUser() and similar methods
+                $this->markAuthenticationCall($res);
+
+                // call the post-authenticate callback if registered.
+                if ($this->_postAuthenticateCallbackFunction) {
+                    $args = $this->_postAuthenticateCallbackArgs;
+                    array_unshift($args, $logoutTicket);
+                    call_user_func_array($this->_postAuthenticateCallbackFunction, $args);
+                }
+
+                // if called with a ticket parameter, we need to redirect to the
+                // app without the ticket so that CAS-ification is transparent
+                // to the browser (for later POSTS) most of the checks and
+                // errors should have been made now, so we're safe for redirect
+                // without masking error messages. remove the ticket as a
+                // security precaution to prevent a ticket in the HTTP_REFERRER
+                if ($this->_clearTicketsFromUrl) {
+                    phpCAS::trace("Prepare redirect to : ".$this->getURL());
+                    header('Location: '.$this->getURL());
+                    flush();
+                    phpCAS::traceExit();
+                    throw new CAS_GracefullTerminationException();
+                }
+            }
+        }
+
+        phpCAS::traceEnd($res);
+        return $res;
+    }
+
+    /**
+     * This method tells if the current session is authenticated.
+     *
+     * @return true if authenticated based soley on $_SESSION variable
+     */
+    public function isSessionAuthenticated ()
+    {
+        return !empty($_SESSION['phpCAS']['user']);
+    }
+
+    /**
+     * This method tells if the user has already been (previously) authenticated
+     * by looking into the session variables.
+     *
+     * @note This function switches to callback mode when needed.
+     *
+     * @return true when the user has already been authenticated; false otherwise.
+     */
+    private function _wasPreviouslyAuthenticated()
+    {
+        phpCAS::traceBegin();
+
+        if ( $this->_isCallbackMode() ) {
+            // Rebroadcast the pgtIou and pgtId to all nodes
+            if ($this->_rebroadcast&&!isset($_POST['rebroadcast'])) {
+                $this->_rebroadcast(self::PGTIOU);
+            }
+            $this->_callback();
+        }
+
+        $auth = false;
+
+        if ( $this->isProxy() ) {
+            // CAS proxy: username and PGT must be present
+            if ( $this->isSessionAuthenticated() && !empty($_SESSION['phpCAS']['pgt']) ) {
+                // authentication already done
+                $this->_setUser($_SESSION['phpCAS']['user']);
+                if (isset($_SESSION['phpCAS']['attributes'])) {
+                    $this->setAttributes($_SESSION['phpCAS']['attributes']);
+                }
+                $this->_setPGT($_SESSION['phpCAS']['pgt']);
+                phpCAS::trace('user = `'.$_SESSION['phpCAS']['user'].'\', PGT = `'.$_SESSION['phpCAS']['pgt'].'\'');
+
+                // Include the list of proxies
+                if (isset($_SESSION['phpCAS']['proxies'])) {
+                    $this->_setProxies($_SESSION['phpCAS']['proxies']);
+                    phpCAS::trace('proxies = "'.implode('", "', $_SESSION['phpCAS']['proxies']).'"');
+                }
+
+                $auth = true;
+            } elseif ( $this->isSessionAuthenticated() && empty($_SESSION['phpCAS']['pgt']) ) {
+                // these two variables should be empty or not empty at the same time
+                phpCAS::trace('username found (`'.$_SESSION['phpCAS']['user'].'\') but PGT is empty');
+                // unset all tickets to enforce authentication
+                unset($_SESSION['phpCAS']);
+                $this->setTicket('');
+            } elseif ( !$this->isSessionAuthenticated() && !empty($_SESSION['phpCAS']['pgt']) ) {
+                // these two variables should be empty or not empty at the same time
+                phpCAS::trace('PGT found (`'.$_SESSION['phpCAS']['pgt'].'\') but username is empty');
+                // unset all tickets to enforce authentication
+                unset($_SESSION['phpCAS']);
+                $this->setTicket('');
+            } else {
+                phpCAS::trace('neither user nor PGT found');
+            }
+        } else {
+            // `simple' CAS client (not a proxy): username must be present
+            if ( $this->isSessionAuthenticated() ) {
+                // authentication already done
+                $this->_setUser($_SESSION['phpCAS']['user']);
+                if (isset($_SESSION['phpCAS']['attributes'])) {
+                    $this->setAttributes($_SESSION['phpCAS']['attributes']);
+                }
+                phpCAS::trace('user = `'.$_SESSION['phpCAS']['user'].'\'');
+
+                // Include the list of proxies
+                if (isset($_SESSION['phpCAS']['proxies'])) {
+                    $this->_setProxies($_SESSION['phpCAS']['proxies']);
+                    phpCAS::trace('proxies = "'.implode('", "', $_SESSION['phpCAS']['proxies']).'"');
+                }
+
+                $auth = true;
+            } else {
+                phpCAS::trace('no user found');
+            }
+        }
+
+        phpCAS::traceEnd($auth);
+        return $auth;
+    }
+
+    /**
+     * This method is used to redirect the client to the CAS server.
+     * It is used by CAS_Client::forceAuthentication() and
+     * CAS_Client::checkAuthentication().
+     *
+     * @param bool $gateway true to check authentication, false to force it
+     * @param bool $renew   true to force the authentication with the CAS server
+     *
+     * @return void
+     */
+    public function redirectToCas($gateway=false,$renew=false)
+    {
+        phpCAS::traceBegin();
+        $cas_url = $this->getServerLoginURL($gateway, $renew);
+        if (php_sapi_name() === 'cli') {
+            @header('Location: '.$cas_url);
+        } else {
+            header('Location: '.$cas_url);
+        }
+        phpCAS::trace("Redirect to : ".$cas_url);
+        $lang = $this->getLangObj();
+        $this->printHTMLHeader($lang->getAuthenticationWanted());
+        printf('<p>'. $lang->getShouldHaveBeenRedirected(). '</p>', $cas_url);
+        $this->printHTMLFooter();
+        phpCAS::traceExit();
+        throw new CAS_GracefullTerminationException();
+    }
+
+
+    /**
+     * This method is used to logout from CAS.
+     *
+     * @param array $params an array that contains the optional url and service
+     * parameters that will be passed to the CAS server
+     *
+     * @return void
+     */
+    public function logout($params)
+    {
+        phpCAS::traceBegin();
+        $cas_url = $this->getServerLogoutURL();
+        $paramSeparator = '?';
+        if (isset($params['url'])) {
+            $cas_url = $cas_url . $paramSeparator . "url=" . urlencode($params['url']);
+            $paramSeparator = '&';
+        }
+        if (isset($params['service'])) {
+            $cas_url = $cas_url . $paramSeparator . "service=" . urlencode($params['service']);
+        }
+        header('Location: '.$cas_url);
+        phpCAS::trace("Prepare redirect to : ".$cas_url);
+
+        session_unset();
+        session_destroy();
+        $lang = $this->getLangObj();
+        $this->printHTMLHeader($lang->getLogout());
+        printf('<p>'.$lang->getShouldHaveBeenRedirected(). '</p>', $cas_url);
+        $this->printHTMLFooter();
+        phpCAS::traceExit();
+        throw new CAS_GracefullTerminationException();
+    }
+
+    /**
+     * Check of the current request is a logout request
+     *
+     * @return bool is logout request.
+     */
+    private function _isLogoutRequest()
+    {
+        return !empty($_POST['logoutRequest']);
+    }
+
+    /**
+     * This method handles logout requests.
+     *
+     * @param bool $check_client    true to check the client bofore handling
+     * the request, false not to perform any access control. True by default.
+     * @param bool $allowed_clients an array of host names allowed to send
+     * logout requests.
+     *
+     * @return void
+     */
+    public function handleLogoutRequests($check_client=true, $allowed_clients=false)
+    {
+        phpCAS::traceBegin();
+        if (!$this->_isLogoutRequest()) {
+            phpCAS::trace("Not a logout request");
+            phpCAS::traceEnd();
+            return;
+        }
+        if (!$this->getChangeSessionID() && is_null($this->_signoutCallbackFunction)) {
+            phpCAS::trace("phpCAS can't handle logout requests if it is not allowed to change session_id.");
+        }
+        phpCAS::trace("Logout requested");
+        $decoded_logout_rq = urldecode($_POST['logoutRequest']);
+        phpCAS::trace("SAML REQUEST: ".$decoded_logout_rq);
+        $allowed = false;
+        if ($check_client) {
+            if (!$allowed_clients) {
+                $allowed_clients = array( $this->_getServerHostname() );
+            }
+            $client_ip = $_SERVER['REMOTE_ADDR'];
+            $client = gethostbyaddr($client_ip);
+            phpCAS::trace("Client: ".$client."/".$client_ip);
+            foreach ($allowed_clients as $allowed_client) {
+                if (($client == $allowed_client) or ($client_ip == $allowed_client)) {
+                    phpCAS::trace("Allowed client '".$allowed_client."' matches, logout request is allowed");
+                    $allowed = true;
+                    break;
+                } else {
+                    phpCAS::trace("Allowed client '".$allowed_client."' does not match");
+                }
+            }
+        } else {
+            phpCAS::trace("No access control set");
+            $allowed = true;
+        }
+        // If Logout command is permitted proceed with the logout
+        if ($allowed) {
+            phpCAS::trace("Logout command allowed");
+            // Rebroadcast the logout request
+            if ($this->_rebroadcast && !isset($_POST['rebroadcast'])) {
+                $this->_rebroadcast(self::LOGOUT);
+            }
+            // Extract the ticket from the SAML Request
+            preg_match("|<samlp:SessionIndex>(.*)</samlp:SessionIndex>|", $decoded_logout_rq, $tick, PREG_OFFSET_CAPTURE, 3);
+            $wrappedSamlSessionIndex = preg_replace('|<samlp:SessionIndex>|', '', $tick[0][0]);
+            $ticket2logout = preg_replace('|</samlp:SessionIndex>|', '', $wrappedSamlSessionIndex);
+            phpCAS::trace("Ticket to logout: ".$ticket2logout);
+
+            // call the post-authenticate callback if registered.
+            if ($this->_signoutCallbackFunction) {
+                $args = $this->_signoutCallbackArgs;
+                array_unshift($args, $ticket2logout);
+                call_user_func_array($this->_signoutCallbackFunction, $args);
+            }
+
+            // If phpCAS is managing the session_id, destroy session thanks to session_id.
+            if ($this->getChangeSessionID()) {
+                $session_id = preg_replace('/[^a-zA-Z0-9\-]/', '', $ticket2logout);
+                phpCAS::trace("Session id: ".$session_id);
+
+                // destroy a possible application session created before phpcas
+                if (session_id() !== "") {
+                    session_unset();
+                    session_destroy();
+                }
+                // fix session ID
+                session_id($session_id);
+                $_COOKIE[session_name()]=$session_id;
+                $_GET[session_name()]=$session_id;
+
+                // Overwrite session
+                session_start();
+                session_unset();
+                session_destroy();
+                phpCAS::trace("Session ". $session_id . " destroyed");
+            }
+        } else {
+            phpCAS::error("Unauthorized logout request from client '".$client."'");
+            phpCAS::trace("Unauthorized logout request from client '".$client."'");
+        }
+        flush();
+        phpCAS::traceExit();
+        throw new CAS_GracefullTerminationException();
+
+    }
+
+    /** @} */
+
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+    // XX                                                                    XX
+    // XX                  BASIC CLIENT FEATURES (CAS 1.0)                   XX
+    // XX                                                                    XX
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+    // ########################################################################
+    //  ST
+    // ########################################################################
+    /**
+    * @addtogroup internalBasic
+    * @{
+    */
+
+    /**
+     * The Ticket provided in the URL of the request if present
+     * (empty otherwise). Written by CAS_Client::CAS_Client(), read by
+     * CAS_Client::getTicket() and CAS_Client::_hasPGT().
+     *
+     * @hideinitializer
+     */
+    private $_ticket = '';
+
+    /**
+     * This method returns the Service Ticket provided in the URL of the request.
+     *
+     * @return string service ticket.
+     */
+    public  function getTicket()
+    {
+        return $this->_ticket;
+    }
+
+    /**
+     * This method stores the Service Ticket.
+     *
+     * @param string $st The Service Ticket.
+     *
+     * @return void
+     */
+    public function setTicket($st)
+    {
+        $this->_ticket = $st;
+    }
+
+    /**
+     * This method tells if a Service Ticket was stored.
+     *
+     * @return bool if a Service Ticket has been stored.
+     */
+    public function hasTicket()
+    {
+        return !empty($this->_ticket);
+    }
+
+    /** @} */
+
+    // ########################################################################
+    //  ST VALIDATION
+    // ########################################################################
+    /**
+    * @addtogroup internalBasic
+    * @{
+    */
+
+    /**
+     * the certificate of the CAS server CA.
+     *
+     * @hideinitializer
+     */
+    private $_cas_server_ca_cert = null;
+
+
+    /**
+     * validate CN of the CAS server certificate
+     *
+     * @hideinitializer
+     */
+    private $_cas_server_cn_validate = true;
+
+    /**
+     * Set to true not to validate the CAS server.
+     *
+     * @hideinitializer
+     */
+    private $_no_cas_server_validation = false;
+
+
+    /**
+     * Set the CA certificate of the CAS server.
+     *
+     * @param string $cert        the PEM certificate file name of the CA that emited
+     * the cert of the server
+     * @param bool   $validate_cn valiate CN of the CAS server certificate
+     *
+     * @return void
+     */
+    public function setCasServerCACert($cert, $validate_cn)
+    {
+        $this->_cas_server_ca_cert = $cert;
+        $this->_cas_server_cn_validate = $validate_cn;
+    }
+
+    /**
+     * Set no SSL validation for the CAS server.
+     *
+     * @return void
+     */
+    public function setNoCasServerValidation()
+    {
+        $this->_no_cas_server_validation = true;
+    }
+
+    /**
+     * This method is used to validate a CAS 1,0 ticket; halt on failure, and
+     * sets $validate_url, $text_reponse and $tree_response on success.
+     *
+     * @param string &$validate_url  reference to the the URL of the request to
+     * the CAS server.
+     * @param string &$text_response reference to the response of the CAS
+     * server, as is (XML text).
+     * @param string &$tree_response reference to the response of the CAS
+     * server, as a DOM XML tree.
+     *
+     * @return bool true when successfull and issue a CAS_AuthenticationException
+     * and false on an error
+     */
+    public function validateCAS10(&$validate_url,&$text_response,&$tree_response)
+    {
+        phpCAS::traceBegin();
+        $result = false;
+        // build the URL to validate the ticket
+        $validate_url = $this->getServerServiceValidateURL().'&ticket='.$this->getTicket();
+
+        // open and read the URL
+        if ( !$this->_readURL($validate_url, $headers, $text_response, $err_msg) ) {
+            phpCAS::trace('could not open URL \''.$validate_url.'\' to validate ('.$err_msg.')');
+            throw new CAS_AuthenticationException(
+                $this, 'CAS 1.0 ticket not validated', $validate_url,
+                true/*$no_response*/
+            );
+            $result = false;
+        }
+
+        if (preg_match('/^no\n/', $text_response)) {
+            phpCAS::trace('Ticket has not been validated');
+            throw new CAS_AuthenticationException(
+                $this, 'ST not validated', $validate_url, false/*$no_response*/,
+                false/*$bad_response*/, $text_response
+            );
+            $result = false;
+        } else if (!preg_match('/^yes\n/', $text_response)) {
+            phpCAS::trace('ill-formed response');
+            throw new CAS_AuthenticationException(
+                $this, 'Ticket not validated', $validate_url,
+                false/*$no_response*/, true/*$bad_response*/, $text_response
+            );
+            $result = false;
+        }
+        // ticket has been validated, extract the user name
+        $arr = preg_split('/\n/', $text_response);
+        $this->_setUser(trim($arr[1]));
+        $result = true;
+
+        if ($result) {
+            $this->_renameSession($this->getTicket());
+        }
+        // at this step, ticket has been validated and $this->_user has been set,
+        phpCAS::traceEnd(true);
+        return true;
+    }
+
+    /** @} */
+
+
+    // ########################################################################
+    //  SAML VALIDATION
+    // ########################################################################
+    /**
+    * @addtogroup internalSAML
+    * @{
+    */
+
+    /**
+     * This method is used to validate a SAML TICKET; halt on failure, and sets
+     * $validate_url, $text_reponse and $tree_response on success. These
+     * parameters are used later by CAS_Client::_validatePGT() for CAS proxies.
+     *
+     * @param string &$validate_url  reference to the the URL of the request to
+     * the CAS server.
+     * @param string &$text_response reference to the response of the CAS
+     * server, as is (XML text).
+     * @param string &$tree_response reference to the response of the CAS
+     * server, as a DOM XML tree.
+     *
+     * @return bool true when successfull and issue a CAS_AuthenticationException
+     * and false on an error
+     */
+    public function validateSA(&$validate_url,&$text_response,&$tree_response)
+    {
+        phpCAS::traceBegin();
+        $result = false;
+        // build the URL to validate the ticket
+        $validate_url = $this->getServerSamlValidateURL();
+
+        // open and read the URL
+        if ( !$this->_readURL($validate_url, $headers, $text_response, $err_msg) ) {
+            phpCAS::trace('could not open URL \''.$validate_url.'\' to validate ('.$err_msg.')');
+            throw new CAS_AuthenticationException($this, 'SA not validated', $validate_url, true/*$no_response*/);
+        }
+
+        phpCAS::trace('server version: '.$this->getServerVersion());
+
+        // analyze the result depending on the version
+        switch ($this->getServerVersion()) {
+        case SAML_VERSION_1_1:
+            // create new DOMDocument Object
+            $dom = new DOMDocument();
+            // Fix possible whitspace problems
+            $dom->preserveWhiteSpace = false;
+            // read the response of the CAS server into a DOM object
+            if (!($dom->loadXML($text_response))) {
+                phpCAS::trace('dom->loadXML() failed');
+                throw new CAS_AuthenticationException(
+                    $this, 'SA not validated', $validate_url,
+                    false/*$no_response*/, true/*$bad_response*/,
+                    $text_response
+                );
+                $result = false;
+            }
+            // read the root node of the XML tree
+            if (!($tree_response = $dom->documentElement)) {
+                phpCAS::trace('documentElement() failed');
+                throw new CAS_AuthenticationException(
+                    $this, 'SA not validated', $validate_url,
+                    false/*$no_response*/, true/*$bad_response*/,
+                    $text_response
+                );
+                $result = false;
+            } else if ( $tree_response->localName != 'Envelope' ) {
+                // insure that tag name is 'Envelope'
+                phpCAS::trace('bad XML root node (should be `Envelope\' instead of `'.$tree_response->localName.'\'');
+                throw new CAS_AuthenticationException(
+                    $this, 'SA not validated', $validate_url,
+                    false/*$no_response*/, true/*$bad_response*/,
+                    $text_response
+                );
+                $result = false;
+            } else if ($tree_response->getElementsByTagName("NameIdentifier")->length != 0) {
+                // check for the NameIdentifier tag in the SAML response
+                $success_elements = $tree_response->getElementsByTagName("NameIdentifier");
+                phpCAS::trace('NameIdentifier found');
+                $user = trim($success_elements->item(0)->nodeValue);
+                phpCAS::trace('user = `'.$user.'`');
+                $this->_setUser($user);
+                $this->_setSessionAttributes($text_response);
+                $result = true;
+            } else {
+                phpCAS::trace('no <NameIdentifier> tag found in SAML payload');
+                throw new CAS_AuthenticationException(
+                    $this, 'SA not validated', $validate_url,
+                    false/*$no_response*/, true/*$bad_response*/,
+                    $text_response
+                );
+                $result = false;
+            }
+        }
+        if ($result) {
+            $this->_renameSession($this->getTicket());
+        }
+        // at this step, ST has been validated and $this->_user has been set,
+        phpCAS::traceEnd($result);
+        return $result;
+    }
+
+    /**
+     * This method will parse the DOM and pull out the attributes from the SAML
+     * payload and put them into an array, then put the array into the session.
+     *
+     * @param string $text_response the SAML payload.
+     *
+     * @return bool true when successfull and false if no attributes a found
+     */
+    private function _setSessionAttributes($text_response)
+    {
+        phpCAS::traceBegin();
+
+        $result = false;
+
+        $attr_array = array();
+
+        // create new DOMDocument Object
+        $dom = new DOMDocument();
+        // Fix possible whitspace problems
+        $dom->preserveWhiteSpace = false;
+        if (($dom->loadXML($text_response))) {
+            $xPath = new DOMXpath($dom);
+            $xPath->registerNamespace('samlp', 'urn:oasis:names:tc:SAML:1.0:protocol');
+            $xPath->registerNamespace('saml', 'urn:oasis:names:tc:SAML:1.0:assertion');
+            $nodelist = $xPath->query("//saml:Attribute");
+
+            if ($nodelist) {
+                foreach ($nodelist as $node) {
+                    $xres = $xPath->query("saml:AttributeValue", $node);
+                    $name = $node->getAttribute("AttributeName");
+                    $value_array = array();
+                    foreach ($xres as $node2) {
+                        $value_array[] = $node2->nodeValue;
+                    }
+                    $attr_array[$name] = $value_array;
+                }
+                // UGent addition...
+                foreach ($attr_array as $attr_key => $attr_value) {
+                    if (count($attr_value) > 1) {
+                        $this->_attributes[$attr_key] = $attr_value;
+                        phpCAS::trace("* " . $attr_key . "=" . $attr_value);
+                    } else {
+                        $this->_attributes[$attr_key] = $attr_value[0];
+                        phpCAS::trace("* " . $attr_key . "=" . $attr_value[0]);
+                    }
+                }
+                $result = true;
+            } else {
+                phpCAS::trace("SAML Attributes are empty");
+                $result = false;
+            }
+        }
+        phpCAS::traceEnd($result);
+        return $result;
+    }
+
+    /** @} */
+
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+    // XX                                                                    XX
+    // XX                     PROXY FEATURES (CAS 2.0)                       XX
+    // XX                                                                    XX
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+    // ########################################################################
+    //  PROXYING
+    // ########################################################################
+    /**
+    * @addtogroup internalProxy
+    * @{
+    */
+
+    /**
+     * A boolean telling if the client is a CAS proxy or not. Written by
+     * CAS_Client::CAS_Client(), read by CAS_Client::isProxy().
+     */
+    private $_proxy;
+
+    /**
+     * Handler for managing service cookies.
+     */
+    private $_serviceCookieJar;
+
+    /**
+     * Tells if a CAS client is a CAS proxy or not
+     *
+     * @return true when the CAS client is a CAs proxy, false otherwise
+     */
+    public function isProxy()
+    {
+        return $this->_proxy;
+    }
+
+    /** @} */
+    // ########################################################################
+    //  PGT
+    // ########################################################################
+    /**
+    * @addtogroup internalProxy
+    * @{
+    */
+
+    /**
+     * the Proxy Grnting Ticket given by the CAS server (empty otherwise).
+     * Written by CAS_Client::_setPGT(), read by CAS_Client::_getPGT() and
+     * CAS_Client::_hasPGT().
+     *
+     * @hideinitializer
+     */
+    private $_pgt = '';
+
+    /**
+     * This method returns the Proxy Granting Ticket given by the CAS server.
+     *
+     * @return string the Proxy Granting Ticket.
+     */
+    private function _getPGT()
+    {
+        return $this->_pgt;
+    }
+
+    /**
+     * This method stores the Proxy Granting Ticket.
+     *
+     * @param string $pgt The Proxy Granting Ticket.
+     *
+     * @return void
+     */
+    private function _setPGT($pgt)
+    {
+        $this->_pgt = $pgt;
+    }
+
+    /**
+     * This method tells if a Proxy Granting Ticket was stored.
+     *
+     * @return true if a Proxy Granting Ticket has been stored.
+     */
+    private function _hasPGT()
+    {
+        return !empty($this->_pgt);
+    }
+
+    /** @} */
+
+    // ########################################################################
+    //  CALLBACK MODE
+    // ########################################################################
+    /**
+    * @addtogroup internalCallback
+    * @{
+    */
+    /**
+     * each PHP script using phpCAS in proxy mode is its own callback to get the
+     * PGT back from the CAS server. callback_mode is detected by the constructor
+     * thanks to the GET parameters.
+     */
+
+    /**
+     * a boolean to know if the CAS client is running in callback mode. Written by
+     * CAS_Client::setCallBackMode(), read by CAS_Client::_isCallbackMode().
+     *
+     * @hideinitializer
+     */
+    private $_callback_mode = false;
+
+    /**
+     * This method sets/unsets callback mode.
+     *
+     * @param bool $callback_mode true to set callback mode, false otherwise.
+     *
+     * @return void
+     */
+    private function _setCallbackMode($callback_mode)
+    {
+        $this->_callback_mode = $callback_mode;
+    }
+
+    /**
+     * This method returns true when the CAs client is running i callback mode,
+     * false otherwise.
+     *
+     * @return A boolean.
+     */
+    private function _isCallbackMode()
+    {
+        return $this->_callback_mode;
+    }
+
+    /**
+     * the URL that should be used for the PGT callback (in fact the URL of the
+     * current request without any CGI parameter). Written and read by
+     * CAS_Client::_getCallbackURL().
+     *
+     * @hideinitializer
+     */
+    private $_callback_url = '';
+
+    /**
+     * This method returns the URL that should be used for the PGT callback (in
+     * fact the URL of the current request without any CGI parameter, except if
+     * phpCAS::setFixedCallbackURL() was used).
+     *
+     * @return The callback URL
+     */
+    private function _getCallbackURL()
+    {
+        // the URL is built when needed only
+        if ( empty($this->_callback_url) ) {
+            $final_uri = '';
+            // remove the ticket if present in the URL
+            $final_uri = 'https://';
+            $final_uri .= $this->_getServerUrl();
+            $request_uri = $_SERVER['REQUEST_URI'];
+            $request_uri = preg_replace('/\?.*$/', '', $request_uri);
+            $final_uri .= $request_uri;
+            $this->setCallbackURL($final_uri);
+        }
+        return $this->_callback_url;
+    }
+
+    /**
+     * This method sets the callback url.
+     *
+     * @param string $url url to set callback
+     *
+     * @return void
+     */
+    public function setCallbackURL($url)
+    {
+        return $this->_callback_url = $url;
+    }
+
+    /**
+     * This method is called by CAS_Client::CAS_Client() when running in callback
+     * mode. It stores the PGT and its PGT Iou, prints its output and halts.
+     *
+     * @return void
+     */
+    private function _callback()
+    {
+        phpCAS::traceBegin();
+        if (preg_match('/PGTIOU-[\.\-\w]/', $_GET['pgtIou'])) {
+            if (preg_match('/[PT]GT-[\.\-\w]/', $_GET['pgtId'])) {
+                $this->printHTMLHeader('phpCAS callback');
+                $pgt_iou = $_GET['pgtIou'];
+                $pgt = $_GET['pgtId'];
+                phpCAS::trace('Storing PGT `'.$pgt.'\' (id=`'.$pgt_iou.'\')');
+                echo '<p>Storing PGT `'.$pgt.'\' (id=`'.$pgt_iou.'\').</p>';
+                $this->_storePGT($pgt, $pgt_iou);
+                $this->printHTMLFooter();
+                phpCAS::traceExit("Successfull Callback");
+            } else {
+                phpCAS::error('PGT format invalid' . $_GET['pgtId']);
+                phpCAS::traceExit('PGT format invalid' . $_GET['pgtId']);
+            }
+        } else {
+            phpCAS::error('PGTiou format invalid' . $_GET['pgtIou']);
+            phpCAS::traceExit('PGTiou format invalid' . $_GET['pgtIou']);
+        }
+
+        // Flush the buffer to prevent from sending anything other then a 200
+        // Success Status back to the CAS Server. The Exception would normally
+        // report as a 500 error.
+        flush();
+        throw new CAS_GracefullTerminationException();
+    }
+
+
+    /** @} */
+
+    // ########################################################################
+    //  PGT STORAGE
+    // ########################################################################
+    /**
+    * @addtogroup internalPGTStorage
+    * @{
+    */
+
+    /**
+     * an instance of a class inheriting of PGTStorage, used to deal with PGT
+     * storage. Created by CAS_Client::setPGTStorageFile(), used
+     * by CAS_Client::setPGTStorageFile() and CAS_Client::_initPGTStorage().
+     *
+     * @hideinitializer
+     */
+    private $_pgt_storage = null;
+
+    /**
+     * This method is used to initialize the storage of PGT's.
+     * Halts on error.
+     *
+     * @return void
+     */
+    private function _initPGTStorage()
+    {
+        // if no SetPGTStorageXxx() has been used, default to file
+        if ( !is_object($this->_pgt_storage) ) {
+            $this->setPGTStorageFile();
+        }
+
+        // initializes the storage
+        $this->_pgt_storage->init();
+    }
+
+    /**
+     * This method stores a PGT. Halts on error.
+     *
+     * @param string $pgt     the PGT to store
+     * @param string $pgt_iou its corresponding Iou
+     *
+     * @return void
+     */
+    private function _storePGT($pgt,$pgt_iou)
+    {
+        // ensure that storage is initialized
+        $this->_initPGTStorage();
+        // writes the PGT
+        $this->_pgt_storage->write($pgt, $pgt_iou);
+    }
+
+    /**
+     * This method reads a PGT from its Iou and deletes the corresponding
+     * storage entry.
+     *
+     * @param string $pgt_iou the PGT Iou
+     *
+     * @return mul The PGT corresponding to the Iou, false when not found.
+     */
+    private function _loadPGT($pgt_iou)
+    {
+        // ensure that storage is initialized
+        $this->_initPGTStorage();
+        // read the PGT
+        return $this->_pgt_storage->read($pgt_iou);
+    }
+
+    /**
+     * This method can be used to set a custom PGT storage object.
+     *
+     * @param CAS_PGTStorage_AbstractStorage $storage a PGT storage object that
+     * inherits from the CAS_PGTStorage_AbstractStorage class
+     *
+     * @return void
+     */
+    public function setPGTStorage($storage)
+    {
+        // check that the storage has not already been set
+        if ( is_object($this->_pgt_storage) ) {
+            phpCAS::error('PGT storage already defined');
+        }
+
+        // check to make sure a valid storage object was specified
+        if ( !($storage instanceof CAS_PGTStorage_AbstractStorage) ) {
+            phpCAS::error('Invalid PGT storage object');
+        }
+
+        // store the PGTStorage object
+        $this->_pgt_storage = $storage;
+    }
+
+    /**
+     * This method is used to tell phpCAS to store the response of the
+     * CAS server to PGT requests in a database.
+     *
+     * @param string $dsn_or_pdo     a dsn string to use for creating a PDO
+     * object or a PDO object
+     * @param string $username       the username to use when connecting to the
+     * database
+     * @param string $password       the password to use when connecting to the
+     * database
+     * @param string $table          the table to use for storing and retrieving
+     * PGTs
+     * @param string $driver_options any driver options to use when connecting
+     * to the database
+     *
+     * @return void
+     */
+    public function setPGTStorageDb($dsn_or_pdo, $username='', $password='', $table='', $driver_options=null)
+    {
+        // create the storage object
+        $this->setPGTStorage(new CAS_PGTStorage_Db($this, $dsn_or_pdo, $username, $password, $table, $driver_options));
+    }
+
+    /**
+     * This method is used to tell phpCAS to store the response of the
+     * CAS server to PGT requests onto the filesystem.
+     *
+     * @param string $path the path where the PGT's should be stored
+     *
+     * @return void
+     */
+    public function setPGTStorageFile($path='')
+    {
+        // create the storage object
+        $this->setPGTStorage(new CAS_PGTStorage_File($this, $path));
+    }
+
+
+    // ########################################################################
+    //  PGT VALIDATION
+    // ########################################################################
+    /**
+    * This method is used to validate a PGT; halt on failure.
+    *
+    * @param string &$validate_url the URL of the request to the CAS server.
+    * @param string $text_response the response of the CAS server, as is
+    * (XML text); result of CAS_Client::validateCAS10() or CAS_Client::validateCAS20().
+    * @param string $tree_response the response of the CAS server, as a DOM XML
+    * tree; result of CAS_Client::validateCAS10() or CAS_Client::validateCAS20().
+    *
+    * @return bool true when successfull and issue a CAS_AuthenticationException
+    * and false on an error
+    */
+    private function _validatePGT(&$validate_url,$text_response,$tree_response)
+    {
+        phpCAS::traceBegin();
+        if ( $tree_response->getElementsByTagName("proxyGrantingTicket")->length == 0) {
+            phpCAS::trace('<proxyGrantingTicket> not found');
+            // authentication succeded, but no PGT Iou was transmitted
+            throw new CAS_AuthenticationException(
+                $this, 'Ticket validated but no PGT Iou transmitted',
+                $validate_url, false/*$no_response*/, false/*$bad_response*/,
+                $text_response
+            );
+        } else {
+            // PGT Iou transmitted, extract it
+            $pgt_iou = trim($tree_response->getElementsByTagName("proxyGrantingTicket")->item(0)->nodeValue);
+            if (preg_match('/PGTIOU-[\.\-\w]/', $pgt_iou)) {
+                $pgt = $this->_loadPGT($pgt_iou);
+                if ( $pgt == false ) {
+                    phpCAS::trace('could not load PGT');
+                    throw new CAS_AuthenticationException(
+                        $this, 'PGT Iou was transmitted but PGT could not be retrieved',
+                        $validate_url, false/*$no_response*/,
+                        false/*$bad_response*/, $text_response
+                    );
+                }
+                $this->_setPGT($pgt);
+            } else {
+                phpCAS::trace('PGTiou format error');
+                throw new CAS_AuthenticationException(
+                    $this, 'PGT Iou was transmitted but has wrong format',
+                    $validate_url, false/*$no_response*/, false/*$bad_response*/,
+                    $text_response
+                );
+            }
+        }
+        phpCAS::traceEnd(true);
+        return true;
+    }
+
+    // ########################################################################
+    //  PGT VALIDATION
+    // ########################################################################
+
+    /**
+     * This method is used to retrieve PT's from the CAS server thanks to a PGT.
+     *
+     * @param string $target_service the service to ask for with the PT.
+     * @param string &$err_code      an error code (PHPCAS_SERVICE_OK on success).
+     * @param string &$err_msg       an error message (empty on success).
+     *
+     * @return a Proxy Ticket, or false on error.
+     */
+    public function retrievePT($target_service,&$err_code,&$err_msg)
+    {
+        phpCAS::traceBegin();
+
+        // by default, $err_msg is set empty and $pt to true. On error, $pt is
+        // set to false and $err_msg to an error message. At the end, if $pt is false
+        // and $error_msg is still empty, it is set to 'invalid response' (the most
+        // commonly encountered error).
+        $err_msg = '';
+
+        // build the URL to retrieve the PT
+        $cas_url = $this->getServerProxyURL().'?targetService='.urlencode($target_service).'&pgt='.$this->_getPGT();
+
+        // open and read the URL
+        if ( !$this->_readURL($cas_url, $headers, $cas_response, $err_msg) ) {
+            phpCAS::trace('could not open URL \''.$cas_url.'\' to validate ('.$err_msg.')');
+            $err_code = PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE;
+            $err_msg = 'could not retrieve PT (no response from the CAS server)';
+            phpCAS::traceEnd(false);
+            return false;
+        }
+
+        $bad_response = false;
+
+        if ( !$bad_response ) {
+            // create new DOMDocument object
+            $dom = new DOMDocument();
+            // Fix possible whitspace problems
+            $dom->preserveWhiteSpace = false;
+            // read the response of the CAS server into a DOM object
+            if ( !($dom->loadXML($cas_response))) {
+                phpCAS::trace('dom->loadXML() failed');
+                // read failed
+                $bad_response = true;
+            }
+        }
+
+        if ( !$bad_response ) {
+            // read the root node of the XML tree
+            if ( !($root = $dom->documentElement) ) {
+                phpCAS::trace('documentElement failed');
+                // read failed
+                $bad_response = true;
+            }
+        }
+
+        if ( !$bad_response ) {
+            // insure that tag name is 'serviceResponse'
+            if ( $root->localName != 'serviceResponse' ) {
+                phpCAS::trace('localName failed');
+                // bad root node
+                $bad_response = true;
+            }
+        }
+
+        if ( !$bad_response ) {
+            // look for a proxySuccess tag
+            if ( $root->getElementsByTagName("proxySuccess")->length != 0) {
+                $proxy_success_list = $root->getElementsByTagName("proxySuccess");
+
+                // authentication succeded, look for a proxyTicket tag
+                if ( $proxy_success_list->item(0)->getElementsByTagName("proxyTicket")->length != 0) {
+                    $err_code = PHPCAS_SERVICE_OK;
+                    $err_msg = '';
+                    $pt = trim($proxy_success_list->item(0)->getElementsByTagName("proxyTicket")->item(0)->nodeValue);
+                    phpCAS::trace('original PT: '.trim($pt));
+                    phpCAS::traceEnd($pt);
+                    return $pt;
+                } else {
+                    phpCAS::trace('<proxySuccess> was found, but not <proxyTicket>');
+                }
+            } else if ($root->getElementsByTagName("proxyFailure")->length != 0) {
+                // look for a proxyFailure tag
+                $proxy_failure_list = $root->getElementsByTagName("proxyFailure");
+
+                // authentication failed, extract the error
+                $err_code = PHPCAS_SERVICE_PT_FAILURE;
+                $err_msg = 'PT retrieving failed (code=`'
+                .$proxy_failure_list->item(0)->getAttribute('code')
+                .'\', message=`'
+                .trim($proxy_failure_list->item(0)->nodeValue)
+                .'\')';
+                phpCAS::traceEnd(false);
+                return false;
+            } else {
+                phpCAS::trace('neither <proxySuccess> nor <proxyFailure> found');
+            }
+        }
+
+        // at this step, we are sure that the response of the CAS server was
+        // illformed
+        $err_code = PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE;
+        $err_msg = 'Invalid response from the CAS server (response=`'.$cas_response.'\')';
+
+        phpCAS::traceEnd(false);
+        return false;
+    }
+
+    /** @} */
+
+    // ########################################################################
+    // READ CAS SERVER ANSWERS
+    // ########################################################################
+
+    /**
+     * @addtogroup internalMisc
+     * @{
+     */
+
+    /**
+     * This method is used to acces a remote URL.
+     *
+     * @param string $url      the URL to access.
+     * @param string &$headers an array containing the HTTP header lines of the
+     * response (an empty array on failure).
+     * @param string &$body    the body of the response, as a string (empty on
+     * failure).
+     * @param string &$err_msg an error message, filled on failure.
+     *
+     * @return true on success, false otherwise (in this later case, $err_msg
+     * contains an error message).
+     */
+    private function _readURL($url, &$headers, &$body, &$err_msg)
+    {
+        phpCAS::traceBegin();
+        $className = $this->_requestImplementation;
+        $request = new $className();
+
+        if (count($this->_curl_options)) {
+            $request->setCurlOptions($this->_curl_options);
+        }
+
+        $request->setUrl($url);
+
+        if (empty($this->_cas_server_ca_cert) && !$this->_no_cas_server_validation) {
+            phpCAS::error('one of the methods phpCAS::setCasServerCACert() or phpCAS::setNoCasServerValidation() must be called.');
+        }
+        if ($this->_cas_server_ca_cert != '') {
+            $request->setSslCaCert($this->_cas_server_ca_cert, $this->_cas_server_cn_validate);
+        }
+
+        // add extra stuff if SAML
+        if ($this->getServerVersion() == SAML_VERSION_1_1) {
+            $request->addHeader("soapaction: http://www.oasis-open.org/committees/security");
+            $request->addHeader("cache-control: no-cache");
+            $request->addHeader("pragma: no-cache");
+            $request->addHeader("accept: text/xml");
+            $request->addHeader("connection: keep-alive");
+            $request->addHeader("content-type: text/xml");
+            $request->makePost();
+            $request->setPostBody($this->_buildSAMLPayload());
+        }
+
+        if ($request->send()) {
+            $headers = $request->getResponseHeaders();
+            $body = $request->getResponseBody();
+            $err_msg = '';
+            phpCAS::traceEnd(true);
+            return true;
+        } else {
+            $headers = '';
+            $body = '';
+            $err_msg = $request->getErrorMessage();
+            phpCAS::traceEnd(false);
+            return false;
+        }
+    }
+
+    /**
+     * This method is used to build the SAML POST body sent to /samlValidate URL.
+     *
+     * @return the SOAP-encased SAMLP artifact (the ticket).
+     */
+    private function _buildSAMLPayload()
+    {
+        phpCAS::traceBegin();
+
+        //get the ticket
+        $sa = $this->getTicket();
+
+        $body=SAML_SOAP_ENV.SAML_SOAP_BODY.SAMLP_REQUEST.SAML_ASSERTION_ARTIFACT.$sa.SAML_ASSERTION_ARTIFACT_CLOSE.SAMLP_REQUEST_CLOSE.SAML_SOAP_BODY_CLOSE.SAML_SOAP_ENV_CLOSE;
+
+        phpCAS::traceEnd($body);
+        return ($body);
+    }
+
+    /** @} **/
+
+    // ########################################################################
+    // ACCESS TO EXTERNAL SERVICES
+    // ########################################################################
+
+    /**
+     * @addtogroup internalProxyServices
+     * @{
+     */
+
+
+    /**
+     * Answer a proxy-authenticated service handler.
+     *
+     * @param string $type The service type. One of:
+     * PHPCAS_PROXIED_SERVICE_HTTP_GET, PHPCAS_PROXIED_SERVICE_HTTP_POST,
+     * PHPCAS_PROXIED_SERVICE_IMAP
+     *
+     * @return CAS_ProxiedService
+     * @throws InvalidArgumentException If the service type is unknown.
+     */
+    public function getProxiedService ($type)
+    {
+        switch ($type) {
+        case PHPCAS_PROXIED_SERVICE_HTTP_GET:
+        case PHPCAS_PROXIED_SERVICE_HTTP_POST:
+            $requestClass = $this->_requestImplementation;
+            $request = new $requestClass();
+            if (count($this->_curl_options)) {
+                $request->setCurlOptions($this->_curl_options);
+            }
+            $proxiedService = new $type($request, $this->_serviceCookieJar);
+            if ($proxiedService instanceof CAS_ProxiedService_Testable) {
+                $proxiedService->setCasClient($this);
+            }
+            return $proxiedService;
+        case PHPCAS_PROXIED_SERVICE_IMAP;
+            $proxiedService = new CAS_ProxiedService_Imap($this->getUser());
+            if ($proxiedService instanceof CAS_ProxiedService_Testable) {
+                $proxiedService->setCasClient($this);
+            }
+            return $proxiedService;
+        default:
+            throw new CAS_InvalidArgumentException("Unknown proxied-service type, $type.");
+        }
+    }
+
+    /**
+     * Initialize a proxied-service handler with the proxy-ticket it should use.
+     *
+     * @param CAS_ProxiedService $proxiedService service handler
+     *
+     * @return void
+     *
+     * @throws CAS_ProxyTicketException If there is a proxy-ticket failure.
+     *		The code of the Exception will be one of:
+     *			PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE
+     *			PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE
+     *			PHPCAS_SERVICE_PT_FAILURE
+     * @throws CAS_ProxiedService_Exception If there is a failure getting the
+     * url from the proxied service.
+     */
+    public function initializeProxiedService (CAS_ProxiedService $proxiedService)
+    {
+        $url = $proxiedService->getServiceUrl();
+        if (!is_string($url)) {
+            throw new CAS_ProxiedService_Exception("Proxied Service ".get_class($proxiedService)."->getServiceUrl() should have returned a string, returned a ".gettype($url)." instead.");
+        }
+        $pt = $this->retrievePT($url, $err_code, $err_msg);
+        if (!$pt) {
+            throw new CAS_ProxyTicketException($err_msg, $err_code);
+        }
+        $proxiedService->setProxyTicket($pt);
+    }
+
+    /**
+     * This method is used to access an HTTP[S] service.
+     *
+     * @param string $url       the service to access.
+     * @param int    &$err_code an error code Possible values are
+     * PHPCAS_SERVICE_OK (on success), PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE,
+     * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE, PHPCAS_SERVICE_PT_FAILURE,
+     * PHPCAS_SERVICE_NOT_AVAILABLE.
+     * @param string &$output   the output of the service (also used to give an error
+     * message on failure).
+     *
+     * @return true on success, false otherwise (in this later case, $err_code
+     * gives the reason why it failed and $output contains an error message).
+     */
+    public function serviceWeb($url,&$err_code,&$output)
+    {
+        try {
+            $service = $this->getProxiedService(PHPCAS_PROXIED_SERVICE_HTTP_GET);
+            $service->setUrl($url);
+            $service->send();
+            $output = $service->getResponseBody();
+            $err_code = PHPCAS_SERVICE_OK;
+            return true;
+        } catch (CAS_ProxyTicketException $e) {
+            $err_code = $e->getCode();
+            $output = $e->getMessage();
+            return false;
+        } catch (CAS_ProxiedService_Exception $e) {
+            $lang = $this->getLangObj();
+            $output = sprintf($lang->getServiceUnavailable(), $url, $e->getMessage());
+            $err_code = PHPCAS_SERVICE_NOT_AVAILABLE;
+            return false;
+        }
+    }
+
+    /**
+     * This method is used to access an IMAP/POP3/NNTP service.
+     *
+     * @param string $url        a string giving the URL of the service, including
+     * the mailing box for IMAP URLs, as accepted by imap_open().
+     * @param string $serviceUrl a string giving for CAS retrieve Proxy ticket
+     * @param string $flags      options given to imap_open().
+     * @param int    &$err_code  an error code Possible values are
+     * PHPCAS_SERVICE_OK (on success), PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE,
+     * PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE, PHPCAS_SERVICE_PT_FAILURE,
+     *  PHPCAS_SERVICE_NOT_AVAILABLE.
+     * @param string &$err_msg   an error message on failure
+     * @param string &$pt        the Proxy Ticket (PT) retrieved from the CAS
+     * server to access the URL on success, false on error).
+     *
+     * @return object an IMAP stream on success, false otherwise (in this later
+     *  case, $err_code gives the reason why it failed and $err_msg contains an
+     *  error message).
+     */
+    public function serviceMail($url,$serviceUrl,$flags,&$err_code,&$err_msg,&$pt)
+    {
+        try {
+            $service = $this->getProxiedService(PHPCAS_PROXIED_SERVICE_IMAP);
+            $service->setServiceUrl($serviceUrl);
+            $service->setMailbox($url);
+            $service->setOptions($flags);
+
+            $stream = $service->open();
+            $err_code = PHPCAS_SERVICE_OK;
+            $pt = $service->getImapProxyTicket();
+            return $stream;
+        } catch (CAS_ProxyTicketException $e) {
+            $err_msg = $e->getMessage();
+            $err_code = $e->getCode();
+            $pt = false;
+            return false;
+        } catch (CAS_ProxiedService_Exception $e) {
+            $lang = $this->getLangObj();
+            $err_msg = sprintf(
+                $lang->getServiceUnavailable(),
+                $url,
+                $e->getMessage()
+            );
+            $err_code = PHPCAS_SERVICE_NOT_AVAILABLE;
+            $pt = false;
+            return false;
+        }
+    }
+
+    /** @} **/
+
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+    // XX                                                                    XX
+    // XX                  PROXIED CLIENT FEATURES (CAS 2.0)                 XX
+    // XX                                                                    XX
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+    // ########################################################################
+    //  PT
+    // ########################################################################
+    /**
+    * @addtogroup internalService
+    * @{
+    */
+
+    /**
+     * This array will store a list of proxies in front of this application. This
+     * property will only be populated if this script is being proxied rather than
+     * accessed directly.
+     *
+     * It is set in CAS_Client::validateCAS20() and can be read by
+     * CAS_Client::getProxies()
+     *
+     * @access private
+     */
+    private $_proxies = array();
+
+    /**
+     * Answer an array of proxies that are sitting in front of this application.
+     *
+     * This method will only return a non-empty array if we have received and
+     * validated a Proxy Ticket.
+     *
+     * @return array
+     * @access public
+     */
+    public function getProxies()
+    {
+        return $this->_proxies;
+    }
+
+    /**
+     * Set the Proxy array, probably from persistant storage.
+     *
+     * @param array $proxies An array of proxies
+     *
+     * @return void
+     * @access private
+     */
+    private function _setProxies($proxies)
+    {
+        $this->_proxies = $proxies;
+        if (!empty($proxies)) {
+            // For proxy-authenticated requests people are not viewing the URL
+            // directly since the client is another application making a
+            // web-service call.
+            // Because of this, stripping the ticket from the URL is unnecessary
+            // and causes another web-service request to be performed. Additionally,
+            // if session handling on either the client or the server malfunctions
+            // then the subsequent request will not complete successfully.
+            $this->setNoClearTicketsFromUrl();
+        }
+    }
+
+    /**
+     * A container of patterns to be allowed as proxies in front of the cas client.
+     *
+     * @var CAS_ProxyChain_AllowedList
+     */
+    private $_allowed_proxy_chains;
+
+    /**
+     * Answer the CAS_ProxyChain_AllowedList object for this client.
+     *
+     * @return CAS_ProxyChain_AllowedList
+     */
+    public function getAllowedProxyChains ()
+    {
+        if (empty($this->_allowed_proxy_chains)) {
+            $this->_allowed_proxy_chains = new CAS_ProxyChain_AllowedList();
+        }
+        return $this->_allowed_proxy_chains;
+    }
+
+    /** @} */
+    // ########################################################################
+    //  PT VALIDATION
+    // ########################################################################
+    /**
+    * @addtogroup internalProxied
+    * @{
+    */
+
+    /**
+     * This method is used to validate a cas 2.0 ST or PT; halt on failure
+     * Used for all CAS 2.0 validations
+     *
+     * @param string &$validate_url  the url of the reponse
+     * @param string &$text_response the text of the repsones
+     * @param string &$tree_response the domxml tree of the respones
+     *
+     * @return bool true when successfull and issue a CAS_AuthenticationException
+     * and false on an error
+     */
+    public function validateCAS20(&$validate_url,&$text_response,&$tree_response)
+    {
+        phpCAS::traceBegin();
+        phpCAS::trace($text_response);
+        $result = false;
+        // build the URL to validate the ticket
+        if ($this->getAllowedProxyChains()->isProxyingAllowed()) {
+            $validate_url = $this->getServerProxyValidateURL().'&ticket='.$this->getTicket();
+        } else {
+            $validate_url = $this->getServerServiceValidateURL().'&ticket='.$this->getTicket();
+        }
+
+        if ( $this->isProxy() ) {
+            // pass the callback url for CAS proxies
+            $validate_url .= '&pgtUrl='.urlencode($this->_getCallbackURL());
+        }
+
+        // open and read the URL
+        if ( !$this->_readURL($validate_url, $headers, $text_response, $err_msg) ) {
+            phpCAS::trace('could not open URL \''.$validate_url.'\' to validate ('.$err_msg.')');
+            throw new CAS_AuthenticationException(
+                $this, 'Ticket not validated', $validate_url,
+                true/*$no_response*/
+            );
+            $result = false;
+        }
+
+        // create new DOMDocument object
+        $dom = new DOMDocument();
+        // Fix possible whitspace problems
+        $dom->preserveWhiteSpace = false;
+        // CAS servers should only return data in utf-8
+        $dom->encoding = "utf-8";
+        // read the response of the CAS server into a DOMDocument object
+        if ( !($dom->loadXML($text_response))) {
+            // read failed
+            throw new CAS_AuthenticationException(
+                $this, 'Ticket not validated', $validate_url,
+                false/*$no_response*/, true/*$bad_response*/, $text_response
+            );
+            $result = false;
+        } else if ( !($tree_response = $dom->documentElement) ) {
+            // read the root node of the XML tree
+            // read failed
+            throw new CAS_AuthenticationException(
+                $this, 'Ticket not validated', $validate_url,
+                false/*$no_response*/, true/*$bad_response*/, $text_response
+            );
+            $result = false;
+        } else if ($tree_response->localName != 'serviceResponse') {
+            // insure that tag name is 'serviceResponse'
+            // bad root node
+            throw new CAS_AuthenticationException(
+                $this, 'Ticket not validated', $validate_url,
+                false/*$no_response*/, true/*$bad_response*/, $text_response
+            );
+            $result = false;
+        } else if ($tree_response->getElementsByTagName("authenticationSuccess")->length != 0) {
+            // authentication succeded, extract the user name
+            $success_elements = $tree_response->getElementsByTagName("authenticationSuccess");
+            if ( $success_elements->item(0)->getElementsByTagName("user")->length == 0) {
+                // no user specified => error
+                throw new CAS_AuthenticationException(
+                    $this, 'Ticket not validated', $validate_url,
+                    false/*$no_response*/, true/*$bad_response*/, $text_response
+                );
+                $result = false;
+            } else {
+                $this->_setUser(trim($success_elements->item(0)->getElementsByTagName("user")->item(0)->nodeValue));
+                $this->_readExtraAttributesCas20($success_elements);
+                // Store the proxies we are sitting behind for authorization checking
+                $proxyList = array();
+                if ( sizeof($arr = $success_elements->item(0)->getElementsByTagName("proxy")) > 0) {
+                    foreach ($arr as $proxyElem) {
+                        phpCAS::trace("Found Proxy: ".$proxyElem->nodeValue);
+                        $proxyList[] = trim($proxyElem->nodeValue);
+                    }
+                    $this->_setProxies($proxyList);
+                    phpCAS::trace("Storing Proxy List");
+                }
+                // Check if the proxies in front of us are allowed
+                if (!$this->getAllowedProxyChains()->isProxyListAllowed($proxyList)) {
+                    throw new CAS_AuthenticationException(
+                        $this, 'Proxy not allowed', $validate_url,
+                        false/*$no_response*/, true/*$bad_response*/,
+                        $text_response
+                    );
+                    $result = false;
+                } else {
+                    $result = true;
+                }
+            }
+        } else if ( $tree_response->getElementsByTagName("authenticationFailure")->length != 0) {
+            // authentication succeded, extract the error code and message
+            $auth_fail_list = $tree_response->getElementsByTagName("authenticationFailure");
+            throw new CAS_AuthenticationException(
+                $this, 'Ticket not validated', $validate_url,
+                false/*$no_response*/, false/*$bad_response*/,
+                $text_response,
+                $auth_fail_list->item(0)->getAttribute('code')/*$err_code*/,
+                trim($auth_fail_list->item(0)->nodeValue)/*$err_msg*/
+            );
+            $result = false;
+        } else {
+            throw new CAS_AuthenticationException(
+                $this, 'Ticket not validated', $validate_url,
+                false/*$no_response*/, true/*$bad_response*/,
+                $text_response
+            );
+            $result = false;
+        }
+        if ($result) {
+            $this->_renameSession($this->getTicket());
+        }
+        // at this step, Ticket has been validated and $this->_user has been set,
+
+        phpCAS::traceEnd($result);
+        return $result;
+    }
+
+
+    /**
+     * This method will parse the DOM and pull out the attributes from the XML
+     * payload and put them into an array, then put the array into the session.
+     *
+     * @param string $success_elements payload of the response
+     *
+     * @return bool true when successfull, halt otherwise by calling
+     * CAS_Client::_authError().
+     */
+    private function _readExtraAttributesCas20($success_elements)
+    {
+        phpCAS::traceBegin();
+
+        $extra_attributes = array();
+
+        // "Jasig Style" Attributes:
+        //
+        // 	<cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>
+        // 		<cas:authenticationSuccess>
+        // 			<cas:user>jsmith</cas:user>
+        // 			<cas:attributes>
+        // 				<cas:attraStyle>RubyCAS</cas:attraStyle>
+        // 				<cas:surname>Smith</cas:surname>
+        // 				<cas:givenName>John</cas:givenName>
+        // 				<cas:memberOf>CN=Staff,OU=Groups,DC=example,DC=edu</cas:memberOf>
+        // 				<cas:memberOf>CN=Spanish Department,OU=Departments,OU=Groups,DC=example,DC=edu</cas:memberOf>
+        // 			</cas:attributes>
+        // 			<cas:proxyGrantingTicket>PGTIOU-84678-8a9d2sfa23casd</cas:proxyGrantingTicket>
+        // 		</cas:authenticationSuccess>
+        // 	</cas:serviceResponse>
+        //
+        if ( $success_elements->item(0)->getElementsByTagName("attributes")->length != 0) {
+            $attr_nodes = $success_elements->item(0)->getElementsByTagName("attributes");
+            phpCas :: trace("Found nested jasig style attributes");
+            if ($attr_nodes->item(0)->hasChildNodes()) {
+                // Nested Attributes
+                foreach ($attr_nodes->item(0)->childNodes as $attr_child) {
+                    phpCas :: trace("Attribute [".$attr_child->localName."] = ".$attr_child->nodeValue);
+                    $this->_addAttributeToArray($extra_attributes, $attr_child->localName, $attr_child->nodeValue);
+                }
+            }
+        } else {
+            // "RubyCAS Style" attributes
+            //
+            // 	<cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>
+            // 		<cas:authenticationSuccess>
+            // 			<cas:user>jsmith</cas:user>
+            //
+            // 			<cas:attraStyle>RubyCAS</cas:attraStyle>
+            // 			<cas:surname>Smith</cas:surname>
+            // 			<cas:givenName>John</cas:givenName>
+            // 			<cas:memberOf>CN=Staff,OU=Groups,DC=example,DC=edu</cas:memberOf>
+            // 			<cas:memberOf>CN=Spanish Department,OU=Departments,OU=Groups,DC=example,DC=edu</cas:memberOf>
+            //
+            // 			<cas:proxyGrantingTicket>PGTIOU-84678-8a9d2sfa23casd</cas:proxyGrantingTicket>
+            // 		</cas:authenticationSuccess>
+            // 	</cas:serviceResponse>
+            //
+            phpCas :: trace("Testing for rubycas style attributes");
+            $childnodes = $success_elements->item(0)->childNodes;
+            foreach ($childnodes as $attr_node) {
+                switch ($attr_node->localName) {
+                case 'user':
+                case 'proxies':
+                case 'proxyGrantingTicket':
+                    continue;
+                default:
+                    if (strlen(trim($attr_node->nodeValue))) {
+                        phpCas :: trace("Attribute [".$attr_node->localName."] = ".$attr_node->nodeValue);
+                        $this->_addAttributeToArray($extra_attributes, $attr_node->localName, $attr_node->nodeValue);
+                    }
+                }
+            }
+        }
+
+        // "Name-Value" attributes.
+        //
+        // Attribute format from these mailing list thread:
+        // http://jasig.275507.n4.nabble.com/CAS-attributes-and-how-they-appear-in-the-CAS-response-td264272.html
+        // Note: This is a less widely used format, but in use by at least two institutions.
+        //
+        // 	<cas:serviceResponse xmlns:cas='http://www.yale.edu/tp/cas'>
+        // 		<cas:authenticationSuccess>
+        // 			<cas:user>jsmith</cas:user>
+        //
+        // 			<cas:attribute name='attraStyle' value='Name-Value' />
+        // 			<cas:attribute name='surname' value='Smith' />
+        // 			<cas:attribute name='givenName' value='John' />
+        // 			<cas:attribute name='memberOf' value='CN=Staff,OU=Groups,DC=example,DC=edu' />
+        // 			<cas:attribute name='memberOf' value='CN=Spanish Department,OU=Departments,OU=Groups,DC=example,DC=edu' />
+        //
+        // 			<cas:proxyGrantingTicket>PGTIOU-84678-8a9d2sfa23casd</cas:proxyGrantingTicket>
+        // 		</cas:authenticationSuccess>
+        // 	</cas:serviceResponse>
+        //
+        if (!count($extra_attributes) && $success_elements->item(0)->getElementsByTagName("attribute")->length != 0) {
+            $attr_nodes = $success_elements->item(0)->getElementsByTagName("attribute");
+            $firstAttr = $attr_nodes->item(0);
+            if (!$firstAttr->hasChildNodes() && $firstAttr->hasAttribute('name') && $firstAttr->hasAttribute('value')) {
+                phpCas :: trace("Found Name-Value style attributes");
+                // Nested Attributes
+                foreach ($attr_nodes as $attr_node) {
+                    if ($attr_node->hasAttribute('name') && $attr_node->hasAttribute('value')) {
+                        phpCas :: trace("Attribute [".$attr_node->getAttribute('name')."] = ".$attr_node->getAttribute('value'));
+                        $this->_addAttributeToArray($extra_attributes, $attr_node->getAttribute('name'), $attr_node->getAttribute('value'));
+                    }
+                }
+            }
+        }
+
+        $this->setAttributes($extra_attributes);
+        phpCAS::traceEnd();
+        return true;
+    }
+
+    /**
+     * Add an attribute value to an array of attributes.
+     *
+     * @param array  &$attributeArray reference to array
+     * @param string $name            name of attribute
+     * @param string $value           value of attribute
+     *
+     * @return void
+     */
+    private function _addAttributeToArray(array &$attributeArray, $name, $value)
+    {
+        // If multiple attributes exist, add as an array value
+        if (isset($attributeArray[$name])) {
+            // Initialize the array with the existing value
+            if (!is_array($attributeArray[$name])) {
+                $existingValue = $attributeArray[$name];
+                $attributeArray[$name] = array($existingValue);
+            }
+
+            $attributeArray[$name][] = trim($value);
+        } else {
+            $attributeArray[$name] = trim($value);
+        }
+    }
+
+    /** @} */
+
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+    // XX                                                                    XX
+    // XX                               MISC                                 XX
+    // XX                                                                    XX
+    // XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+
+    /**
+     * @addtogroup internalMisc
+     * @{
+     */
+
+    // ########################################################################
+    //  URL
+    // ########################################################################
+    /**
+    * the URL of the current request (without any ticket CGI parameter). Written
+    * and read by CAS_Client::getURL().
+    *
+    * @hideinitializer
+    */
+    private $_url = '';
+
+
+    /**
+     * This method sets the URL of the current request
+     *
+     * @param string $url url to set for service
+     *
+     * @return void
+     */
+    public function setURL($url)
+    {
+        $this->_url = $url;
+    }
+
+    /**
+     * This method returns the URL of the current request (without any ticket
+     * CGI parameter).
+     *
+     * @return The URL
+     */
+    public function getURL()
+    {
+        phpCAS::traceBegin();
+        // the URL is built when needed only
+        if ( empty($this->_url) ) {
+            $final_uri = '';
+            // remove the ticket if present in the URL
+            $final_uri = ($this->_isHttps()) ? 'https' : 'http';
+            $final_uri .= '://';
+
+            $final_uri .= $this->_getServerUrl();
+            $request_uri	= explode('?', $_SERVER['REQUEST_URI'], 2);
+            $final_uri		.= $request_uri[0];
+
+            if (isset($request_uri[1]) && $request_uri[1]) {
+                $query_string= $this->_removeParameterFromQueryString('ticket', $request_uri[1]);
+
+                // If the query string still has anything left, append it to the final URI
+                if ($query_string !== '') {
+                    $final_uri	.= "?$query_string";
+                }
+            }
+
+            phpCAS::trace("Final URI: $final_uri");
+            $this->setURL($final_uri);
+        }
+        phpCAS::traceEnd($this->_url);
+        return $this->_url;
+    }
+
+
+    /**
+     * Try to figure out the server URL with possible Proxys / Ports etc.
+     *
+     * @return string Server URL with domain:port
+     */
+    private function _getServerUrl()
+    {
+        $server_url = '';
+        if (!empty($_SERVER['HTTP_X_FORWARDED_HOST'])) {
+            // explode the host list separated by comma and use the first host
+            $hosts = explode(',', $_SERVER['HTTP_X_FORWARDED_HOST']);
+            $server_url = $hosts[0];
+        } else if (!empty($_SERVER['HTTP_X_FORWARDED_SERVER'])) {
+            $server_url = $_SERVER['HTTP_X_FORWARDED_SERVER'];
+        } else {
+            if (empty($_SERVER['SERVER_NAME'])) {
+                $server_url = $_SERVER['HTTP_HOST'];
+            } else {
+                $server_url = $_SERVER['SERVER_NAME'];
+            }
+        }
+        if (!strpos($server_url, ':')) {
+            if (empty($_SERVER['HTTP_X_FORWARDED_PORT'])) {
+                $server_port = '';
+                //$server_port = $_SERVER['SERVER_PORT'];
+            } else {
+                $server_port = '';
+                #$server_port = $_SERVER['HTTP_X_FORWARDED_PORT'];
+            }
+
+            if ( ($this->_isHttps() && $server_port!=443)
+                || (!$this->_isHttps() && $server_port!=80)
+            ) {
+                $server_url .= ':';
+                $server_url .= $server_port;
+            }
+        }
+        return $server_url;
+    }
+
+    /**
+     * This method checks to see if the request is secured via HTTPS
+     *
+     * @return bool true if https, false otherwise
+     */
+    private function _isHttps()
+    {
+        if ( isset($_SERVER['HTTPS']) && !empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') {
+            return true;
+        } else {
+            return false;
+        }
+    }
+
+    /**
+     * Removes a parameter from a query string
+     *
+     * @param string $parameterName name of parameter
+     * @param string $queryString   query string
+     *
+     * @return string new query string
+     *
+     * @link http://stackoverflow.com/questions/1842681/regular-expression-to-remove-one-parameter-from-query-string
+     */
+    private function _removeParameterFromQueryString($parameterName, $queryString)
+    {
+        $parameterName	= preg_quote($parameterName);
+        return preg_replace("/&$parameterName(=[^&]*)?|^$parameterName(=[^&]*)?&?/", '', $queryString);
+    }
+
+    /**
+     * This method is used to append query parameters to an url. Since the url
+     * might already contain parameter it has to be detected and to build a proper
+     * URL
+     *
+     * @param string $url   base url to add the query params to
+     * @param string $query params in query form with & separated
+     *
+     * @return url with query params
+     */
+    private function _buildQueryUrl($url, $query)
+    {
+        $url .= (strstr($url, '?') === false) ? '?' : '&';
+        $url .= $query;
+        return $url;
+    }
+
+    /**
+     * Renaming the session
+     *
+     * @param string $ticket name of the ticket
+     *
+     * @return void
+     */
+    private function _renameSession($ticket)
+    {
+        phpCAS::traceBegin();
+        if ($this->getChangeSessionID()) {
+            if (!empty($this->_user)) {
+                $old_session = $_SESSION;
+                session_destroy();
+                // set up a new session, of name based on the ticket
+                $session_id = preg_replace('/[^a-zA-Z0-9\-]/', '', $ticket);
+                phpCAS :: trace("Session ID: ".$session_id);
+                session_id($session_id);
+                session_start();
+                phpCAS :: trace("Restoring old session vars");
+                $_SESSION = $old_session;
+            } else {
+                phpCAS :: error('Session should only be renamed after successfull authentication');
+            }
+        } else {
+            phpCAS :: trace("Skipping session rename since phpCAS is not handling the session.");
+        }
+        phpCAS::traceEnd();
+    }
+
+
+    // ########################################################################
+    //  AUTHENTICATION ERROR HANDLING
+    // ########################################################################
+    /**
+    * This method is used to print the HTML output when the user was not
+    * authenticated.
+    *
+    * @param string $failure      the failure that occured
+    * @param string $cas_url      the URL the CAS server was asked for
+    * @param bool   $no_response  the response from the CAS server (other
+    * parameters are ignored if true)
+    * @param bool   $bad_response bad response from the CAS server ($err_code
+    * and $err_msg ignored if true)
+    * @param string $cas_response the response of the CAS server
+    * @param int    $err_code     the error code given by the CAS server
+    * @param string $err_msg      the error message given by the CAS server
+    *
+    * @return void
+    */
+    private function _authError(
+        $failure,
+        $cas_url,
+        $no_response,
+        $bad_response='',
+        $cas_response='',
+        $err_code='',
+        $err_msg=''
+    ) {
+        phpCAS::traceBegin();
+        $lang = $this->getLangObj();
+        $this->printHTMLHeader($lang->getAuthenticationFailed());
+        printf($lang->getYouWereNotAuthenticated(), htmlentities($this->getURL()), $_SERVER['SERVER_ADMIN']);
+        phpCAS::trace('CAS URL: '.$cas_url);
+        phpCAS::trace('Authentication failure: '.$failure);
+        if ( $no_response ) {
+            phpCAS::trace('Reason: no response from the CAS server');
+        } else {
+            if ( $bad_response ) {
+                phpCAS::trace('Reason: bad response from the CAS server');
+            } else {
+                switch ($this->getServerVersion()) {
+                case CAS_VERSION_1_0:
+                    phpCAS::trace('Reason: CAS error');
+                    break;
+                case CAS_VERSION_2_0:
+                    if ( empty($err_code) ) {
+                        phpCAS::trace('Reason: no CAS error');
+                    } else {
+                        phpCAS::trace('Reason: ['.$err_code.'] CAS error: '.$err_msg);
+                    }
+                    break;
+                }
+            }
+            phpCAS::trace('CAS response: '.$cas_response);
+        }
+        $this->printHTMLFooter();
+        phpCAS::traceExit();
+        throw new CAS_GracefullTerminationException();
+    }
+
+    // ########################################################################
+    //  PGTIOU/PGTID and logoutRequest rebroadcasting
+    // ########################################################################
+
+    /**
+     * Boolean of whether to rebroadcast pgtIou/pgtId and logoutRequest, and
+     * array of the nodes.
+     */
+    private $_rebroadcast = false;
+    private $_rebroadcast_nodes = array();
+
+    /**
+     * Constants used for determining rebroadcast node type.
+     */
+    const HOSTNAME = 0;
+    const IP = 1;
+
+    /**
+     * Determine the node type from the URL.
+     *
+     * @param String $nodeURL The node URL.
+     *
+     * @return string hostname
+     *
+     */
+    private function _getNodeType($nodeURL)
+    {
+        phpCAS::traceBegin();
+        if (preg_match("/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/", $nodeURL)) {
+            phpCAS::traceEnd(self::IP);
+            return self::IP;
+        } else {
+            phpCAS::traceEnd(self::HOSTNAME);
+            return self::HOSTNAME;
+        }
+    }
+
+    /**
+     * Store the rebroadcast node for pgtIou/pgtId and logout requests.
+     *
+     * @param string $rebroadcastNodeUrl The rebroadcast node URL.
+     *
+     * @return void
+     */
+    public function addRebroadcastNode($rebroadcastNodeUrl)
+    {
+        // Store the rebroadcast node and set flag
+        $this->_rebroadcast = true;
+        $this->_rebroadcast_nodes[] = $rebroadcastNodeUrl;
+    }
+
+    /**
+     * An array to store extra rebroadcast curl options.
+     */
+    private $_rebroadcast_headers = array();
+
+    /**
+     * This method is used to add header parameters when rebroadcasting
+     * pgtIou/pgtId or logoutRequest.
+     *
+     * @param string $header Header to send when rebroadcasting.
+     *
+     * @return void
+     */
+    public function addRebroadcastHeader($header)
+    {
+        $this->_rebroadcast_headers[] = $header;
+    }
+
+    /**
+     * Constants used for determining rebroadcast type (logout or pgtIou/pgtId).
+     */
+    const LOGOUT = 0;
+    const PGTIOU = 1;
+
+    /**
+     * This method rebroadcasts logout/pgtIou requests. Can be LOGOUT,PGTIOU
+     *
+     * @param int $type type of rebroadcasting.
+     *
+     * @return void
+     */
+    private function _rebroadcast($type)
+    {
+        phpCAS::traceBegin();
+
+        $rebroadcast_curl_options = array(
+        CURLOPT_FAILONERROR => 1,
+        CURLOPT_FOLLOWLOCATION => 1,
+        CURLOPT_RETURNTRANSFER => 1,
+        CURLOPT_CONNECTTIMEOUT => 1,
+        CURLOPT_TIMEOUT => 4);
+
+        // Try to determine the IP address of the server
+        if (!empty($_SERVER['SERVER_ADDR'])) {
+            $ip = $_SERVER['SERVER_ADDR'];
+        } else if (!empty($_SERVER['LOCAL_ADDR'])) {
+            // IIS 7
+            $ip = $_SERVER['LOCAL_ADDR'];
+        }
+        // Try to determine the DNS name of the server
+        if (!empty($ip)) {
+            $dns = gethostbyaddr($ip);
+        }
+        $multiClassName = 'CAS_Request_CurlMultiRequest';
+        $multiRequest = new $multiClassName();
+
+        for ($i = 0; $i < sizeof($this->_rebroadcast_nodes); $i++) {
+            if ((($this->_getNodeType($this->_rebroadcast_nodes[$i]) == self::HOSTNAME) && !empty($dns) && (stripos($this->_rebroadcast_nodes[$i], $dns) === false)) || (($this->_getNodeType($this->_rebroadcast_nodes[$i]) == self::IP) && !empty($ip) && (stripos($this->_rebroadcast_nodes[$i], $ip) === false))) {
+                phpCAS::trace('Rebroadcast target URL: '.$this->_rebroadcast_nodes[$i].$_SERVER['REQUEST_URI']);
+                $className = $this->_requestImplementation;
+                $request = new $className();
+
+                $url = $this->_rebroadcast_nodes[$i].$_SERVER['REQUEST_URI'];
+                $request->setUrl($url);
+
+                if (count($this->_rebroadcast_headers)) {
+                    $request->addHeaders($this->_rebroadcast_headers);
+                }
+
+                $request->makePost();
+                if ($type == self::LOGOUT) {
+                    // Logout request
+                    $request->setPostBody('rebroadcast=false&logoutRequest='.$_POST['logoutRequest']);
+                } else if ($type == self::PGTIOU) {
+                    // pgtIou/pgtId rebroadcast
+                    $request->setPostBody('rebroadcast=false');
+                }
+
+                $request->setCurlOptions($rebroadcast_curl_options);
+
+                $multiRequest->addRequest($request);
+            } else {
+                phpCAS::trace('Rebroadcast not sent to self: '.$this->_rebroadcast_nodes[$i].' == '.(!empty($ip)?$ip:'').'/'.(!empty($dns)?$dns:''));
+            }
+        }
+        // We need at least 1 request
+        if ($multiRequest->getNumRequests() > 0) {
+            $multiRequest->send();
+        }
+        phpCAS::traceEnd();
+    }
+
+    /** @} */
+}
+
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/CookieJar.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/CookieJar.php
new file mode 100755
index 0000000..7f1f62f
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/CookieJar.php
@@ -0,0 +1,377 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/CookieJar.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class provides access to service cookies and handles parsing of response
+ * headers to pull out cookie values.
+ *
+ * @class    CAS_CookieJar
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_CookieJar
+{
+
+    private $_cookies;
+
+    /**
+     * Create a new cookie jar by passing it a reference to an array in which it
+     * should store cookies.
+     *
+     * @param array &$storageArray Array to store cookies
+     *
+     * @return void
+     */
+    public function __construct (array &$storageArray)
+    {
+        $this->_cookies =& $storageArray;
+    }
+
+    /**
+     * Store cookies for a web service request.
+     * Cookie storage is based on RFC 2965: http://www.ietf.org/rfc/rfc2965.txt
+     *
+     * @param string $request_url      The URL that generated the response headers.
+     * @param array  $response_headers An array of the HTTP response header strings.
+     *
+     * @return void
+     *
+     * @access private
+     */
+    public function storeCookies ($request_url, $response_headers)
+    {
+        $urlParts = parse_url($request_url);
+        $defaultDomain = $urlParts['host'];
+
+        $cookies = $this->parseCookieHeaders($response_headers, $defaultDomain);
+
+        // var_dump($cookies);
+        foreach ($cookies as $cookie) {
+            // Enforce the same-origin policy by verifying that the cookie
+            // would match the url that is setting it
+            if (!$this->cookieMatchesTarget($cookie, $urlParts)) {
+                continue;
+            }
+
+            // store the cookie
+            $this->storeCookie($cookie);
+
+            phpCAS::trace($cookie['name'].' -> '.$cookie['value']);
+        }
+    }
+
+    /**
+     * Retrieve cookies applicable for a web service request.
+     * Cookie applicability is based on RFC 2965: http://www.ietf.org/rfc/rfc2965.txt
+     *
+     * @param string $request_url The url that the cookies will be for.
+     *
+     * @return array An array containing cookies. E.g. array('name' => 'val');
+     *
+     * @access private
+     */
+    public function getCookies ($request_url)
+    {
+        if (!count($this->_cookies)) {
+            return array();
+        }
+
+        // If our request URL can't be parsed, no cookies apply.
+        $target = parse_url($request_url);
+        if ($target === false) {
+            return array();
+        }
+
+        $this->expireCookies();
+
+        $matching_cookies = array();
+        foreach ($this->_cookies as $key => $cookie) {
+            if ($this->cookieMatchesTarget($cookie, $target)) {
+                $matching_cookies[$cookie['name']] = $cookie['value'];
+            }
+        }
+        return $matching_cookies;
+    }
+
+
+    /**
+     * Parse Cookies without PECL
+     * From the comments in http://php.net/manual/en/function.http-parse-cookie.php
+     *
+     * @param array  $header        array of header lines.
+     * @param string $defaultDomain The domain to use if none is specified in
+     * the cookie.
+     *
+     * @return array of cookies
+     */
+    protected function parseCookieHeaders( $header, $defaultDomain )
+    {
+        phpCAS::traceBegin();
+        $cookies = array();
+        foreach ( $header as $line ) {
+            if ( preg_match('/^Set-Cookie2?: /i', $line)) {
+                $cookies[] = $this->parseCookieHeader($line, $defaultDomain);
+            }
+        }
+
+        phpCAS::traceEnd($cookies);
+        return $cookies;
+    }
+
+    /**
+     * Parse a single cookie header line.
+     *
+     * Based on RFC2965 http://www.ietf.org/rfc/rfc2965.txt
+     *
+     * @param string $line          The header line.
+     * @param string $defaultDomain The domain to use if none is specified in
+     * the cookie.
+     *
+     * @return array
+     */
+    protected function parseCookieHeader ($line, $defaultDomain)
+    {
+        if (!$defaultDomain) {
+            throw new CAS_InvalidArgumentException('$defaultDomain was not provided.');
+        }
+
+        // Set our default values
+        $cookie = array(
+            'domain' => $defaultDomain,
+            'path' => '/',
+            'secure' => false,
+        );
+
+        $line = preg_replace('/^Set-Cookie2?: /i', '', trim($line));
+
+        // trim any trailing semicolons.
+        $line = trim($line, ';');
+
+        phpCAS::trace("Cookie Line: $line");
+
+        // This implementation makes the assumption that semicolons will not
+        // be present in quoted attribute values. While attribute values that
+        // contain semicolons are allowed by RFC2965, they are hopefully rare
+        // enough to ignore for our purposes. Most browsers make the same
+        // assumption.
+        $attributeStrings = explode(';', $line);
+
+        foreach ( $attributeStrings as $attributeString ) {
+            // split on the first equals sign and use the rest as value
+            $attributeParts = explode('=', $attributeString, 2);
+
+            $attributeName = trim($attributeParts[0]);
+            $attributeNameLC = strtolower($attributeName);
+
+            if (isset($attributeParts[1])) {
+                $attributeValue = trim($attributeParts[1]);
+                // Values may be quoted strings.
+                if (strpos($attributeValue, '"') === 0) {
+                    $attributeValue = trim($attributeValue, '"');
+                    // unescape any escaped quotes:
+                    $attributeValue = str_replace('\"', '"', $attributeValue);
+                }
+            } else {
+                $attributeValue = null;
+            }
+
+            switch ($attributeNameLC) {
+            case 'expires':
+                $cookie['expires'] = strtotime($attributeValue);
+                break;
+            case 'max-age':
+                $cookie['max-age'] = (int)$attributeValue;
+                // Set an expiry time based on the max-age
+                if ($cookie['max-age']) {
+                    $cookie['expires'] = time() + $cookie['max-age'];
+                } else {
+                    // If max-age is zero, then the cookie should be removed
+                    // imediately so set an expiry before now.
+                    $cookie['expires'] = time() - 1;
+                }
+                break;
+            case 'secure':
+                $cookie['secure'] = true;
+                break;
+            case 'domain':
+            case 'path':
+            case 'port':
+            case 'version':
+            case 'comment':
+            case 'commenturl':
+            case 'discard':
+            case 'httponly':
+                $cookie[$attributeNameLC] = $attributeValue;
+                break;
+            default:
+                $cookie['name'] = $attributeName;
+                $cookie['value'] = $attributeValue;
+            }
+        }
+
+        return $cookie;
+    }
+
+    /**
+     * Add, update, or remove a cookie.
+     *
+     * @param array $cookie A cookie array as created by parseCookieHeaders()
+     *
+     * @return void
+     *
+     * @access protected
+     */
+    protected function storeCookie ($cookie)
+    {
+        // Discard any old versions of this cookie.
+        $this->discardCookie($cookie);
+        $this->_cookies[] = $cookie;
+
+    }
+
+    /**
+     * Discard an existing cookie
+     *
+     * @param array $cookie An cookie
+     *
+     * @return void
+     *
+     * @access protected
+     */
+    protected function discardCookie ($cookie)
+    {
+        if (!isset($cookie['domain'])
+            || !isset($cookie['path'])
+            || !isset($cookie['path'])
+        ) {
+            throw new CAS_InvalidArgumentException('Invalid Cookie array passed.');
+        }
+
+        foreach ($this->_cookies as $key => $old_cookie) {
+            if ( $cookie['domain'] == $old_cookie['domain']
+                && $cookie['path'] == $old_cookie['path']
+                && $cookie['name'] == $old_cookie['name']
+            ) {
+                unset($this->_cookies[$key]);
+            }
+        }
+    }
+
+    /**
+     * Go through our stored cookies and remove any that are expired.
+     *
+     * @return void
+     *
+     * @access protected
+     */
+    protected function expireCookies ()
+    {
+        foreach ($this->_cookies as $key => $cookie) {
+            if (isset($cookie['expires']) && $cookie['expires'] < time()) {
+                unset($this->_cookies[$key]);
+            }
+        }
+    }
+
+    /**
+     * Answer true if cookie is applicable to a target.
+     *
+     * @param array $cookie An array of cookie attributes.
+     * @param array $target An array of URL attributes as generated by parse_url().
+     *
+     * @return bool
+     *
+     * @access private
+     */
+    protected function cookieMatchesTarget ($cookie, $target)
+    {
+        if (!is_array($target)) {
+            throw new CAS_InvalidArgumentException('$target must be an array of URL attributes as generated by parse_url().');
+        }
+        if (!isset($target['host'])) {
+            throw new CAS_InvalidArgumentException('$target must be an array of URL attributes as generated by parse_url().');
+        }
+
+        // Verify that the scheme matches
+        if ($cookie['secure'] && $target['scheme'] != 'https') {
+            return false;
+        }
+
+        // Verify that the host matches
+        // Match domain and mulit-host cookies
+        if (strpos($cookie['domain'], '.') === 0) {
+            // .host.domain.edu cookies are valid for host.domain.edu
+            if (substr($cookie['domain'], 1) == $target['host']) {
+                // continue with other checks
+            } else {
+                // non-exact host-name matches.
+                // check that the target host a.b.c.edu is within .b.c.edu
+                $pos = strripos($target['host'], $cookie['domain']);
+                if (!$pos) {
+                    return false;
+                }
+                // verify that the cookie domain is the last part of the host.
+                if ($pos + strlen($cookie['domain']) != strlen($target['host'])) {
+                    return false;
+                }
+                // verify that the host name does not contain interior dots as per
+                // RFC 2965 section 3.3.2  Rejecting Cookies
+                // http://www.ietf.org/rfc/rfc2965.txt
+                $hostname = substr($target['host'], 0, $pos);
+                if (strpos($hostname, '.') !== false) {
+                    return false;
+                }
+            }
+        } else {
+            // If the cookie host doesn't begin with '.', the host must case-insensitive
+            // match exactly
+            if (strcasecmp($target['host'], $cookie['domain']) !== 0) {
+                return false;
+            }
+        }
+
+        // Verify that the port matches
+        if (isset($cookie['ports']) && !in_array($target['port'], $cookie['ports'])) {
+            return false;
+        }
+
+        // Verify that the path matches
+        if (strpos($target['path'], $cookie['path']) !== 0) {
+            return false;
+        }
+
+        return true;
+    }
+
+}
+
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Exception.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Exception.php
new file mode 100755
index 0000000..d956d19
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Exception.php
@@ -0,0 +1,59 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Exception.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * A root exception interface for all exceptions in phpCAS.
+ *
+ * All exceptions thrown in phpCAS should implement this interface to allow them
+ * to be caught as a category by clients. Each phpCAS exception should extend
+ * an appropriate SPL exception class that best fits its type.
+ *
+ * For example, an InvalidArgumentException in phpCAS should be defined as
+ *
+ *		class CAS_InvalidArgumentException
+ *			extends InvalidArgumentException
+ *			implements CAS_Exception
+ *		{ }
+ *
+ * This definition allows the CAS_InvalidArgumentException to be caught as either
+ * an InvalidArgumentException or as a CAS_Exception.
+ *
+ * @class    CAS_Exception
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ */
+interface CAS_Exception
+{
+
+}
+?>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/GracefullTerminationException.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/GracefullTerminationException.php
new file mode 100644
index 0000000..6d845df
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/GracefullTerminationException.php
@@ -0,0 +1,86 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/GracefullTerminationException.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Joachim Fritschi <jfritschi@freenet.de>
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * An exception for terminatinating execution or to throw for unit testing
+ *
+ * @class     CAS_GracefullTerminationException.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Joachim Fritschi <jfritschi@freenet.de>
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class CAS_GracefullTerminationException
+extends RuntimeException
+implements CAS_Exception
+{
+
+    /**
+     * Test if exceptions should be thrown or if we should just exit.
+     * In production usage we want to just exit cleanly when prompting the user
+     * for a redirect without filling the error logs with uncaught exceptions.
+     * In unit testing scenarios we cannot exit or we won't be able to continue
+     * with our tests.
+     *
+     * @param string $message Message Text
+     * @param string $code    Error code
+     *
+     * @return void
+     */
+    public function __construct ($message = 'Terminate Gracefully', $code = 0)
+    {
+        // Exit cleanly to avoid filling up the logs with uncaught exceptions.
+        if (self::$_exitWhenThrown) {
+            exit;
+        } else {
+            // Throw exceptions to allow unit testing to continue;
+            parent::__construct($message, $code);
+        }
+    }
+
+    private static $_exitWhenThrown = true;
+    /**
+    * Force phpcas to thow Exceptions instead of calling exit()
+    * Needed for unit testing. Generally shouldn't be used in production due to
+    * an increase in Apache error logging if CAS_GracefulTerminiationExceptions
+    * are not caught and handled.
+    *
+    * @return void
+    */
+    public static function throwInsteadOfExiting()
+    {
+        self::$_exitWhenThrown = false;
+    }
+
+}
+?>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/InvalidArgumentException.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/InvalidArgumentException.php
new file mode 100755
index 0000000..ba43d39
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/InvalidArgumentException.php
@@ -0,0 +1,46 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/InvalidArgumentException.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Exception that denotes invalid arguments were passed.
+ *
+ * @class    CAS_InvalidArgumentException
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_InvalidArgumentException
+extends InvalidArgumentException
+implements CAS_Exception
+{
+
+}
+?>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Catalan.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Catalan.php
new file mode 100644
index 0000000..a0b64d8
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Catalan.php
@@ -0,0 +1,114 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Language/Catalan.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Iván-Benjamín García Torà <ivaniclixx@gmail.com>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Catalan language class
+ *
+ * @class    CAS_Languages_Catalan
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Iván-Benjamín García Torà <ivaniclixx@gmail.com>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_Catalan implements CAS_Languages_LanguageInterface
+{
+    /**
+    * Get the using server string
+    *
+    * @return string using server
+    */
+    public function getUsingServer()
+    {
+        return 'usant servidor';
+    }
+
+    /**
+    * Get authentication wanted string
+    *
+    * @return string authentication wanted
+    */
+    public function getAuthenticationWanted()
+    {
+        return 'Autentificació CAS necessària!';
+    }
+
+    /**
+    * Get logout string
+    *
+    * @return string logout
+    */
+    public function getLogout()
+    {
+        return 'Sortida de CAS necessària!';
+    }
+
+    /**
+    * Get the should have been redirected string
+    *
+    * @return string should habe been redirected
+    */
+    public function getShouldHaveBeenRedirected()
+    {
+        return 'Ja hauria d\ haver estat redireccionat al servidor CAS. Feu click <a href="%s">aquí</a> per a continuar.';
+    }
+
+    /**
+    * Get authentication failed string
+    *
+    * @return string authentication failed
+    */
+    public function getAuthenticationFailed()
+    {
+        return 'Autentificació CAS fallida!';
+    }
+
+    /**
+    * Get the your were not authenticated string
+    *
+    * @return string not authenticated
+    */
+    public function getYouWereNotAuthenticated()
+    {
+        return '<p>No estàs autentificat.</p><p>Pots tornar a intentar-ho fent click <a href="%s">aquí</a>.</p><p>Si el problema persisteix hauría de contactar amb l\'<a href="mailto:%s">administrador d\'aquest llocc</a>.</p>';
+    }
+
+    /**
+    * Get the service unavailable string
+    *
+    * @return string service unavailable
+    */
+    public function getServiceUnavailable()
+    {
+        return 'El servei `<b>%s</b>\' no està disponible (<b>%s</b>).';
+    }
+}
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/English.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/English.php
new file mode 100644
index 0000000..002c1ba
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/English.php
@@ -0,0 +1,114 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Language/English.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * English language class
+ *
+ * @class    CAS_Languages_English
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_English implements CAS_Languages_LanguageInterface
+{
+    /**
+     * Get the using server string
+     *
+     * @return string using server
+     */
+    public function getUsingServer()
+    {
+        return 'using server';
+    }
+
+    /**
+     * Get authentication wanted string
+     *
+     * @return string authentication wanted
+     */
+    public function getAuthenticationWanted()
+    {
+        return 'CAS Authentication wanted!';
+    }
+
+    /**
+     * Get logout string
+     *
+     * @return string logout
+     */
+    public function getLogout()
+    {
+        return 'CAS logout wanted!';
+    }
+
+    /**
+     * Get the should have been redirected string
+     *
+     * @return string should habe been redirected
+     */
+    public function getShouldHaveBeenRedirected()
+    {
+        return 'You should already have been redirected to the CAS server. Click <a href="%s">here</a> to continue.';
+    }
+
+    /**
+    * Get authentication failed string
+    *
+    * @return string authentication failed
+    */
+    public function getAuthenticationFailed()
+    {
+        return 'CAS Authentication failed!';
+    }
+
+    /**
+    * Get the your were not authenticated string
+    *
+    * @return string not authenticated
+    */
+    public function getYouWereNotAuthenticated()
+    {
+        return '<p>You were not authenticated.</p><p>You may submit your request again by clicking <a href="%s">here</a>.</p><p>If the problem persists, you may contact <a href="mailto:%s">the administrator of this site</a>.</p>';
+    }
+
+    /**
+    * Get the service unavailable string
+    *
+    * @return string service unavailable
+    */
+    public function getServiceUnavailable()
+    {
+        return 'The service `<b>%s</b>\' is not available (<b>%s</b>).';
+    }
+}
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/French.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/French.php
new file mode 100644
index 0000000..b99847a
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/French.php
@@ -0,0 +1,116 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Language/French.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * French language class
+ *
+ * @class    CAS_Languages_French
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_French implements CAS_Languages_LanguageInterface
+{
+    /**
+     * Get the using server string
+     *
+     * @return string using server
+     */
+    public function getUsingServer()
+    {
+        return 'utilisant le serveur';
+    }
+
+    /**
+     * Get authentication wanted string
+     *
+     * @return string authentication wanted
+     */
+    public function getAuthenticationWanted()
+    {
+        return 'Authentication CAS nécessaire&nbsp;!';
+    }
+
+    /**
+     * Get logout string
+     *
+     * @return string logout
+     */
+    public function getLogout()
+    {
+        return 'Déconnexion demandée&nbsp;!';
+    }
+
+    /**
+     * Get the should have been redirected string
+     *
+     * @return string should habe been redirected
+     */
+    public function getShouldHaveBeenRedirected()
+    {
+        return 'Vous auriez du etre redirigé(e) vers le serveur CAS. Cliquez <a href="%s">ici</a> pour continuer.';
+    }
+
+    /**
+     * Get authentication failed string
+     *
+     * @return string authentication failed
+     */
+    public function getAuthenticationFailed()
+    {
+        return 'Authentification CAS infructueuse&nbsp;!';
+    }
+
+    /**
+     * Get the your were not authenticated string
+     *
+     * @return string not authenticated
+     */
+    public function getYouWereNotAuthenticated()
+    {
+        return '<p>Vous n\'avez pas été authentifié(e).</p><p>Vous pouvez soumettre votre requete à nouveau en cliquant <a href="%s">ici</a>.</p><p>Si le problème persiste, vous pouvez contacter <a href="mailto:%s">l\'administrateur de ce site</a>.</p>';
+    }
+
+    /**
+     * Get the service unavailable string
+     *
+     * @return string service unavailable
+     */
+    public function getServiceUnavailable()
+    {
+        return 'Le service `<b>%s</b>\' est indisponible (<b>%s</b>)';
+    }
+}
+
+?>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/German.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/German.php
new file mode 100644
index 0000000..84199d1
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/German.php
@@ -0,0 +1,116 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Language/German.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Henrik Genssen <hg@mediafactory.de>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * German language class
+ *
+ * @class    CAS_Languages_German
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Henrik Genssen <hg@mediafactory.de>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_German implements CAS_Languages_LanguageInterface
+{
+    /**
+     * Get the using server string
+     *
+     * @return string using server
+     */
+    public function getUsingServer()
+    {
+        return 'via Server';
+    }
+
+    /**
+     * Get authentication wanted string
+     *
+     * @return string authentication wanted
+     */
+    public function getAuthenticationWanted()
+    {
+        return 'CAS Authentifizierung erforderlich!';
+    }
+
+    /**
+     * Get logout string
+     *
+     * @return string logout
+     */
+    public function getLogout()
+    {
+        return 'CAS Abmeldung!';
+    }
+
+    /**
+     * Get the should have been redirected string
+     *
+     * @return string should habe been redirected
+     */
+    public function getShouldHaveBeenRedirected()
+    {
+        return 'eigentlich h&auml;ten Sie zum CAS Server weitergeleitet werden sollen. Dr&uuml;cken Sie <a href="%s">hier</a> um fortzufahren.';
+    }
+
+    /**
+     * Get authentication failed string
+     *
+     * @return string authentication failed
+     */
+    public function getAuthenticationFailed()
+    {
+        return 'CAS Anmeldung fehlgeschlagen!';
+    }
+
+    /**
+     * Get the your were not authenticated string
+     *
+     * @return string not authenticated
+     */
+    public function getYouWereNotAuthenticated()
+    {
+        return '<p>Sie wurden nicht angemeldet.</p><p>Um es erneut zu versuchen klicken Sie <a href="%s">hier</a>.</p><p>Wenn das Problem bestehen bleibt, kontkatieren Sie den <a href="mailto:%s">Administrator</a> dieser Seite.</p>';
+    }
+
+    /**
+     * Get the service unavailable string
+     *
+     * @return string service unavailable
+     */
+    public function getServiceUnavailable()
+    {
+        return 'Der Dienst `<b>%s</b>\' ist nicht verf&uuml;gbar (<b>%s</b>).';
+    }
+}
+
+?>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Greek.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Greek.php
new file mode 100644
index 0000000..eb0f5ef
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Greek.php
@@ -0,0 +1,115 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Language/Greek.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Vangelis Haniotakis <haniotak@ucnet.uoc.gr>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Greek language class
+ *
+ * @class    CAS_Languages_Greek
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Vangelis Haniotakis <haniotak@ucnet.uoc.gr>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_Greek implements CAS_Languages_LanguageInterface
+{
+    /**
+     * Get the using server string
+     *
+     * @return string using server
+     */
+    public function getUsingServer()
+    {
+        return '÷ñçóéìïðïéåßôáé ï åîõðçñåôçôÞò';
+    }
+
+    /**
+     * Get authentication wanted string
+     *
+     * @return string authentication wanted
+     */
+    public function getAuthenticationWanted()
+    {
+        return 'Áðáéôåßôáé ç ôáõôïðïßçóç CAS!';
+    }
+
+    /**
+     * Get logout string
+     *
+     * @return string logout
+     */
+    public function getLogout()
+    {
+        return 'Áðáéôåßôáé ç áðïóýíäåóç áðü CAS!';
+    }
+
+    /**
+     * Get the should have been redirected string
+     *
+     * @return string should habe been redirected
+     */
+    public function getShouldHaveBeenRedirected()
+    {
+        return 'Èá Ýðñåðå íá åß÷áôå áíáêáôåõèõíèåß óôïí åîõðçñåôçôÞ CAS. ÊÜíôå êëßê <a href="%s">åäþ</a> ãéá íá óõíå÷ßóåôå.';
+    }
+
+    /**
+     * Get authentication failed string
+     *
+     * @return string authentication failed
+     */
+    public function getAuthenticationFailed()
+    {
+        return 'Ç ôáõôïðïßçóç CAS áðÝôõ÷å!';
+    }
+
+    /**
+     * Get the your were not authenticated string
+     *
+     * @return string not authenticated
+     */
+    public function getYouWereNotAuthenticated()
+    {
+        return '<p>Äåí ôáõôïðïéçèÞêáôå.</p><p>Ìðïñåßôå íá îáíáðñïóðáèÞóåôå, êÜíïíôáò êëßê <a href="%s">åäþ</a>.</p><p>Åáí ôï ðñüâëçìá åðéìåßíåé, åëÜôå óå åðáöÞ ìå ôïí <a href="mailto:%s">äéá÷åéñéóôÞ</a>.</p>';
+    }
+
+    /**
+     * Get the service unavailable string
+     *
+     * @return string service unavailable
+     */
+    public function getServiceUnavailable()
+    {
+        return 'Ç õðçñåóßá `<b>%s</b>\' äåí åßíáé äéáèÝóéìç (<b>%s</b>).';
+    }
+}
+?>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Japanese.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Japanese.php
new file mode 100644
index 0000000..e9cd121
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Japanese.php
@@ -0,0 +1,113 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Language/Japanese.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   fnorif <fnorif@yahoo.co.jp>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Japanese language class. Now Encoding is EUC-JP and LF
+ *
+ * @class    CAS_Languages_Japanese
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   fnorif <fnorif@yahoo.co.jp>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ **/
+class CAS_Languages_Japanese implements CAS_Languages_LanguageInterface
+{
+    /**
+     * Get the using server string
+     *
+     * @return string using server
+     */
+    public function getUsingServer()
+    {
+        return 'using server';
+    }
+
+    /**
+     * Get authentication wanted string
+     *
+     * @return string authentication wanted
+     */
+    public function getAuthenticationWanted()
+    {
+        return 'CAS�ˤ��ǧ�ڤ�Ԥ��ޤ�';
+    }
+
+    /**
+     * Get logout string
+     *
+     * @return string logout
+     */
+    public function getLogout()
+    {
+        return 'CAS����?�����Ȥ��ޤ�!';
+    }
+
+    /**
+     * Get the should have been redirected string
+     *
+     * @return string should habe been redirected
+     */
+    public function getShouldHaveBeenRedirected()
+    {
+        return 'CAS�����Ф˹Ԥ�ɬ�פ�����ޤ�����ưŪ��ž������ʤ����� <a href="%s">������</a> �򥯥�å�����³�Ԥ��ޤ��';
+    }
+
+    /**
+     * Get authentication failed string
+     *
+     * @return string authentication failed
+     */
+    public function getAuthenticationFailed()
+    {
+        return 'CAS�ˤ��ǧ�ڤ˼��Ԥ��ޤ���';
+    }
+
+    /**
+     * Get the your were not authenticated string
+     *
+     * @return string not authenticated
+     */
+    public function getYouWereNotAuthenticated()
+    {
+        return '<p>ǧ�ڤǤ��ޤ���Ǥ���.</p><p>�⤦���٥ꥯ�����Ȥ������������<a href="%s">������</a>�򥯥�å�.</p><p>���꤬��褷�ʤ����� <a href="mailto:%s">���Υ����Ȥδ����</a>���䤤��碌�Ƥ�������.</p>';
+    }
+
+    /**
+     * Get the service unavailable string
+     *
+     * @return string service unavailable
+     */
+    public function getServiceUnavailable()
+    {
+        return '�����ӥ� `<b>%s</b>\' �����ѤǤ��ޤ��� (<b>%s</b>).';
+    }
+}
+?>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/LanguageInterface.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/LanguageInterface.php
new file mode 100644
index 0000000..5de93aa
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/LanguageInterface.php
@@ -0,0 +1,96 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Language/LanguageInterface.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Joachim Fritschi <jfritschi@freenet.de>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Language Interface class for all internationalization files
+ *
+ * @class    CAS_Languages_LanguageInterface
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Joachim Fritschi <jfritschi@freenet.de>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+
+interface CAS_Languages_LanguageInterface
+{
+    /**
+     * Get the using server string
+     *
+     * @return string using server
+     */
+    public function getUsingServer();
+
+    /**
+     * Get authentication wanted string
+     *
+     * @return string authentication wanted
+     */
+    public function getAuthenticationWanted();
+
+    /**
+     * Get logout string
+     *
+     * @return string logout
+     */
+    public function getLogout();
+
+    /**
+     * Get the should have been redirected string
+     *
+     * @return string should habe been redirected
+     */
+    public function getShouldHaveBeenRedirected();
+
+    /**
+     * Get authentication failed string
+     *
+     * @return string authentication failed
+     */
+    public function getAuthenticationFailed();
+
+    /**
+     * Get the your were not authenticated string
+     *
+     * @return string not authenticated
+     */
+    public function getYouWereNotAuthenticated();
+
+    /**
+     * Get the service unavailable string
+     *
+     * @return string service unavailable
+     */
+    public function getServiceUnavailable();
+
+}
+?>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Spanish.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Spanish.php
new file mode 100644
index 0000000..5675a41
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Languages/Spanish.php
@@ -0,0 +1,117 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Language/Spanish.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Iván-Benjamín García Torà <ivaniclixx@gmail.com>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Spanish language class
+ *
+ * @class    CAS_Languages_Spanish
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Iván-Benjamín García Torà <ivaniclixx@gmail.com>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+
+ * @sa @link internalLang Internationalization @endlink
+ * @ingroup internalLang
+ */
+class CAS_Languages_Spanish implements CAS_Languages_LanguageInterface
+{
+
+    /**
+     * Get the using server string
+     *
+     * @return string using server
+     */
+    public function getUsingServer()
+    {
+        return 'usando servidor';
+    }
+
+    /**
+     * Get authentication wanted string
+     *
+     * @return string authentication wanted
+     */
+    public function getAuthenticationWanted()
+    {
+        return '¡Autentificación CAS necesaria!';
+    }
+
+    /**
+     * Get logout string
+     *
+     * @return string logout
+     */
+    public function getLogout()
+    {
+        return '¡Salida CAS necesaria!';
+    }
+
+    /**
+     * Get the should have been redirected string
+     *
+     * @return string should habe been redirected
+     */
+    public function getShouldHaveBeenRedirected()
+    {
+        return 'Ya debería haber sido redireccionado al servidor CAS. Haga click <a href="%s">aquí</a> para continuar.';
+    }
+
+    /**
+     * Get authentication failed string
+     *
+     * @return string authentication failed
+     */
+    public function getAuthenticationFailed()
+    {
+        return '¡Autentificación CAS fallida!';
+    }
+
+    /**
+     * Get the your were not authenticated string
+     *
+     * @return string not authenticated
+     */
+    public function getYouWereNotAuthenticated()
+    {
+        return '<p>No estás autentificado.</p><p>Puedes volver a intentarlo haciendo click <a href="%s">aquí</a>.</p><p>Si el problema persiste debería contactar con el <a href="mailto:%s">administrador de este sitio</a>.</p>';
+    }
+
+    /**
+     * Get the service unavailable string
+     *
+     * @return string service unavailable
+     */
+    public function getServiceUnavailable()
+    {
+        return 'El servicio `<b>%s</b>\' no está disponible (<b>%s</b>).';
+    }
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/OutOfSequenceException.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/OutOfSequenceException.php
new file mode 100755
index 0000000..d101811
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/OutOfSequenceException.php
@@ -0,0 +1,49 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/OutOfSequenceException.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class defines Exceptions that should be thrown when the sequence of
+ * operations is invalid. Examples are:
+ *		- Requesting the response before executing a request.
+ *		- Changing the URL of a request after executing the request.
+ *
+ * @class    CAS_OutOfSequenceException
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_OutOfSequenceException
+extends BadMethodCallException
+implements CAS_Exception
+{
+
+}
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/AbstractStorage.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/AbstractStorage.php
new file mode 100644
index 0000000..6c964f5
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/AbstractStorage.php
@@ -0,0 +1,220 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/PGTStorage/AbstractStorage.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Basic class for PGT storage
+ * The CAS_PGTStorage_AbstractStorage class is a generic class for PGT storage.
+ * This class should not be instanciated itself but inherited by specific PGT
+ * storage classes.
+ *
+ * @class CAS_PGTStorage_AbstractStorage
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @ingroup internalPGTStorage
+ */
+
+abstract class CAS_PGTStorage_AbstractStorage
+{
+    /**
+     * @addtogroup internalPGTStorage
+     * @{
+     */
+
+    // ########################################################################
+    //  CONSTRUCTOR
+    // ########################################################################
+
+    /**
+     * The constructor of the class, should be called only by inherited classes.
+     *
+     * @param CAS_Client $cas_parent the CAS _client instance that creates the
+     * current object.
+     *
+     * @return void
+     *
+     * @protected
+     */
+    function __construct($cas_parent)
+    {
+        phpCAS::traceBegin();
+        if ( !$cas_parent->isProxy() ) {
+            phpCAS::error('defining PGT storage makes no sense when not using a CAS proxy');
+        }
+        phpCAS::traceEnd();
+    }
+
+    // ########################################################################
+    //  DEBUGGING
+    // ########################################################################
+
+    /**
+     * This virtual method returns an informational string giving the type of storage
+     * used by the object (used for debugging purposes).
+     *
+     * @return void
+     *
+     * @public
+     */
+    function getStorageType()
+    {
+        phpCAS::error(__CLASS__.'::'.__FUNCTION__.'() should never be called');
+    }
+
+    /**
+     * This virtual method returns an informational string giving informations on the
+     * parameters of the storage.(used for debugging purposes).
+     *
+     * @return void
+     *
+     * @public
+     */
+    function getStorageInfo()
+    {
+        phpCAS::error(__CLASS__.'::'.__FUNCTION__.'() should never be called');
+    }
+
+    // ########################################################################
+    //  ERROR HANDLING
+    // ########################################################################
+
+    /**
+     * string used to store an error message. Written by
+     * PGTStorage::setErrorMessage(), read by PGTStorage::getErrorMessage().
+     *
+     * @hideinitializer
+     * @deprecated not used.
+     */
+    var $_error_message=false;
+
+    /**
+     * This method sets en error message, which can be read later by
+     * PGTStorage::getErrorMessage().
+     *
+     * @param string $error_message an error message
+     *
+     * @return void
+     *
+     * @deprecated not used.
+     */
+    function setErrorMessage($error_message)
+    {
+        $this->_error_message = $error_message;
+    }
+
+    /**
+     * This method returns an error message set by PGTStorage::setErrorMessage().
+     *
+     * @return an error message when set by PGTStorage::setErrorMessage(), FALSE
+     * otherwise.
+     *
+     * @deprecated not used.
+     */
+    function getErrorMessage()
+    {
+        return $this->_error_message;
+    }
+
+    // ########################################################################
+    //  INITIALIZATION
+    // ########################################################################
+
+    /**
+     * a boolean telling if the storage has already been initialized. Written by
+     * PGTStorage::init(), read by PGTStorage::isInitialized().
+     *
+     * @hideinitializer
+     */
+    var $_initialized = false;
+
+    /**
+     * This method tells if the storage has already been intialized.
+     *
+     * @return a boolean
+     *
+     * @protected
+     */
+    function isInitialized()
+    {
+        return $this->_initialized;
+    }
+
+    /**
+     * This virtual method initializes the object.
+     *
+     * @return void
+     */
+    function init()
+    {
+        $this->_initialized = true;
+    }
+
+    // ########################################################################
+    //  PGT I/O
+    // ########################################################################
+
+    /**
+     * This virtual method stores a PGT and its corresponding PGT Iuo.
+     *
+     * @param string $pgt     the PGT
+     * @param string $pgt_iou the PGT iou
+     *
+     * @return void
+     *
+     * @note Should never be called.
+     *
+     */
+    function write($pgt,$pgt_iou)
+    {
+        phpCAS::error(__CLASS__.'::'.__FUNCTION__.'() should never be called');
+    }
+
+    /**
+     * This virtual method reads a PGT corresponding to a PGT Iou and deletes
+     * the corresponding storage entry.
+     *
+     * @param string $pgt_iou the PGT iou
+     *
+     * @return void
+     *
+     * @note Should never be called.
+     */
+    function read($pgt_iou)
+    {
+        phpCAS::error(__CLASS__.'::'.__FUNCTION__.'() should never be called');
+    }
+
+    /** @} */
+
+}
+
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/Db.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/Db.php
new file mode 100644
index 0000000..1f635f8
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/Db.php
@@ -0,0 +1,429 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/PGTStorage/Db.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Daniel Frett <daniel.frett@gmail.com>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+define('CAS_PGT_STORAGE_DB_DEFAULT_TABLE', 'cas_pgts');
+
+/**
+ * Basic class for PGT database storage
+ * The CAS_PGTStorage_Db class is a class for PGT database storage.
+ *
+ * @class    CAS_PGTStorage_Db
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Daniel Frett <daniel.frett@gmail.com>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ * @ingroup internalPGTStorageDb
+ */
+
+class CAS_PGTStorage_Db extends CAS_PGTStorage_AbstractStorage
+{
+    /**
+     * @addtogroup internalCAS_PGTStorageDb
+     * @{
+     */
+
+    /**
+     * the PDO object to use for database interactions
+     */
+    private $_pdo;
+
+    /**
+     * This method returns the PDO object to use for database interactions.
+     *
+     * @return the PDO object
+     */
+    private function _getPdo()
+    {
+        return $this->_pdo;
+    }
+
+    /**
+     * database connection options to use when creating a new PDO object
+     */
+    private $_dsn;
+    private $_username;
+    private $_password;
+    private $_table_options;
+
+    /**
+     * the table to use for storing/retrieving pgt's
+     */
+    private $_table;
+
+    /**
+     * This method returns the table to use when storing/retrieving PGT's
+     *
+     * @return the name of the pgt storage table.
+     */
+    private function _getTable()
+    {
+        return $this->_table;
+    }
+
+    // ########################################################################
+    //  DEBUGGING
+    // ########################################################################
+
+    /**
+     * This method returns an informational string giving the type of storage
+     * used by the object (used for debugging purposes).
+     *
+     * @return an informational string.
+     */
+    public function getStorageType()
+    {
+        return "db";
+    }
+
+    /**
+     * This method returns an informational string giving informations on the
+     * parameters of the storage.(used for debugging purposes).
+     *
+     * @return an informational string.
+     * @public
+     */
+    public function getStorageInfo()
+    {
+        return 'table=`'.$this->_getTable().'\'';
+    }
+
+    // ########################################################################
+    //  CONSTRUCTOR
+    // ########################################################################
+
+    /**
+     * The class constructor.
+     *
+     * @param CAS_Client $cas_parent     the CAS_Client instance that creates
+     * the object.
+     * @param string     $dsn_or_pdo     a dsn string to use for creating a PDO
+     * object or a PDO object
+     * @param string     $username       the username to use when connecting to
+     * the database
+     * @param string     $password       the password to use when connecting to
+     * the database
+     * @param string     $table          the table to use for storing and
+     * retrieving PGT's
+     * @param string     $driver_options any driver options to use when
+     * connecting to the database
+     */
+    public function __construct($cas_parent, $dsn_or_pdo, $username='', $password='', $table='', $driver_options=null)
+    {
+        phpCAS::traceBegin();
+        // call the ancestor's constructor
+        parent::__construct($cas_parent);
+
+        // set default values
+        if ( empty($table) ) {
+            $table = CAS_PGT_STORAGE_DB_DEFAULT_TABLE;
+        }
+        if ( !is_array($driver_options) ) {
+            $driver_options = array(PDO::ATTR_ERRMODE => PDO::ERRMODE_EXCEPTION);
+        }
+
+        // store the specified parameters
+        if ($dsn_or_pdo instanceof PDO) {
+            $this->_pdo = $dsn_or_pdo;
+        } else {
+            $this->_dsn = $dsn_or_pdo;
+            $this->_username = $username;
+            $this->_password = $password;
+            $this->_driver_options = $driver_options;
+        }
+
+        // store the table name
+        $this->_table = $table;
+
+        phpCAS::traceEnd();
+    }
+
+    // ########################################################################
+    //  INITIALIZATION
+    // ########################################################################
+
+    /**
+     * This method is used to initialize the storage. Halts on error.
+     *
+     * @return void
+     */
+    public function init()
+    {
+        phpCAS::traceBegin();
+        // if the storage has already been initialized, return immediatly
+        if ($this->isInitialized()) {
+            return;
+        }
+
+        // initialize the base object
+        parent::init();
+
+        // create the PDO object if it doesn't exist already
+        if (!($this->_pdo instanceof PDO)) {
+            try {
+                $this->_pdo = new PDO($this->_dsn, $this->_username, $this->_password, $this->_driver_options);
+            }
+            catch(PDOException $e) {
+                phpCAS::error('Database connection error: ' . $e->getMessage());
+            }
+        }
+
+        phpCAS::traceEnd();
+    }
+
+    // ########################################################################
+    //  PDO database interaction
+    // ########################################################################
+
+    /**
+     * attribute that stores the previous error mode for the PDO handle while
+     * processing a transaction
+     */
+    private $_errMode;
+
+    /**
+     * This method will enable the Exception error mode on the PDO object
+     *
+     * @return void
+     */
+    private function _setErrorMode()
+    {
+        // get PDO object and enable exception error mode
+        $pdo = $this->_getPdo();
+        $this->_errMode = $pdo->getAttribute(PDO::ATTR_ERRMODE);
+        $pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+    }
+
+    /**
+     * this method will reset the error mode on the PDO object
+     *
+     * @return void
+     */
+    private function _resetErrorMode()
+    {
+        // get PDO object and reset the error mode to what it was originally
+        $pdo = $this->_getPdo();
+        $pdo->setAttribute(PDO::ATTR_ERRMODE, $this->_errMode);
+    }
+
+    // ########################################################################
+    //  database queries
+    // ########################################################################
+    // these queries are potentially unsafe because the person using this library
+    // can set the table to use, but there is no reliable way to escape SQL
+    // fieldnames in PDO yet
+
+    /**
+     * This method returns the query used to create a pgt storage table
+     *
+     * @return the create table SQL, no bind params in query
+     */
+    protected function createTableSql()
+    {
+        return 'CREATE TABLE ' . $this->_getTable() . ' (pgt_iou VARCHAR(255) NOT NULL PRIMARY KEY, pgt VARCHAR(255) NOT NULL)';
+    }
+
+    /**
+     * This method returns the query used to store a pgt
+     *
+     * @return the store PGT SQL, :pgt and :pgt_iou are the bind params contained in the query
+     */
+    protected function storePgtSql()
+    {
+        return 'INSERT INTO ' . $this->_getTable() . ' (pgt_iou, pgt) VALUES (:pgt_iou, :pgt)';
+    }
+
+    /**
+     * This method returns the query used to retrieve a pgt. the first column of the first row should contain the pgt
+     *
+     * @return the retrieve PGT SQL, :pgt_iou is the only bind param contained in the query
+     */
+    protected function retrievePgtSql()
+    {
+        return 'SELECT pgt FROM ' . $this->_getTable() . ' WHERE pgt_iou = :pgt_iou';
+    }
+
+    /**
+     * This method returns the query used to delete a pgt.
+     *
+     * @return the delete PGT SQL, :pgt_iou is the only bind param contained in the query
+     */
+    protected function deletePgtSql()
+    {
+        return 'DELETE FROM ' . $this->_getTable() . ' WHERE pgt_iou = :pgt_iou';
+    }
+
+    // ########################################################################
+    //  PGT I/O
+    // ########################################################################
+
+    /**
+     * This method creates the database table used to store pgt's and pgtiou's
+     *
+     * @return void
+     */
+    public function createTable()
+    {
+        phpCAS::traceBegin();
+
+        // initialize this PGTStorage object if it hasn't been initialized yet
+        if ( !$this->isInitialized() ) {
+            $this->init();
+        }
+
+        // initialize the PDO object for this method
+        $pdo = $this->_getPdo();
+        $this->_setErrorMode();
+
+        try {
+            $pdo->beginTransaction();
+
+            $query = $pdo->query($this->createTableSQL());
+            $query->closeCursor();
+
+            $pdo->commit();
+        }
+        catch(PDOException $e) {
+            // attempt rolling back the transaction before throwing a phpCAS error
+            try {
+                $pdo->rollBack();
+            }
+            catch(PDOException $e) {
+            }
+            phpCAS::error('error creating PGT storage table: ' . $e->getMessage());
+        }
+
+        // reset the PDO object
+        $this->_resetErrorMode();
+
+        phpCAS::traceEnd();
+    }
+
+    /**
+     * This method stores a PGT and its corresponding PGT Iou in the database.
+     * Echoes a warning on error.
+     *
+     * @param string $pgt     the PGT
+     * @param string $pgt_iou the PGT iou
+     *
+     * @return void
+     */
+    public function write($pgt, $pgt_iou)
+    {
+        phpCAS::traceBegin();
+
+        // initialize the PDO object for this method
+        $pdo = $this->_getPdo();
+        $this->_setErrorMode();
+
+        try {
+            $pdo->beginTransaction();
+
+            $query = $pdo->prepare($this->storePgtSql());
+            $query->bindValue(':pgt', $pgt, PDO::PARAM_STR);
+            $query->bindValue(':pgt_iou', $pgt_iou, PDO::PARAM_STR);
+            $query->execute();
+            $query->closeCursor();
+
+            $pdo->commit();
+        }
+        catch(PDOException $e) {
+            // attempt rolling back the transaction before throwing a phpCAS error
+            try {
+                $pdo->rollBack();
+            }
+            catch(PDOException $e) {
+            }
+            phpCAS::error('error writing PGT to database: ' . $e->getMessage());
+        }
+
+        // reset the PDO object
+        $this->_resetErrorMode();
+
+        phpCAS::traceEnd();
+    }
+
+    /**
+     * This method reads a PGT corresponding to a PGT Iou and deletes the
+     * corresponding db entry.
+     *
+     * @param string $pgt_iou the PGT iou
+     *
+     * @return the corresponding PGT, or FALSE on error
+     */
+    public function read($pgt_iou)
+    {
+        phpCAS::traceBegin();
+        $pgt = false;
+
+        // initialize the PDO object for this method
+        $pdo = $this->_getPdo();
+        $this->_setErrorMode();
+
+        try {
+            $pdo->beginTransaction();
+
+            // fetch the pgt for the specified pgt_iou
+            $query = $pdo->prepare($this->retrievePgtSql());
+            $query->bindValue(':pgt_iou', $pgt_iou, PDO::PARAM_STR);
+            $query->execute();
+            $pgt = $query->fetchColumn(0);
+            $query->closeCursor();
+
+            // delete the specified pgt_iou from the database
+            $query = $pdo->prepare($this->deletePgtSql());
+            $query->bindValue(':pgt_iou', $pgt_iou, PDO::PARAM_STR);
+            $query->execute();
+            $query->closeCursor();
+
+            $pdo->commit();
+        }
+        catch(PDOException $e) {
+            // attempt rolling back the transaction before throwing a phpCAS error
+            try {
+                $pdo->rollBack();
+            }
+            catch(PDOException $e) {
+            }
+            phpCAS::trace('error reading PGT from database: ' . $e->getMessage());
+        }
+
+        // reset the PDO object
+        $this->_resetErrorMode();
+
+        phpCAS::traceEnd();
+        return $pgt;
+    }
+
+    /** @} */
+
+}
+
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/File.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/File.php
new file mode 100644
index 0000000..80a1ea1
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/PGTStorage/File.php
@@ -0,0 +1,259 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/PGTStorage/AbstractStorage.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * The CAS_PGTStorage_File class is a class for PGT file storage. An instance of
+ * this class is returned by CAS_Client::SetPGTStorageFile().
+ *
+ * @class    CAS_PGTStorage_File
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Pascal Aubry <pascal.aubry@univ-rennes1.fr>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ *
+ * @ingroup internalPGTStorageFile
+ */
+
+class CAS_PGTStorage_File extends CAS_PGTStorage_AbstractStorage
+{
+    /**
+     * @addtogroup internalPGTStorageFile
+     * @{
+     */
+
+    /**
+     * a string telling where PGT's should be stored on the filesystem. Written by
+     * PGTStorageFile::PGTStorageFile(), read by getPath().
+     *
+     * @private
+     */
+    var $_path;
+
+    /**
+     * This method returns the name of the directory where PGT's should be stored
+     * on the filesystem.
+     *
+     * @return the name of a directory (with leading and trailing '/')
+     *
+     * @private
+     */
+    function getPath()
+    {
+        return $this->_path;
+    }
+
+    // ########################################################################
+    //  DEBUGGING
+    // ########################################################################
+
+    /**
+     * This method returns an informational string giving the type of storage
+     * used by the object (used for debugging purposes).
+     *
+     * @return an informational string.
+     * @public
+     */
+    function getStorageType()
+    {
+        return "file";
+    }
+
+    /**
+     * This method returns an informational string giving informations on the
+     * parameters of the storage.(used for debugging purposes).
+     *
+     * @return an informational string.
+     * @public
+     */
+    function getStorageInfo()
+    {
+        return 'path=`'.$this->getPath().'\'';
+    }
+
+    // ########################################################################
+    //  CONSTRUCTOR
+    // ########################################################################
+
+    /**
+     * The class constructor, called by CAS_Client::SetPGTStorageFile().
+     *
+     * @param CAS_Client $cas_parent the CAS_Client instance that creates the object.
+     * @param string     $path       the path where the PGT's should be stored
+     *
+     * @return void
+     *
+     * @public
+     */
+    function __construct($cas_parent,$path)
+    {
+        phpCAS::traceBegin();
+        // call the ancestor's constructor
+        parent::__construct($cas_parent);
+
+        if (empty($path)) {
+            $path = CAS_PGT_STORAGE_FILE_DEFAULT_PATH;
+        }
+        // check that the path is an absolute path
+        if (getenv("OS")=="Windows_NT") {
+
+            if (!preg_match('`^[a-zA-Z]:`', $path)) {
+                phpCAS::error('an absolute path is needed for PGT storage to file');
+            }
+
+        } else {
+
+            if ( $path[0] != '/' ) {
+                phpCAS::error('an absolute path is needed for PGT storage to file');
+            }
+
+            // store the path (with a leading and trailing '/')
+            $path = preg_replace('|[/]*$|', '/', $path);
+            $path = preg_replace('|^[/]*|', '/', $path);
+        }
+
+        $this->_path = $path;
+        phpCAS::traceEnd();
+    }
+
+    // ########################################################################
+    //  INITIALIZATION
+    // ########################################################################
+
+    /**
+     * This method is used to initialize the storage. Halts on error.
+     *
+     * @return void
+     * @public
+     */
+    function init()
+    {
+        phpCAS::traceBegin();
+        // if the storage has already been initialized, return immediatly
+        if ($this->isInitialized()) {
+            return;
+        }
+        // call the ancestor's method (mark as initialized)
+        parent::init();
+        phpCAS::traceEnd();
+    }
+
+    // ########################################################################
+    //  PGT I/O
+    // ########################################################################
+
+    /**
+     * This method returns the filename corresponding to a PGT Iou.
+     *
+     * @param string $pgt_iou the PGT iou.
+     *
+     * @return a filename
+     * @private
+     */
+    function getPGTIouFilename($pgt_iou)
+    {
+        phpCAS::traceBegin();
+        $filename = $this->getPath().$pgt_iou.'.plain';
+        phpCAS::traceEnd($filename);
+        return $filename;
+    }
+
+    /**
+     * This method stores a PGT and its corresponding PGT Iou into a file. Echoes a
+     * warning on error.
+     *
+     * @param string $pgt     the PGT
+     * @param string $pgt_iou the PGT iou
+     *
+     * @return void
+     *
+     * @public
+     */
+    function write($pgt,$pgt_iou)
+    {
+        phpCAS::traceBegin();
+        $fname = $this->getPGTIouFilename($pgt_iou);
+        if (!file_exists($fname)) {
+            touch($fname);
+            // Chmod will fail on windows
+            @chmod($fname, 0600);
+            if ($f=fopen($fname, "w")) {
+                if (fputs($f, $pgt) === false) {
+                    phpCAS::error('could not write PGT to `'.$fname.'\'');
+                }
+                phpCAS::trace('Successful write of PGT to `'.$fname.'\'');
+                fclose($f);
+            } else {
+                phpCAS::error('could not open `'.$fname.'\'');
+            }
+        } else {
+            phpCAS::error('File exists: `'.$fname.'\'');
+        }
+        phpCAS::traceEnd();
+    }
+
+    /**
+     * This method reads a PGT corresponding to a PGT Iou and deletes the
+     * corresponding file.
+     *
+     * @param string $pgt_iou the PGT iou
+     *
+     * @return the corresponding PGT, or FALSE on error
+     *
+     * @public
+     */
+    function read($pgt_iou)
+    {
+        phpCAS::traceBegin();
+        $pgt = false;
+        $fname = $this->getPGTIouFilename($pgt_iou);
+        if (file_exists($fname)) {
+            if (!($f=fopen($fname, "r"))) {
+                phpCAS::error('could not open `'.$fname.'\'');
+            } else {
+                if (($pgt=fgets($f)) === false) {
+                    phpCAS::error('could not read PGT from `'.$fname.'\'');
+                }
+                phpCAS::trace('Successful read of PGT to `'.$fname.'\'');
+                fclose($f);
+            }
+            // delete the PGT file
+            @unlink($fname);
+        } else {
+            phpCAS::error('No such file `'.$fname.'\'');
+        }
+        phpCAS::traceEnd($pgt);
+        return $pgt;
+    }
+
+    /** @} */
+
+}
+?>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService.php
new file mode 100755
index 0000000..d70ca9c
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService.php
@@ -0,0 +1,72 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxiedService.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines methods that allow proxy-authenticated service handlers
+ * to interact with phpCAS.
+ *
+ * Proxy service handlers must implement this interface as well as call
+ * phpCAS::initializeProxiedService($this) at some point in their implementation.
+ *
+ * While not required, proxy-authenticated service handlers are encouraged to
+ * implement the CAS_ProxiedService_Testable interface to facilitate unit testing.
+ *
+ * @class    CAS_ProxiedService
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_ProxiedService
+{
+
+    /**
+     * Answer a service identifier (URL) for whom we should fetch a proxy ticket.
+     *
+     * @return string
+     * @throws Exception If no service url is available.
+     */
+    public function getServiceUrl ();
+
+    /**
+     * Register a proxy ticket with the ProxiedService that it can use when
+     * making requests.
+     *
+     * @param string $proxyTicket Proxy ticket string
+     *
+     * @return void
+     * @throws InvalidArgumentException If the $proxyTicket is invalid.
+     * @throws CAS_OutOfSequenceException If called after a proxy ticket has
+     * already been initialized/set.
+     */
+    public function setProxyTicket ($proxyTicket);
+
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Abstract.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Abstract.php
new file mode 100755
index 0000000..d8d5338
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Abstract.php
@@ -0,0 +1,138 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxiedService/Abstract.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class implements common methods for ProxiedService implementations included
+ * with phpCAS.
+ *
+ * @class    CAS_ProxiedService_Abstract
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+abstract class CAS_ProxiedService_Abstract
+implements CAS_ProxiedService, CAS_ProxiedService_Testable
+{
+
+    /**
+     * The proxy ticket that can be used when making service requests.
+     * @var string $_proxyTicket;
+     */
+    private $_proxyTicket;
+
+    /**
+     * Register a proxy ticket with the Proxy that it can use when making requests.
+     *
+     * @param string $proxyTicket proxy ticket
+     *
+     * @return void
+     * @throws InvalidArgumentException If the $proxyTicket is invalid.
+     * @throws CAS_OutOfSequenceException If called after a proxy ticket has already been initialized/set.
+     */
+    public function setProxyTicket ($proxyTicket)
+    {
+        if (empty($proxyTicket)) {
+            throw new CAS_InvalidArgumentException("Trying to initialize with an empty proxy ticket.");
+        }
+        if (!empty($this->_proxyTicket)) {
+            throw new CAS_OutOfSequenceException('Already initialized, cannot change the proxy ticket.');
+        }
+        $this->_proxyTicket = $proxyTicket;
+    }
+
+    /**
+     * Answer the proxy ticket to be used when making requests.
+     *
+     * @return string
+     * @throws CAS_OutOfSequenceException If called before a proxy ticket has
+     * already been initialized/set.
+     */
+    protected function getProxyTicket ()
+    {
+        if (empty($this->_proxyTicket)) {
+            throw new CAS_OutOfSequenceException('No proxy ticket yet. Call $this->initializeProxyTicket() to aquire the proxy ticket.');
+        }
+
+        return $this->_proxyTicket;
+    }
+
+    /**
+     * @var CAS_Client $_casClient;
+     */
+    private $_casClient;
+
+    /**
+     * Use a particular CAS_Client->initializeProxiedService() rather than the
+     * static phpCAS::initializeProxiedService().
+     *
+     * This method should not be called in standard operation, but is needed for unit
+     * testing.
+     *
+     * @param CAS_Client $casClient cas client
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after a proxy ticket has
+     * already been initialized/set.
+     */
+    public function setCasClient (CAS_Client $casClient)
+    {
+        if (!empty($this->_proxyTicket)) {
+            throw new CAS_OutOfSequenceException('Already initialized, cannot change the CAS_Client.');
+        }
+
+        $this->_casClient = $casClient;
+    }
+
+    /**
+     * Fetch our proxy ticket.
+     *
+     * Descendent classes should call this method once their service URL is available
+     * to initialize their proxy ticket.
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after a proxy ticket has
+     * already been initialized.
+     */
+    protected function initializeProxyTicket()
+    {
+        if (!empty($this->_proxyTicket)) {
+            throw new CAS_OutOfSequenceException('Already initialized, cannot initialize again.');
+        }
+        // Allow usage of a particular CAS_Client for unit testing.
+        if (empty($this->_casClient)) {
+            phpCAS::initializeProxiedService($this);
+        } else {
+            $this->_casClient->initializeProxiedService($this);
+        }
+    }
+
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Exception.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Exception.php
new file mode 100755
index 0000000..5a1e696
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Exception.php
@@ -0,0 +1,46 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxiedService/Exception.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * An Exception for problems communicating with a proxied service.
+ *
+ * @class    CAS_ProxiedService_Exception
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxiedService_Exception
+extends Exception
+implements CAS_Exception
+{
+
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http.php
new file mode 100755
index 0000000..7c9824f
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http.php
@@ -0,0 +1,91 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxiedService/Http.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines methods that clients should use for configuring, sending,
+ * and receiving proxied HTTP requests.
+ *
+ * @class    CAS_ProxiedService_Http
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_ProxiedService_Http
+{
+
+    /*********************************************************
+     * Configure the Request
+    *********************************************************/
+
+    /**
+     * Set the URL of the Request
+     *
+     * @param string $url Url to set
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function setUrl ($url);
+
+    /*********************************************************
+     * 2. Send the Request
+    *********************************************************/
+
+    /**
+     * Perform the request.
+     *
+     * @return bool TRUE on success, FALSE on failure.
+     * @throws CAS_OutOfSequenceException If called multiple times.
+     */
+    public function send ();
+
+    /*********************************************************
+     * 3. Access the response
+    *********************************************************/
+
+    /**
+     * Answer the headers of the response.
+     *
+     * @return array An array of header strings.
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getResponseHeaders ();
+
+    /**
+     * Answer the body of response.
+     *
+     * @return string
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getResponseBody ();
+
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Abstract.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Abstract.php
new file mode 100755
index 0000000..f17304c
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Abstract.php
@@ -0,0 +1,343 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxiedService/Http/Abstract.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class implements common methods for ProxiedService implementations included
+ * with phpCAS.
+ *
+ * @class    CAS_ProxiedService_Http_Abstract
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+abstract class CAS_ProxiedService_Http_Abstract
+extends CAS_ProxiedService_Abstract
+implements CAS_ProxiedService_Http
+{
+    /**
+     * The HTTP request mechanism talking to the target service.
+     *
+     * @var CAS_Request_RequestInterface $requestHandler
+     */
+    protected $requestHandler;
+
+    /**
+     * The storage mechanism for cookies set by the target service.
+     *
+     * @var CAS_CookieJar $_cookieJar
+     */
+    private $_cookieJar;
+
+    /**
+     * Constructor.
+     *
+     * @param CAS_Request_RequestInterface $requestHandler request handler object
+     * @param CAS_CookieJar                $cookieJar      cookieJar object
+     *
+     * @return void
+     */
+    public function __construct (CAS_Request_RequestInterface $requestHandler, CAS_CookieJar $cookieJar)
+    {
+        $this->requestHandler = $requestHandler;
+        $this->_cookieJar = $cookieJar;
+    }
+
+    /**
+     * The target service url.
+     * @var string $_url;
+     */
+    private $_url;
+
+    /**
+     * Answer a service identifier (URL) for whom we should fetch a proxy ticket.
+     *
+     * @return string
+     * @throws Exception If no service url is available.
+     */
+    public function getServiceUrl ()
+    {
+        if (empty($this->_url)) {
+            throw new CAS_ProxiedService_Exception('No URL set via '.get_class($this).'->setUrl($url).');
+        }
+
+        return $this->_url;
+    }
+
+    /*********************************************************
+     * Configure the Request
+    *********************************************************/
+
+    /**
+     * Set the URL of the Request
+     *
+     * @param string $url url to set
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function setUrl ($url)
+    {
+        if ($this->hasBeenSent()) {
+            throw new CAS_OutOfSequenceException('Cannot set the URL, request already sent.');
+        }
+        if (!is_string($url)) {
+            throw new CAS_InvalidArgumentException('$url must be a string.');
+        }
+
+        $this->_url = $url;
+    }
+
+    /*********************************************************
+     * 2. Send the Request
+    *********************************************************/
+
+    /**
+     * Perform the request.
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called multiple times.
+     * @throws CAS_ProxyTicketException If there is a proxy-ticket failure.
+     *		The code of the Exception will be one of:
+     *			PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE
+     *			PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE
+     *			PHPCAS_SERVICE_PT_FAILURE
+     * @throws CAS_ProxiedService_Exception If there is a failure sending the
+     * request to the target service.
+     */
+    public function send ()
+    {
+        if ($this->hasBeenSent()) {
+            throw new CAS_OutOfSequenceException('Cannot send, request already sent.');
+        }
+
+        phpCAS::traceBegin();
+
+        // Get our proxy ticket and append it to our URL.
+        $this->initializeProxyTicket();
+        $url = $this->getServiceUrl();
+        if (strstr($url, '?') === false) {
+            $url = $url.'?ticket='.$this->getProxyTicket();
+        } else {
+            $url = $url.'&ticket='.$this->getProxyTicket();
+        }
+
+        try {
+            $this->makeRequest($url);
+        } catch (Exception $e) {
+            phpCAS::traceEnd();
+            throw $e;
+        }
+    }
+
+    /**
+     * Indicator of the number of requests (including redirects performed.
+     *
+     * @var int $_numRequests;
+     */
+    private $_numRequests = 0;
+
+    /**
+     * The response headers.
+     *
+     * @var array $_responseHeaders;
+     */
+    private $_responseHeaders = array();
+
+    /**
+     * The response status code.
+     *
+     * @var string $_responseStatusCode;
+     */
+    private $_responseStatusCode = '';
+
+    /**
+     * The response headers.
+     *
+     * @var string $_responseBody;
+     */
+    private $_responseBody = '';
+
+    /**
+     * Build and perform a request, following redirects
+     *
+     * @param string $url url for the request
+     *
+     * @return void
+     * @throws CAS_ProxyTicketException If there is a proxy-ticket failure.
+     *		The code of the Exception will be one of:
+     *			PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE
+     *			PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE
+     *			PHPCAS_SERVICE_PT_FAILURE
+     * @throws CAS_ProxiedService_Exception If there is a failure sending the
+     * request to the target service.
+     */
+    protected function makeRequest ($url)
+    {
+        // Verify that we are not in a redirect loop
+        $this->_numRequests++;
+        if ($this->_numRequests > 4) {
+            $message = 'Exceeded the maximum number of redirects (3) in proxied service request.';
+            phpCAS::trace($message);
+            throw new CAS_ProxiedService_Exception($message);
+        }
+
+        // Create a new request.
+        $request = clone $this->requestHandler;
+        $request->setUrl($url);
+
+        // Add any cookies to the request.
+        $request->addCookies($this->_cookieJar->getCookies($url));
+
+        // Add any other parts of the request needed by concrete classes
+        $this->populateRequest($request);
+
+        // Perform the request.
+        phpCAS::trace('Performing proxied service request to \''.$url.'\'');
+        if (!$request->send()) {
+            $message = 'Could not perform proxied service request to URL`'.$url.'\'. '.$request->getErrorMessage();
+            phpCAS::trace($message);
+            throw new CAS_ProxiedService_Exception($message);
+        }
+
+        // Store any cookies from the response;
+        $this->_cookieJar->storeCookies($url, $request->getResponseHeaders());
+
+        // Follow any redirects
+        if ($redirectUrl = $this->getRedirectUrl($request->getResponseHeaders())) {
+            phpCAS :: trace('Found redirect:'.$redirectUrl);
+            $this->makeRequest($redirectUrl);
+        } else {
+
+            $this->_responseHeaders = $request->getResponseHeaders();
+            $this->_responseBody = $request->getResponseBody();
+            $this->_responseStatusCode = $request->getResponseStatusCode();
+        }
+    }
+
+    /**
+     * Add any other parts of the request needed by concrete classes
+     *
+     * @param CAS_Request_RequestInterface $request request interface object
+     *
+     * @return void
+     */
+    abstract protected function populateRequest (CAS_Request_RequestInterface $request);
+
+    /**
+     * Answer a redirect URL if a redirect header is found, otherwise null.
+     *
+     * @param array $responseHeaders response header to extract a redirect from
+     *
+     * @return string or null
+     */
+    protected function getRedirectUrl (array $responseHeaders)
+    {
+        // Check for the redirect after authentication
+        foreach ($responseHeaders as $header) {
+            if (preg_match('/^(Location:|URI:)\s*([^\s]+.*)$/', $header, $matches)) {
+                return trim(array_pop($matches));
+            }
+        }
+        return null;
+    }
+
+    /*********************************************************
+     * 3. Access the response
+    *********************************************************/
+
+    /**
+     * Answer true if our request has been sent yet.
+     *
+     * @return bool
+     */
+    protected function hasBeenSent ()
+    {
+        return ($this->_numRequests > 0);
+    }
+
+    /**
+     * Answer the headers of the response.
+     *
+     * @return array An array of header strings.
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getResponseHeaders ()
+    {
+        if (!$this->hasBeenSent()) {
+            throw new CAS_OutOfSequenceException('Cannot access response, request not sent yet.');
+        }
+
+        return $this->_responseHeaders;
+    }
+
+    /**
+     * Answer HTTP status code of the response
+     *
+     * @return int
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getResponseStatusCode ()
+    {
+        if (!$this->hasBeenSent()) {
+            throw new CAS_OutOfSequenceException('Cannot access response, request not sent yet.');
+        }
+
+        return $this->_responseStatusCode;
+    }
+
+    /**
+     * Answer the body of response.
+     *
+     * @return string
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getResponseBody ()
+    {
+        if (!$this->hasBeenSent()) {
+            throw new CAS_OutOfSequenceException('Cannot access response, request not sent yet.');
+        }
+
+        return $this->_responseBody;
+    }
+
+    /**
+     * Answer the cookies from the response. This may include cookies set during
+     * redirect responses.
+     *
+     * @return array An array containing cookies. E.g. array('name' => 'val');
+     */
+    public function getCookies ()
+    {
+        return $this->_cookieJar->getCookies($this->getServiceUrl());
+    }
+
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Get.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Get.php
new file mode 100755
index 0000000..01f509f
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Get.php
@@ -0,0 +1,84 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxiedService/Http/Get.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class is used to make proxied service requests via the HTTP GET method.
+ *
+ * Usage Example:
+ *
+ *			try {
+ * 				$service = phpCAS::getProxiedService(PHPCAS_PROXIED_SERVICE_HTTP_GET);
+ * 				$service->setUrl('http://www.example.com/path/');
+ * 				$service->send();
+ *				if ($service->getResponseStatusCode() == 200)
+ *					return $service->getResponseBody();
+ *				else
+ *					// The service responded with an error code 404, 500, etc.
+ *					throw new Exception('The service responded with an error.');
+ *
+ *			} catch (CAS_ProxyTicketException $e) {
+ *				if ($e->getCode() == PHPCAS_SERVICE_PT_FAILURE)
+ *					return "Your login has timed out. You need to log in again.";
+ *				else
+ *					// Other proxy ticket errors are from bad request format (shouldn't happen)
+ *					// or CAS server failure (unlikely) so lets just stop if we hit those.
+ *					throw $e;
+ *			} catch (CAS_ProxiedService_Exception $e) {
+ *				// Something prevented the service request from being sent or received.
+ *				// We didn't even get a valid error response (404, 500, etc), so this
+ *				// might be caused by a network error or a DNS resolution failure.
+ *				// We could handle it in some way, but for now we will just stop.
+ *				throw $e;
+ *			}
+ *
+ * @class    CAS_ProxiedService_Http_Get
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxiedService_Http_Get
+extends CAS_ProxiedService_Http_Abstract
+{
+
+    /**
+     * Add any other parts of the request needed by concrete classes
+     *
+     * @param CAS_Request_RequestInterface $request request interface
+     *
+     * @return void
+     */
+    protected function populateRequest (CAS_Request_RequestInterface $request)
+    {
+        // do nothing, since the URL has already been sent and that is our
+        // only data.
+    }
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Post.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Post.php
new file mode 100755
index 0000000..643eb98
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Http/Post.php
@@ -0,0 +1,144 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxiedService/Http/Post.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This class is used to make proxied service requests via the HTTP POST method.
+ *
+ * Usage Example:
+ *
+ *			try {
+ * 				$service = phpCAS::getProxiedService(PHPCAS_PROXIED_SERVICE_HTTP_POST);
+ * 				$service->setUrl('http://www.example.com/path/');
+ *				$service->setContentType('text/xml');
+ *				$service->setBody(''<?xml version="1.0"?'.'><methodCall><methodName>example.search</methodName></methodCall>');
+ * 				$service->send();
+ *				if ($service->getResponseStatusCode() == 200)
+ *					return $service->getResponseBody();
+ *				else
+ *					// The service responded with an error code 404, 500, etc.
+ *					throw new Exception('The service responded with an error.');
+ *
+ *			} catch (CAS_ProxyTicketException $e) {
+ *				if ($e->getCode() == PHPCAS_SERVICE_PT_FAILURE)
+ *					return "Your login has timed out. You need to log in again.";
+ *				else
+ *					// Other proxy ticket errors are from bad request format (shouldn't happen)
+ *					// or CAS server failure (unlikely) so lets just stop if we hit those.
+ *					throw $e;
+ *			} catch (CAS_ProxiedService_Exception $e) {
+ *				// Something prevented the service request from being sent or received.
+ *				// We didn't even get a valid error response (404, 500, etc), so this
+ *				// might be caused by a network error or a DNS resolution failure.
+ *				// We could handle it in some way, but for now we will just stop.
+ *				throw $e;
+ *			}
+ *
+ * @class    CAS_ProxiedService_Http_Post
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxiedService_Http_Post
+extends CAS_ProxiedService_Http_Abstract
+{
+
+    /**
+     * The content-type of this request
+     *
+     * @var string $_contentType
+     */
+    private $_contentType;
+
+    /**
+     * The body of the this request
+     *
+     * @var string $_body
+     */
+    private $_body;
+
+    /**
+     * Set the content type of this POST request.
+     *
+     * @param string $contentType content type
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function setContentType ($contentType)
+    {
+        if ($this->hasBeenSent()) {
+            throw new CAS_OutOfSequenceException('Cannot set the content type, request already sent.');
+        }
+
+        $this->_contentType = $contentType;
+    }
+
+    /**
+     * Set the body of this POST request.
+     *
+     * @param string $body body to set
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function setBody ($body)
+    {
+        if ($this->hasBeenSent()) {
+            throw new CAS_OutOfSequenceException('Cannot set the body, request already sent.');
+        }
+
+        $this->_body = $body;
+    }
+
+    /**
+     * Add any other parts of the request needed by concrete classes
+     *
+     * @param CAS_Request_RequestInterface $request request interface class
+     *
+     * @return void
+     */
+    protected function populateRequest (CAS_Request_RequestInterface $request)
+    {
+        if (empty($this->_contentType) && !empty($this->_body)) {
+            throw new CAS_ProxiedService_Exception("If you pass a POST body, you must specify a content type via ".get_class($this).'->setContentType($contentType).');
+        }
+
+        $request->makePost();
+        if (!empty($this->_body)) {
+            $request->addHeader('Content-Type: '.$this->_contentType);
+            $request->addHeader('Content-Length: '.strlen($this->_body));
+            $request->setPostBody($this->_body);
+        }
+    }
+
+
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Imap.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Imap.php
new file mode 100755
index 0000000..d240d94
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Imap.php
@@ -0,0 +1,260 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxiedService/Imap.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Provides access to a proxy-authenticated IMAP stream
+ *
+ * @class    CAS_ProxiedService_Imap
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxiedService_Imap
+extends CAS_ProxiedService_Abstract
+{
+
+    /**
+     * The username to send via imap_open.
+     *
+     * @var string $_username;
+     */
+    private $_username;
+
+    /**
+     * Constructor.
+     *
+     * @param string $username Username
+     *
+     * @return void
+     */
+    public function __construct ($username)
+    {
+        if (!is_string($username) || !strlen($username)) {
+            throw new CAS_InvalidArgumentException('Invalid username.');
+        }
+
+        $this->_username = $username;
+    }
+
+    /**
+     * The target service url.
+     * @var string $_url;
+     */
+    private $_url;
+
+    /**
+     * Answer a service identifier (URL) for whom we should fetch a proxy ticket.
+     *
+     * @return string
+     * @throws Exception If no service url is available.
+     */
+    public function getServiceUrl ()
+    {
+        if (empty($this->_url)) {
+            throw new CAS_ProxiedService_Exception('No URL set via '.get_class($this).'->getServiceUrl($url).');
+        }
+
+        return $this->_url;
+    }
+
+    /*********************************************************
+     * Configure the Stream
+    *********************************************************/
+
+    /**
+     * Set the URL of the service to pass to CAS for proxy-ticket retrieval.
+     *
+     * @param string $url Url to set
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the stream has been opened.
+     */
+    public function setServiceUrl ($url)
+    {
+        if ($this->hasBeenOpened()) {
+            throw new CAS_OutOfSequenceException('Cannot set the URL, stream already opened.');
+        }
+        if (!is_string($url) || !strlen($url)) {
+            throw new CAS_InvalidArgumentException('Invalid url.');
+        }
+
+        $this->_url = $url;
+    }
+
+    /**
+     * The mailbox to open. See the $mailbox parameter of imap_open().
+     *
+     * @var string $_mailbox
+     */
+    private $_mailbox;
+
+    /**
+     * Set the mailbox to open. See the $mailbox parameter of imap_open().
+     *
+     * @param string $mailbox Mailbox to set
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the stream has been opened.
+     */
+    public function setMailbox ($mailbox)
+    {
+        if ($this->hasBeenOpened()) {
+            throw new CAS_OutOfSequenceException('Cannot set the mailbox, stream already opened.');
+        }
+        if (!is_string($mailbox) || !strlen($mailbox)) {
+            throw new CAS_InvalidArgumentException('Invalid mailbox.');
+        }
+
+        $this->_mailbox = $mailbox;
+    }
+
+    /**
+     * A bit mask of options to pass to imap_open() as the $options parameter.
+     *
+     * @var int $_options
+     */
+    private $_options = null;
+
+    /**
+     * Set the options for opening the stream. See the $options parameter of
+     * imap_open().
+     *
+     * @param int $options Options for the stream
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the stream has been opened.
+     */
+    public function setOptions ($options)
+    {
+        if ($this->hasBeenOpened()) {
+            throw new CAS_OutOfSequenceException('Cannot set options, stream already opened.');
+        }
+        if (!is_int($options)) {
+            throw new CAS_InvalidArgumentException('Invalid options.');
+        }
+
+        $this->_options = $options;
+    }
+
+    /*********************************************************
+     * 2. Open the stream
+    *********************************************************/
+
+    /**
+     * Open the IMAP stream (similar to imap_open()).
+     *
+     * @return resource Returns an IMAP stream on success
+     * @throws CAS_OutOfSequenceException If called multiple times.
+     * @throws CAS_ProxyTicketException If there is a proxy-ticket failure.
+     *		The code of the Exception will be one of:
+     *			PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE
+     *			PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE
+     *			PHPCAS_SERVICE_PT_FAILURE
+     * @throws CAS_ProxiedService_Exception If there is a failure sending the request to the target service.	 */
+    public function open ()
+    {
+        if ($this->hasBeenOpened()) {
+            throw new CAS_OutOfSequenceException('Stream already opened.');
+        }
+        if (empty($this->_mailbox)) {
+            throw new CAS_ProxiedService_Exception('You must specify a mailbox via '.get_class($this).'->setMailbox($mailbox)');
+        }
+
+        phpCAS::traceBegin();
+
+        // Get our proxy ticket and append it to our URL.
+        $this->initializeProxyTicket();
+        phpCAS::trace('opening IMAP mailbox `'.$this->_mailbox.'\'...');
+        $this->_stream = @imap_open($this->_mailbox, $this->_username, $this->getProxyTicket(), $this->_options);
+        if ($this->_stream) {
+            phpCAS::trace('ok');
+        } else {
+            phpCAS::trace('could not open mailbox');
+            // @todo add localization integration.
+            $message = 'IMAP Error: '.$url.' '. var_export(imap_errors(), true);
+            phpCAS::trace($message);
+            throw new CAS_ProxiedService_Exception($message);
+        }
+
+        phpCAS::traceEnd();
+        return $this->_stream;
+    }
+
+    /**
+     * Answer true if our request has been sent yet.
+     *
+     * @return bool
+     */
+    protected function hasBeenOpened ()
+    {
+        return !empty($this->_stream);
+    }
+
+    /*********************************************************
+     * 3. Access the result
+    *********************************************************/
+    /**
+     * The IMAP stream
+     *
+     * @var resource $_stream
+     */
+    private $_stream;
+
+    /**
+     * Answer the IMAP stream
+     *
+     * @return resource
+     */
+    public function getStream ()
+    {
+        if (!$this->hasBeenOpened()) {
+            throw new CAS_OutOfSequenceException('Cannot access stream, not opened yet.');
+        }
+        return $this->_stream;
+    }
+
+    /**
+     * CAS_Client::serviceMail() needs to return the proxy ticket for some reason,
+     * so this method provides access to it.
+     *
+     * @return string
+     * @throws CAS_OutOfSequenceException If called before the stream has been
+     * opened.
+     */
+    public function getImapProxyTicket ()
+    {
+        if (!$this->hasBeenOpened()) {
+            throw new CAS_OutOfSequenceException('Cannot access errors, stream not opened yet.');
+        }
+        return $this->getProxyTicket();
+    }
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Testable.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Testable.php
new file mode 100755
index 0000000..a2f6fca
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxiedService/Testable.php
@@ -0,0 +1,73 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxiedService/Testabel.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines methods that allow proxy-authenticated service handlers
+ * to be tested in unit tests.
+ *
+ * Classes implementing this interface SHOULD store the CAS_Client passed and initialize
+ * themselves with that client rather than via the static phpCAS method. For example:
+ *
+ *		/ **
+ *		 * Fetch our proxy ticket.
+ *		 * /
+ *		protected function initializeProxyTicket() {
+ *			// Allow usage of a particular CAS_Client for unit testing.
+ *			if (is_null($this->casClient))
+ *				phpCAS::initializeProxiedService($this);
+ *			else
+ *				$this->casClient->initializeProxiedService($this);
+ *		}
+ *
+ * @class    CAS_ProxiedService_Testabel
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_ProxiedService_Testable
+{
+
+    /**
+     * Use a particular CAS_Client->initializeProxiedService() rather than the
+     * static phpCAS::initializeProxiedService().
+     *
+     * This method should not be called in standard operation, but is needed for unit
+     * testing.
+     *
+     * @param CAS_Client $casClient Cas client object
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after a proxy ticket has already been initialized/set.
+     */
+    public function setCasClient (CAS_Client $casClient);
+
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain.php
new file mode 100644
index 0000000..01ce73d
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain.php
@@ -0,0 +1,118 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxyChain.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * A normal proxy-chain definition that lists each level of the chain as either
+ * a string or regular expression.
+ *
+ * @class    CAS_ProxyChain
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class CAS_ProxyChain
+implements CAS_ProxyChain_Interface
+{
+
+    protected $chain = array();
+
+    /**
+     * A chain is an array of strings or regexp strings that will be matched
+     * against. Regexp will be matched with preg_match and strings will be
+     * matched from the beginning. A string must fully match the beginning of
+     * an proxy url. So you can define a full domain as acceptable or go further
+     * down.
+     * Proxies have to be defined in reverse from the service to the user. If a
+     * user hits service A get proxied via B to service C the list of acceptable
+     * proxies on C would be array(B,A);
+     *
+     * @param array $chain A chain of proxies
+     */
+    public function __construct(array $chain)
+    {
+        $this->chain = array_values($chain);	// Ensure that we have an indexed array
+    }
+
+    /**
+     * Match a list of proxies.
+     *
+     * @param array $list The list of proxies in front of this service.
+     *
+     * @return bool
+     */
+    public function matches(array $list)
+    {
+        $list = array_values($list);  // Ensure that we have an indexed array
+        if ($this->isSizeValid($list)) {
+            $mismatch = false;
+            foreach ($this->chain as $i => $search) {
+                $proxy_url = $list[$i];
+                if (preg_match('/^\/.*\/[ixASUXu]*$/s', $search)) {
+                    if (preg_match($search, $proxy_url)) {
+                        phpCAS::trace("Found regexp " .  $search . " matching " . $proxy_url);
+                    } else {
+                        phpCAS::trace("No regexp match " .  $search . " != " . $proxy_url);
+                        $mismatch = true;
+                        break;
+                    }
+                } else {
+                    if (strncasecmp($search, $proxy_url, strlen($search)) == 0) {
+                        phpCAS::trace("Found string " .  $search . " matching " . $proxy_url);
+                    } else {
+                        phpCAS::trace("No match " .  $search . " != " . $proxy_url);
+                        $mismatch = true;
+                        break;
+                    }
+                }
+            }
+            if (!$mismatch) {
+                phpCAS::trace("Proxy chain matches");
+                return true;
+            }
+        } else {
+            phpCAS::trace("Proxy chain skipped: size mismatch");
+        }
+        return false;
+    }
+
+    /**
+     * Validate the size of the the list as compared to our chain.
+     *
+     * @param array $list List of proxies
+     *
+     * @return bool
+     */
+    protected function isSizeValid (array $list)
+    {
+        return (sizeof($this->chain) == sizeof($list));
+    }
+}
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/AllowedList.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/AllowedList.php
new file mode 100644
index 0000000..62d196a
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/AllowedList.php
@@ -0,0 +1,119 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxyChain/AllowedList.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+
+/**
+ * ProxyChain is a container for storing chains of valid proxies that can
+ * be used to validate proxied requests to a service
+ *
+ * @class    CAS_ProxyChain_AllowedList
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+class CAS_ProxyChain_AllowedList
+{
+
+    private $_chains = array();
+
+    /**
+     * Check whether proxies are allowed by configuration
+     *
+     * @return bool
+     */
+    public function isProxyingAllowed()
+    {
+        return (count($this->_chains) > 0);
+    }
+
+    /**
+     * Add a chain of proxies to the list of possible chains
+     *
+     * @param CAS_ProxyChain_Interface $chain A chain of proxies
+     *
+     * @return void
+     */
+    public function allowProxyChain(CAS_ProxyChain_Interface $chain)
+    {
+        $this->_chains[] = $chain;
+    }
+
+    /**
+     * Check if the proxies found in the response match the allowed proxies
+     *
+     * @param array $proxies list of proxies to check
+     *
+     * @return bool whether the proxies match the allowed proxies
+     */
+    public function isProxyListAllowed(array $proxies)
+    {
+        phpCAS::traceBegin();
+        if (empty($proxies)) {
+            phpCAS::trace("No proxies were found in the response");
+            phpCAS::traceEnd(true);
+            return true;
+        } elseif (!$this->isProxyingAllowed()) {
+            phpCAS::trace("Proxies are not allowed");
+            phpCAS::traceEnd(false);
+            return false;
+        } else {
+            $res = $this->contains($proxies);
+            phpCAS::traceEnd($res);
+            return $res;
+        }
+    }
+
+    /**
+     * Validate the proxies from the proxy ticket validation against the
+     * chains that were definded.
+     *
+     * @param array $list List of proxies from the proxy ticket validation.
+     *
+     * @return if any chain fully matches the supplied list
+     */
+    public function contains(array $list)
+    {
+        phpCAS::traceBegin();
+        $count = 0;
+        foreach ($this->_chains as $chain) {
+            phpCAS::trace("Checking chain ". $count++);
+            if ($chain->matches($list)) {
+                phpCAS::traceEnd(true);
+                return true;
+            }
+        }
+        phpCAS::trace("No proxy chain matches.");
+        phpCAS::traceEnd(false);
+        return false;
+    }
+}
+?>
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Any.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Any.php
new file mode 100644
index 0000000..0cd92f7
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Any.php
@@ -0,0 +1,64 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxyChain/Any.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * A proxy-chain definition that will match any list of proxies.
+ *
+ * Use this class for quick testing or in certain production screnarios you
+ * might want to allow allow any other valid service to proxy your service.
+ *
+ * THIS CLASS IS HOWEVER NOT RECOMMENDED FOR PRODUCTION AND HAS SECURITY
+ * IMPLICATIONS: YOU ARE ALLOWING ANY SERVICE TO ACT ON BEHALF OF A USER
+ * ON THIS SERVICE.
+ *
+ * @class    CAS_ProxyChain_Any
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxyChain_Any
+implements CAS_ProxyChain_Interface
+{
+
+    /**
+     * Match a list of proxies.
+     *
+     * @param array $list The list of proxies in front of this service.
+     *
+     * @return bool
+     */
+    public function matches(array $list)
+    {
+        phpCAS::trace("Using CAS_ProxyChain_Any. No proxy validation is performed.");
+        return true;
+    }
+
+}
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Interface.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Interface.php
new file mode 100644
index 0000000..d247115
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Interface.php
@@ -0,0 +1,53 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxyChain/Interface.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * An interface for classes that define a list of allowed proxies in front of
+ * the current application.
+ *
+ * @class    CAS_ProxyChain_Interface
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_ProxyChain_Interface
+{
+
+    /**
+     * Match a list of proxies.
+     *
+     * @param array $list The list of proxies in front of this service.
+     *
+     * @return bool
+     */
+    public function matches(array $list);
+
+}
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Trusted.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Trusted.php
new file mode 100644
index 0000000..7fa6129
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyChain/Trusted.php
@@ -0,0 +1,59 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/ProxyChain/Trusted.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * A proxy-chain definition that defines a chain up to a trusted proxy and
+ * delegates the resposibility of validating the rest of the chain to that
+ * trusted proxy.
+ *
+ * @class    CAS_ProxyChain_Trusted
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxyChain_Trusted
+extends CAS_ProxyChain
+implements CAS_ProxyChain_Interface
+{
+
+    /**
+     * Validate the size of the the list as compared to our chain.
+     *
+     * @param array $list list of proxies
+     *
+     * @return bool
+     */
+    protected function isSizeValid (array $list)
+    {
+        return (sizeof($this->chain) <= sizeof($list));
+    }
+
+}
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyTicketException.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyTicketException.php
new file mode 100755
index 0000000..57df81f
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/ProxyTicketException.php
@@ -0,0 +1,68 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @class    CAS/ProxyTicketException.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ *
+ */
+
+/**
+ * An Exception for errors related to fetching or validating proxy tickets.
+ *
+ * @class    CAS_ProxyTicketException
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_ProxyTicketException
+extends BadMethodCallException
+implements CAS_Exception
+{
+
+    /**
+     * Constructor
+     *
+     * @param string $message Message text
+     * @param int    $code    Error code
+     *
+     * @return void
+     */
+    public function __construct ($message, $code = PHPCAS_SERVICE_PT_FAILURE)
+    {
+        // Warn if the code is not in our allowed list
+        $ptCodes = array(
+        PHPCAS_SERVICE_PT_FAILURE,
+        PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE,
+        PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE,
+        );
+        if (!in_array($code, $ptCodes)) {
+            trigger_error('Invalid code '.$code.' passed. Must be one of PHPCAS_SERVICE_PT_FAILURE, PHPCAS_SERVICE_PT_NO_SERVER_RESPONSE, or PHPCAS_SERVICE_PT_BAD_SERVER_RESPONSE.');
+        }
+
+        parent::__construct($message, $code);
+    }
+}
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/AbstractRequest.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/AbstractRequest.php
new file mode 100755
index 0000000..0f2e467
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/AbstractRequest.php
@@ -0,0 +1,343 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Request/AbstractRequest.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Provides support for performing web-requests via curl
+ *
+ * @class    CAS_Request_AbstractRequest
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+abstract class CAS_Request_AbstractRequest
+implements CAS_Request_RequestInterface
+{
+
+    protected $url = null;
+    protected $cookies = array();
+    protected $headers = array();
+    protected $isPost = false;
+    protected $postBody = null;
+    protected $caCertPath = null;
+    protected $validateCN = true;
+    private $_sent = false;
+    private $_responseHeaders = array();
+    private $_responseBody = null;
+    private $_errorMessage = '';
+
+    /*********************************************************
+     * Configure the Request
+    *********************************************************/
+
+    /**
+     * Set the URL of the Request
+     *
+     * @param string $url Url to set
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function setUrl ($url)
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot '.__METHOD__);
+        }
+
+        $this->url = $url;
+    }
+
+    /**
+     * Add a cookie to the request.
+     *
+     * @param string $name  Name of entry
+     * @param string $value value of entry
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function addCookie ($name, $value)
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot '.__METHOD__);
+        }
+
+        $this->cookies[$name] = $value;
+    }
+
+    /**
+     * Add an array of cookies to the request.
+     * The cookie array is of the form
+     *     array('cookie_name' => 'cookie_value', 'cookie_name2' => cookie_value2')
+     *
+     * @param array $cookies cookies to add
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function addCookies (array $cookies)
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot '.__METHOD__);
+        }
+
+        $this->cookies = array_merge($this->cookies, $cookies);
+    }
+
+    /**
+     * Add a header string to the request.
+     *
+     * @param string $header Header to add
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function addHeader ($header)
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot '.__METHOD__);
+        }
+
+        $this->headers[] = $header;
+    }
+
+    /**
+     * Add an array of header strings to the request.
+     *
+     * @param array $headers headers to add
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function addHeaders (array $headers)
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot '.__METHOD__);
+        }
+
+        $this->headers = array_merge($this->headers, $headers);
+    }
+
+    /**
+     * Make the request a POST request rather than the default GET request.
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function makePost ()
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot '.__METHOD__);
+        }
+
+        $this->isPost = true;
+    }
+
+    /**
+     * Add a POST body to the request
+     *
+     * @param string $body body to add
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function setPostBody ($body)
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot '.__METHOD__);
+        }
+        if (!$this->isPost) {
+            throw new CAS_OutOfSequenceException('Cannot add a POST body to a GET request, use makePost() first.');
+        }
+
+        $this->postBody = $body;
+    }
+
+    /**
+     * Specify the path to an SSL CA certificate to validate the server with.
+     *
+     * @param string $caCertPath  path to cert
+     * @param bool   $validate_cn valdiate CN of certificate
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function setSslCaCert ($caCertPath,$validate_cn=true)
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot '.__METHOD__);
+        }
+        $this->caCertPath = $caCertPath;
+        $this->validateCN = $validate_cn;
+    }
+
+    /*********************************************************
+     * 2. Send the Request
+    *********************************************************/
+
+    /**
+     * Perform the request.
+     *
+     * @return bool TRUE on success, FALSE on failure.
+     * @throws CAS_OutOfSequenceException If called multiple times.
+     */
+    public function send ()
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot send again.');
+        }
+        if (is_null($this->url) || !$this->url) {
+            throw new CAS_OutOfSequenceException('A url must be specified via setUrl() before the request can be sent.');
+        }
+        $this->_sent = true;
+        return $this->sendRequest();
+    }
+
+    /**
+     * Send the request and store the results.
+     *
+     * @return bool TRUE on success, FALSE on failure.
+     */
+    abstract protected function sendRequest ();
+
+    /**
+     * Store the response headers.
+     *
+     * @param array $headers headers to store
+     *
+     * @return void
+     */
+    protected function storeResponseHeaders (array $headers)
+    {
+        $this->_responseHeaders = array_merge($this->_responseHeaders, $headers);
+    }
+
+    /**
+     * Store a single response header to our array.
+     *
+     * @param string $header header to store
+     *
+     * @return void
+     */
+    protected function storeResponseHeader ($header)
+    {
+        $this->_responseHeaders[] = $header;
+    }
+
+    /**
+     * Store the response body.
+     *
+     * @param string $body body to store
+     *
+     * @return void
+     */
+    protected function storeResponseBody ($body)
+    {
+        $this->_responseBody = $body;
+    }
+
+    /**
+     * Add a string to our error message.
+     *
+     * @param string $message message to add
+     *
+     * @return void
+     */
+    protected function storeErrorMessage ($message)
+    {
+        $this->_errorMessage .= $message;
+    }
+
+    /*********************************************************
+     * 3. Access the response
+    *********************************************************/
+
+    /**
+     * Answer the headers of the response.
+     *
+     * @return array An array of header strings.
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getResponseHeaders ()
+    {
+        if (!$this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has not been sent yet. Cannot '.__METHOD__);
+        }
+        return $this->_responseHeaders;
+    }
+
+    /**
+     * Answer HTTP status code of the response
+     *
+     * @return int
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getResponseStatusCode ()
+    {
+        if (!$this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has not been sent yet. Cannot '.__METHOD__);
+        }
+
+        if (!preg_match('/HTTP\/[0-9.]+\s+([0-9]+)\s*(.*)/', $this->_responseHeaders[0], $matches)) {
+            throw new CAS_Request_Exception("Bad response, no status code was found in the first line.");
+        }
+
+        return intval($matches[1]);
+    }
+
+    /**
+     * Answer the body of response.
+     *
+     * @return string
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getResponseBody ()
+    {
+        if (!$this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has not been sent yet. Cannot '.__METHOD__);
+        }
+
+        return $this->_responseBody;
+    }
+
+    /**
+     * Answer a message describing any errors if the request failed.
+     *
+     * @return string
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getErrorMessage ()
+    {
+        if (!$this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has not been sent yet. Cannot '.__METHOD__);
+        }
+        return $this->_errorMessage;
+    }
+}
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/CurlMultiRequest.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/CurlMultiRequest.php
new file mode 100755
index 0000000..a046989
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/CurlMultiRequest.php
@@ -0,0 +1,136 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Request/AbstractRequest.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines a class library for performing multiple web requests
+ * in batches. Implementations of this interface may perform requests serially
+ * or in parallel.
+ *
+ * @class    CAS_Request_CurlMultiRequest
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_Request_CurlMultiRequest
+implements CAS_Request_MultiRequestInterface
+{
+    private $_requests = array();
+    private $_sent = false;
+
+    /*********************************************************
+     * Add Requests
+    *********************************************************/
+
+    /**
+     * Add a new Request to this batch.
+     * Note, implementations will likely restrict requests to their own concrete
+     * class hierarchy.
+     *
+     * @param CAS_Request_RequestInterface $request reqest to add
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     * @throws CAS_InvalidArgumentException If passed a Request of the wrong
+     * implmentation.
+     */
+    public function addRequest (CAS_Request_RequestInterface $request)
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot '.__METHOD__);
+        }
+        if (!$request instanceof CAS_Request_CurlRequest) {
+            throw new CAS_InvalidArgumentException('As a CAS_Request_CurlMultiRequest, I can only work with CAS_Request_CurlRequest objects.');
+        }
+
+        $this->_requests[] = $request;
+    }
+
+    /**
+     * Retrieve the number of requests added to this batch.
+     *
+     * @return number of request elements
+     */
+    public function getNumRequests()
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot '.__METHOD__);
+        }
+        return count($this->_requests);
+    }
+
+    /*********************************************************
+     * 2. Send the Request
+    *********************************************************/
+
+    /**
+     * Perform the request. After sending, all requests will have their
+     * responses poulated.
+     *
+     * @return bool TRUE on success, FALSE on failure.
+     * @throws CAS_OutOfSequenceException If called multiple times.
+     */
+    public function send ()
+    {
+        if ($this->_sent) {
+            throw new CAS_OutOfSequenceException('Request has already been sent cannot send again.');
+        }
+        if (!count($this->_requests)) {
+            throw new CAS_OutOfSequenceException('At least one request must be added via addRequest() before the multi-request can be sent.');
+        }
+
+        $this->_sent = true;
+
+        // Initialize our handles and configure all requests.
+        $handles = array();
+        $multiHandle = curl_multi_init();
+        foreach ($this->_requests as $i => $request) {
+            $handle = $request->_initAndConfigure();
+            curl_setopt($handle, CURLOPT_RETURNTRANSFER, true);
+            $handles[$i] = $handle;
+            curl_multi_add_handle($multiHandle, $handle);
+        }
+
+        // Execute the requests in parallel.
+        do {
+            curl_multi_exec($multiHandle, $running);
+        } while ($running > 0);
+
+        // Populate all of the responses or errors back into the request objects.
+        foreach ($this->_requests as $i => $request) {
+            $buf = curl_multi_getcontent($handles[$i]);
+            $request->_storeResponseBody($buf);
+            curl_multi_remove_handle($multiHandle, $handles[$i]);
+            curl_close($handles[$i]);
+        }
+
+        curl_multi_close($multiHandle);
+    }
+}
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/CurlRequest.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/CurlRequest.php
new file mode 100755
index 0000000..e20914f
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/CurlRequest.php
@@ -0,0 +1,197 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Request/CurlRequest.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * Provides support for performing web-requests via curl
+ *
+ * @class    CAS_Request_CurlRequest
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_Request_CurlRequest
+extends CAS_Request_AbstractRequest
+implements CAS_Request_RequestInterface
+{
+
+    /**
+     * Set additional curl options
+     *
+     * @param array $options option to set
+     *
+     * @return void
+     */
+    public function setCurlOptions (array $options)
+    {
+        $this->_curlOptions = $options;
+    }
+    private $_curlOptions = array();
+
+    /**
+     * Send the request and store the results.
+     *
+     * @return bool true on success, false on failure.
+     */
+    protected function sendRequest ()
+    {
+        phpCAS::traceBegin();
+
+        /*********************************************************
+         * initialize the CURL session
+        *********************************************************/
+        $ch = $this->_initAndConfigure();
+
+        /*********************************************************
+         * Perform the query
+        *********************************************************/
+        $buf = curl_exec($ch);
+        if ( $buf === false ) {
+            phpCAS::trace('curl_exec() failed');
+            $this->storeErrorMessage('CURL error #'.curl_errno($ch).': '.curl_error($ch));
+            $res = false;
+        } else {
+            $this->storeResponseBody($buf);
+            phpCAS::trace("Response Body: \n".$buf."\n");
+            $res = true;
+
+        }
+        // close the CURL session
+        curl_close($ch);
+
+        phpCAS::traceEnd($res);
+        return $res;
+    }
+
+    /**
+     * Internal method to initialize our cURL handle and configure the request.
+     * This method should NOT be used outside of the CurlRequest or the
+     * CurlMultiRequest.
+     *
+     * @return resource The cURL handle on success, false on failure
+     */
+    private function _initAndConfigure()
+    {
+        /*********************************************************
+         * initialize the CURL session
+        *********************************************************/
+        $ch = curl_init($this->url);
+
+        if (version_compare(PHP_VERSION, '5.1.3', '>=')) {
+            //only avaible in php5
+            curl_setopt_array($ch, $this->_curlOptions);
+        } else {
+            foreach ($this->_curlOptions as $key => $value) {
+                curl_setopt($ch, $key, $value);
+            }
+        }
+
+        /*********************************************************
+         * Set SSL configuration
+        *********************************************************/
+        if ($this->caCertPath) {
+            if ($this->validateCN) {
+                curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 2);
+            } else {
+                curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, 1);
+            }
+            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 1);
+            curl_setopt($ch, CURLOPT_CAINFO, $this->caCertPath);
+            phpCAS::trace('CURL: Set CURLOPT_CAINFO ' . $this->caCertPath);
+        } else {
+            curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, 0);
+        }
+
+        /*********************************************************
+         * Configure curl to capture our output.
+        *********************************************************/
+        // return the CURL output into a variable
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, 1);
+
+        // get the HTTP header with a callback
+        curl_setopt($ch, CURLOPT_HEADERFUNCTION, array($this, '_curlReadHeaders'));
+
+        /*********************************************************
+         * Add cookie headers to our request.
+        *********************************************************/
+        if (count($this->cookies)) {
+            $cookieStrings = array();
+            foreach ($this->cookies as $name => $val) {
+                $cookieStrings[] = $name.'='.$val;
+            }
+            curl_setopt($ch, CURLOPT_COOKIE, implode(';', $cookieStrings));
+        }
+
+        /*********************************************************
+         * Add any additional headers
+        *********************************************************/
+        if (count($this->headers)) {
+            curl_setopt($ch, CURLOPT_HTTPHEADER, $this->headers);
+        }
+
+        /*********************************************************
+         * Flag and Body for POST requests
+        *********************************************************/
+        if ($this->isPost) {
+            curl_setopt($ch, CURLOPT_POST, 1);
+            curl_setopt($ch, CURLOPT_POSTFIELDS, $this->postBody);
+        }
+
+        return $ch;
+    }
+
+    /**
+     * Store the response body.
+     * This method should NOT be used outside of the CurlRequest or the
+     * CurlMultiRequest.
+     *
+     * @param string $body body to stor
+     *
+     * @return void
+     */
+    private function _storeResponseBody ($body)
+    {
+        $this->storeResponseBody($body);
+    }
+
+    /**
+     * Internal method for capturing the headers from a curl request.
+     *
+     * @param handle $ch     handle of curl
+     * @param string $header header
+     *
+     * @return void
+     */
+    private function _curlReadHeaders ($ch, $header)
+    {
+        $this->storeResponseHeader($header);
+        return strlen($header);
+    }
+}
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/Exception.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/Exception.php
new file mode 100755
index 0000000..14ff3c6
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/Exception.php
@@ -0,0 +1,45 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Request/Exception.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * An Exception for problems performing requests
+ *
+ * @class    CAS_Request_Exception
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+class CAS_Request_Exception
+extends Exception
+implements CAS_Exception
+{
+
+}
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/MultiRequestInterface.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/MultiRequestInterface.php
new file mode 100755
index 0000000..abc4486
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/MultiRequestInterface.php
@@ -0,0 +1,83 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Request/MultiRequestInterface.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines a class library for performing multiple web requests
+ * in batches. Implementations of this interface may perform requests serially
+ * or in parallel.
+ *
+ * @class    CAS_Request_MultiRequestInterface
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_Request_MultiRequestInterface
+{
+
+    /*********************************************************
+     * Add Requests
+    *********************************************************/
+
+    /**
+     * Add a new Request to this batch.
+     * Note, implementations will likely restrict requests to their own concrete
+     * class hierarchy.
+     *
+     * @param CAS_Request_RequestInterface $request request interface
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been
+     * sent.
+     * @throws CAS_InvalidArgumentException If passed a Request of the wrong
+     * implmentation.
+     */
+    public function addRequest (CAS_Request_RequestInterface $request);
+
+    /**
+     * Retrieve the number of requests added to this batch.
+     *
+     * @return number of request elements
+     */
+    public function getNumRequests ();
+
+    /*********************************************************
+     * 2. Send the Request
+    *********************************************************/
+
+    /**
+     * Perform the request. After sending, all requests will have their
+     * responses poulated.
+     *
+     * @return bool TRUE on success, FALSE on failure.
+     * @throws CAS_OutOfSequenceException If called multiple times.
+     */
+    public function send ();
+}
diff --git a/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/RequestInterface.php b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/RequestInterface.php
new file mode 100755
index 0000000..cc11ba4
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/phpCAS/CAS/Request/RequestInterface.php
@@ -0,0 +1,179 @@
+<?php
+
+/**
+ * Licensed to Jasig under one or more contributor license
+ * agreements. See the NOTICE file distributed with this work for
+ * additional information regarding copyright ownership.
+ *
+ * Jasig licenses this file to you under the Apache License,
+ * Version 2.0 (the "License"); you may not use this file except in
+ * compliance with the License. You may obtain a copy of the License at:
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ *
+ * PHP Version 5
+ *
+ * @file     CAS/Request/RequestInterface.php
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+
+/**
+ * This interface defines a class library for performing web requests.
+ *
+ * @class    CAS_Request_RequestInterface
+ * @category Authentication
+ * @package  PhpCAS
+ * @author   Adam Franco <afranco@middlebury.edu>
+ * @license  http://www.apache.org/licenses/LICENSE-2.0  Apache License 2.0
+ * @link     https://wiki.jasig.org/display/CASC/phpCAS
+ */
+interface CAS_Request_RequestInterface
+{
+
+    /*********************************************************
+     * Configure the Request
+    *********************************************************/
+
+    /**
+     * Set the URL of the Request
+     *
+     * @param string $url url to set
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function setUrl ($url);
+
+    /**
+     * Add a cookie to the request.
+     *
+     * @param string $name  name of cookie
+     * @param string $value value of cookie
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function addCookie ($name, $value);
+
+    /**
+     * Add an array of cookies to the request.
+     * The cookie array is of the form
+     *     array('cookie_name' => 'cookie_value', 'cookie_name2' => cookie_value2')
+     *
+     * @param array $cookies cookies to add
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function addCookies (array $cookies);
+
+    /**
+     * Add a header string to the request.
+     *
+     * @param string $header header to add
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function addHeader ($header);
+
+    /**
+     * Add an array of header strings to the request.
+     *
+     * @param array $headers headers to add
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function addHeaders (array $headers);
+
+    /**
+     * Make the request a POST request rather than the default GET request.
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function makePost ();
+
+    /**
+     * Add a POST body to the request
+     *
+     * @param string $body body to add
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function setPostBody ($body);
+
+
+    /**
+     * Specify the path to an SSL CA certificate to validate the server with.
+     *
+     * @param string  $caCertPath  path to cert file
+     * @param boolean $validate_cn validate CN of SSL certificate
+     *
+     * @return void
+     * @throws CAS_OutOfSequenceException If called after the Request has been sent.
+     */
+    public function setSslCaCert ($caCertPath, $validate_cn = true);
+
+
+
+    /*********************************************************
+     * 2. Send the Request
+    *********************************************************/
+
+    /**
+     * Perform the request.
+     *
+     * @return bool TRUE on success, FALSE on failure.
+     * @throws CAS_OutOfSequenceException If called multiple times.
+     */
+    public function send ();
+
+    /*********************************************************
+     * 3. Access the response
+    *********************************************************/
+
+    /**
+     * Answer the headers of the response.
+     *
+     * @return array An array of header strings.
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getResponseHeaders ();
+
+    /**
+     * Answer HTTP status code of the response
+     *
+     * @return int
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getResponseStatusCode ();
+
+    /**
+     * Answer the body of response.
+     *
+     * @return string
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getResponseBody ();
+
+    /**
+     * Answer a message describing any errors if the request failed.
+     *
+     * @return string
+     * @throws CAS_OutOfSequenceException If called before the Request has been sent.
+     */
+    public function getErrorMessage ();
+}
diff --git a/www/wp-content/plugins/cas-maestro/readme.txt b/www/wp-content/plugins/cas-maestro/readme.txt
new file mode 100644
index 0000000..bd30dd5
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/readme.txt
@@ -0,0 +1,110 @@
+=== CAS Maestro ===
+Contributors: vaurdan, jpargana, ricardobaeta
+Donate link: https://dsi.tecnico.ulisboa.pt
+Tags: cas, maestro, central, centralized, authentication, auth, service, system, server, phpCAS, integration, ldap
+Requires at least: 3.5
+Tested up to: 3.9.1
+Stable tag: 1.1.3
+License: GPLv2 or later
+License URI: http://www.gnu.org/licenses/gpl-2.0.html
+
+CAS Maestro allows you to configure your centralized authentication service, CAS, for an integrated log in with WordPress. LDAP is optional.
+
+== Description ==
+
+If you have a CAS service and you want to authenticate your users in WordPress with the same credentials, you can use this plugin to get the job done.
+
+The users that attempt to start their sessions in WordPress, will be redirected to the CAS single sign-on page, where their sessions starts. If the user data is valid, they are redirected back to WordPress. If the credentials already exist in your WordPress the user will be authenticated. Otherwise, if the user was pre-registered in the configuration page, the user will be created.
+
+CAS Maestro can also connect to a LDAP server to access personal data to be used in user profile.
+
+Features included:
+
+* Full integration with the WordPress authentication system
+* One of the most secure CAS plugins for WordPress
+* Possibility to pre-register some known users, with the desired role
+* LDAP integration for user data fill, such as name and e-mail 
+* Validation mechanisms to avoid getting blocked in case of misconfiguration
+* Mail notification for pre-registered users
+* Network activation allowed (todo: network panel for configuration)
+
+== Installation ==
+
+1. Install Cas Maestro either via the WordPress.org plugin directory, or by uploading the files to your server (`/wp-content/plugins/`) 
+2. Activation can be made in 'Plugins' menu
+3. Configure carefully Cas Maestro through plugin's page
+
+**ATTENTION** If for some reason you are unable to access the administrator panel, you can disable the CAS Maestro behavior by adding the code line define('WPCAS_BYPASS',true); to `wp-config.php` file. That way you can configure CAS Maestro before revert the previous instruction.
+
+**Did you know...** If you leave empty fields in CAS Maestro configuration, the plugin will ask you to fill fields before final activation. Therefore you can use WordPress login system before the configuration conclusion.
+
+== Frequently Asked Questions ==
+
+= In case that I cannot access the content manager due to a misconfiguration of this plugin, what steps should I perform? =
+
+You can bypass the CAS Authentication logging-in on http://www.example.com/wp-login.php?wp. This will allow you to login using your WordPress account.
+
+Beside that, you can temporary disable the WordPress behavior doing the following: 
+
+1. Edit the file wp-config.php and search for `define('WP_DEBUG', false)`su; definition
+2. Before that definition, write `define('WPCAS_BYPASS',true)`;
+3. Reconfigure the plugin and remove the line that was added.
+
+Alternatively, you may simply uninstall CAS Maestro as follows:
+
+1. Remove the directory of plugin CAS Maestro
+2. Perform access according to the login WordPess
+3. Reinstall CAS Maestro
+
+= It is possible to login using WordPress accounts? =
+Yes. But the login URL is slighty different: you must login over `/wp-login.php?wp` URL. This will give access to the standard WordPress login form so you can use both authentication methods.
+
+= I want to change the capability that allows users to edit the users allowed to register. How can I do it? =
+There is a filter `cas_maestro_change_users_capability` that can be used to change the capability. You can add the following to your functions.php:
+`function change_casmaestro_capabilities($old) {
+	return 'your_new_capability';
+}
+add_filter('cas_maestro_change_users_capability', 'change_casmaestro_capabilities');`
+By default, the capability is `edit_posts`.
+
+== Screenshots ==
+
+1. The full CAS Maestro settings page
+2. CAS Server settings
+3. Mailing options
+
+== Changelog ==
+
+= 1.1.3 =
+* Users with 'edit_posts' capability can now edit only the authorized users (this can be changed using a filter - see FAQ)
+
+= 1.1.2 =
+* Fixed bug with wrong type of the CAS Server version
+
+= 1.1.1 =
+* CAS Server Path is no longer a mandatory field 
+
+= 1.1 =
+* Bypass to the CAS authentication implemented using a query parameter
+* Minor bug fixes
+
+= 1.0.4 =
+* phpCAS deprecated functions replaced
+
+= 1.0.3 =
+* Minor bug fixes
+
+= 1.0.2 =
+* Fixed php short tag bug
+* Fixed 'Undefined index' notices (thanks [zacwaz](http://wordpress.org/support/profile/zacwaz))
+
+= 1.0.1 =
+* Bug fix with includes, ready for WordPress 3.9
+
+= 1.0 =
+* Initial release.
+
+== Upgrade Notice ==
+
+= 1.1 =
+New version with CAS Auth bypass
diff --git a/www/wp-content/plugins/cas-maestro/views/admin_interface.php b/www/wp-content/plugins/cas-maestro/views/admin_interface.php
new file mode 100644
index 0000000..15b87d1
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/views/admin_interface.php
@@ -0,0 +1,24 @@
+<div class="wrap">
+	    <div id="icon-themes" class="icon32"><br></div>
+        <h2><?php echo __('CAS Maestro Settings','CAS_Maestro')?></h2>
+        <?php
+            if ( isset( $_GET['success'] ) && 'true' == esc_attr( $_GET['success'] ) 
+                && !isset($_GET['error'])) 
+                    echo '<div class="updated" ><p>'.__('CAS Maestro settings has been updated.', 'CAS_Maestro').'</p></div>';
+            if(isset($_GET['error']))
+                echo '<div class="error"><p>'.__('CAS Maestro settings has been updated, yet there\'s still information that needs to be filled.','CAS_Maestro').'</p></div>';
+        ?>
+        <form method="post" class="cas_form">
+           <?php
+                wp_nonce_field('closedpostboxes', 'closedpostboxesnonce', false );
+                wp_nonce_field('meta-box-order', 'meta-box-order-nonce', false );
+            ?>
+          <div id="poststuff" class="columns metabox-holder">
+            <div class="postbox-container column-primary">
+            <?php do_meta_boxes($this->current_page_hook, 'main', $this); ?>
+            </div>
+            <div class="postbox-container column-secondary">
+            <?php do_meta_boxes($this->current_page_hook, 'side', $this); ?>
+            </div>
+        </form>
+</div>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/views/metaboxes/general.php b/www/wp-content/plugins/cas-maestro/views/metaboxes/general.php
new file mode 100644
index 0000000..bced2de
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/views/metaboxes/general.php
@@ -0,0 +1,48 @@
+<h2><?php _e('Server settings','CAS_Maestro'); ?></h2>
+    <fieldset class="options">
+        <p><?php _e("The plugin will only be active after the CAS server definitions are filled. After the configuration is done, please verify if the connection is valid. This is strongly advised because If you fill the data incorrrectly, your access to WordPress might be denied.", 'CAS_Maestro'); ?></p>
+        <p class="grey_text"><?php _e("In case you don’t know all the data, or in doubt, you should contact the person responsible for the CAS server.", 'CAS_Maestro'); ?></p>
+        <table width="700px" cellspacing="2" cellpadding="5" class="editform">
+            <tbody>
+                <tr>
+                    <th width="150px" scope="row"><label for="cas_version_inp"><?php _e('CAS version', 'CAS_Maestro'); ?></label></th>
+                    <td>
+                        <select name="cas_version" id="cas_version_inp" style="width: 100px;">
+                            <option value="2.0" <?php echo ($this->settings['cas_version'] == '2.0')?'selected':''; ?>>2.0</option>
+                            <option value="1.0" <?php echo ($this->settings['cas_version'] == '1.0')?'selected':''; ?>>1.0</option>
+                        </select>
+                    </td>
+                </tr>
+                <tr>
+                    <th width="150px" scope="row"><label for="server_hostname_inp"><?php _e('Server hostname', 'CAS_Maestro'); ?>*</label></th>
+                    <td><input <?php check_empty($this->settings['server_hostname'])?> type="text" name="server_hostname" id="server_hostname_inp" value="<?php echo $this->settings['server_hostname']; ?>" size="25" /></td>
+                </tr>
+                <tr>
+                    <th width="150px" scope="row"><label for="server_port_inp"><?php _e('Server port', 'CAS_Maestro'); ?>*</label></th>
+                    <td>
+                        <input <?php check_empty($this->settings['server_port'])?> type="text" name="server_port" id="server_port_inp" value="<?php echo $this->settings['server_port']; ?>" size="25" />
+                    </td>
+                </tr>
+                <tr>
+                    <th width="150px" scope="row"><label for="server_path_inp"><?php _e('Server path', 'CAS_Maestro'); ?></label></th>
+                    <td>
+                        <input type="text" name="server_path" id="server_path_inp" value="<?php echo $this->settings['server_path']; ?>" size="25" />
+                    </td>
+                </tr>
+            </tbody>
+        </table>
+        <div class='availability_result' id="username_availability_result"></div>
+        <h2><?php _e('Menu localization', 'CAS_Maestro'); ?></h2>
+        <p>
+            <label for="admin_menu_side" class="label-radio">
+                <input type="radio" name="admin_menu" id="admin_menu_side" value="sidebar" <?php echo (($this->settings['cas_menu_location'] === 'sidebar') ? ' checked="checked"' : ''); ?>> <span><?php _e('Sidebar','CAS_Maestro'); ?></span>
+            </label>
+            <label for="admin_menu_settings" class="label-radio">
+                <input type="radio" name="admin_menu" id="admin_menu_settings" value="settings"<?php echo (($this->settings['cas_menu_location']  === 'settings') ? ' checked="checked"' : ''); ?>> <span><?php _e('Settings menu','CAS_Maestro'); ?></span>
+            </label>
+        </p>
+    </fieldset>
+    <div class="submit">
+        <input type="submit" name="submit" class="button-primary" value="<?php _e('Update options') ?>" />
+    </div>
+    <div style="clear: both;"></div>
diff --git a/www/wp-content/plugins/cas-maestro/views/metaboxes/help_metabox.php b/www/wp-content/plugins/cas-maestro/views/metaboxes/help_metabox.php
new file mode 100644
index 0000000..3676536
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/views/metaboxes/help_metabox.php
@@ -0,0 +1,13 @@
+<p><?php _e('In case you can not access the content manager due to a misconfiguration of this plugin, the following steps should be performed:', 'CAS_Maestro'); ?></p>
+<ol>
+	<li><?php _e('Remove the directory of plugin CAS Maestro', 'CAS_Maestro'); ?></li>
+	<li><?php _e('Perform access according to the login WordPess', 'CAS_Maestro'); ?></li>
+	<li><?php _e('Reinstall CAS Maestro', 'CAS_Maestro'); ?></li>
+</ol>
+<p><?php _e('Alternatively, you may simply disable the behavior of CAS Maestro as follows:', 'CAS_Maestro');?></p>
+<ol>
+	<li><?php echo sprintf(__('Edit the file %s and search for %s definition', 'CAS_Maestro'),'wp-config.php',"<pre>define('WP_DEBUG', false);</pre>"); ?></li>
+	<li><?php echo sprintf(__('Before that definition, write %s', 'CAS_Maestro'), "<pre>define('WPCAS_BYPASS',true);</pre>"); ?></li>
+	<li><?php _e('Reconfigure the plugin and remove the line that was added.', 'CAS_Maestro'); ?></li>
+</ol>
+
diff --git a/www/wp-content/plugins/cas-maestro/views/metaboxes/mail.php b/www/wp-content/plugins/cas-maestro/views/metaboxes/mail.php
new file mode 100644
index 0000000..41d3e99
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/views/metaboxes/mail.php
@@ -0,0 +1,71 @@
+<?php $settings = $this->settings; ?>
+<h2><?php _e("Sender", 'CAS_Maestro'); ?></h2>
+<table width="700px" cellspacing="2" cellpadding="5" class="editform">
+       <tr>
+         <td colspan="2">
+          <?php _e("All mails are sent from a unique sender. This sender may recieve notification emails alerting for new users and/or activations, estabilished by the following configuration.", 'CAS_Maestro'); ?>
+       </tr>
+       <tr valign="center"> 
+        <th width="150px" scope="row"><?php _e("E-mail address:", 'CAS_Maestro'); ?>*</th> 
+        <td><input type="text" placeholder="" name="global_sender" id="email_suffix_inp" value="<?php echo $settings['global_sender']; ?>" size="35" /></td>
+      </tr>
+       <tr valign="center"> 
+        <th width="150px" scope="row"><?php _e("Full name:", 'CAS_Maestro'); ?></th> 
+        <td><input type="text" placeholder="" name="full_name" id="full_name_suffix_inp" value="<?php echo $settings['full_name']; ?>" size="35" /></td>
+      </tr>      
+    </table>
+
+    <h2><?php _e("Mails", 'CAS_Maestro'); ?></h2>
+    <p><?php _e("Please set up on witch actions should emails be sent. It’s possible to send emails to the user and the sender, depending on your configuration.", 'CAS_Maestro'); ?></p>
+
+    <div class="mail_tabs">
+      <ul>
+        <li id="welcome_mail_tab"><a href="#"><?php _e("Welcoming", 'CAS_Maestro'); ?></a></li>
+        <li id="wait_for_access_tab"><a href="#"><?php _e("Wait for access", 'CAS_Maestro'); ?></a></li>
+      </ul>
+    </div>
+
+    <div class="message_container">
+      <div id="welcome_mail">
+        <p><input name="welcome_send_user" type="checkbox" id="new_user_inp0" value="1" <?php checked('1', $this->settings['welcome_mail']['send_user']); ?> /><label for="new_user_inp0"><?php _e("Send to the User", 'CAS_Maestro'); ?></label><input name="welcome_send_global" type="checkbox" id="new_user_inp1" value="1" <?php checked('1', $this->settings['welcome_mail']['send_global']); ?> /><label for="new_user_inp1"><?php _e("Send to the Sender", 'CAS_Maestro'); ?></label></p>
+        <h2><?php _e("Subject", 'CAS_Maestro'); ?></h2>
+        <p><input type="text" name="welcome_subject" id="email_suffix_inp" value="<?php echo $settings['welcome_mail']['subject']; ?>" size="35" placeholder="Type subject"/></p>
+        <h2><?php _e("Body", 'CAS_Maestro'); ?></h2>
+        <div class="mail_body">
+          <div>
+            <p><?php _e("Message body sent to the User", 'CAS_Maestro'); ?></p>
+            <textarea type="text" name="welcome_user_body" id="user_email_suffix_inp"><?php echo $this->settings['welcome_mail']['user_body']?></textarea>          
+          </div>
+          <div>
+            <p><?php _e("Message body sent to the Sender", 'CAS_Maestro'); ?></p>
+            <textarea type="text" name="welcome_global_body" id="global_email_suffix_inp"><?php echo $this->settings['welcome_mail']['global_body']?></textarea>
+          </div>
+        </div>
+      </div>
+      
+      <div id="wait_for_access">
+        <p><input name="wait_send_user" type="checkbox" id="new_user_inp2" value="1" <?php checked('1', $this->settings['wait_mail']['send_user']); ?> /><label for="new_user_inp2"><?php _e("Send to the User", 'CAS_Maestro'); ?></label><input name="wait_send_global" type="checkbox" id="new_user_inp3" value="1" <?php checked('1', $this->settings['wait_mail']['send_global']); ?> /><label for="new_user_inp3"><?php _e("Send to the Sender", 'CAS_Maestro'); ?></label></p>
+        <h2><?php _e("Subject", 'CAS_Maestro'); ?></h2>
+        <p><input type="text" name="wait_subject" id="email_suffix_inp" value="<?php echo $settings['wait_mail']['subject']; ?>" size="35" placeholder="Type subject"/></p>
+        <h2><?php _e("Body", 'CAS_Maestro'); ?></h2>
+        <div class="mail_body">
+          <div>
+            <p><?php _e("Message body sent to the User", 'CAS_Maestro'); ?></p>
+            <textarea type="text" name="wait_user_body" id="email_suffix_inp"><?php echo $this->settings['wait_mail']['user_body']?></textarea>
+          </div>
+          <div>
+            <p><?php _e("Message body sent to the Sender", 'CAS_Maestro'); ?></p>
+            <textarea type="text" name="wait_global_body" id="email_suffix_inp"><?php echo $this->settings['wait_mail']['global_body']?></textarea>
+          </div>
+        </div>
+      </div>
+
+      <p class="grey_text"><?php _e("You can use the following tokens: %sitename% for the website name, %username% for the user’s name and %realname% for the user’s real name.", 'CAS_Maestro'); ?></p>
+
+      <div style="clear: both;"></div>
+    </div>
+
+    <div class="submit">
+        <input type="submit" name="submit" class="button-primary" value="<?php _e('Update options') ?>" />
+    </div>
+    <div style="clear: both;"></div>
\ No newline at end of file
diff --git a/www/wp-content/plugins/cas-maestro/views/metaboxes/registration.php b/www/wp-content/plugins/cas-maestro/views/metaboxes/registration.php
new file mode 100644
index 0000000..acfae41
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/views/metaboxes/registration.php
@@ -0,0 +1,127 @@
+<?php 
+$raw_roles = get_editable_roles();
+
+//Get number of allowed users
+$num_allowed = count($this->allowed_users)+1;
+
+foreach($raw_roles as $role => $value) {
+  $roles[] = $role;
+  $roles_name[] = __($value['name']);
+}
+?>
+  <script type="text/javascript">
+    var roles = <?php echo json_encode($roles)?>;
+    var roles_name = <?php echo json_encode($roles_name)?>;
+    var CurrentTextboxes = <?php echo $num_allowed?>;
+  </script>
+
+  <h2><?php _e("User registration", 'CAS_Maestro'); ?></h2>
+  <div>
+ <?php if(current_user_can('manage_options')): ?>
+    <div class="main_content">
+      <div>
+        <p><?php _e("In order to register a new user an email address is required. In case you don’t want to set the email address manually, please chose from the options below.", 'CAS_Maestro'); ?></p>
+        <?php if($this->settings['e-mail_registration'] < 1 || $this->settings['e-mail_registration'] > 3 ) $this->settings['e-mail_registration'] = 1; ?>
+        <input id="no-e-mail" type="radio" name="e-mail_registration" value="1" <?php echo ($this->settings['e-mail_registration'] == '1')?'checked':''; ?>><label for="no-e-mail"><?php _e("No mail creation", 'CAS_Maestro'); ?></label><br />
+        <input id="e-mail-suffix" type="radio" name="e-mail_registration" value="2" <?php echo ($this->settings['e-mail_registration'] == '2')?'checked':''; ?>><label for="e-mail-suffix"><?php _e("E-mail suffix username@", 'CAS_Maestro'); ?></label><input type="text" name="email_suffix" id="email_suffix_inp" value="<?php echo $this->settings['email_suffix']; ?>" placeholder="<?php echo parse_url(site_url(),PHP_URL_HOST)?>" size="15" /><br />
+        <input id="ldap-e-mail" type="radio" name="e-mail_registration" value="3" <?php echo ($this->settings['e-mail_registration'] == '3')?'checked':''; ?>><label for="ldap-e-mail"><?php _e("LDAP server connection", 'CAS_Maestro'); ?></label>
+      </div>
+      <div id="ldap_container">
+        <p><?php _e("You should finish this configuration with LDAP server data. For anonymous server access, which could not be enough, leave the fields “RDN User” and “Password” blank.", 'CAS_Maestro'); ?></p>
+
+        <table width="700px" cellspacing="2" cellpadding="5" class="editform">
+            <tr valign="center">
+              <th width="150px" scope="row">Protocol version</th>
+              <td>
+                <select name="ldap_protocol" id="ldap_proto" style="width: 75px">
+                  <option value="3" <?php echo ($this->settings['ldap_protocol'] == '3')?'selected':''; ?>>3</option>
+                  <option value="2" <?php echo ($this->settings['ldap_protocol'] == '2')?'selected':''; ?>>2</option>
+                  <option value="1" <?php echo ($this->settings['ldap_protocol'] == '1')?'selected':''; ?>>1</option>
+                </select>
+              </td>
+            </tr>
+            <tr valign="center">
+              <th width="150px" scope="row"><?php _e("Server hostname", 'CAS_Maestro'); ?>* <br /><span><?php echo sprintf(__("(with %s or %s)", 'CAS_Maestro'), 'ldap://', 'ldaps://'); ?></span></th> 
+              <td><input type="text" <?php check_empty($this->settings['ldap_server'])?>  name="ldap_server" id="ldap_server" value="<?php echo $this->settings['ldap_server']; ?>" size="35" /></td>
+            </tr>
+            <tr valign="center">
+              <th width="150px" scope="row"> <?php _e("Username <abbr title='(Relative Distinguished Name)'>RDN</abbr>", 'CAS_Maestro');?></th>
+              <td><input type="text" name="ldap_username_rdn" id="ldap_user" value="<?php echo $this->settings['ldap_username_rdn']; ?>" size="35" /></td>
+            </tr>
+            <tr valign="center"> 
+              <th width="150px" scope="row"><?php _e("Password", 'CAS_Maestro'); ?></th>
+              <td><input type="text" name="ldap_password" id="ldap_pass" value="<?php echo $this->settings['ldap_password']; ?>" size="35" /></td>
+            </tr>
+            <tr valign="center">
+              <th width="150px" scope="row"><?php _e("Base DN", 'CAS_Maestro'); ?>*</th>
+              <td><input type="text" <?php check_empty($this->settings['ldap_basedn'])?> name="ldap_basedn" id="ldap_bdn" value="<?php echo $this->settings['ldap_basedn']; ?>" size="35" /></td>
+            </tr>
+          </table>
+          <div class='availability_result' id='ldap_availability_result'></div>
+      </div>
+    </div>
+<?php endif; ?>
+    <div <?php echo (current_user_can('manage_options') ? 'class="sidebar"' : '') ?>>
+      <p><?php _e("The option to register all users, allows all users to be added to the system with subscriber profile, with no exception.", 'CAS_Maestro'); ?></p>
+      <p><input name="new_user" type="checkbox" id="new_user_inp" value="1" <?php checked('1', $this->settings['new_user']); ?> /><label for="new_user_inp"><?php _e("Register all users?", 'CAS_Maestro'); ?></label></p>
+    </div>
+  </div>
+  <div style="clear:both"></div>
+
+  <h2><?php _e("Users Allowed to Register", 'CAS_Maestro'); ?></h2> 
+  <p><?php _e("If you indentify users with the ability to register on the system upfront without confirmation you can also set their names and profile.", 'CAS_Maestro'); ?></p>
+  <div>
+     <table id="autoAdd">
+        <tbody>
+          <?php
+          $i=1;
+          foreach($this->allowed_users as $username => $curr_role) {
+          $roles = array();
+          $select_options="<option></option>";
+          $roles_name = array();
+            foreach($raw_roles as $role => $value) {
+              $roles[] = $role;
+              $roles_name[] = __($value['name']);
+              $selected ='';
+              if($curr_role == $role)
+                $selected = 'selected';
+              $select_options .= "<option value='$role' $selected>" . __($value['name']) . "</option>\n";
+            }
+          ?>
+            <tr>
+            <td class="prefix">
+              <input type="text" class="istid" id="txt<?php echo $i?>" name="username[<?php echo $i?>]" value="<?php echo $username?>" style="width: 150px;"></input>
+            </td>
+            <td>
+              <select class="to_select_2" name="role[<?php echo $i?>]" style="width: 180px;">
+                <?php echo $select_options?>
+              </select>
+            </td>
+          </tr>
+          <?php $i++; } ?>
+          <tr>
+            <td class="prefix"><input class="istid" type="text" id="txt<?php echo $i?>" name="username[<?php echo $i?>]" style="width: 150px;"></input></td>
+            <td>
+              <select class="to_select_2" name="role[<?php echo $i?>]" style="width: 180px;">
+             <?php   
+             $select_options="<option></option>";
+             foreach($raw_roles as $role => $value) {
+              $roles[] = $role;
+              $roles_name[] = __($value['name']);
+              $selected ='';
+              $select_options .= "<option value='$role'>".__($value['name'])."</option>\n";
+              } ?>
+
+              <?php echo $select_options?>
+              </select>       
+            </td>
+          </tr>
+        </tbody>
+       </table>
+       <p class="grey_text"><?php _e("To add another user, just fill the last blank element.", 'CAS_Maestro'); ?></p>
+    </div>
+
+    <div class="submit">
+        <input type="submit" name="submit" class="button-primary" value="<?php _e('Update options') ?>" />
+    </div>
+    <div style="clear: both;"></div>
diff --git a/www/wp-content/plugins/cas-maestro/views/metaboxes/soon_metabox.php b/www/wp-content/plugins/cas-maestro/views/metaboxes/soon_metabox.php
new file mode 100644
index 0000000..639be9d
--- /dev/null
+++ b/www/wp-content/plugins/cas-maestro/views/metaboxes/soon_metabox.php
@@ -0,0 +1,2 @@
+<h4><php _e('Help', 'wpCASificator'); ?></h4>
+<img src="<?php echo CAS_MAESTRO_PLUGIN_URL?>/images/ist_logo.png"/>
\ No newline at end of file