From c78b3d8488785ffc48083ad7b28f881e3781ea96 Mon Sep 17 00:00:00 2001
From: imnavajas <imnavajas@coit.es>
Date: Wed, 1 May 2024 15:33:01 +0200
Subject: [PATCH] Modificiones para que funcione el Shield y updates

---
 .idea/php.xml                                 |  47 ++
 ci4/app/Config/App.php                        | 359 +-----------
 ci4/app/Config/Auth.php                       | 529 ++++++++++++++++++
 ci4/app/Config/AuthGroups.php                 | 120 ++++
 ci4/app/Config/AuthToken.php                  | 138 +++++
 ci4/app/Config/Autoload.php                   |  13 +
 ci4/app/Config/Filters.php                    |  82 +--
 ci4/app/Config/Kint.php                       |  39 +-
 ci4/app/Config/Publisher.php                  |  28 +
 ci4/app/Config/Routes.php                     |  31 +-
 ci4/app/Config/Routing.php                    |   2 +-
 ci4/app/Config/Toolbar.php                    |   0
 .../2023-04-22-074343_ChangeTablesNames.php   |  45 --
 ...2023-04-22-083118_CreateGroupUserTable.php |  33 --
 .../2023-04-25-161753_RemoveGroupFromUser.php |  19 -
 .../2023_03_27_185500_DeleteOauthTables.php   |  43 --
 .../2023_03_28_200000_DeleteSMSColumns.php    |  42 --
 ci4/app/Filters/JWTAuthFilter.php             |  28 -
 ci4/app/Filters/LoginAuthFilter.php           |   4 +-
 ci4/app/Filters/ThrottlerFilter.php           |  43 --
 ci4/app/UserModel.php                         |  21 +
 .../Views/Shield/Email/email_2fa_email.php    |  31 +
 .../Shield/Email/email_activate_email.php     |  31 +
 .../Views/Shield/Email/magic_link_email.php   |  36 ++
 ci4/app/Views/Shield/email_2fa_show.php       |  38 ++
 ci4/app/Views/Shield/email_2fa_verify.php     |  36 ++
 ci4/app/Views/Shield/email_activate_show.php  |  37 ++
 ci4/app/Views/Shield/layout.php               | 116 ++++
 ci4/app/Views/Shield/login.php                | 136 +++++
 ci4/app/Views/Shield/magic_link_form.php      |  91 +++
 ci4/app/Views/Shield/magic_link_message.php   |  19 +
 ci4/app/Views/Shield/register.php             | 147 +++++
 ci4/spark                                     |  61 +-
 httpdocs/index.php                            |   2 +-
 .../vuexy/img/safekat/logos/sk-logo.png       | Bin 0 -> 14366 bytes
 35 files changed, 1720 insertions(+), 727 deletions(-)
 create mode 100644 ci4/app/Config/Auth.php
 create mode 100644 ci4/app/Config/AuthGroups.php
 create mode 100644 ci4/app/Config/AuthToken.php
 mode change 100755 => 100644 ci4/app/Config/Kint.php
 create mode 100644 ci4/app/Config/Publisher.php
 mode change 100755 => 100644 ci4/app/Config/Toolbar.php
 delete mode 100755 ci4/app/Database/Migrations/2023-04-22-074343_ChangeTablesNames.php
 delete mode 100755 ci4/app/Database/Migrations/2023-04-22-083118_CreateGroupUserTable.php
 delete mode 100755 ci4/app/Database/Migrations/2023-04-25-161753_RemoveGroupFromUser.php
 delete mode 100755 ci4/app/Database/Migrations/2023_03_27_185500_DeleteOauthTables.php
 delete mode 100755 ci4/app/Database/Migrations/2023_03_28_200000_DeleteSMSColumns.php
 delete mode 100755 ci4/app/Filters/JWTAuthFilter.php
 delete mode 100755 ci4/app/Filters/ThrottlerFilter.php
 create mode 100644 ci4/app/UserModel.php
 create mode 100644 ci4/app/Views/Shield/Email/email_2fa_email.php
 create mode 100644 ci4/app/Views/Shield/Email/email_activate_email.php
 create mode 100644 ci4/app/Views/Shield/Email/magic_link_email.php
 create mode 100644 ci4/app/Views/Shield/email_2fa_show.php
 create mode 100644 ci4/app/Views/Shield/email_2fa_verify.php
 create mode 100644 ci4/app/Views/Shield/email_activate_show.php
 create mode 100644 ci4/app/Views/Shield/layout.php
 create mode 100644 ci4/app/Views/Shield/login.php
 create mode 100644 ci4/app/Views/Shield/magic_link_form.php
 create mode 100644 ci4/app/Views/Shield/magic_link_message.php
 create mode 100644 ci4/app/Views/Shield/register.php
 create mode 100644 httpdocs/themes/vuexy/img/safekat/logos/sk-logo.png

diff --git a/.idea/php.xml b/.idea/php.xml
index 23db7153..75575c56 100755
--- a/.idea/php.xml
+++ b/.idea/php.xml
@@ -10,6 +10,53 @@
     <option name="highlightLevel" value="WARNING" />
     <option name="transferred" value="true" />
   </component>
+  <component name="PhpIncludePathManager">
+    <include_path>
+      <path value="$PROJECT_DIR$/ci4/vendor/psr/log" />
+      <path value="$PROJECT_DIR$/ci4/vendor/psr/container" />
+      <path value="$PROJECT_DIR$/ci4/vendor/nikic/php-parser" />
+      <path value="$PROJECT_DIR$/ci4/vendor/phenx/php-svg-lib" />
+      <path value="$PROJECT_DIR$/ci4/vendor/phenx/php-font-lib" />
+      <path value="$PROJECT_DIR$/ci4/vendor/dompdf/dompdf" />
+      <path value="$PROJECT_DIR$/ci4/vendor/laminas/laminas-escaper" />
+      <path value="$PROJECT_DIR$/ci4/vendor/myclabs/deep-copy" />
+      <path value="$PROJECT_DIR$/ci4/vendor/phar-io/version" />
+      <path value="$PROJECT_DIR$/ci4/vendor/phar-io/manifest" />
+      <path value="$PROJECT_DIR$/ci4/vendor/phpunit/phpunit" />
+      <path value="$PROJECT_DIR$/ci4/vendor/phpunit/php-timer" />
+      <path value="$PROJECT_DIR$/ci4/vendor/phpunit/php-invoker" />
+      <path value="$PROJECT_DIR$/ci4/vendor/phpunit/php-code-coverage" />
+      <path value="$PROJECT_DIR$/ci4/vendor/phpunit/php-file-iterator" />
+      <path value="$PROJECT_DIR$/ci4/vendor/phpunit/php-text-template" />
+      <path value="$PROJECT_DIR$/ci4/vendor/symfony/deprecation-contracts" />
+      <path value="$PROJECT_DIR$/ci4/vendor/theseer/tokenizer" />
+      <path value="$PROJECT_DIR$/ci4/vendor/composer" />
+      <path value="$PROJECT_DIR$/ci4/vendor/doctrine/instantiator" />
+      <path value="$PROJECT_DIR$/ci4/vendor/fakerphp/faker" />
+      <path value="$PROJECT_DIR$/ci4/vendor/mikey179/vfsstream" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/diff" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/type" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/version" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/exporter" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/code-unit" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/cli-parser" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/comparator" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/complexity" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/environment" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/global-state" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/lines-of-code" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/object-reflector" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/object-enumerator" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/recursion-context" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/resource-operations" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sebastian/code-unit-reverse-lookup" />
+      <path value="$PROJECT_DIR$/ci4/vendor/sabberworm/php-css-parser" />
+      <path value="$PROJECT_DIR$/ci4/vendor/masterminds/html5" />
+      <path value="$PROJECT_DIR$/ci4/vendor/codeigniter4/shield" />
+      <path value="$PROJECT_DIR$/ci4/vendor/codeigniter4/settings" />
+      <path value="$PROJECT_DIR$/ci4/vendor/codeigniter4/framework" />
+    </include_path>
+  </component>
   <component name="PhpProjectSharedConfiguration" php_language_level="8.1">
     <option name="suggestChangeDefaultLanguageLevel" value="false" />
   </component>
diff --git a/ci4/app/Config/App.php b/ci4/app/Config/App.php
index 7a913ab6..e9241050 100755
--- a/ci4/app/Config/App.php
+++ b/ci4/app/Config/App.php
@@ -11,19 +11,12 @@ class App extends BaseConfig
      * Base Site URL
      * --------------------------------------------------------------------------
      *
-     * URL to your CodeIgniter root. Typically this will be your base URL,
+     * URL to your CodeIgniter root. Typically, this will be your base URL,
      * WITH a trailing slash:
      *
-     *    http://example.com/
-     *
-     * If this is not set then CodeIgniter will try guess the protocol, domain
-     * and path to your installation. However, you should always configure this
-     * explicitly and never rely on auto-guessing, especially in production
-     * environments.
-     *
-     * @var string
+     * E.g., http://example.com/
      */
-    public $baseURL = '';
+    public string $baseURL = '';
 
     /**
      * Allowed Hostnames in the Site URL other than the hostname in the baseURL.
@@ -43,33 +36,28 @@ class App extends BaseConfig
      * Index File
      * --------------------------------------------------------------------------
      *
-     * Typically this will be your index.php file, unless you've renamed it to
-     * something else. If you are using mod_rewrite to remove the page set this
-     * variable so that it is blank.
-     *
-     * @var string
+     * Typically, this will be your `index.php` file, unless you've renamed it to
+     * something else. If you have configured your web server to remove this file
+     * from your site URIs, set this variable to an empty string.
      */
-
-    public $indexPage = '';
+    public string $indexPage = '';
 
     /**
      * --------------------------------------------------------------------------
      * URI PROTOCOL
      * --------------------------------------------------------------------------
      *
-     * This item determines which getServer global should be used to retrieve the
-     * URI string.  The default setting of 'REQUEST_URI' works for most servers.
+     * This item determines which server global should be used to retrieve the
+     * URI string. The default setting of 'REQUEST_URI' works for most servers.
      * If your links do not seem to work, try one of the other delicious flavors:
      *
-     * 'REQUEST_URI'    Uses $_SERVER['REQUEST_URI']
-     * 'QUERY_STRING'   Uses $_SERVER['QUERY_STRING']
-     * 'PATH_INFO'      Uses $_SERVER['PATH_INFO']
+     *  'REQUEST_URI': Uses $_SERVER['REQUEST_URI']
+     * 'QUERY_STRING': Uses $_SERVER['QUERY_STRING']
+     *    'PATH_INFO': Uses $_SERVER['PATH_INFO']
      *
      * WARNING: If you set this to 'PATH_INFO', URIs will always be URL-decoded!
-     *
-     * @var string
      */
-    public $uriProtocol = 'REQUEST_URI';
+    public string $uriProtocol = 'REQUEST_URI';
 
     /**
      * --------------------------------------------------------------------------
@@ -80,10 +68,8 @@ class App extends BaseConfig
      * is viewing the site from. It affects the language strings and other
      * strings (like currency markers, numbers, etc), that your program
      * should run under for this request.
-     *
-     * @var string
      */
-    public $defaultLocale = 'es';
+    public string $defaultLocale = 'es';
 
     /**
      * --------------------------------------------------------------------------
@@ -94,10 +80,8 @@ class App extends BaseConfig
      * language to use based on the value of the Accept-Language header.
      *
      * If false, no automatic detection will be performed.
-     *
-     * @var bool
      */
-    public $negotiateLocale = true;
+    public bool $negotiateLocale = false;
 
     /**
      * --------------------------------------------------------------------------
@@ -108,9 +92,11 @@ class App extends BaseConfig
      * by the application in descending order of priority. If no match is
      * found, the first locale will be used.
      *
-     * @var string[]
+     * IncomingRequest::setLocale() also uses this list.
+     *
+     * @var list<string>
      */
-    public $supportedLocales = ['en','es'];
+    public array $supportedLocales = ['en', 'es'];
 
     /**
      * --------------------------------------------------------------------------
@@ -120,9 +106,10 @@ class App extends BaseConfig
      * The default timezone that will be used in your application to display
      * dates with the date helper, and can be retrieved through app_timezone()
      *
-     * @var string
+     * @see https://www.php.net/manual/en/timezones.php for list of timezones
+     *      supported by PHP.
      */
-    public $appTimezone = 'Europe/Madrid';
+    public string $appTimezone = 'Europe/Madrid';
 
     /**
      * --------------------------------------------------------------------------
@@ -133,211 +120,20 @@ class App extends BaseConfig
      * that require a character set to be provided.
      *
      * @see http://php.net/htmlspecialchars for a list of supported charsets.
-     *
-     * @var string
      */
-    public $charset = 'UTF-8';
+    public string $charset = 'UTF-8';
 
     /**
      * --------------------------------------------------------------------------
-     * URI PROTOCOL
+     * Force Global Secure Requests
      * --------------------------------------------------------------------------
      *
      * If true, this will force every request made to this application to be
      * made via a secure connection (HTTPS). If the incoming request is not
      * secure, the user will be redirected to a secure version of the page
-     * and the HTTP Strict Transport Security header will be set.
-     *
-     * @var bool
+     * and the HTTP Strict Transport Security (HSTS) header will be set.
      */
-    public $forceGlobalSecureRequests = false;
-
-    /**
-     * --------------------------------------------------------------------------
-     * Session Driver
-     * --------------------------------------------------------------------------
-     *
-     * The session storage driver to use:
-     * - `CodeIgniter\Session\Handlers\FileHandler`
-     * - `CodeIgniter\Session\Handlers\DatabaseHandler`
-     * - `CodeIgniter\Session\Handlers\MemcachedHandler`
-     * - `CodeIgniter\Session\Handlers\RedisHandler`
-     *
-     * @var string
-     */
-    public $sessionDriver = 'CodeIgniter\Session\Handlers\FileHandler';
-
-    /**
-     * --------------------------------------------------------------------------
-     * Session Cookie Name
-     * --------------------------------------------------------------------------
-     *
-     * The session cookie name, must contain only [0-9a-z_-] characters
-     *
-     * @var string
-     */
-    public $sessionCookieName = 'ci_session';
-
-    /**
-     * --------------------------------------------------------------------------
-     * Session Expiration
-     * --------------------------------------------------------------------------
-     *
-     * The number of SECONDS you want the session to last.
-     * Setting to 0 (zero) means expire when the browser is closed.
-     *
-     * @var int
-     */
-    public $sessionExpiration = 7200;
-
-    /**
-     * --------------------------------------------------------------------------
-     * Session Save Path
-     * --------------------------------------------------------------------------
-     *
-     * The location to save sessions to and is driver dependent.
-     *
-     * For the 'files' driver, it's a path to a writable directory.
-     * WARNING: Only absolute paths are supported!
-     *
-     * For the 'database' driver, it's a table name.
-     * Please read up the manual for the format with other session drivers.
-     *
-     * IMPORTANT: You are REQUIRED to set a valid save path!
-     *
-     * @var string
-     */
-    public $sessionSavePath = WRITEPATH . 'session';
-
-    /**
-     * --------------------------------------------------------------------------
-     * Session Match IP
-     * --------------------------------------------------------------------------
-     *
-     * Whether to match the user's IP address when reading the session data.
-     *
-     * WARNING: If you're using the database driver, don't forget to update
-     *          your session table's PRIMARY KEY when changing this setting.
-     *
-     * @var bool
-     */
-    public $sessionMatchIP = false;
-
-    /**
-     * --------------------------------------------------------------------------
-     * Session Time to Update
-     * --------------------------------------------------------------------------
-     *
-     * How many seconds between CI regenerating the session ID.
-     *
-     * @var int
-     */
-    public $sessionTimeToUpdate = 300;
-
-    /**
-     * --------------------------------------------------------------------------
-     * Session Regenerate Destroy
-     * --------------------------------------------------------------------------
-     *
-     * Whether to destroy session data associated with the old session ID
-     * when auto-regenerating the session ID. When set to FALSE, the data
-     * will be later deleted by the garbage collector.
-     *
-     * @var bool
-     */
-    public $sessionRegenerateDestroy = false;
-
-    /**
-     * --------------------------------------------------------------------------
-     * Cookie Prefix
-     * --------------------------------------------------------------------------
-     *
-     * Set a cookie name prefix if you need to avoid collisions.
-     *
-     * @var string
-     *
-     * @deprecated use Config\Cookie::$prefix property instead.
-     */
-    public $cookiePrefix = '';
-
-    /**
-     * --------------------------------------------------------------------------
-     * Cookie Domain
-     * --------------------------------------------------------------------------
-     *
-     * Set to `.your-domain.com` for site-wide cookies.
-     *
-     * @var string
-     *
-     * @deprecated use Config\Cookie::$domain property instead.
-     */
-    public $cookieDomain = '';
-
-    /**
-     * --------------------------------------------------------------------------
-     * Cookie Path
-     * --------------------------------------------------------------------------
-     *
-     * Typically will be a forward slash.
-     *
-     * @var string
-     *
-     * @deprecated use Config\Cookie::$path property instead.
-     */
-    public $cookiePath = '/';
-
-    /**
-     * --------------------------------------------------------------------------
-     * Cookie Secure
-     * --------------------------------------------------------------------------
-     *
-     * Cookie will only be set if a secure HTTPS connection exists.
-     *
-     * @var bool
-     *
-     * @deprecated use Config\Cookie::$secure property instead.
-     */
-    public $cookieSecure = false;
-
-    /**
-     * --------------------------------------------------------------------------
-     * Cookie HttpOnly
-     * --------------------------------------------------------------------------
-     *
-     * Cookie will only be accessible via HTTP(S) (no JavaScript).
-     *
-     * @var bool
-     *
-     * @deprecated use Config\Cookie::$httponly property instead.
-     */
-    public $cookieHTTPOnly = true;
-
-    /**
-     * --------------------------------------------------------------------------
-     * Cookie SameSite
-     * --------------------------------------------------------------------------
-     *
-     * Configure cookie SameSite setting. Allowed values are:
-     * - None
-     * - Lax
-     * - Strict
-     * - ''
-     *
-     * Alternatively, you can use the constant names:
-     * - `Cookie::SAMESITE_NONE`
-     * - `Cookie::SAMESITE_LAX`
-     * - `Cookie::SAMESITE_STRICT`
-     *
-     * Defaults to `Lax` for compatibility with modern browsers. Setting `''`
-     * (empty string) means default SameSite attribute set by browsers (`Lax`)
-     * will be set on cookies. If set to `None`, `$cookieSecure` must also be set.
-     *
-     * @var string
-     *
-     * @deprecated use Config\Cookie::$samesite property instead.
-     */
-    public $cookieSameSite = 'Lax';
-
+    public bool $forceGlobalSecureRequests = false;
 
     /**
      * --------------------------------------------------------------------------
@@ -362,104 +158,6 @@ class App extends BaseConfig
      */
     public array $proxyIPs = [];
 
-    /**
-     * --------------------------------------------------------------------------
-     * CSRF Token Name
-     * --------------------------------------------------------------------------
-     *
-     * The token name.
-     *
-     * @deprecated Use `Config\Security` $tokenName property instead of using this property.
-     *
-     * @var string
-     */
-    public $CSRFTokenName = 'csrf_test_name';
-
-    /**
-     * --------------------------------------------------------------------------
-     * CSRF Header Name
-     * --------------------------------------------------------------------------
-     *
-     * The header name.
-     *
-     * @deprecated Use `Config\Security` $headerName property instead of using this property.
-     *
-     * @var string
-     */
-    public $CSRFHeaderName = 'X-CSRF-TOKEN';
-
-    /**
-     * --------------------------------------------------------------------------
-     * CSRF Cookie Name
-     * --------------------------------------------------------------------------
-     *
-     * The cookie name.
-     *
-     * @deprecated Use `Config\Security` $cookieName property instead of using this property.
-     *
-     * @var string
-     */
-    public $CSRFCookieName = 'csrf_cookie_name';
-
-    /**
-     * --------------------------------------------------------------------------
-     * CSRF Expire
-     * --------------------------------------------------------------------------
-     *
-     * The number in seconds the token should expire.
-     *
-     * @deprecated Use `Config\Security` $expire property instead of using this property.
-     *
-     * @var int
-     */
-    public $CSRFExpire = 7200;
-
-    /**
-     * --------------------------------------------------------------------------
-     * CSRF Regenerate
-     * --------------------------------------------------------------------------
-     *
-     * Regenerate token on every submission?
-     *
-     * @deprecated Use `Config\Security` $regenerate property instead of using this property.
-     *
-     * @var bool
-     */
-    public $CSRFRegenerate = true;
-
-    /**
-     * --------------------------------------------------------------------------
-     * CSRF Redirect
-     * --------------------------------------------------------------------------
-     *
-     * Redirect to previous page with error on failure?
-     *
-     * @deprecated Use `Config\Security` $redirect property instead of using this property.
-     *
-     * @var bool
-     */
-    public $CSRFRedirect = true;
-
-    /**
-     * --------------------------------------------------------------------------
-     * CSRF SameSite
-     * --------------------------------------------------------------------------
-     *
-     * Setting for CSRF SameSite cookie token. Allowed values are:
-     * - None
-     * - Lax
-     * - Strict
-     * - ''
-     *
-     * Defaults to `Lax` as recommended in this link:
-     *
-     * @see https://portswigger.net/web-security/csrf/samesite-cookies
-     * @deprecated Use `Config\Security` $samesite property instead of using this property.
-     *
-     * @var string
-     */
-    public $CSRFSameSite = 'Lax';
-
     /**
      * --------------------------------------------------------------------------
      * Content Security Policy
@@ -475,9 +173,6 @@ class App extends BaseConfig
      *
      * @see http://www.html5rocks.com/en/tutorials/security/content-security-policy/
      * @see http://www.w3.org/TR/CSP/
-     *
-     * @var bool
      */
-    public $CSPEnabled = false;
-    
+    public bool $CSPEnabled = false;
 }
diff --git a/ci4/app/Config/Auth.php b/ci4/app/Config/Auth.php
new file mode 100644
index 00000000..a373b4c0
--- /dev/null
+++ b/ci4/app/Config/Auth.php
@@ -0,0 +1,529 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * This file is part of CodeIgniter Shield.
+ *
+ * (c) CodeIgniter Foundation <admin@codeigniter.com>
+ *
+ * For the full copyright and license information, please view
+ * the LICENSE file that was distributed with this source code.
+ */
+
+namespace Config;
+
+use CodeIgniter\Shield\Config\Auth as ShieldAuth;
+use CodeIgniter\Shield\Authentication\Actions\ActionInterface;
+use CodeIgniter\Shield\Authentication\AuthenticatorInterface;
+use CodeIgniter\Shield\Authentication\Authenticators\AccessTokens;
+use CodeIgniter\Shield\Authentication\Authenticators\HmacSha256;
+use CodeIgniter\Shield\Authentication\Authenticators\JWT;
+use CodeIgniter\Shield\Authentication\Authenticators\Session;
+use CodeIgniter\Shield\Authentication\Passwords\CompositionValidator;
+use CodeIgniter\Shield\Authentication\Passwords\DictionaryValidator;
+use CodeIgniter\Shield\Authentication\Passwords\NothingPersonalValidator;
+use CodeIgniter\Shield\Authentication\Passwords\PwnedValidator;
+use CodeIgniter\Shield\Authentication\Passwords\ValidatorInterface;
+use CodeIgniter\Shield\Models\UserModel;
+
+class Auth extends ShieldAuth
+{
+    /**
+     * ////////////////////////////////////////////////////////////////////
+     * AUTHENTICATION
+     * ////////////////////////////////////////////////////////////////////
+     */
+
+    // Constants for Record Login Attempts. Do not change.
+    public const RECORD_LOGIN_ATTEMPT_NONE    = 0; // Do not record at all
+    public const RECORD_LOGIN_ATTEMPT_FAILURE = 1; // Record only failures
+    public const RECORD_LOGIN_ATTEMPT_ALL     = 2; // Record all login attempts
+
+    /**
+     * --------------------------------------------------------------------
+     * View files
+     * --------------------------------------------------------------------
+     */
+    public array $views = [
+        'login'                       => '\App\Views\Shield\login',
+        'register'                    => '\App\Views\Shield\register',
+        'layout'                      => '\App\Views\Shield\layout',
+        'action_email_2fa'            => '\CodeIgniter\Shield\Views\email_2fa_show',
+        'action_email_2fa_verify'     => '\CodeIgniter\Shield\Views\email_2fa_verify',
+        'action_email_2fa_email'      => '\CodeIgniter\Shield\Views\Email\email_2fa_email',
+        'action_email_activate_show'  => '\CodeIgniter\Shield\Views\email_activate_show',
+        'action_email_activate_email' => '\CodeIgniter\Shield\Views\Email\email_activate_email',
+        'magic-link-login'            => '\App\Views\Shield\magic_link_form',
+        'magic-link-message'          => '\CodeIgniter\Shield\Views\magic_link_message',
+        'magic-link-email'            => '\CodeIgniter\Shield\Views\Email\magic_link_email',
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * Redirect URLs
+     * --------------------------------------------------------------------
+     * The default URL that a user will be redirected to after various auth
+     * actions. This can be either of the following:
+     *
+     * 1. An absolute URL. E.g. http://example.com OR https://example.com
+     * 2. A named route that can be accessed using `route_to()` or `url_to()`
+     * 3. A URI path within the application. e.g 'admin', 'login', 'expath'
+     *
+     * If you need more flexibility you can override the `getUrl()` method
+     * to apply any logic you may need.
+     */
+    public array $redirects = [
+        'register'          => '/',
+        'login'             => '/',
+        'logout'            => 'login',
+        'force_reset'       => '/',
+        'permission_denied' => '/',
+        'group_denied'      => '/',
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * Authentication Actions
+     * --------------------------------------------------------------------
+     * Specifies the class that represents an action to take after
+     * the user logs in or registers a new account at the site.
+     *
+     * You must register actions in the order of the actions to be performed.
+     *
+     * Available actions with Shield:
+     * - register: \CodeIgniter\Shield\Authentication\Actions\EmailActivator::class
+     * - login:    \CodeIgniter\Shield\Authentication\Actions\Email2FA::class
+     *
+     * @var array<string, class-string<ActionInterface>|null>
+     */
+    public array $actions = [
+        'register' => null,
+        'login'    => null,
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * Authenticators
+     * --------------------------------------------------------------------
+     * The available authentication systems, listed
+     * with alias and class name. These can be referenced
+     * by alias in the auth helper:
+     *      auth('tokens')->attempt($credentials);
+     *
+     * @var array<string, class-string<AuthenticatorInterface>>
+     */
+    public array $authenticators = [
+        'tokens'  => AccessTokens::class,
+        'session' => Session::class,
+        'hmac'    => HmacSha256::class,
+        // 'jwt'     => JWT::class,
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * Default Authenticator
+     * --------------------------------------------------------------------
+     * The Authenticator to use when none is specified.
+     * Uses the $key from the $authenticators array above.
+     */
+    public string $defaultAuthenticator = 'session';
+
+    /**
+     * --------------------------------------------------------------------
+     * Authentication Chain
+     * --------------------------------------------------------------------
+     * The Authenticators to test logged in status against
+     * when using the 'chain' filter. Each Authenticator listed will be checked.
+     * If no match is found, then the next in the chain will be checked.
+     *
+     * @var string[]
+     * @phpstan-var list<string>
+     */
+    public array $authenticationChain = [
+        'session',
+        'tokens',
+        'hmac',
+        // 'jwt',
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * Allow Registration
+     * --------------------------------------------------------------------
+     * Determines whether users can register for the site.
+     */
+    public bool $allowRegistration = true;
+
+    /**
+     * --------------------------------------------------------------------
+     * Record Last Active Date
+     * --------------------------------------------------------------------
+     * If true, will always update the `last_active` datetime for the
+     * logged-in user on every page request.
+     * This feature only works when session/tokens filter is active.
+     *
+     * @see https://codeigniter4.github.io/shield/quick_start_guide/using_session_auth/#protecting-pages for set filters.
+     */
+    public bool $recordActiveDate = true;
+
+    /**
+     * --------------------------------------------------------------------
+     * Allow Magic Link Logins
+     * --------------------------------------------------------------------
+     * If true, will allow the use of "magic links" sent via the email
+     * as a way to log a user in without the need for a password.
+     * By default, this is used in place of a password reset flow, but
+     * could be modified as the only method of login once an account
+     * has been set up.
+     */
+    public bool $allowMagicLinkLogins = true;
+
+    /**
+     * --------------------------------------------------------------------
+     * Magic Link Lifetime
+     * --------------------------------------------------------------------
+     * Specifies the amount of time, in seconds, that a magic link is valid.
+     * You can use Time Constants or any desired number.
+     */
+    public int $magicLinkLifetime = HOUR;
+
+    /**
+     * --------------------------------------------------------------------
+     * Session Authenticator Configuration
+     * --------------------------------------------------------------------
+     * These settings only apply if you are using the Session Authenticator
+     * for authentication.
+     *
+     * - field                  The name of the key the current user info is stored in session
+     * - allowRemembering       Does the system allow use of "remember-me"
+     * - rememberCookieName     The name of the cookie to use for "remember-me"
+     * - rememberLength         The length of time, in seconds, to remember a user.
+     *
+     * @var array<string, bool|int|string>
+     */
+    public array $sessionConfig = [
+        'field'              => 'user',
+        'allowRemembering'   => true,
+        'rememberCookieName' => 'remember',
+        'rememberLength'     => 30 * DAY,
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * The validation rules for username
+     * --------------------------------------------------------------------
+     *
+     * Do not use string rules like `required|valid_email`.
+     *
+     * @var array<string, array<int, string>|string>
+     */
+    public array $usernameValidationRules = [
+        'label' => 'Auth.username',
+        'rules' => [
+            'required',
+            'max_length[30]',
+            'min_length[3]',
+            'regex_match[/\A[a-zA-Z0-9\.]+\z/]',
+        ],
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * The validation rules for email
+     * --------------------------------------------------------------------
+     *
+     * Do not use string rules like `required|valid_email`.
+     *
+     * @var array<string, array<int, string>|string>
+     */
+    public array $emailValidationRules = [
+        'label' => 'Auth.email',
+        'rules' => [
+            'required',
+            'max_length[254]',
+            'valid_email',
+        ],
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * Minimum Password Length
+     * --------------------------------------------------------------------
+     * The minimum length that a password must be to be accepted.
+     * Recommended minimum value by NIST = 8 characters.
+     */
+    public int $minimumPasswordLength = 8;
+
+    /**
+     * --------------------------------------------------------------------
+     * Password Check Helpers
+     * --------------------------------------------------------------------
+     * The PasswordValidator class runs the password through all of these
+     * classes, each getting the opportunity to pass/fail the password.
+     * You can add custom classes as long as they adhere to the
+     * CodeIgniter\Shield\Authentication\Passwords\ValidatorInterface.
+     *
+     * @var class-string<ValidatorInterface>[]
+     */
+    public array $passwordValidators = [
+        CompositionValidator::class,
+        NothingPersonalValidator::class,
+        DictionaryValidator::class,
+        // PwnedValidator::class,
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * Valid login fields
+     * --------------------------------------------------------------------
+     * Fields that are available to be used as credentials for login.
+     */
+    public array $validFields = [
+        'email',
+        // 'username',
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * Additional Fields for "Nothing Personal"
+     * --------------------------------------------------------------------
+     * The NothingPersonalValidator prevents personal information from
+     * being used in passwords. The email and username fields are always
+     * considered by the validator. Do not enter those field names here.
+     *
+     * An extended User Entity might include other personal info such as
+     * first and/or last names. $personalFields is where you can add
+     * fields to be considered as "personal" by the NothingPersonalValidator.
+     * For example:
+     *     $personalFields = ['firstname', 'lastname'];
+     */
+    public array $personalFields = [];
+
+    /**
+     * --------------------------------------------------------------------
+     * Password / Username Similarity
+     * --------------------------------------------------------------------
+     * Among other things, the NothingPersonalValidator checks the
+     * amount of sameness between the password and username.
+     * Passwords that are too much like the username are invalid.
+     *
+     * The value set for $maxSimilarity represents the maximum percentage
+     * of similarity at which the password will be accepted. In other words, any
+     * calculated similarity equal to, or greater than $maxSimilarity
+     * is rejected.
+     *
+     * The accepted range is 0-100, with 0 (zero) meaning don't check similarity.
+     * Using values at either extreme of the *working range* (1-100) is
+     * not advised. The low end is too restrictive and the high end is too permissive.
+     * The suggested value for $maxSimilarity is 50.
+     *
+     * You may be thinking that a value of 100 should have the effect of accepting
+     * everything like a value of 0 does. That's logical and probably true,
+     * but is unproven and untested. Besides, 0 skips the work involved
+     * making the calculation unlike when using 100.
+     *
+     * The (admittedly limited) testing that's been done suggests a useful working range
+     * of 50 to 60. You can set it lower than 50, but site users will probably start
+     * to complain about the large number of proposed passwords getting rejected.
+     * At around 60 or more it starts to see pairs like 'captain joe' and 'joe*captain' as
+     * perfectly acceptable which clearly they are not.
+     *
+     * To disable similarity checking set the value to 0.
+     *     public $maxSimilarity = 0;
+     */
+    public int $maxSimilarity = 50;
+
+    /**
+     * --------------------------------------------------------------------
+     * Hashing Algorithm to use
+     * --------------------------------------------------------------------
+     * Valid values are
+     * - PASSWORD_DEFAULT (default)
+     * - PASSWORD_BCRYPT
+     * - PASSWORD_ARGON2I  - As of PHP 7.2 only if compiled with support for it
+     * - PASSWORD_ARGON2ID - As of PHP 7.3 only if compiled with support for it
+     */
+    public string $hashAlgorithm = PASSWORD_DEFAULT;
+
+    /**
+     * --------------------------------------------------------------------
+     * ARGON2I/ARGON2ID Algorithm options
+     * --------------------------------------------------------------------
+     * The ARGON2I method of hashing allows you to define the "memory_cost",
+     * the "time_cost" and the number of "threads", whenever a password hash is
+     * created.
+     */
+    public int $hashMemoryCost = 65536; // PASSWORD_ARGON2_DEFAULT_MEMORY_COST;
+
+    public int $hashTimeCost = 4;   // PASSWORD_ARGON2_DEFAULT_TIME_COST;
+    public int $hashThreads  = 1;   // PASSWORD_ARGON2_DEFAULT_THREADS;
+
+    /**
+     * --------------------------------------------------------------------
+     * BCRYPT Algorithm options
+     * --------------------------------------------------------------------
+     * The BCRYPT method of hashing allows you to define the "cost"
+     * or number of iterations made, whenever a password hash is created.
+     * This defaults to a value of 12 which is an acceptable number.
+     * However, depending on the security needs of your application
+     * and the power of your hardware, you might want to increase the
+     * cost. This makes the hashing process takes longer.
+     *
+     * Valid range is between 4 - 31.
+     */
+    public int $hashCost = 12;
+
+    /**
+     * ////////////////////////////////////////////////////////////////////
+     * OTHER SETTINGS
+     * ////////////////////////////////////////////////////////////////////
+     */
+
+    /**
+     * --------------------------------------------------------------------
+     * Customize the DB group used for each model
+     * --------------------------------------------------------------------
+     */
+    public ?string $DBGroup = null;
+
+    /**
+     * --------------------------------------------------------------------
+     * Customize Name of Shield Tables
+     * --------------------------------------------------------------------
+     * Only change if you want to rename the default Shield table names
+     *
+     * It may be necessary to change the names of the tables for
+     * security reasons, to prevent the conflict of table names,
+     * the internal policy of the companies or any other reason.
+     *
+     * - users                  Auth Users Table, the users info is stored.
+     * - auth_identities        Auth Identities Table, Used for storage of passwords, access tokens, social login identities, etc.
+     * - auth_logins            Auth Login Attempts, Table records login attempts.
+     * - auth_token_logins      Auth Token Login Attempts Table, Records Bearer Token type login attempts.
+     * - auth_remember_tokens   Auth Remember Tokens (remember-me) Table.
+     * - auth_groups_users      Groups Users Table.
+     * - auth_permissions_users Users Permissions Table.
+     *
+     * @var array<string, string>
+     */
+    public array $tables = [
+        'users'             => 'users',
+        'identities'        => 'auth_identities',
+        'logins'            => 'auth_logins',
+        'token_logins'      => 'auth_token_logins',
+        'remember_tokens'   => 'auth_remember_tokens',
+        'groups_users'      => 'auth_groups_users',
+        'permissions_users' => 'auth_permissions_users',
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * User Provider
+     * --------------------------------------------------------------------
+     * The name of the class that handles user persistence.
+     * By default, this is the included UserModel, which
+     * works with any of the database engines supported by CodeIgniter.
+     * You can change it as long as they adhere to the
+     * CodeIgniter\Shield\Models\UserModel.
+     *
+     * @var class-string<UserModel>
+     */
+    public string $userProvider = UserModel::class;
+
+    /**
+     * Returns the URL that a user should be redirected
+     * to after a successful login.
+     */
+    public function loginRedirect(): string
+    {
+        $session = session();
+        $url     = $session->getTempdata('beforeLoginUrl') ?? setting('Auth.redirects')['login'];
+
+        return $this->getUrl($url);
+    }
+
+    /**
+     * Returns the URL that a user should be redirected
+     * to after they are logged out.
+     */
+    public function logoutRedirect(): string
+    {
+        $url = setting('Auth.redirects')['logout'];
+
+        return $this->getUrl($url);
+    }
+
+    /**
+     * Returns the URL the user should be redirected to
+     * after a successful registration.
+     */
+    public function registerRedirect(): string
+    {
+        $url = setting('Auth.redirects')['register'];
+
+        return $this->getUrl($url);
+    }
+
+    /**
+     * Returns the URL the user should be redirected to
+     * if force_reset identity is set to true.
+     */
+    public function forcePasswordResetRedirect(): string
+    {
+        $url = setting('Auth.redirects')['force_reset'];
+
+        return $this->getUrl($url);
+    }
+
+    /**
+     * Returns the URL the user should be redirected to
+     * if permission denied.
+     */
+    public function permissionDeniedRedirect(): string
+    {
+        $url = setting('Auth.redirects')['permission_denied'];
+
+        return $this->getUrl($url);
+    }
+
+    /**
+     * Returns the URL the user should be redirected to
+     * if group denied.
+     */
+    public function groupDeniedRedirect(): string
+    {
+        $url = setting('Auth.redirects')['group_denied'];
+
+        return $this->getUrl($url);
+    }
+
+    /**
+     * Accepts a string which can be an absolute URL or
+     * a named route or just a URI path, and returns the
+     * full path.
+     *
+     * @param string $url an absolute URL or a named route or just URI path
+     */
+    protected function getUrl(string $url): string
+    {
+        // To accommodate all url patterns
+        $final_url = '';
+
+        switch (true) {
+            case strpos($url, 'http://') === 0 || strpos($url, 'https://') === 0: // URL begins with 'http' or 'https'. E.g. http://example.com
+                $final_url = $url;
+                break;
+
+            case route_to($url) !== false: // URL is a named-route
+                $final_url = rtrim(url_to($url), '/ ');
+                break;
+
+            default: // URL is a route (URI path)
+                $final_url = rtrim(site_url($url), '/ ');
+                break;
+        }
+
+        return $final_url;
+    }
+}
diff --git a/ci4/app/Config/AuthGroups.php b/ci4/app/Config/AuthGroups.php
new file mode 100644
index 00000000..81bdcb8b
--- /dev/null
+++ b/ci4/app/Config/AuthGroups.php
@@ -0,0 +1,120 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * This file is part of CodeIgniter Shield.
+ *
+ * (c) CodeIgniter Foundation <admin@codeigniter.com>
+ *
+ * For the full copyright and license information, please view
+ * the LICENSE file that was distributed with this source code.
+ */
+
+namespace Config;
+
+use CodeIgniter\Shield\Config\AuthGroups as ShieldAuthGroups;
+
+class AuthGroups extends ShieldAuthGroups
+{
+    /**
+     * --------------------------------------------------------------------
+     * Default Group
+     * --------------------------------------------------------------------
+     * The group that a newly registered user is added to.
+     */
+    public string $defaultGroup = 'user';
+
+    /**
+     * --------------------------------------------------------------------
+     * Groups
+     * --------------------------------------------------------------------
+     * An associative array of the available groups in the system, where the keys
+     * are the group names and the values are arrays of the group info.
+     *
+     * Whatever value you assign as the key will be used to refer to the group
+     * when using functions such as:
+     *      $user->addGroup('superadmin');
+     *
+     * @var array<string, array<string, string>>
+     *
+     * @see https://codeigniter4.github.io/shield/quick_start_guide/using_authorization/#change-available-groups for more info
+     */
+    public array $groups = [
+        'superadmin' => [
+            'title' => 'Super Admin',
+            'description' => 'Complete control of the site.',
+        ],
+        'admin' => [
+            'title' => 'Admin',
+            'description' => 'Day to day administrators of the site.',
+        ],
+        'developer' => [
+            'title' => 'Developer',
+            'description' => 'Site programmers.',
+        ],
+        'user' => [
+            'title' => 'User',
+            'description' => 'General users of the site. Often customers.',
+        ],
+        'beta' => [
+            'title' => 'Beta User',
+            'description' => 'Has access to beta-level features.',
+        ],
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * Permissions
+     * --------------------------------------------------------------------
+     * The available permissions in the system.
+     *
+     * If a permission is not listed here it cannot be used.
+     */
+    public array $permissions = [
+        'admin.access' => 'Can access the sites admin area',
+        'admin.settings' => 'Can access the main site settings',
+        'users.manage-admins' => 'Can manage other admins',
+        'users.list' => 'Can list user stuff',
+        'users.create' => 'Can create new non-admin users',
+        'users.edit' => 'Can edit existing non-admin users',
+        'users.delete' => 'Can delete existing non-admin users',
+        'beta.access' => 'Can access beta-level features',
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * Permissions Matrix
+     * --------------------------------------------------------------------
+     * Maps permissions to groups.
+     *
+     * This defines group-level permissions.
+     */
+	public array $matrix = [
+	    "superadmin"=> [
+	        "admin.*",
+	        "users.*",
+	        "beta.*"
+	    ],
+	    "admin"=> [
+	        "admin.access",
+	        "users.create",
+	        "users.edit",
+	        "users.delete",
+	        "beta.access"
+	    ],
+	    "developer"=> [
+	        "admin.access",
+	        "admin.settings",
+	        "users.create",
+	        "users.edit",
+	        "beta.access"
+	    ],
+	    "user"=> [
+	        "users.list"
+	    ],
+	    "beta"=> [
+	        "beta.access"
+	    ]
+	];
+}
\ No newline at end of file
diff --git a/ci4/app/Config/AuthToken.php b/ci4/app/Config/AuthToken.php
new file mode 100644
index 00000000..7ad404f0
--- /dev/null
+++ b/ci4/app/Config/AuthToken.php
@@ -0,0 +1,138 @@
+<?php
+
+declare(strict_types=1);
+
+/**
+ * This file is part of CodeIgniter Shield.
+ *
+ * (c) CodeIgniter Foundation <admin@codeigniter.com>
+ *
+ * For the full copyright and license information, please view
+ * the LICENSE file that was distributed with this source code.
+ */
+
+namespace Config;
+
+use CodeIgniter\Shield\Config\AuthToken as ShieldAuthToken;
+
+/**
+ * Configuration for Token Auth and HMAC Auth
+ */
+class AuthToken extends ShieldAuthToken
+{
+    /**
+     * --------------------------------------------------------------------
+     * Record Login Attempts for Token Auth and HMAC Auth
+     * --------------------------------------------------------------------
+     * Specify which login attempts are recorded in the database.
+     *
+     * Valid values are:
+     * - Auth::RECORD_LOGIN_ATTEMPT_NONE
+     * - Auth::RECORD_LOGIN_ATTEMPT_FAILURE
+     * - Auth::RECORD_LOGIN_ATTEMPT_ALL
+     */
+    public int $recordLoginAttempt = Auth::RECORD_LOGIN_ATTEMPT_FAILURE;
+
+    /**
+     * --------------------------------------------------------------------
+     * Name of Authenticator Header
+     * --------------------------------------------------------------------
+     * The name of Header that the Authorization token should be found.
+     * According to the specs, this should be `Authorization`, but rare
+     * circumstances might need a different header.
+     */
+    public array $authenticatorHeader = [
+        'tokens' => 'Authorization',
+        'hmac'   => 'Authorization',
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * Unused Token Lifetime for Token Auth and HMAC Auth
+     * --------------------------------------------------------------------
+     * Determines the amount of time, in seconds, that an unused token can
+     * be used.
+     */
+    public int $unusedTokenLifetime = YEAR;
+
+    /**
+     * --------------------------------------------------------------------
+     * Secret2 storage character limit
+     * --------------------------------------------------------------------
+     * Database size limit for the identities 'secret2' field.
+     */
+    public int $secret2StorageLimit = 255;
+
+    /**
+     * --------------------------------------------------------------------
+     * HMAC secret key byte size
+     * --------------------------------------------------------------------
+     * Specify in integer the desired byte size of the
+     * HMAC SHA256 byte size
+     */
+    public int $hmacSecretKeyByteSize = 32;
+
+    /**
+     * --------------------------------------------------------------------
+     * HMAC encryption Keys
+     * --------------------------------------------------------------------
+     * This sets the key to be used when encrypting a user's HMAC Secret Key.
+     *
+     * 'keys' is an array of keys which will facilitate key rotation. Valid
+     *  keyTitles must include only [a-zA-Z0-9_] and should be kept to a
+     *  max of 8 characters.
+     *
+     * Each keyTitle is an associative array containing the required 'key'
+     *  value, and the optional 'driver' and 'digest' values. If the
+     *  'driver' and 'digest' values are not specified, the default 'driver'
+     *  and 'digest' values will be used.
+     *
+     * Old keys will are used to decrypt existing Secret Keys. It is encouraged
+     *  to run 'php spark shield:hmac reencrypt' to update existing Secret
+     *  Key encryptions.
+     *
+     * @see https://codeigniter.com/user_guide/libraries/encryption.html
+     *
+     * @var array<string, array{key: string, driver?: string, digest?: string}>|string
+     *
+     * NOTE: The value becomes temporarily a string when setting value as JSON
+     *       from environment variable.
+     *
+     * [key_name => ['key' => key_value]]
+     * or [key_name => ['key' => key_value, 'driver' => driver, 'digest' => digest]]
+     */
+    public $hmacEncryptionKeys = [
+        'k1' => [
+            'key' => '',
+        ],
+    ];
+
+    /**
+     * --------------------------------------------------------------------
+     * HMAC Current Encryption Key Selector
+     * --------------------------------------------------------------------
+     * This specifies which of the encryption keys should be used.
+     */
+    public string $hmacEncryptionCurrentKey = 'k1';
+
+    /**
+     * --------------------------------------------------------------------
+     * HMAC Encryption Key Driver
+     * --------------------------------------------------------------------
+     * This specifies which of the encryption drivers should be used.
+     *
+     * Available drivers:
+     *     - OpenSSL
+     *     - Sodium
+     */
+    public string $hmacEncryptionDefaultDriver = 'OpenSSL';
+
+    /**
+     * --------------------------------------------------------------------
+     * HMAC Encryption Key Driver
+     * --------------------------------------------------------------------
+     * THis specifies the type of encryption to be used.
+     *     e.g. 'SHA512' or 'SHA256'.
+     */
+    public string $hmacEncryptionDefaultDigest = 'SHA512';
+}
diff --git a/ci4/app/Config/Autoload.php b/ci4/app/Config/Autoload.php
index 5f149426..e874357d 100755
--- a/ci4/app/Config/Autoload.php
+++ b/ci4/app/Config/Autoload.php
@@ -85,4 +85,17 @@ class Autoload extends AutoloadConfig
      * @var array<int, string>
      */
     public $files = [];
+
+    /**
+     * -------------------------------------------------------------------
+     * Helpers
+     * -------------------------------------------------------------------
+     * Prototype:
+     *   $helpers = [
+     *       'form',
+     *   ];
+     *
+     * @var list<string>
+     */
+    public $helpers = ['auth', 'setting'];
 }
diff --git a/ci4/app/Config/Filters.php b/ci4/app/Config/Filters.php
index 3f938c90..15d7414c 100755
--- a/ci4/app/Config/Filters.php
+++ b/ci4/app/Config/Filters.php
@@ -2,13 +2,13 @@
 
 namespace Config;
 
-use App\Filters\JWTAuthFilter;
-use App\Filters\LoginAuthFilter;
-use App\Filters\ThrottlerFilter;
 use CodeIgniter\Config\BaseConfig;
 use CodeIgniter\Filters\CSRF;
 use CodeIgniter\Filters\DebugToolbar;
 use CodeIgniter\Filters\Honeypot;
+use CodeIgniter\Filters\InvalidChars;
+use CodeIgniter\Filters\SecureHeaders;
+
 
 class Filters extends BaseConfig
 {
@@ -16,54 +16,40 @@ class Filters extends BaseConfig
      * Configures aliases for Filter classes to
      * make reading things nicer and simpler.
      *
-     * @var array
+     * @var array<string, class-string|list<class-string>> [filter_name => classname]
+     *                                                     or [filter_name => [classname1, classname2, ...]]
      */
-    public $aliases = [
-        'csrf'     => CSRF::class,
-        'toolbar'  => DebugToolbar::class,
+    public array $aliases = [
+        'csrf' => CSRF::class,
+        'toolbar' => DebugToolbar::class,
         'honeypot' => Honeypot::class,
-        'auth'     => JWTAuthFilter::class,
-        'throttler'     => ThrottlerFilter::class,
-        'login'     => LoginAuthFilter::class,
+        'invalidchars' => InvalidChars::class,
+        'secureheaders' => SecureHeaders::class,
     ];
 
     /**
      * List of filter aliases that are always
      * applied before and after every request.
      *
-     * @var array
+     * @var array<string, array<string, array<string, string>>>|array<string, list<string>>
      */
-    public $globals = [
+    public array $globals = [
         'before' => [
-            'login' => [
-                'except' => [
-                    'login',
-                    'login/*',
-                    'oauth',
-                    'oauth/*',
-                    'api',
-                    'api/*',
-                    'cron',
-                    'cron/*',
-                    'lang',
-                    'lang/*',
-                    'language',
-                    'language/*',
-                    'integration',
-                    'integration/*'
-                ]
-            ],
             // 'honeypot',
-            'csrf' => [
+            // 'csrf',
+            // 'invalidchars',
+            'session' => [
                 'except' => [
-                    'api',
-                    'api/*'
-                ]
+                    'login*',
+                    'register',
+                    'auth/a/*',
+                    'logout']
             ],
         ],
         'after' => [
             'toolbar',
             // 'honeypot',
+            // 'secureheaders',
         ],
     ];
 
@@ -72,14 +58,13 @@ class Filters extends BaseConfig
      * particular HTTP method (GET, POST, etc.).
      *
      * Example:
-     * 'post' => ['csrf', 'throttle']
+     * 'post' => ['foo', 'bar']
      *
-     * @var array
+     * If you use this, you should disable auto-routing because auto-routing
+     * permits any HTTP method to access a controller. Accessing the controller
+     * with a method you don't expect could bypass the filter.
      */
-    public $methods = [
-//        'get' => ['throttler'],
-//        'post' => ['throttler']
-    ];
+    public array $methods = [];
 
     /**
      * List of filter aliases that should run on any
@@ -87,21 +72,6 @@ class Filters extends BaseConfig
      *
      * Example:
      * 'isLoggedIn' => ['before' => ['account/*', 'profiles/*']]
-     *
-     * @var array
      */
-    public $filters = [
-        'auth' => [
-            'before' => [
-                'api/user/*',
-                'api/user/'
-            ],
-        ],
-        'throttler' => [
-            'before' => [
-                'api/*',
-                'api/'
-            ]
-        ]
-    ];
+    public array $filters = [];
 }
diff --git a/ci4/app/Config/Kint.php b/ci4/app/Config/Kint.php
old mode 100755
new mode 100644
index bed7fecc..117e66d8
--- a/ci4/app/Config/Kint.php
+++ b/ci4/app/Config/Kint.php
@@ -3,7 +3,10 @@
 namespace Config;
 
 use CodeIgniter\Config\BaseConfig;
+use Kint\Parser\ConstructablePluginInterface;
 use Kint\Renderer\AbstractRenderer;
+use Kint\Renderer\Rich\TabPluginInterface;
+use Kint\Renderer\Rich\ValuePluginInterface;
 
 /**
  * --------------------------------------------------------------------------
@@ -23,27 +26,32 @@ class Kint extends BaseConfig
     |--------------------------------------------------------------------------
     */
 
+    /**
+     * @var list<class-string<ConstructablePluginInterface>|ConstructablePluginInterface>|null
+     */
     public $plugins;
 
-    public $maxDepth = 6;
-
-    public $displayCalledFrom = true;
-
-    public $expanded = false;
+    public int $maxDepth           = 6;
+    public bool $displayCalledFrom = true;
+    public bool $expanded          = false;
 
     /*
     |--------------------------------------------------------------------------
     | RichRenderer Settings
     |--------------------------------------------------------------------------
     */
-    public $richTheme = 'aante-light.css';
-
-    public $richFolder = false;
-
-    public $richSort = AbstractRenderer::SORT_FULL;
+    public string $richTheme = 'aante-light.css';
+    public bool $richFolder  = false;
+    public int $richSort     = AbstractRenderer::SORT_FULL;
 
+    /**
+     * @var array<string, class-string<ValuePluginInterface>>|null
+     */
     public $richObjectPlugins;
 
+    /**
+     * @var array<string, class-string<TabPluginInterface>>|null
+     */
     public $richTabPlugins;
 
     /*
@@ -51,11 +59,8 @@ class Kint extends BaseConfig
     | CLI Settings
     |--------------------------------------------------------------------------
     */
-    public $cliColors = true;
-
-    public $cliForceUTF8 = false;
-
-    public $cliDetectWidth = true;
-
-    public $cliMinWidth = 40;
+    public bool $cliColors      = true;
+    public bool $cliForceUTF8   = false;
+    public bool $cliDetectWidth = true;
+    public int $cliMinWidth     = 40;
 }
diff --git a/ci4/app/Config/Publisher.php b/ci4/app/Config/Publisher.php
new file mode 100644
index 00000000..bf03be1d
--- /dev/null
+++ b/ci4/app/Config/Publisher.php
@@ -0,0 +1,28 @@
+<?php
+
+namespace Config;
+
+use CodeIgniter\Config\Publisher as BasePublisher;
+
+/**
+ * Publisher Configuration
+ *
+ * Defines basic security restrictions for the Publisher class
+ * to prevent abuse by injecting malicious files into a project.
+ */
+class Publisher extends BasePublisher
+{
+    /**
+     * A list of allowed destinations with a (pseudo-)regex
+     * of allowed files for each destination.
+     * Attempts to publish to directories not in this list will
+     * result in a PublisherException. Files that do no fit the
+     * pattern will cause copy/merge to fail.
+     *
+     * @var array<string, string>
+     */
+    public $restrictions = [
+        ROOTPATH => '*',
+        FCPATH   => '#\.(s?css|js|map|html?|xml|json|webmanifest|ttf|eot|woff2?|gif|jpe?g|tiff?|png|webp|bmp|ico|svg)$#i',
+    ];
+}
diff --git a/ci4/app/Config/Routes.php b/ci4/app/Config/Routes.php
index cd7334ff..e7ce008e 100755
--- a/ci4/app/Config/Routes.php
+++ b/ci4/app/Config/Routes.php
@@ -1,36 +1,13 @@
 <?php
 
-namespace Config;
-
 use CodeIgniter\Router\RouteCollection;
 
-/*
-// Create a new instance of our RouteCollection class.
-$routes = Services::routes();
-
-// Load the system's routing file first, so that the app and ENVIRONMENT
-// can override as needed.
-if (file_exists(SYSTEMPATH . 'Config/Routes.php')) {
-    require SYSTEMPATH . 'Config/Routes.php';
-}
-
-*/
-/*
- * --------------------------------------------------------------------
- * Router Setup
- * --------------------------------------------------------------------
+/**
+ * @var RouteCollection $routes
  */
-/*
-$routes->setDefaultNamespace('App\Controllers');
-$routes->setDefaultController('Home');
-$routes->setDefaultMethod('index');
-$routes->setTranslateURIDashes(false);
-$routes->set404Override();
-$routes->setAutoRoute(true);
-*/
 
-// Create a new instance of our RouteCollection class.
-$routes = Services::routes();
+//service('auth')->routes($routes, ['except' => ['login', 'register']]);
+service('auth')->routes($routes);
 
 //WEB ROUTER ------------------------------------------------------
 //------------------------------------------------------------------
diff --git a/ci4/app/Config/Routing.php b/ci4/app/Config/Routing.php
index bd091a65..c0234da8 100644
--- a/ci4/app/Config/Routing.php
+++ b/ci4/app/Config/Routing.php
@@ -87,7 +87,7 @@ class Routing extends BaseRouting
      *
      * If FALSE, will stop searching and do NO automatic routing.
      */
-    public bool $autoRoute = true;
+    public bool $autoRoute = false;
 
     /**
      * If TRUE, will enable the use of the 'prioritize' option
diff --git a/ci4/app/Config/Toolbar.php b/ci4/app/Config/Toolbar.php
old mode 100755
new mode 100644
diff --git a/ci4/app/Database/Migrations/2023-04-22-074343_ChangeTablesNames.php b/ci4/app/Database/Migrations/2023-04-22-074343_ChangeTablesNames.php
deleted file mode 100755
index 0e0782ae..00000000
--- a/ci4/app/Database/Migrations/2023-04-22-074343_ChangeTablesNames.php
+++ /dev/null
@@ -1,45 +0,0 @@
-<?php
-
-namespace App\Database\Migrations;
-
-use CodeIgniter\Database\Migration;
-
-class ChangeTablesNames extends Migration
-{
-    public function up()
-    {
-        $this->forge->renameTable('wg_activity', 'auth_activity');
-        $this->forge->renameTable('wg_backup', 'auth_backup');
-        $this->forge->renameTable('wg_confirmation_token', 'auth_confirmation_token');
-        $this->forge->renameTable('wg_crontab_history', 'auth_crontab_history');
-        $this->forge->renameTable('wg_notification', 'auth_notification');
-        $this->forge->renameTable('wg_password_recovery', 'auth_password_recovery');
-        $this->forge->renameTable('wg_settings', 'auth_settings');
-        $this->forge->renameTable('wg_template', 'auth_template');
-        $this->forge->renameTable('wg_theme', 'auth_theme');
-        $this->forge->renameTable('wg_timezone', 'auth_timezone');
-        $this->forge->renameTable('wg_user', 'auth_user');
-        $this->forge->renameTable('wg_user_group', 'auth_user_group');
-        $this->forge->renameTable('wg_user_group', 'auth_user_group');
-        $this->forge->renameTable('wg_countries', 'auth_countries');
-        $this->forge->renameTable('wg_currency', 'auth_currency');
-    }
-
-    public function down()
-    {
-        $this->forge->renameTable('auth_activity', 'wg_activity');
-        $this->forge->renameTable('auth_backup', 'wg_backup');
-        $this->forge->renameTable('auth_confirmation_token', 'wg_confirmation_token');
-        $this->forge->renameTable('auth_crontab_history', 'wg_crontab_history');
-        $this->forge->renameTable('wg_notification', 'auth_notification');
-        $this->forge->renameTable('auth_password_recovery', 'wg_password_recovery');
-        $this->forge->renameTable('auth_settings', 'wg_settings');
-        $this->forge->renameTable('auth_template', 'wg_template');
-        $this->forge->renameTable('auth_theme', 'wg_theme');
-        $this->forge->renameTable('auth_timezone', 'wg_timezone');
-        $this->forge->renameTable('auth_user', 'wg_user');
-        $this->forge->renameTable('auth_user_group', 'wg_user_group');
-        $this->forge->renameTable('auth_countries', 'wg_countries');
-        $this->forge->renameTable('auth_currency', 'wg_currency');
-    }
-}
diff --git a/ci4/app/Database/Migrations/2023-04-22-083118_CreateGroupUserTable.php b/ci4/app/Database/Migrations/2023-04-22-083118_CreateGroupUserTable.php
deleted file mode 100755
index 622f5229..00000000
--- a/ci4/app/Database/Migrations/2023-04-22-083118_CreateGroupUserTable.php
+++ /dev/null
@@ -1,33 +0,0 @@
-<?php
-
-namespace App\Database\Migrations;
-
-use CodeIgniter\Database\Migration;
-
-class CreateGroupUserTable extends Migration
-{
-    public function up()
-    {
-        // define table fields
-        $fields = array(
-            'token_user' => array(
-                'type' => 'VARCHAR',
-                'constraint' => 35
-            ),
-            'token_group' => array(
-                'type' => 'VARCHAR',
-                'constraint' => 35
-            )
-        );
-
-        $this->forge->addField($fields);
-
-        // create table
-        $this->forge->createTable('group_user');
-    }
-
-    public function down()
-    {
-        $this->forge->dropTable('group_user',TRUE);
-    }
-}
diff --git a/ci4/app/Database/Migrations/2023-04-25-161753_RemoveGroupFromUser.php b/ci4/app/Database/Migrations/2023-04-25-161753_RemoveGroupFromUser.php
deleted file mode 100755
index ee72788e..00000000
--- a/ci4/app/Database/Migrations/2023-04-25-161753_RemoveGroupFromUser.php
+++ /dev/null
@@ -1,19 +0,0 @@
-<?php
-
-namespace App\Database\Migrations;
-
-use CodeIgniter\Database\Migration;
-
-class RemoveGroupFromUser extends Migration
-{
-    public function up()
-    {
-        $this->forge->dropColumn('auth_user', ['group']);
-    }
-
-    public function down()
-    {
-        $sql = "ALTER TABLE `auth_user` ADD `group` varchar(216) COLLATE latin1_general_ci;";
-        $this->db->query($sql);
-    }
-}
diff --git a/ci4/app/Database/Migrations/2023_03_27_185500_DeleteOauthTables.php b/ci4/app/Database/Migrations/2023_03_27_185500_DeleteOauthTables.php
deleted file mode 100755
index 510986cb..00000000
--- a/ci4/app/Database/Migrations/2023_03_27_185500_DeleteOauthTables.php
+++ /dev/null
@@ -1,43 +0,0 @@
-<?php
-
-namespace App\Database\Migrations;
-
-use CodeIgniter\Database\Migration;
-
-class DropOauthTables extends Migration
-{
-    public function up()
-    {
-        $this->forge->dropTable('wg_user_oauth');
-        $this->forge->dropTable('wg_settings_oauth');
-    }
-
-    public function down()
-    {
-        $sql = "CREATE TABLE IF NOT EXISTS `wg_settings_oauth` (
-            `id_oauth` int(11) NOT NULL AUTO_INCREMENT,
-            `provider` enum('facebook','google','twitter','linkedin','github','instagram','slack','spotify','reddit','discord','dribbble','dropbox','gitlab','strava','tumblr','twitch','vkontakte','wordpress','yahoo','bitbucket','wechat') COLLATE latin1_general_ci NOT NULL,
-            `key` varchar(200) COLLATE latin1_general_ci DEFAULT NULL,
-            `secret` varchar(200) COLLATE latin1_general_ci DEFAULT NULL,
-            `btn_class` varchar(50) COLLATE latin1_general_ci NOT NULL,
-            `btn_text` varchar(50) COLLATE latin1_general_ci DEFAULT NULL,
-            `show_text` tinyint(1) NOT NULL DEFAULT '0',
-            `icon_class` varchar(50) COLLATE latin1_general_ci NOT NULL,
-            `status` tinyint(1) NOT NULL DEFAULT '0',
-            PRIMARY KEY (`id_oauth`)
-          ) ENGINE=MyISAM AUTO_INCREMENT=22 DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci;";
-        $this->db->query($sql);
-
-        $sql = "CREATE TABLE IF NOT EXISTS `wg_user_oauth` (
-            `id_user_oauth` int(11) NOT NULL AUTO_INCREMENT,
-            `user` varchar(35) COLLATE latin1_general_ci NOT NULL,
-            `provider` enum('facebook','google','twitter','linkedin','github','instagram','slack','spotify','reddit','discord','dribbble','dropbox','gitlab','strava','tumblr','twitch','vkontakte','wordpress','yahoo','bitbucket') COLLATE latin1_general_ci NOT NULL,
-            `identifier` varchar(50) COLLATE latin1_general_ci NOT NULL,
-            `picture` varchar(150) COLLATE latin1_general_ci NOT NULL,
-            `created_at` timestamp NOT NULL,
-            `updated_at` timestamp NOT NULL ON UPDATE CURRENT_TIMESTAMP,
-            PRIMARY KEY (`id_user_oauth`)
-          ) ENGINE=MyISAM DEFAULT CHARSET=latin1 COLLATE=latin1_general_ci;";
-        $this->db->query($sql);
-    }
-}
\ No newline at end of file
diff --git a/ci4/app/Database/Migrations/2023_03_28_200000_DeleteSMSColumns.php b/ci4/app/Database/Migrations/2023_03_28_200000_DeleteSMSColumns.php
deleted file mode 100755
index 0246bac6..00000000
--- a/ci4/app/Database/Migrations/2023_03_28_200000_DeleteSMSColumns.php
+++ /dev/null
@@ -1,42 +0,0 @@
-<?php
-
-namespace App\Database\Migrations;
-
-use CodeIgniter\Database\Migration;
-
-class DeleteSMSColumns extends Migration
-{
-    public function up()
-    {
-      $this->forge->dropColumn('notification', ['is_send_sms', 'send_sms_notification']);
-      $this->forge->dropColumn('settings', ['sms_gateway','sms_account_id', 'sms_auth_token', 'sms_info_add',
-                  'sms_confirmation', 'send_sms_register', 'send_sms_welcome']);
-      $this->forge->dropColumn('user', ['sms_confirmed']);
-    }
-
-    public function down()
-    {
-      $sql = "ALTER TABLE `wg_notification` ADD `is_send_sms` tinyint(1) NOT NULL DEFAULT '0';";
-      $this->db->query($sql);
-      $sql = "ALTER TABLE `wg_notification` ADD `send_sms_notification` tinyint(1) NOT NULL DEFAULT '0';";
-      $this->db->query($sql);
-
-      $sql = "ALTER TABLE `wg_settings` ADD `sms_gateway` enum('twilio') COLLATE latin1_general_ci NOT NULL DEFAULT 'twilio';";
-      $this->db->query($sql);
-      $sql = "ALTER TABLE `wg_settings` ADD `sms_account_id` varchar(255) COLLATE latin1_general_ci DEFAULT NULL;";
-      $this->db->query($sql);
-      $sql = "ALTER TABLE `wg_settings` ADD `sms_auth_token` varchar(255) COLLATE latin1_general_ci DEFAULT NULL;";
-      $this->db->query($sql);
-      $sql = "ALTER TABLE `wg_settings` ADD `sms_info_add` varchar(255) COLLATE latin1_general_ci DEFAULT NULL;";
-      $this->db->query($sql);
-      $sql = "ALTER TABLE `wg_settings` ADD `sms_confirmation` tinyint(1) NOT NULL DEFAULT '0';";
-      $this->db->query($sql);
-      $sql = "ALTER TABLE `wg_settings` ADD `send_sms_register` tinyint(1) NOT NULL DEFAULT '0';";
-      $this->db->query($sql);
-      $sql = "ALTER TABLE `wg_settings` ADD `send_sms_welcome` tinyint(1) NOT NULL DEFAULT '0';";
-      $this->db->query($sql);
-
-      $sql = "ALTER TABLE `wg_user` ADD `sms_confirmed` tinyint(4) NOT NULL DEFAULT '0';";
-      $this->db->query($sql); 
-    }
-}
\ No newline at end of file
diff --git a/ci4/app/Filters/JWTAuthFilter.php b/ci4/app/Filters/JWTAuthFilter.php
deleted file mode 100755
index 9f9a5bdc..00000000
--- a/ci4/app/Filters/JWTAuthFilter.php
+++ /dev/null
@@ -1,28 +0,0 @@
-<?php
-namespace App\Filters;
-
-use CodeIgniter\API\ResponseTrait;
-use CodeIgniter\Filters\FilterInterface;
-use CodeIgniter\HTTP\RequestInterface;
-use CodeIgniter\HTTP\ResponseInterface;
-use Config\Services;
-use Exception;
-
-class JWTAuthFilter implements FilterInterface
-{
-    public function before(RequestInterface $request, $arguments = null)
-    {
-        try {
-            helper('jwt');
-            jwtValidateRequest(jwtRequest($request->getServer('HTTP_AUTHORIZATION')));
-            return $request;
-        } catch (Exception $e) {
-            return Services::response()->setJSON(['error' => $e->getMessage()])->setStatusCode(ResponseInterface::HTTP_UNAUTHORIZED);
-        }
-    }
-
-    public function after(RequestInterface $request, ResponseInterface $response, $arguments = null)
-    {
-
-    }
-}
\ No newline at end of file
diff --git a/ci4/app/Filters/LoginAuthFilter.php b/ci4/app/Filters/LoginAuthFilter.php
index 6bfa7ab0..3e91a47c 100755
--- a/ci4/app/Filters/LoginAuthFilter.php
+++ b/ci4/app/Filters/LoginAuthFilter.php
@@ -12,7 +12,7 @@ class LoginAuthFilter implements FilterInterface
     public function before(RequestInterface $request, $arguments = null)
     {
         try {
-            if(!$this->validateIgnoreControllerAccess()){
+            /*if(!$this->validateIgnoreControllerAccess()){
                 $session = session();
                 $token = $session->get('token')??'';
                 $tfa = $session->get('tfa')??false;
@@ -24,7 +24,7 @@ class LoginAuthFilter implements FilterInterface
                 }else{
                     $this->validateControllerAccess();
                 }
-            }
+            }*/
         } catch (Exception $e) {
 
         }
diff --git a/ci4/app/Filters/ThrottlerFilter.php b/ci4/app/Filters/ThrottlerFilter.php
deleted file mode 100755
index d7538ba0..00000000
--- a/ci4/app/Filters/ThrottlerFilter.php
+++ /dev/null
@@ -1,43 +0,0 @@
-<?php
-namespace App\Filters;
-
-use App\Models\SettingsModel;
-use CodeIgniter\API\ResponseTrait;
-use CodeIgniter\Filters\FilterInterface;
-use CodeIgniter\HTTP\RequestInterface;
-use CodeIgniter\HTTP\ResponseInterface;
-use Config\Services;
-use Exception;
-
-class ThrottlerFilter implements FilterInterface
-{
-    use ResponseTrait;
-    public function before(RequestInterface $request, $arguments = null)
-    {
-        try {
-            $throttler = Services::throttler();
-            $ip = $request->getIPAddress();
-            $settingsBase = new SettingsModel();
-            $settings = $settingsBase->first()??[];
-            if(!$settings['enable_api']){
-                return Services::response()->setJSON(['error' => 'ApiRest is currently disabled.'])->setStatusCode(ResponseInterface::HTTP_UNAUTHORIZED);
-            }
-            if($settings['block_external_api']){
-                if($ip != $settings['ip_allowed_api']??''){
-                    return Services::response()->setJSON(['error' => 'Endpoint access from external domains is not allowed.'])->setStatusCode(ResponseInterface::HTTP_UNAUTHORIZED);
-                }
-                if ($throttler->check($ip, 60, MINUTE) === false)
-                {
-                    return Services::response()->setStatusCode(429);
-                }
-            }
-        } catch (Exception $e) {
-            return Services::response()->setJSON(['error' => $e->getMessage()])->setStatusCode(ResponseInterface::HTTP_UNAUTHORIZED);
-        }
-    }
-
-    public function after(RequestInterface $request, ResponseInterface $response, $arguments = null)
-    {
-
-    }
-}
\ No newline at end of file
diff --git a/ci4/app/UserModel.php b/ci4/app/UserModel.php
new file mode 100644
index 00000000..4cae8741
--- /dev/null
+++ b/ci4/app/UserModel.php
@@ -0,0 +1,21 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Models;
+
+use CodeIgniter\Shield\Models\UserModel as ShieldUserModel;
+
+class UserModel extends ShieldUserModel
+{
+    protected function initialize(): void
+    {
+        parent::initialize();
+
+        $this->allowedFields = [
+            ...$this->allowedFields,
+
+            // 'first_name',
+        ];
+    }
+}
diff --git a/ci4/app/Views/Shield/Email/email_2fa_email.php b/ci4/app/Views/Shield/Email/email_2fa_email.php
new file mode 100644
index 00000000..c93d8e80
--- /dev/null
+++ b/ci4/app/Views/Shield/Email/email_2fa_email.php
@@ -0,0 +1,31 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<head>
+    <meta name="x-apple-disable-message-reformatting">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <meta name="format-detection" content="telephone=no, date=no, address=no, email=no">
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title><?= lang('Auth.email2FASubject') ?></title>
+</head>
+
+<body>
+    <p><?= lang('Auth.email2FAMailBody') ?></p>
+    <div style="text-align: center">
+        <h1><?= $code ?></h1>
+    </div>
+    <table role="presentation" border="0" cellpadding="0" cellspacing="0" style="width: 100%;" width="100%">
+        <tbody>
+            <tr>
+                <td style="line-height: 20px; font-size: 20px; width: 100%; height: 20px; margin: 0;" align="left" width="100%" height="20">
+                    &#160;
+                </td>
+            </tr>
+        </tbody>
+    </table>
+    <b><?= lang('Auth.emailInfo') ?></b>
+    <p><?= lang('Auth.emailIpAddress') ?> <?= esc($ipAddress) ?></p>
+    <p><?= lang('Auth.emailDevice') ?> <?= esc($userAgent) ?></p>
+    <p><?= lang('Auth.emailDate') ?> <?= esc($date) ?></p>
+</body>
+
+</html>
diff --git a/ci4/app/Views/Shield/Email/email_activate_email.php b/ci4/app/Views/Shield/Email/email_activate_email.php
new file mode 100644
index 00000000..7fb63dc9
--- /dev/null
+++ b/ci4/app/Views/Shield/Email/email_activate_email.php
@@ -0,0 +1,31 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<head>
+    <meta name="x-apple-disable-message-reformatting">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <meta name="format-detection" content="telephone=no, date=no, address=no, email=no">
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title><?= lang('Auth.emailActivateSubject') ?></title>
+</head>
+
+<body>
+    <p><?= lang('Auth.emailActivateMailBody') ?></p>
+    <div style="text-align: center">
+        <h1><?= $code ?></h1>
+    </div>
+    <table role="presentation" border="0" cellpadding="0" cellspacing="0" style="width: 100%;" width="100%">
+        <tbody>
+            <tr>
+                <td style="line-height: 20px; font-size: 20px; width: 100%; height: 20px; margin: 0;" align="left" width="100%" height="20">
+                    &#160;
+                </td>
+            </tr>
+        </tbody>
+    </table>
+    <b><?= lang('Auth.emailInfo') ?></b>
+    <p><?= lang('Auth.emailIpAddress') ?> <?= esc($ipAddress) ?></p>
+    <p><?= lang('Auth.emailDevice') ?> <?= esc($userAgent) ?></p>
+    <p><?= lang('Auth.emailDate') ?> <?= esc($date) ?></p>
+</body>
+
+</html>
diff --git a/ci4/app/Views/Shield/Email/magic_link_email.php b/ci4/app/Views/Shield/Email/magic_link_email.php
new file mode 100644
index 00000000..c93ed76b
--- /dev/null
+++ b/ci4/app/Views/Shield/Email/magic_link_email.php
@@ -0,0 +1,36 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+
+<head>
+    <meta name="x-apple-disable-message-reformatting">
+    <meta name="viewport" content="width=device-width, initial-scale=1">
+    <meta name="format-detection" content="telephone=no, date=no, address=no, email=no">
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+    <title><?= lang('Auth.magicLinkSubject') ?></title>
+</head>
+
+<body>
+    <table role="presentation" border="0" cellpadding="0" cellspacing="0" style="border-radius: 6px; border-collapse: separate !important;">
+        <tbody>
+            <tr>
+                <td style="line-height: 24px; font-size: 16px; border-radius: 6px; margin: 0;" align="center" bgcolor="#0d6efd">
+                    <a href="<?= url_to('verify-magic-link') ?>?token=<?= $token ?>" style="color: #ffffff; font-size: 16px; font-family: Helvetica, Arial, sans-serif; text-decoration: none; border-radius: 6px; line-height: 20px; display: inline-block; font-weight: normal; white-space: nowrap; background-color: #0d6efd; padding: 8px 12px; border: 1px solid #0d6efd;"><?= lang('Auth.login') ?></a>
+                </td>
+            </tr>
+        </tbody>
+    </table>
+    <table role="presentation" border="0" cellpadding="0" cellspacing="0" style="width: 100%;" width="100%">
+        <tbody>
+            <tr>
+                <td style="line-height: 20px; font-size: 20px; width: 100%; height: 20px; margin: 0;" align="left" width="100%" height="20">
+                    &#160;
+                </td>
+            </tr>
+        </tbody>
+    </table>
+    <b><?= lang('Auth.emailInfo') ?></b>
+    <p><?= lang('Auth.emailIpAddress') ?> <?= esc($ipAddress) ?></p>
+    <p><?= lang('Auth.emailDevice') ?> <?= esc($userAgent) ?></p>
+    <p><?= lang('Auth.emailDate') ?> <?= esc($date) ?></p>
+</body>
+
+</html>
diff --git a/ci4/app/Views/Shield/email_2fa_show.php b/ci4/app/Views/Shield/email_2fa_show.php
new file mode 100644
index 00000000..58d69ae5
--- /dev/null
+++ b/ci4/app/Views/Shield/email_2fa_show.php
@@ -0,0 +1,38 @@
+<?= $this->extend(config('Auth')->views['layout']) ?>
+
+<?= $this->section('title') ?><?= lang('Auth.email2FATitle') ?> <?= $this->endSection() ?>
+
+<?= $this->section('main') ?>
+
+<div class="container d-flex justify-content-center p-5">
+    <div class="card col-12 col-md-5 shadow-sm">
+        <div class="card-body">
+            <h5 class="card-title mb-5"><?= lang('Auth.email2FATitle') ?></h5>
+
+            <p><?= lang('Auth.confirmEmailAddress') ?></p>
+
+            <?php if (session('error')) : ?>
+                <div class="alert alert-danger"><?= session('error') ?></div>
+            <?php endif ?>
+
+            <form action="<?= url_to('auth-action-handle') ?>" method="post">
+                <?= csrf_field() ?>
+
+                <!-- Email -->
+                <div class="mb-2">
+                    <input type="email" class="form-control" name="email"
+                        inputmode="email" autocomplete="email" placeholder="<?= lang('Auth.email') ?>"
+                        <?php /** @var CodeIgniter\Shield\Entities\User $user */ ?>
+                        value="<?= old('email', $user->email) ?>" required>
+                </div>
+
+                <div class="d-grid col-8 mx-auto m-3">
+                    <button type="submit" class="btn btn-primary btn-block"><?= lang('Auth.send') ?></button>
+                </div>
+
+            </form>
+        </div>
+    </div>
+</div>
+
+<?= $this->endSection() ?>
diff --git a/ci4/app/Views/Shield/email_2fa_verify.php b/ci4/app/Views/Shield/email_2fa_verify.php
new file mode 100644
index 00000000..dbaac306
--- /dev/null
+++ b/ci4/app/Views/Shield/email_2fa_verify.php
@@ -0,0 +1,36 @@
+<?= $this->extend(config('Auth')->views['layout']) ?>
+
+<?= $this->section('title') ?><?= lang('Auth.email2FATitle') ?> <?= $this->endSection() ?>
+
+<?= $this->section('main') ?>
+
+<div class="container d-flex justify-content-center p-5">
+    <div class="card col-12 col-md-5 shadow-sm">
+        <div class="card-body">
+            <h5 class="card-title mb-5"><?= lang('Auth.emailEnterCode') ?></h5>
+
+            <p><?= lang('Auth.emailConfirmCode') ?></p>
+
+            <?php if (session('error') !== null) : ?>
+            <div class="alert alert-danger"><?= session('error') ?></div>
+            <?php endif ?>
+
+            <form action="<?= url_to('auth-action-verify') ?>" method="post">
+                <?= csrf_field() ?>
+
+                <!-- Code -->
+                <div class="mb-2">
+                    <input type="number" class="form-control" name="token" placeholder="000000"
+                        inputmode="numeric" pattern="[0-9]*" autocomplete="one-time-code" required>
+                </div>
+
+                <div class="d-grid col-8 mx-auto m-3">
+                    <button type="submit" class="btn btn-primary btn-block"><?= lang('Auth.confirm') ?></button>
+                </div>
+
+            </form>
+        </div>
+    </div>
+</div>
+
+<?= $this->endSection() ?>
diff --git a/ci4/app/Views/Shield/email_activate_show.php b/ci4/app/Views/Shield/email_activate_show.php
new file mode 100644
index 00000000..6b41d462
--- /dev/null
+++ b/ci4/app/Views/Shield/email_activate_show.php
@@ -0,0 +1,37 @@
+<?= $this->extend(config('Auth')->views['layout']) ?>
+
+<?= $this->section('title') ?><?= lang('Auth.emailActivateTitle') ?> <?= $this->endSection() ?>
+
+<?= $this->section('main') ?>
+
+<div class="container d-flex justify-content-center p-5">
+    <div class="card col-12 col-md-5 shadow-sm">
+        <div class="card-body">
+            <h5 class="card-title mb-5"><?= lang('Auth.emailActivateTitle') ?></h5>
+
+            <?php if (session('error')) : ?>
+                <div class="alert alert-danger"><?= session('error') ?></div>
+            <?php endif ?>
+
+            <p><?= lang('Auth.emailActivateBody') ?></p>
+
+            <form action="<?= url_to('auth-action-verify') ?>" method="post">
+                <?= csrf_field() ?>
+
+                <!-- Code -->
+                <div class="form-floating mb-2">
+                    <input type="text" class="form-control" id="floatingTokenInput" name="token" placeholder="000000" inputmode="numeric"
+                        pattern="[0-9]*" autocomplete="one-time-code" value="<?= old('token') ?>" required>
+                    <label for="floatingTokenInput"><?= lang('Auth.token') ?></label>
+                </div>
+
+                <div class="d-grid col-8 mx-auto m-3">
+                    <button type="submit" class="btn btn-primary btn-block"><?= lang('Auth.send') ?></button>
+                </div>
+
+            </form>
+        </div>
+    </div>
+</div>
+
+<?= $this->endSection() ?>
diff --git a/ci4/app/Views/Shield/layout.php b/ci4/app/Views/Shield/layout.php
new file mode 100644
index 00000000..5380460f
--- /dev/null
+++ b/ci4/app/Views/Shield/layout.php
@@ -0,0 +1,116 @@
+<?php
+$session = session();
+$settings = $session->get('settings');
+?>
+<!DOCTYPE html>
+
+<html
+        lang="<?= $settings['default_language'] ?? 'es' ?>"
+        class="h-100"
+        class="dark-style customizer-hide"
+        dir="ltr"
+        data-theme="theme-default"
+        data-assets-path="<?= site_url('themes/vuexy/') ?>"
+        data-template="vertical-menu-template-no-customizer"
+>
+
+<head>
+    <meta charset="utf-8">
+    <meta
+            name="viewport"
+            content="width=device-width, initial-scale=1.0, user-scalable=no, minimum-scale=1.0, maximum-scale=1.0"
+    />
+    <title><?= $this->renderSection('title') ?></title>
+
+    <?php
+    $baseImgUrl = site_url('themes/vuexy/img/favicon');
+    $baseThemeUrl = site_url('themes/vuexy');
+    ?>
+    <!-- Favicon -->
+    <link rel="icon" type="image/x-icon" href="<?= $baseImgUrl . '/favicon.ico' ?>"/>
+    <link rel="apple-touch-icon" sizes="57x57" href="<?= $baseImgUrl . '/apple-icon-57x57.png' ?>">
+    <link rel="apple-touch-icon" sizes="60x60" href="<?= $baseImgUrl . '/apple-icon-60x60.png' ?>">
+    <link rel="apple-touch-icon" sizes="72x72" href="<?= $baseImgUrl . '/apple-icon-72x72.png' ?>">
+    <link rel="apple-touch-icon" sizes="76x76" href="<?= $baseImgUrl . '/apple-icon-76x76.png' ?>">
+    <link rel="apple-touch-icon" sizes="114x114" href="<?= $baseImgUrl . '/apple-icon-114x114.png' ?>">
+    <link rel="apple-touch-icon" sizes="120x120" href="<?= $baseImgUrl . '/apple-icon-120x120.png' ?>">
+    <link rel="apple-touch-icon" sizes="144x144" href="<?= $baseImgUrl . '/apple-icon-144x144.png' ?>">
+    <link rel="apple-touch-icon" sizes="152x152" href="<?= $baseImgUrl . '/apple-icon-152x152.png' ?>">
+    <link rel="apple-touch-icon" sizes="180x180" href="<?= $baseImgUrl . '/apple-icon-180x180.png' ?>">
+    <link rel="icon" type="image/png" sizes="192x192" href="<?= $baseImgUrl . '/android-icon-192x192.png' ?>">
+    <link rel="icon" type="image/png" sizes="32x32" href="<?= $baseImgUrl . '/favicon-32x32.png' ?>">
+    <link rel="icon" type="image/png" sizes="96x96" href="<?= $baseImgUrl . '/favicon-96x96.png' ?>">
+    <link rel="icon" type="image/png" sizes="16x16" href="<?= $baseImgUrl . '/favicon-16x16.png' ?>">
+    <link rel="manifest" href="<?= $baseImgUrl . '/manifest.json' ?>">
+
+    <!-- Fonts -->
+    <link rel="preconnect" href="https://fonts.googleapis.com"/>
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin/>
+    <link
+            href="https://fonts.googleapis.com/css2?family=Public+Sans:ital,wght@0,300;0,400;0,500;0,600;0,700;1,300;1,400;1,500;1,600;1,700&display=swap"
+            rel="stylesheet"
+    />
+
+    <!-- Icons -->
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/vendors/fonts/fontawesome.css' ?>"/>
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/vendors/fonts/tabler-icons.css' ?>"/>
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/vendors/fonts/flag-icons.css' ?>"/>
+
+    <!-- Core CSS -->
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/vendors/css/rtl/core-dark.css' ?>"/>
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/vendors/css/rtl/theme-default-dark.css' ?>"/>
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/css/safekat.css' ?>"/>
+
+    <!-- Vendors CSS -->
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/vendors/libs/perfect-scrollbar/perfect-scrollbar.css' ?>"/>
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/vendors/libs/node-waves/node-waves.css' ?>"/>
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/vendors/libs/typeahead-js/typeahead.css' ?>"/>
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/vendors/libs/toastr/toastr.css' ?>"/>
+
+    <!-- Vendor -->
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/vendors/libs/formvalidation/dist/css/formValidation.min.css' ?>"/>
+
+    <!-- Page CSS -->
+    <link rel="stylesheet" href="<?= $baseThemeUrl . '/vendors/css/pages/page-auth.css' ?>"/>
+    <!-- Helpers -->
+    <script src="<?= $baseThemeUrl . '/vendors/js/helpers.js' ?>"></script>
+    <script src="<?= $baseThemeUrl . '/js/config.js' ?>"></script>
+</head>
+<body>
+
+<?= $this->renderSection('main') ?>
+
+
+<?= $this->renderSection('pageScripts') ?>
+
+<!-- Required vendors -->
+<!-- Core JS -->
+<script src="<?= $baseThemeUrl . '/vendors/libs/jquery/jquery.js' ?>"></script>
+<script src="<?= $baseThemeUrl . '/vendors/libs/popper/popper.js' ?>"></script>
+<script src="<?= $baseThemeUrl . '/vendors/js/bootstrap.js' ?>"></script>
+<script src="<?= $baseThemeUrl . '/vendors/libs/perfect-scrollbar/perfect-scrollbar.js' ?>"></script>
+<script src="<?= $baseThemeUrl . '/vendors/libs/node-waves/node-waves.js' ?>"></script>
+<script src="<?= $baseThemeUrl . '/vendors/libs/hammer/hammer.js' ?>"></script>
+<script src="<?= $baseThemeUrl . '/vendors/libs/i18n/i18n.js' ?>"></script>
+<script src="<?= $baseThemeUrl . '/vendors/libs/typeahead-js/typeahead.js' ?>"></script>
+<script src="<?= $baseThemeUrl . '/vendors/js/menu.js' ?>"></script>
+
+<!-- Main JS -->
+<script src="<?= $baseThemeUrl . '/js/main.js' ?>"></script>
+
+<!-- Custom  JS -->
+<script>
+    function pass() {
+        "use strict";
+        var passwordField = document.getElementById('password');
+        var showPassIcon = document.getElementById('show_pass');
+
+        var isTextField = passwordField.type === 'text';
+
+        passwordField.type = isTextField ? 'password' : 'text';
+        showPassIcon.innerHTML = isTextField ? '<i class="ti ti-eye"></i>' : '<i class="ti ti-eye-off"></i>';
+    }
+</script>
+</body>
+</html>
+
diff --git a/ci4/app/Views/Shield/login.php b/ci4/app/Views/Shield/login.php
new file mode 100644
index 00000000..985451c0
--- /dev/null
+++ b/ci4/app/Views/Shield/login.php
@@ -0,0 +1,136 @@
+<?= $this->extend(config('Auth')->views['layout']) ?>
+
+<?= $this->section('title') ?><?= lang('Auth.login') ?><?= $this->endSection() ?>
+
+<?= $this->section('main') ?>
+
+<!-- Content -->
+<div class="authentication-wrapper authentication-cover authentication-bg">
+    <div class="authentication-inner row">
+        <!-- /Left Text -->
+        <div class="d-none d-lg-flex col-lg-7 p-0">
+            <div class="auth-cover-bg auth-cover-bg-color d-flex justify-content-center align-items-center">
+                <img
+                        src="<?= site_url('themes/vuexy/img/safekat/login/auth-login-illustration-light.png') ?>"
+                        alt="auth-login-cover"
+                        class="img-fluid my-5 auth-illustration"
+                />
+
+                <img
+                        src="<?= site_url('themes/vuexy/img/illustrations/bg-shape-image-light.png'); ?>"
+                        alt="auth-login-cover"
+                        class="platform-bg"
+                />
+            </div>
+        </div>
+        <!-- /Left Text -->
+
+        <!-- Login -->
+        <div class="d-flex col-12 col-lg-5 align-items-center p-sm-5 p-4">
+            <div class="w-px-400 mx-auto">
+                <!-- Logo -->
+                <div class="app-brand mb-4">
+                    <a href="<?= site_url('login'); ?>" class="app-brand-link gap-2">
+                <span class="app-brand-logo">
+                  <img src="<?= site_url('themes/vuexy/img/safekat/logos/sk-logo.png') ?>">
+                </span>
+                    </a>
+                </div>
+                <!-- /Logo -->
+                <h3 class="mb-1 fw-bold"><?= lang('Auth.login') ?></h3>
+
+                <?php if (session('error') !== null) : ?>
+                    <div class="alert alert-danger" role="alert"><?= session('error') ?></div>
+                <?php elseif (session('errors') !== null) : ?>
+                    <div class="alert alert-danger" role="alert">
+                        <?php if (is_array(session('errors'))) : ?>
+                            <?php foreach (session('errors') as $error) : ?>
+                                <?= $error ?>
+                                <br>
+                            <?php endforeach ?>
+                        <?php else : ?>
+                            <?= session('errors') ?>
+                        <?php endif ?>
+                    </div>
+                <?php endif ?>
+
+                <?php if (session('message') !== null) : ?>
+                    <div class="alert alert-success" role="alert"><?= session('message') ?></div>
+                <?php endif ?>
+
+                <form id="formAuthentication" class="mb-3" action="<?= url_to('login') ?>" method="POST">
+                    <?= csrf_field() ?>
+                    <!-- Email -->
+                    <div class="mb-3">
+                        <label for="floatingEmailInput" class="form-label"><?= lang('Auth.email') ?></label>
+                        <input
+                                type="email"
+                                class="form-control"
+                                id="floatingEmailInput"
+                                name="email"
+                                inputmode="email"
+                                placeholder="<?= lang('Auth.email') ?>"
+                                value="<?= old('email') ?>"
+                                required
+                                autofocus
+                        />
+                    </div>
+
+                    <!-- Password -->
+                    <div class="mb-3 form-password-toggle">
+                        <div class="d-flex justify-content-between">
+                            <label class="form-label" for="password"><?= lang('Auth.password') ?></label>
+                            <?php if (setting('Auth.allowMagicLinkLogins')): ?>
+                                <a href="<?= url_to('magic-link') ?>">
+                                <small><?= lang('Auth.forgotPassword') ?></small>
+                                </a>
+                            <?php endif; ?>
+                        </div>
+                        <div class="input-group input-group-merge">
+                            <input
+                                    type="password"
+                                    class="form-control"
+                                    id="floatingPasswordInput"
+                                    name="password"
+                                    inputmode="text"
+                                    autocomplete="current-password"
+                                    placeholder="<?= lang('Auth.password') ?>"
+                                    required
+                                    onclick="pass()"
+                            />
+                            <span id="show_pass" class="input-group-text cursor-pointer"><i
+                                        class="ti ti-eye-off"></i></span>
+                        </div>
+                    </div>
+
+                    <!-- Remember me -->
+                    <?php if (setting('Auth.sessionConfig')['allowRemembering']): ?>
+                        <div class="mb-3">
+                            <div class="form-check">
+                                <input type="checkbox" name="remember"
+                                       class="form-check-input" <?php if (old('remember')): ?> checked<?php endif ?>>
+                                <label class="form-check-label"
+                                       for="remember"> <?= lang('Auth.rememberMe') ?> </label>
+                            </div>
+                        </div>
+                    <?php endif; ?>
+                    <button class="btn btn-primary d-grid w-100"><?= lang('Auth.login') ?></button>
+                </form>
+
+                <?php if (setting('Auth.allowRegistration')) : ?>
+                    <p class="text-center">
+                        <span><?= lang('Auth.needAccount') ?></span>
+                        <a href="<?= url_to('register') ?>">
+                            <span><?= lang('Auth.register') ?></span>
+                        </a>
+                    </p>
+                <?php endif; ?>
+
+            </div>
+        </div>
+        <!-- /Login -->
+    </div>
+</div>
+<!-- / Content -->
+
+<?= $this->endSection() ?>
diff --git a/ci4/app/Views/Shield/magic_link_form.php b/ci4/app/Views/Shield/magic_link_form.php
new file mode 100644
index 00000000..bb106635
--- /dev/null
+++ b/ci4/app/Views/Shield/magic_link_form.php
@@ -0,0 +1,91 @@
+<?= $this->extend(config('Auth')->views['layout']) ?>
+
+<?= $this->section('title') ?><?= lang('Auth.useMagicLink') ?> <?= $this->endSection() ?>
+
+<?= $this->section('main') ?>
+
+
+<!-- Content -->
+<div class="authentication-wrapper authentication-cover authentication-bg">
+    <div class="authentication-inner row">
+        <!-- /Left Text -->
+        <div class="d-none d-lg-flex col-lg-6 p-0">
+            <div class="auth-cover-bg auth-cover-bg-color d-flex justify-content-center align-items-center">
+                <img
+                        src="<?= site_url('themes/vuexy/img/safekat/login/auth-login-illustration-light.png') ?>"
+                        alt="auth-forgot-password-cover"
+                        class="img-fluid my-5 auth-illustration"
+                />
+
+                <img
+                        src="<?= site_url('themes/vuexy/img/illustrations/bg-shape-image-light.png'); ?>"
+                        alt="auth-forgot-password-cover"
+                        class="platform-bg"
+                />
+            </div>
+        </div>
+        <!-- /Left Text -->
+
+        <!-- Forgot Password -->
+        <div class="d-flex col-12 col-lg-6 align-items-center p-sm-5 p-4">
+            <div class="w-px-500 mx-auto">
+                <!-- Logo -->
+                <div class="app-brand mb-4">
+                    <a href="index.html" class="app-brand-link gap-2">
+                 <span class="app-brand-logo">
+                  <img src="<?= site_url('themes/vuexy/img/safekat/logos/sk-logo.png') ?>"
+                </span>
+                    </a>
+                </div>
+                <!-- /Logo -->
+                <h3 class="mb-1 fw-bold"><?= lang('Auth.useMagicLink') ?></h3>
+
+                <?php if (session('error') !== null) : ?>
+                    <div class="alert alert-danger" role="alert"><?= session('error') ?></div>
+                <?php elseif (session('errors') !== null) : ?>
+                    <div class="alert alert-danger" role="alert">
+                        <?php if (is_array(session('errors'))) : ?>
+                            <?php foreach (session('errors') as $error) : ?>
+                                <?= $error ?>
+                                <br>
+                            <?php endforeach ?>
+                        <?php else : ?>
+                            <?= session('errors') ?>
+                        <?php endif ?>
+                    </div>
+                <?php endif ?>
+
+                <form id="sendForm" class="mb-3" action="<?= url_to('magic-link') ?>" method="post">
+                    <?= csrf_field() ?>
+                    <div class="mb-3">
+                        <label for="floatingEmailInput" class="form-label"><?= lang('Auth.email') ?></label>
+                        <input
+                                type="email"
+                                class="form-control"
+                                id="floatingEmailInput"
+                                name="email"
+                                inputmode="email"
+                                placeholder="<?= lang('Auth.email') ?>"
+                                value="<?= old('email', auth()->user()->email ?? null) ?>"
+                                required
+                                autofocus
+                        />
+                    </div>
+
+                    <button class="btn btn-primary d-grid w-100"><?= lang('Auth.send') ?></button>
+                </form>
+                <div class="text-center">
+                    <a href="<?= url_to('login') ?>" class="d-flex align-items-center justify-content-center">
+                        <i class="ti ti-chevron-left scaleX-n1-rtl"></i>
+                        <?= lang('Auth.backToLogin') ?>
+                    </a>
+                </div>
+            </div>
+        </div>
+        <!-- /Forgot Password -->
+    </div>
+</div>
+<!-- / Content -->
+
+
+<?= $this->endSection() ?>
diff --git a/ci4/app/Views/Shield/magic_link_message.php b/ci4/app/Views/Shield/magic_link_message.php
new file mode 100644
index 00000000..0855272f
--- /dev/null
+++ b/ci4/app/Views/Shield/magic_link_message.php
@@ -0,0 +1,19 @@
+<?= $this->extend(config('Auth')->views['layout']) ?>
+
+<?= $this->section('title') ?><?= lang('Auth.useMagicLink') ?> <?= $this->endSection() ?>
+
+<?= $this->section('main') ?>
+
+<div class="container d-flex justify-content-center p-5">
+    <div class="card col-12 col-md-5 shadow-sm">
+        <div class="card-body">
+            <h5 class="card-title mb-5"><?= lang('Auth.useMagicLink') ?></h5>
+
+            <p><b><?= lang('Auth.checkYourEmail') ?></b></p>
+
+            <p><?= lang('Auth.magicLinkDetails', [setting('Auth.magicLinkLifetime') / 60]) ?></p>
+        </div>
+    </div>
+</div>
+
+<?= $this->endSection() ?>
diff --git a/ci4/app/Views/Shield/register.php b/ci4/app/Views/Shield/register.php
new file mode 100644
index 00000000..c83792fc
--- /dev/null
+++ b/ci4/app/Views/Shield/register.php
@@ -0,0 +1,147 @@
+<?= $this->extend(config('Auth')->views['layout']) ?>
+
+<?= $this->section('title') ?><?= lang('Auth.register') ?> <?= $this->endSection() ?>
+
+<?= $this->section('main') ?>
+
+<!-- Content -->
+
+<div class="authentication-wrapper authentication-cover authentication-bg">
+    <div class="authentication-inner row">
+        <!-- /Left Text -->
+        <div class="d-none d-lg-flex col-lg-7 p-0">
+            <div class="auth-cover-bg auth-cover-bg-color d-flex justify-content-center align-items-center">
+                <img
+                        src="<?= site_url('themes/vuexy/img/safekat/login/auth-login-illustration-light.png') ?>"
+                        alt="auth-register-cover"
+                        class="img-fluid my-5 auth-illustration"
+                />
+
+                <img
+                        src="<?= site_url('themes/vuexy/img/illustrations/bg-shape-image-light.png'); ?>"
+                        alt="auth-register-cover"
+                        class="platform-bg"
+                />
+            </div>
+        </div>
+        <!-- /Left Text -->
+
+        <!-- Register -->
+        <div class="d-flex col-12 col-lg-5 align-items-center p-sm-5 p-4">
+            <div class="w-px-400 mx-auto">
+                <!-- Logo -->
+                <div class="app-brand mb-4">
+                    <a href="index.html" class="app-brand-link gap-2">
+                 <span class="app-brand-logo">
+                  <img src="<?= site_url('themes/vuexy/img/safekat/logos/sk-logo.png') ?>"
+                </span>
+                    </a>
+                </div>
+                <!-- /Logo -->
+                <h3 class="mb-1 fw-bold"><?= lang('Auth.register') ?></h3>
+
+                <?php if (session('error') !== null) : ?>
+                    <div class="alert alert-danger" role="alert"><?= session('error') ?></div>
+                <?php elseif (session('errors') !== null) : ?>
+                    <div class="alert alert-danger" role="alert">
+                        <?php if (is_array(session('errors'))) : ?>
+                            <?php foreach (session('errors') as $error) : ?>
+                                <?= $error ?>
+                                <br>
+                            <?php endforeach ?>
+                        <?php else : ?>
+                            <?= session('errors') ?>
+                        <?php endif ?>
+                    </div>
+                <?php endif ?>
+
+                <form id="sendForm" class="mb-3" action="<?= url_to('register') ?>" method="POST">
+                    <?= csrf_field() ?>
+
+                    <!-- Email -->
+                    <div class="mb-3">
+                        <label for="floatingEmailInput" class="form-label"><?= lang('Auth.email') ?></label>
+                        <input
+                                type="email"
+                                class="form-control"
+                                id="floatingEmailInput"
+                                name="email"
+                                inputmode="email"
+                                autocomplete="email"
+                                placeholder="<?= lang('Auth.email') ?>"
+                                value="<?= old('email') ?>"
+                                required
+                        />
+                    </div>
+
+                    <!-- Username -->
+                    <div class="mb-3">
+                        <label for="floatingUsernameInput" class="form-label"><?= lang('Auth.username') ?></label>
+                        <input
+                                type="text"
+                                class="form-control"
+                                id="floatingUsernameInput"
+                                name="username"
+                                inputmode="text"
+                                autocomplete="username"
+                                placeholder=<?= lang('Auth.username') ?>
+                                value="<?= old('username') ?>"
+                                required
+                        />
+                    </div>
+
+
+                    <!-- Password -->
+                    <div class="mb-3 form-password-toggle">
+                        <label class="form-label" for="floatingPasswordInput"><?= lang('Auth.password') ?></label>
+                        <div class="input-group input-group-merge">
+                            <input
+                                    type="password"
+                                    class="form-control"
+                                    id="floatingPasswordInput"
+                                    name="password"
+                                    inputmode="text"
+                                    autocomplete="new-password"
+                                    placeholder="<?= lang('Auth.password') ?>"
+                                    onclick="pass()"
+                                    required
+                            />
+                            <span class="input-group-text cursor-pointer"><i class="ti ti-eye-off"></i></span>
+                        </div>
+                    </div>
+
+                    <!-- Password (Again) -->
+                    <div class="mb-3 form-password-toggle">
+                        <label class="form-label" for="floatingPasswordConfirmInput"><?= lang('Auth.passwordConfirm') ?></label>
+                        <div class="input-group input-group-merge">
+                            <input
+                                    type="password"
+                                    class="form-control"
+                                    id="floatingPasswordConfirmInput"
+                                    name="password_confirm"
+                                    inputmode="text"
+                                    autocomplete="new-password"
+                                    placeholder="<?= lang('Auth.passwordConfirm') ?>"
+                                    onclick="pass()"
+                                    required
+                            />
+                            <span class="input-group-text cursor-pointer"><i class="ti ti-eye-off"></i></span>
+                        </div>
+                    </div>
+                    <button class="btn btn-primary d-grid w-100"><?= lang('Auth.register') ?></button>
+                </form>
+
+                <p class="text-center"><?= lang('Auth.haveAccount') ?>
+                    <a href="<?= url_to('login') ?>">
+                        <span><?= lang('Auth.login') ?></span>
+                    </a>
+                </p>
+
+            </div>
+        </div>
+        <!-- /Register -->
+    </div>
+</div>
+<!-- / Content -->
+
+<?= $this->endSection() ?>
diff --git a/ci4/spark b/ci4/spark
index f2ba3f30..a56fbc1b 100755
--- a/ci4/spark
+++ b/ci4/spark
@@ -12,13 +12,16 @@
 
 /*
  * --------------------------------------------------------------------
- * CodeIgniter command-line tools
+ * CODEIGNITER COMMAND-LINE TOOLS
  * --------------------------------------------------------------------
  * The main entry point into the CLI system and allows you to run
  * commands and perform maintenance on your application.
- *
- * Because CodeIgniter can handle CLI requests as just another web request
- * this class mainly acts as a passthru to the framework itself.
+ */
+
+/*
+ *---------------------------------------------------------------
+ * CHECK SERVER API
+ *---------------------------------------------------------------
  */
 
 // Refuse to run when called from php-cgi
@@ -26,8 +29,13 @@ if (strpos(PHP_SAPI, 'cgi') === 0) {
     exit("The cli tool is not supported when running php-cgi. It needs php-cli to function!\n\n");
 }
 
-// Check PHP version.
-$minPhpVersion = '7.4'; // If you update this, don't forget to update `public/index.php`.
+/*
+ *---------------------------------------------------------------
+ * CHECK PHP VERSION
+ *---------------------------------------------------------------
+ */
+
+$minPhpVersion = '8.1'; // If you update this, don't forget to update `public/index.php`.
 if (version_compare(PHP_VERSION, $minPhpVersion, '<')) {
     $message = sprintf(
         'Your PHP version must be %s or higher to run CodeIgniter. Current version: %s',
@@ -39,15 +47,14 @@ if (version_compare(PHP_VERSION, $minPhpVersion, '<')) {
 }
 
 // We want errors to be shown when using it from the CLI.
-error_reporting(-1);
+error_reporting(E_ALL);
 ini_set('display_errors', '1');
 
-/**
- * @var bool
- *
- * @deprecated No longer in use. `CodeIgniter` has `$context` property.
+/*
+ *---------------------------------------------------------------
+ * SET THE CURRENT DIRECTORY
+ *---------------------------------------------------------------
  */
-define('SPARKED', true);
 
 // Path to the front controller
 define('FCPATH', __DIR__ . DIRECTORY_SEPARATOR . 'public' . DIRECTORY_SEPARATOR);
@@ -64,36 +71,14 @@ chdir(FCPATH);
  * and fires up an environment-specific bootstrapping.
  */
 
-// Load our paths config file
+// LOAD OUR PATHS CONFIG FILE
 // This is the line that might need to be changed, depending on your folder structure.
 require FCPATH . '../app/Config/Paths.php';
 // ^^^ Change this line if you move your application folder
 
 $paths = new Config\Paths();
 
-// Location of the framework bootstrap file.
-require rtrim($paths->systemDirectory, '\\/ ') . DIRECTORY_SEPARATOR . 'bootstrap.php';
+// LOAD THE FRAMEWORK BOOTSTRAP FILE
+require $paths->systemDirectory . '/Boot.php';
 
-// Load environment settings from .env files into $_SERVER and $_ENV
-require_once SYSTEMPATH . 'Config/DotEnv.php';
-(new CodeIgniter\Config\DotEnv(ROOTPATH))->load();
-
-// Grab our CodeIgniter
-$app = Config\Services::codeigniter();
-$app->initialize();
-
-// Grab our Console
-$console = new CodeIgniter\CLI\Console();
-
-// Show basic information before we do anything else.
-if (is_int($suppress = array_search('--no-header', $_SERVER['argv'], true))) {
-    unset($_SERVER['argv'][$suppress]); // @codeCoverageIgnore
-    $suppress = true;
-}
-
-$console->showHeader($suppress);
-
-// fire off the command in the main framework.
-$exit = $console->run();
-
-exit(is_int($exit) ? $exit : EXIT_SUCCESS);
+exit(CodeIgniter\Boot::bootSpark($paths));
diff --git a/httpdocs/index.php b/httpdocs/index.php
index 86b2370d..5ec58a77 100755
--- a/httpdocs/index.php
+++ b/httpdocs/index.php
@@ -45,7 +45,7 @@ if (getcwd() . DIRECTORY_SEPARATOR !== FCPATH) {
 
 // LOAD OUR PATHS CONFIG FILE
 // This is the line that might need to be changed, depending on your folder structure.
-require FCPATH . '../ci4/app/Config/Paths.php';
+require FCPATH . '../app/Config/Paths.php';
 // ^^^ Change this line if you move your application folder
 
 $paths = new Config\Paths();
diff --git a/httpdocs/themes/vuexy/img/safekat/logos/sk-logo.png b/httpdocs/themes/vuexy/img/safekat/logos/sk-logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..bc22c2e46e7f3dac226fe882109439a97b010b68
GIT binary patch
literal 14366
zcmV+(IN`^MP)<h;3K|Lk000e1NJLTq008I!003bK1^@s6+!pO<00006VoOIv0RI60
z0RN!9r;`8x010qNS#tmY3ljhU3ljkVnw%H_000McNliru-w6&4GZZ8mGX?+v02y>e
zSad^gZEa<4bO1wgWnpw>WFU8GbZ8()Nlj2!fese{03ZNKL_t(|+U<RLyj^v5?|1$7
zboLqVkbwk5Fi4THG%{s?009gX1T->)$q7;Gd)jAP)YpowRk7HLw2T%Rk}zB$2x7`m
z8UYpLr2?Y1DwCBlgqu5^v&Y|hf9&bE_c`YdBrVaL^&up=IeVWy{MK)+^<8Uy7ojIT
z`8|-O<{^8N6ekIxEzwwe2N8B52$R78FzmB@mLVSt$iJUGarck#qt@@jeNpe#_T+b1
z#8Pw7`z$s-ZIZdLL>5d~Fi3}h06~BONJs?i!-Ef(JveYj9d@qq{qXM|#iOtE6tpKj
z*~YTOIQW1P>}x7iIjBlySX6=m9UAEnAOHda0E57gkYEG|;d1~F9-3%jT#k=A+`8}~
z|A$usk*Vz|Xis{wm2!l!=)*Ot{9~OOW`%5+WI=-fAe5EOV9u5}r~fB}6vCGQT5vGR
zqZkXvZW{|G&e@2K&F$@8wchLQ$?uXJr7!thzt;B;v&4W_7u8rfHBhXG1O^DHa<ZbH
zpjbsoK!*;4OqejCk=UDcEFB03Z+!_b`8@^gNl)H@9Bmx_@d2&xl0oW2g(}cUPZd-3
zPZ<<jP6jAb-R$21A_5VmiYl1i${O~0HhlKho`UwICo^|z59$|vw+>LhW>YzeFp1+B
zlNAM|*lsG(8&NKzqg08bzX@p2VF18hbHwbC=jCr6>BXQu>B%%@8J6ia)BN{2V)lL&
zs>JXQV#Ul{SymP`$JP@JNM)h3avUo^WiVQBu~}|zj*8K}9&A1MU)#gIi{9(+$@VUW
zfwLOa*v}SrjL>rGzH%YXjC3;o2}g>T*jUclrNjk}tu6_aV4+6UvL%hrZ7=uUQ_!Al
z_fnzqpH;|)#u_r<hcf+AV$BS>jeik=i4@z(IsY-Wq0Ar%*kq$Zwf8T<lK!58_M|6M
z$a3TG18Y>?+axOnggEEYvSL5;h;4%Aa)%6O{Ang|^jjRKGBg;lscagCv9hP2J?Y65
zVpHjOi%M~xGp}GN<P*o5xp*|uSfU6_irr!L44~vZ>4zaeFxiAHD#!K|v?o28LM$>5
zHlU|!#ftlyT1?KVUCzoze@zpk3Zh%|aWiaJ7dlKb-q};op7dl2F<|Z~D2Y8ui6axB
zDAKL0Oo1a;IQbbPOS%vPoGE!^W#ivdIEf&bV8YmS1y)!+1?@>sCJ~+V0Ras;43?BX
zFeyfqGmMuNTbg*loT0Z&$SZlG(G+J!$)ItJ*Lw=ulb%c>8flh5-YsROws<s)CKbds
z);Z>^a3KMCiL+0p|5E@ZV!$XF<(`7}q$iUK#}z}xD3jtmXY9_B;`Sz{unoZF*v+LJ
z%*1gnH2)2NbmT}+L3`4Z$<;Hpm|U=$M1;&>X24NiojD6e6D6c5PEGVOIXmYz07wAi
zJq7JaPbQH}HAw+r6_BUk<mQ!|a)D^-&N5{s3!J5BQiYG~=Sv%~A$Zec@X7x1^wOcb
z=|1)+A?5;9VT9u$({Ecr>ybO~_?F)CnVBrZ!daz~QSJ0^j^mGSz{b~lPpRF4LRGW^
z9K=jY@q1z=<M@+VsXB^F13AWn)67d&3`nt}hL8xsKiwYgzfD2U!?F?^-uV{H3(BGK
z4pTE=KmZ^}Fnk1XjEejqj(E5w-AmVokF3LX+KmnXr(n?>&A@wgh$A#;`w?hX2-(-t
zygl!59(nG6@>=?h@+Fou&K0bsu@Jxr!6+I2_3&|CPbE9p&_us-mN8S^tlBn9w1Ab*
z5|C5l6a{9rRWvQIXJ!P_`{8z{psS2U2bDo<2WfDR2H7a1goxcm#Jdt9WC;(x7-#qJ
zVXb-ihr|&Z#{FQ`&G^BK+tX`ZiKVkOgT7dX`Ti=Ej1o*(WI%&JlU=-u*Z;?_X^`p|
zq&jq==L~{RAzpj)@rdo%jK+lrv39BI$#DTL72VpHQ9(_+L<laW=L7N`G0As@2;s1E
z*LJ0#=W2^jnuFRcb48=nhcawoK<9);B0<YIwWM_l(a%-9hVf;u=p#QqOIv*OYWD~K
zxm_ryaoE8%Sa%MH>f8oZP+|kR(4nyg0m2AP;8pz3vs;v4q9)2PVW#dC1mJOiakP4h
z*wxJ?rR$S&wi2xTIsJU>olufGp%@rSQZAWmt13Bw$V-&|<KOeY_xN_BpywEe9XOvF
zH_xYm(g2lVK+h$A(?`Hby#~P|4JK?@q@zT}&YIkO-%2c9IE05by{XD+9=6{g8u!hm
zzIp>?SkNJamI4YO<QoLvjG&4#i;yh19$MG!aV4n{k<_=RMwN1?ZI=H`jbu(qmAEzU
z)aDvVLk{7v`<3nG{`HFhF@f6kJ5#?sKxJsqb2lNuGJss`k$l`>?61REMSzyvlm!#B
zh`@s1;+vZ<hle+<3*bB~D_Lv~&C~kp{is5Rp0yyw?=N~+G@_I9<{)%x(KctXknHJV
zw+J-b)Cxdtmh~j%?}Qvh7*kf68*hw>ODqd}HW={WZMfYV+HPo1^iAfGC+?2E{rac^
z9a{Pz2!M|eW71uDfp^{Q$pKfG=iE`%%D3x@H6@102KuRrCVTHa$2k1J8~g`<@@CwO
zwD6JH==+0yszPTSB5vL#jsky=!hdsu)~Eijzxs(c6_zB$iWccPdeY|JCMA7&M^+&T
z1HcOCmRj1lkRh_DsaegMx;aX%B*?A@|MdwTd;j(Xdg?WlR@TXe0WG~)jx}^by7#Ke
z2>>7UZdiAP_5SsBDy@iix9FjiNJqb@Vj!G27r>jMpaZCVq%U#NDYcehFdTS~jkU(!
zbrFWVH`gREvI_1z;@FdJ7L*l5RSOPc#UtdpQPMiw`15KChAHcGQDf2&p=|Q_X?Hkx
zJoiQ}^8oAMw;O?2zyfmwK$7H^kombjzw#d&u)*011+@<;krDaxoO$OihZsTg?oJ17
zLG!yd^c5!Q=>sDMY#6ALz4Xm^k!NA)ygKZ6l*m+~i|FMA2r(?1U;N^mt(>X5owZsJ
z7rOj=(&ljF^Poz;Q+0in_A-@mK?ztR*OrkfX>4^vgqT3{)3-Xe-aiwie5ZEkyL6$S
zqmzD|#(KZ5X%KPrCm|71h`<coLwV_seE7G(_ix&WjWdGlb(_q2I_bHaX8=9|jB)Gv
zP6v&l`RpK9V5GE%(H><$Ls?k6Pxs4DG2gkbDXkR-#1f6fTL?73U|)hahmcPNBsYwC
z;hpR8=;&1EGIeV~iA-oLkWY32uJrM`8$K}8#c{lK@SawvovI0av0yO|z#xE-!LJ99
z&jyeWhrU1bJv{dE^cP!V5tI&!Ddbq=(2r`Mw$>*Jz!%<K54anjp6VP+v2b3=Fi+B;
zFBK4b5-<QjV_>u7@Y#UE?|XXiod;WwbtTI>N<ZXSkl1_5P-BXJ4-unclHG^=N3NI#
zOcdu5GA}mGBeVLc%t=YCXue6C3qW0@tgiI0zu8&)57S*2@6--mVQJPSC6xBI$%a7|
zbm$NTFH}ZqYI*RMIqWQR%+^;9!eN(6&%1cKB-y$Ft)g+BN&+AREa3>*Q87H?mSl;n
z_A#N05HMJq5|BL2IQRe?rAy0PI-(*hlwiUj9U25A7$M{yF8o89?0v9iIOC`B;=daW
zUb%QZe(iR>5g}%2(2!$zi{GD%uyr|xrd?P0$JQZlw?pe|WiFjq(JYkMgf6tS&oE@U
zz(;sc3*P&hhV%EQVClC;efKl}iXU&DQc0DXY$~vycawgqec6W9P&XbXhR*@Uc;Yz#
zT^00LESjSmba9F7vu#+KMP{^^D0)qj<!(O0g$~^JwnF#PcNt4>bbRN+4IMTeTa?c%
z!#+1Tw&UhA$)DA~GZ-#;BLJ?LhLc;MG>N@E;vADgqMe*1J}HBIBUhNx&5<}xsj&Cx
zX6KcUOlMsz#^M?q;)=4Utg504OV}`A#KhSmYi%nOK7|NSrT{LxjV4e0)r2{I-huM4
zbAA&1==)PDC_obcDoPDT)($J>oK6Q_;(T|*8$~u&8H+FINA(+nR5NO1!y+TzdqleX
zL~}GGd<xNIr}{cid||U;zWY>v@ZGoL(cgADugWf7#9buhv|Zbi&BIRa<La6LQ7c!4
zjS^eXGy%aP3IpO8(kB^hVw$Iq@Wh90bM%ChaL9@~y+@y%YPoUl`UpJ5lN_W58mL9j
zhcZZdf?Nc$yS+MAUvzkd?4gFJ&#93OGu>ze1TsYrAfxmGd@)WF=Wa2^RvgWX-}|q@
z4<1s_S4S27q7MeNq%AsUEsKB`7jQAo@d+`;#7t_@i*9YKY!o52YUY8EP@E(gRD#;M
zoxB4d!AqlJ^py2j?@smY2bLGl*8+2WT{QNupbCphF+mEY=zO#h6gDOTG}a+VhXE57
zm0(GG*D-D6frYf_Qycvseq&MvW$=pt-i|_jq5wey9RT2#Z5AgQOFz03H7=hc8mOZT
z6PmK+aQY0j*j=_@z!oOTTtb<xKYH05-mua;Xvt8A-CZkgr0EXEU@^TI?^J8?Nwc_d
z>l|trby0~eO;&-zN+M2!4km`pCTucc!<zr9H2(Dj^U%ZZ_8$4gq$-*gZgU12O(K>s
zV8e_TUxxfjW@ufw$KPcvI;c+7f0-rv?HVdD$cPji$Zf&|#P7j?MHXzfP|~b9o8|C5
zN9&7^Q<YSM4wFon5y`W%5c52<oKs2a;IbybojYyiOg02AgfB_qI||`L>eq3;Qi$Vt
zG(g}^z&ZK$=It*{_3ek)hwNg9r44=5zo3E|OfqweEODo)7$&Q)oB=@sCR@;j4g-eJ
zVO)BUxw!F|_k+Lb_T9p#;IS~y+-Hrj1f2wISm&ONV=LQ6IhPzTkNUo`GYw!6Ragpb
zzrvrGZjwoUOJ@xgSePRk*qH_v)UCdui>Aoyv$B&-D<}eRV(IYRXK`cgJQ^_isD`8h
zIrU2m4?Nqg2_=*;C~DYA8<;hK`nqLUR+<zfN=nnF?Sqg~;>J09rFC>`_pj8c@$ETc
z(C(u;Ofr=U9DuvHo&<tPCK^=7Y%$AjXtmpq#vyat9Zs|*JJhlPN@MHjnu+ockEgLI
z6~86D_c*VaR<;+J7UJ*al(CO;ynjRl$r28`=MS~k{&+gdSq^I(`e|@MRn%b!Q!&FR
z)cqp2j#WifEvg_5B`Twj`cbF;zdp!V`r)n?)ZyR;pX8Z(Oe>Mxi~$36D$noJM{img
z9Cq5!Rt`LEQ28r!sG--X3{71u41|y^hy9OPj()3K^(&e${@f7yrztMdCnlIMF+g>A
zQZ9MMTy`eB4Xe8aLW!%KxIlSr?czpC^UHHZqf)1G#J`#v0YZq-cR2i{<#^ZoRlSTr
z{4WFg|BYg?Xklusqd^t;6#jv$zxuxs;NtEf6)El>cW5jwqAr|mNz+K1R?JzS7@+#D
zb*jX!f0T|OVn~+oIQ*(($V;s8pc$5o(=F036D;gxf7V$;jVh1`XZe=@1-Q5X09JeJ
z&I39Z^ncR+5bJ7@OMF8CLb%dD@=E8r4O@fbqBw)47$ztseIQN?6x4Um03?TS(E9te
z&gvVctDJo_u%IexQQ=Dr0CAyULcJdD=Hn~gxyAw(mC!&Rq~L#CXdJq6qyNaiw<+l7
z+}rNC(mLl}i?m}Y<?W6DpFXlNPxPP220eAQTy)Wb@P}(I!pw_a&MY1E)>*Rlu9~n@
z<xH+Qgv1z{ANxPfjn@GH#?b`uXMbNhcc%*Mvl8@9fMG#LKUFZwtv>;<x(yjDct4T*
zJat{)88~`wKkDzTQ8}V_R6>@JBqq@M%;%jOFORQp0>EEhR62L3GVBkD*kvUK3`9yg
zq17(vs-UTxMOn&aI;NDPxGJ686}#MFhmY2%azTx3=+JY#>I|R>_gnwqUjG-Vcj@4t
zKVhAvm#KWE76Tm-IH9463hHprS%E|Td@3Z}WiL0(C|R982iStG>`Y96pEQ0<+|^Ev
z+^XA~)fmax&-CEk>o(m#pP6!2VX%=hJ7hdZ`PddHRIMqGg3<2w3Kp=)MvbHy!vALg
z3yc1q0D#xs)>#hxUvZ&M(Sm_FqJiDT?6>W#4czdeapX_W&<;C!rT|eR6h}oMg`V=2
zMgRlBk>2M2bnG?7V>XA)%X|dL<30qNO!QIt;4?cge>3Ga)f^Yiq$wH`%WGt7I_pYe
zJUWRheQ%;Qa&_DF$>u-!9OPVdVuDFJYAEma9&_1VljcFw-+1av6e^HJDamptImueK
zM-}C_rg4(ePvybKu-wv?PWZLE`8pTwxN58zfKD1JWZS|jFPrKa1{4-TuV~{55yFA9
zRr;C6wwydaMu+~D4l!v)mqGx1_I|zDc<uBd429EjYelS_am>x!9;)Pm`kZyAHb+1W
zYm!3+36x-?iuxZOY#e@8+p7nF&thoPi~8td2j0VKd_W+SVPY25u^Y|C+r*r`chLsc
zeaKk$=$ZQBBd7a-%Vh3lkpYpct<;K2G=;nIYFynmlW~*(%ugKlgB)W;ytCV6lBJvP
z=;%Fi@gYqe@7OT+Hse;b1dgZp`dV<G`YP@mD;{&1H}ne^elz8>Nn96bu*iT7eV^_w
zTjJJoaRct=;)*;{+P$>FfU&0;L;txH1p}V+o7Z{Yd8&BKdaQRn_>W7<akE1tKpmIf
zF}(_mJZ!Yh$}ft+T}F)%c?gtk2<gzI1UiU!HXr_2Gi;u8_sHGDQ!1y7EN6ux<xHP=
z3bIk^_;7(Vn-V~g3$?>}EHoF;>!iUJWmKs8XB`z306sfDw5jZjE*lM-e-VJk)6E)y
z0f8D>*opeE8_mM*H2a{PME!yH>qp#ndU^5ush+PzMqNvScBT3wBt}aH9h3Z5W25hj
zaDv-(E&`4$)(1MHeViq<5kEjNxrs8#?9*7}Vh4^3*nN22SPt0dU{jP7Qdw0AIyC64
z*ShCf@@OPYqHrs*Qe&c;+E|>{eFGpNM)I({-XF!rc@<$|_y{(2(;JWd&9V@^aIB<4
z=+l@}LTxS7+eQ>*I4M3L#TpSS%n5l2m11ieP{<R~IrA3pmS0S5IU5`Lky*~XG0bp-
zjM_6+T*@QJP}g6<v&-$s@nY3s!lv@RhZ;-&sE`NE<b4<l;o+;7l}}$?k+r`vSo@F$
zp+yftzyMIEGHfzYXB!PMaq27n=+agCqO;ZnKfJeV<p|>;mjajKJC&)+6~ckr6-kql
z!K9*s$vp~?rs>51EKNo$f%$X*L&2gVL{@$m6;=}@h49h6QIjcDC^V8%$>@5;BtSE(
zv6aHD)A1P?!}|-&MUgg=0Z0je+~@PgR{kpB;8K_JDGV7YVb?D8nC7Dm6^@bg(oB^q
z1Lt_F&1bYxD05U&)`YB6loGC6&f9Sb2}io0yTx7e-RW4)e(GCL6*U-Sq%<g;OW$S6
zNlEUL61o)1HJhZ@s#;O*_QV7XQG(9)@c{n4qk<;#iRR5O0=VFxtg|k$sPy>~>#IcU
z_eF@R4xKbuWWr{1_RFk)ca^#1v^Czt>pGq9V(&X^0jzza2p;FAP)+U*=2B#_<&ZR!
zotoO?jBd)4EEN)pYsKhRc_3BnDqTra<v_Lb^#qB{<?9I{$^TmG-2aUF`62(F9|QRD
z8++0nfJd6Sj&be`+on^8mE!jdIHIg%kI@znG5`<$Eo+<`zcMZ5#K3}z7PTpIQUpP0
zQ_@rqncH6>D~hNvI&^!EOj%o;!8#1G7I(FvMfte9`qu!?{)V~g%N4S}Xh1(Dnrs}=
z<CkD!kOXvS2AI~KZXCAgX8%Vs?qoRy2M-F9c9xQ75ri9P^vWN($34U1m)T8nJ`bmL
zQO>ruK~{5Sm@M;=tAt_VxSo<H3A-o`67q@pNsHg(++5zocXn-EW79{gs9a!>ky{xI
zf`o)8ovUX0te0U~H8fkh3dw^yNS8vsI?HSRsx7CuwF<>qUUcgkZ{zb2<rchprCi8)
zBq4_n|0lz(%^#R-i#fzTWS2^U)@n8AtSjKL@-Ef*G5I+upGz9Ui&j$ULoPmC^=B04
zM@?z$HEjh=<bQc<eh%Q&%dK-yu*tebhgL}*oCytmRE7kXe1z8kIA}V1?x|Qf&(uqQ
zVv+tn1Nt61YY;-jgiR8|)?=II%YiDW5L9zMt<o0WC5a}=fFfP$we!v6A0Oq3_}CDx
z!N=d(jChn-^&JVZTOGMo78ysLV;uW<t5Ee)jau~PBhJ-Av4}j`@>T|hFlD}vA&iqw
zGmm+^#a`^FyuRyfYV`F{6$W%A-ihm2+5J`EInyfeJ`9K16+?W`fOd{SVxf+@AR$uM
zmd#m?NqUPEx4dnf-?VLTc3cvP>RX|nQbF*!4HZpTJ_z}Y2g9S_)e$*z%3ZjtIjM5W
z2(7J9Eo<<n4*6E4-BewQxuS_lyp4{Ql=3bMk${Fgwlbq<_c8bSyT5L(`d~xUZr0OS
zkD$f*zuD|9{D6McG1mqU+&gLB(OB}a8cJX7qe`VhC0K|MR1wE6AxQ|P*(EZ8Lcb)p
z6M(m+FjPwl5X!<5^SJ+jL5^^n33l+R95Firh0N(J55WRe*!5ks!2^7jIm@WSfK6t$
zNOJDa6joPhH)9ZV2-HyN*GTUVD2U<_(qO@aNk;lyz<^{z0ROcSIdSsUlPtbOmg|Qu
zvqkCpDwTJwz=la?u5LN@5K21qk|-1d(2Q&;71Dg$#<dkiPl)r3329LRXA`yqNWUeU
z@4el*{rSl)XJbPj^)0B1Ds(ooUg(rgh1-h}6u_#`?Uv7h79JfJtZ*6)DfP+31VO@n
z!wL!jpY+z;a=CThXR1^>fRrX#69Nq?qppp=2LZY&=sCvHZ_E;nPt2k^YFvUrW*lLu
zyCwlb=9N=<0F#AnNfQGrl^Z7M=tmVCgPX$`$7sPK5-A6#Pca&cZo!Chkp<v_a<#EV
zZr1J=G%eze-!MU-1QVt(a!Zp6=^`dVfWR9L#}2>B8~Vjm@9J1{@v1)5zSU24qf9nT
zm=Gk|tx*i8aA5`~&p^o(cG<jPAVRQJI1%TdPqq9Y$#s*WFcK0I82`l0&dm=^Z8`f=
z%gMxTbSg?8cy<lBZX`;*ATC(R<lV`(@J8txqYj>dq_K`0)J$ZQoV!AnsVk7MqgiC2
zLe?L3RZjhg&+bHnpV$S17(@*vVL_*)UQ^w(qg_#LV8~m^?u$RSIFwyiP}DIaNI;`5
zx1IL#CAm<Bh+_i*0gVMTCI}WWL!e0OJu_~{sbWx8HWE_4Iy!&yJtB>b^V6gQ4$LN;
zYnNkrW3qR2oWA(TK{UQKM+_Q$qJc8m`Hr79=TvkkG{Cf-TuM?3#m{dgh%2EEuIJn@
zP6i;w&tHP!Nau>1nm1iFrE*f_)*5jyG{q@A&LvaOp>9u!bJbjDA$68=mMJMAl{U2P
zyqtoP&u_JYHqm;<N0=Mu1|nz>D6u)W(=n@zMF-6h^}m@%eTd4?L`t|8<r{gED}rx%
z9NsR8eJ%iiT+AJHS^KQI4hlDFF1gQL%Lm%)DU<z91tk-UrW}xrQRk_u;NzE+bwK1B
z2Gj*tghU8{MjA?F9$GWxP`58yj)jeesI3_k{YH%{&{-=09qjrDz8#Q%orK)n>9Oz|
zuyZNrPtMQS+B8eMpQx^lWaE;=@TK>C+p+)mRDe)F1{PG~*j^1im^nv4mVGUy3Z_n0
zqs|W@!zBwf)>H&6ISY8B%$`KR;S*cs;sSsp<#0gi)TyjtTZh(hreYsz7ta+9QGpf3
zRLU?`55dMUvw6&CM%E4kz}Jj(4z%>r13I)mD%3d=O;TB|G+UCAHwzGq{Auf&zNwZN
zDH#%qfhZ5bcRttp=E>N`qT1OIKmh+XpTkdQo(^_0pnq0}cA`++Mx8Y@s0v?%$NaHz
z_}Sm}A8af7E}M-{4v5CQDwU&rtdeN=Nxtp`t)niBiPJt_J7>@ejQe!x2a>Xtk=pn^
zqx>fqcGIoKgY$766u(p1zXAl$Pv{dXufuizq{>MH3o2SI0^Zuz4Ki1k3Zn^C5Hdk>
zsgP!&j-hfk-7wjl)zqO<rz;`hi(o@eK|g35zD19d7V66gAkkvyk8cVdeYicT9i1#c
ze=!$1<y~8A$)1B;JF<dOR8FTnkN_bMbMuV9jFl4r{*QmdPrfA1{A@$iF4y9KGUG#~
z+|73kS90-_#DsLGu?(oqdP;;C-G&3MGMW<=Sc;PAW8577x^vTW%EzBuiIu0k&8po~
z66Vo~iV7lFFwsC24mp1cps1i!r}9TCh`Vx-rFB9un%w-efAZI)yYxSe-LUz?<{4+#
zw8~T2qNO6=`V2s#E(PpcV?mjaYdKReBT0l1esjW~c=u3iXw#(18Q0e8tmlCpHQmMe
zeW6{!kgqB2;CAFbr&RfqIxex8I*d4ZJ#xnG$ho+0p~1#pVqRk}F|Y9sF|V<gnBRDZ
zHm|We&1y9CS{Dl&q$XP}WTq}ob6J*;u2Bgl>1p05*=?I}ANxyp?XQZ*Y;ng|yX-SD
zwR=00Sx|L~RlJpX)5yf7{KiTdodm-T{cUJ9^Z751HxkJbP1#;hK7^rgl*YdjAb{G?
zPE07lLX|299EYXz)MHLCm+e!f$~=<{rA{FFLYMt;)Y;V5fPam5)6X2~{v_`Ccth&d
z#_XPg0<_heTAG(uYHpMFELoz-t@Cd2Z+W7da#mx@S*4^ah4SDa@=SrMHB>9NkP$g#
zKO^ewEKt5N0w_#d<E#jWDY_4j+_m@P{#@y%=%)(iiaO>}19PZ>IaJ4N)X`5BlmdNn
zYe1N~ml1#sV}S_+#Q8~#0T>hPcI;^XD()O}IT)2i&}XV`or}QA3?gmftov)5R(t2;
zG@>jPA+@l!gS_VO4?O8&d{+wq02g{mL_t)y?aUepSY)E6n|r9AFOj)>)NI~<(;mE+
zZp6J4oxaBt-fv`=l*x>?pJD+KZ~ar_oMvQ}OM=nli7&2gtsR<DIg{F2LcXAYGc;J8
z_mVG!D8!LD&zp0`wC%Qw{iD<&T^PCOz7x7%F5ZJqpomsqd9G0&QA~oYQJGQ;TA+H6
z?K~Ei&~1%GK1D(VhD5;KJAVQZX7!d?F-g~sROa+n3Uz9euM$br<N}D4?AA=}Y<h{j
z+gSQ!6mxSfvXqc;rT@|O;Unuiuj71?Ja@k(3}LACDV)`0pbRB;p(x%5X-2>5AZRQa
zI%(||D7vn$4?B<{SY)Xd0%k-9N`Mcrk-4Pmq9%LmJ&z1qjVk^mT)20xan}4*SLIC5
zT2X~ThN9%iPd`(Bme$phQiM<}EFiRRMg{jakMmLPm>iHuQPAj0=aPSQ*Zs0hK{+DS
zGSey*PN+{9B)B7#uMuXY=9$%<h9QYZ+6|M~k~JtNkaG0;!^!NSWRay=@&y4z<V@{u
z#qsJC#ki8?7AB>=S9!>SFwp6kl{m~E5dHgAV1rU1Ci-SadU%aS{YkGcSF$_B^$F>>
zyL|~CaXx3Hk$8<0C82Edlu@R$GKqE9B@pv!<ayhfcw*{wh<p{Gopa24N#sa8cdOKs
z@`*_ahDZL-hnvG^b=rLo#M0R{Y5iLR0}Cpm1~cwT$?A3^c8OduLZR|9$B#`)FDg1%
zOD^U*JNfACl|%`W?@IqM+X*h}boW96zl@U9qy(+e#cR+H>U5CK`oRK1*;%4^G9-r2
z;V;`GR{3N^)0uaPi2woGuhR-WyL9aCL{v+|7|Ie7k{AI8&lQ0ywdipsk&lG@nN(WU
z(sQr?vDo*#4je<I+XwYg4TGYAK~cvbYUy~vx~QOJlz!1YrlOe@p-b+}n8)ok$*vYY
z0my7ID&U;}X05Q7?NU7bMSu|C{i(nqn>-5%er_7i@F}TGJIRa-L6^p|t#WY-JeDB`
z!_BaH(w!apbPvSR+5M*RKpzJ7sK%Bv*Fl?R0x0X6<_@VgBDHn5LzyAE18IeSAmUu{
zg8I3DgXhP^@X146NY#ahU_(GM|6&L*NP`XY-1D)poI_;oqjoNld5SJXTQnVV2p>Tk
zJGbxAJrWTLqOyEMln?su?>CQrPaCkr;zFIZG(VL-%LtBs?rQJe+^9n>4cPN^7}FUY
zCQawQ5Mhu*@#9U(BBSgW`q^#QC#;W|(9_}tf)*<@fgyi(L+iUQbVnsQ2OLbfnTRg&
zTn7N=_U1h=1qgpEJ5<tYFkl5{8{NnMGmkz)C-W_$aGexwuFS;uOm&GK2kT`A5>AbD
zm}H!Oq`7#Xt&2n>^A<wNQ678WE$%H(cT`Txc%WYl?pqaAM7Rel-6vU0nQlO&^lYk)
z8Jqz)YC5J<*H2p+U%{HPn!8hCP@jUQC*;J@_cibAI$KwaOYfUL%R<CKF=?2+i(wAj
zetPN9-2mVW^N{`Pf$`lM?6St1G6N%Kqvx>MGPtd+?CZE=OG|iHNyzB6r{rD&WmssS
z{H@c>#jBQKnZ5#t)Xy@P{ars-&bP=&t7$Sz8KTMF*Cw|=N+AJF9Z6j|e($S3{99$x
zB9sMsuwkH2lrMd^x%9m&u~It;i)-&OmwmZTmD3_rI<EbtWX1=h$^O;dR~o17V)^#p
zsiH7aitDp;bqXq*()n75FkcZ9S9;Y&`4jIlmtC|Ni)#z9&^Xpud~Sux*H|#)u?3v7
zp+3S}hFW+1W-0}0nR2zq{sh!qVVoN;lWkSG_Q2uhVP`HZZ1~er%%qGkWQmq+{b{EW
z4Uy%v9_Yv5zBQ^rBRyB}ulC?lNAN;r08}tnWhh!Mw#*eD<nYN1q%C+!ti-ti`;U%e
zc<K5M8%<6@|HfbUL=)~BnIM>{>qKafjrr7n+)lFZ*$a%Ln{zSn#Li;i4{Kyalp5)d
z6tzE%lk=rZ#@D^t>5E=zH7|16e?ck@uYv(vSeQ$V>drK<dJj`??qW8!%*Vi|2Sp8L
z;+~`&MvRv9fAmXNUePHxn-w3&E^!i|%c*_IG4em-kw3zer9T7+CM*n6!=6ihL%R8T
zvu0LC=A!??K2)H=XiG^r?EEL(vF>ePDh(t}4=k3L+5DDkz1wbWv3CzEwXp!8Lq~%e
zm_>b`pKaPB^UVH<0Wol0KQ(MC#lo_jfd_B1OYWzq^PTI))@^p-Uo0VGOO!;h0yfzg
z(E8^L(%_nYvp%s@TXe$AqEL!Ec)aUYyQ?qls+^*4-<qh$V;DMkCLOB8n7fp#QHSca
zPNmizI$Ux#g))>lTAva@=zV>n_0kddOoNkG2Y?qG=i?>I*xx2=KQ(YJk%8H$qXrwk
z2yK&fl*oWiT5cc>6Jwmc_5bb!T^nP+jytw|UY>sPTwQxmhi)g}n8pHis=#6c9tB3S
z)0?D2aMoiPB60~{GsaIH^16^dQQi+>6_%btE^Q6{=0fX?(={RP)S(*`v*-~7s<2@|
zhev@)1eh>kke1?|i6R6d7#$1T_g>b8sazHfDN#X%rk@v_N=A&aRYsscV!_-ai$eu$
zvY??Kb*d5rh7prd3x&}Sk>zZSa_f{EoS_${du`7-FMfH?(r(L3WFAgwzLKG{hALHI
z!h}sWUc>7K!kHynJoX=X)p_-TZZT&+_3vAwdW39~Q0CvDjg&s^t5wT>NExi80z!qV
zB{kK>RG{aj&hIEg>ir+I;C}ipcg-Wyy>|fs7h`DTHFxZ22mTMU1rzbn+Az_eGG?KM
z8rewmnUwABP4;ho+Ijhuso2uK;NSfJws7mX0O1xDSk+0OEJ|ol6@65JO=hf|835(O
ze`*A+Wq&s@^z!6+Miu&wpY$~IpkHxs`j=7Je0M;>h@_-)C#ruf3k!8oMU5)3C?n-c
zVw8aWmqswU{2SgaPfeZBr&Kwo*K<i7Z+5bM=Z3L$n@6$bNDskJRr@O-P$CO8s-jL+
zl&Dn5nKA;%;c<43ziyI_kWR7z8-ihH;v|p#ds3^<$@gj~k&QCSuwc$8{`BF$I3h+)
zEskhNEaw0X>{}DH$Z!;L;MCEyaa$@bJ%%aQf12YTqE3NS7N>S%c#)7#hwNY8LhI05
zTh}hRt2KS)%%$)@i=j=@5zEG;^VxvH5w(LNmm@`1f9NCp<p{ZF{)zL?XIwUo`4#~1
zS!eY_uVZw77yexmdAf>x;+JCARr*coUNYj09ClG_&2Oi)FKT^cGR=AhOuk=o*R0>f
z69@S4?vPN3p%he7&0sRi&}IMHSB%a3eXV)RW7AK)Gm2@pY1>VnmQ#Rlwr>CJSnHKT
z9qIqQg!H@M$;!sT@DSWFfh~XdO=tCnHv;AiVQAz^=UXcrZk`iB{tCqjZZj+_3T5C-
zP_u1B!%{4r-EUbB3{d3OM%0+?zDRCVM3JVXNNGcPc8%oEM0vKA<TnX^MS_14%3yuK
z{?$JDUvQ~)K})tybTF}S#26d6xp~bVx3;eR_;*@2KKjOUzy-M&AE;GJ;VFhNkI-2x
zB=BrNt1#rK1YQgfJmSjmUxwY??!5>Xz2WKYe`}t-uPyY`OwyMKh@Al%1S1H+uZJA`
z%me@1gy9c;Vf@Bdr#jd9=8BWwD(0-Kp`1t9h_M-?BVTN-?VIWKea2k1w+-`DUDu8P
zi`@uf5MW<2Zw@K^xi94gS9o`Pb;^w+LBLPkbwJbxjKqS(8ED`0@VY+s`VC#cnDfkc
z@7KruTG8-KcoW#-4?jCpC=cr-AFHg~$&{5d3C2+x;cbG&V3hmh&64=pKn4$a(!2et
zh&^Ll34Opm=TM!+3XSvw0ov7NclIm%%7^cE@40(ACpf`6;iS9WyYK95IV0uNVB{ki
zrJAhBEMFv*X3qC{M(IYm3E-DQ4qudlUyu?nNtQ2=7QPfRy(B=t-PHQcD;uyOz<;y+
z-ppQ46ts$RYL=1;oy{~d^0%#<`p}c#d0C33vklXT-P$_zWRO#V$$+^qkUIhphne_g
z3HjTA`DH-9z>qIU;N=i_A>`mi&GBCv+71Ri=Rl(07vVJLnbAHHwjKROPqruJY(#)i
zM4&dtj29*NMTzibg#2HD;FrMiB?-I`g!1KztN->oT<83*-Sh92g0|)D<Jl}MdyD(`
z;{6(Qd_}8VZ@_rLXZIza@sjJhFAU9KICD=y-&6~#)Y7IP0ikC=e?R0w|H13w?^yRN
zey{E(Yq2TJ2<6`D?n%#rzNzB9diQIv`UCU<2^_QqKp(JaOVHC$MUF8JXPvTI>U=Ji
z5O9e5{RasEmK%q&Mq1kzCs_`M2=Dhb_riyr$5M9tCHkSuO)~Ejx$|?JD-MQS_!mFw
zKf3XaUi<#ozao&MKiux6g-ZCJ_`%p4wK+Z6!DN+n3RkI|A0n(Qg$ZtAt-Fo@;0)^&
zuH-%&Nq`V8I~e8h;V~XN=HXcBjw>x+-p_saS!Ct<0%Safa7<1NPjKs)hy91&kdhv3
zEIGh}_8pDHTRYQ-b_jjY#u42)M4HCAFwJum$v7q0XN12DAs-77t}lCZ*N>(#6kG2t
z*BwtPR7Ra@*+L>^w0vRtm8pyxRZ~SK5F|yEmjRVwvei$LZUwL)T2LCQWW%O%uKPm*
zD5DHhl=_9-d=-FqzL9JHvH$QBE3o3As#W{8CiKJ8N!p4EawqO&g;gLWo-T}I$covi
zFfpz3e3iCwFoX_F^vSe6HbNQf<CDLSE8X)v)7f$$7GD{7^wpo@;o+Ww_M}ZhNcbEa
zb6M-!`=_!MAwsm+J?0wchWi2FBc%_VZ;*afjcN!feB1KUlDFOOJp4?eAOIoc5SO>E
zAprPL=>zBMq+L}J6$I=rTvA%{wuj@-&s5f9{ic=f%45uu`3*yuA0ejB%0vam1W};P
zp{!7W3x)99sjjxzdd6rkkPvZi2IW~5Bp56tBqRdi!zaJ5#mx(w#`p*Jr$rxo();0U
zzyBanPo^ylz+(@av3WYk8+;Bhf~;WaD(Bj(efFV4M@f{Rq4c(*xpEcun{PVTUhQ)L
zopo5kLMiw8nadD{yc?YBE@*|#k4ea&jYS0Q)9E-zkx<~cEsPgQ%ls5&ZsS{0tu6|c
zgOul47EBP(ppgNK$|$3T1`S|9n?0vajc+eBmVB*K$l0@?JGcd%m})#dC9}{&xYAp=
zOkV=%0cza0GDHA^31UEZtSqLCJAr(KZ)$~c?D-*l5KM@O4)mFAaSv<V)mNNeI_noD
zQTn#V+F*NpSfJEQ$3?_H$dfg+|GjWRb$T9AC*pZ7%&5)xD<y$~AORC5H0aPshYsUU
z7n(;5Z1ldLo5t2t&>dJbXs}`5cY=8|!nmU#<Pbi4$7~25xnDIW8gx{s{1u3(`Jh5J
zbTXpBzzD9s8_H<;n4U(5h7-->*?|k2%FtqNAW7lI`&;)vv#svqW@q(=(@Uqn(-PG?
z1&jTXks4Y1Si;Z5c^XaR=gnqAft9(P>gPJdwoFCqO9e|yxp=imTO&wA31yJbL5%Yj
znoEDP(R=9gJr{QecW(i}AOi#F!+bFhZxQpbi<pnOVm2(j+UDl!6g7L#5wkH@%toK+
zgANTo{EeYAc46-PF)(71h1p^d^Tkf+r#={DAV4_m1pY_1^*!C}-27a#IkL!yzmD5F
zs5wV?PKDXYX^SW+L$K7*4eHP?%EzENk^r=mNvg*aI+INj3s_{Kiau1S@t6CT79G`7
z(4Lw?1EEY7>QqII>Znr{6)K~YqauqFEJQF!+h_^v8C#U1iC|!ih7%XBRjsFDp(47I
za@4F%#&C#WXo8x@4EaMF|2ytz2t(tmTi<$*C*8l6kSPl!D{Nh=73*GPR+tt|dD@d4
z=@9Z(GNn&RUE=)c3g-6Xl0TbdqCyR-a_!1}u#eeuad&7Tgb3kqc+3?}cN8~?)&hiR
zv3DUjc*dsk(;DdrrG!h)`2dEBeqTJN6IaG4?*HV@v&Omp^Jmy+J!z7C1F=>nDoiR<
z=r?oI#R{%#8>-tj?IBN7O@)yeX)kKqP-n{X7p0Mb28%3IWc}@~G5Z7Xab?ef?vT2f
zki7ZRKyjlwpg=|_?zPU^XPWF>&CD^-VJu&+FI(Pr6fs<O-?Ur2skQpH@nHP05dQPb
zh13fdriT;SCZ^@`o!vN0(sNQF#w_Ge6V^b=yo)@KLq^Fd*gy$o*rM{Oo{PJ~dbb(Z
zlVIF;ym>SqXCBGN#=nj>mgduc6jcHRG2%Ol*2O-2Xb`Z4jgn^lMZ0|lLIiK>ZQkbH
z^yC)3`OX0T_j8PhofzUfj0?=gsX4Ed+bKAy$S$V1$2mL8G0L6I)m2k6M1W2PN>twS
zoyO9GdkVS(ySRohFhKp-S<J&*#C+^3=Ho45K4yzq?E$5_@SWS9X~MaX!LVSVirVsJ
zIV;N9;(L?juCbe5E4TDx0_k3<lBcVCRa-WN(3bC185om6#VW*0g{q{yaw`O&%1qr{
zVUltYf;5<9LD%f#dkVUP0z?3yF`+~j>Qq6UYN%5cb*iC~8>P}&**3REuJ+g;)}WzG
zHY!y5i`?0_qxOWWakanJx&EV$bUqrg^xJfa^4>zx6DZd7QPIssHjr5*7$bGOVKN|C
z8Jwk7H*mrA)>wzm#-d)ad{1^LSy?*c2$L$`)}W>Hg;Wd1#UV#YE;ScCa%M$=T(g0?
zIWagtJc(6AISVs#=S#+0P>9iR_%}TT?a2-&Cznp&&8EtCG-&(hM&7H+Sumsd5<XQS
zIaR=%yGm-ziNf4kB_%`3Or(V18Zi+(kN8^eb@gONlm7^w+A=@b_eN90UP6d>P+a*$
z#feB%;MPsuU{aJgWAVre5z@JCXd7azhObI2n<^(!x(NgnXgvk($qp$`<4ON#;p0Pl
zYWuJTZCN^WOSPKFgGJm)$=XJpQCf+lRt+VL^=Y9#6)*v&)Xk;1o;QGpo`UvdhnAlQ
zPket5W1pWI(EgY}CaIk)1tn997P2mv2mm4_WfJ{3E1J*9vsKP4r3aUgFR+h4=fT_5
zLveeu!^^tXjkk}9@kJp8&!?jtl=&-w!ZeQz_bE1ftCp5Q`PncifKaI>XXca=lsB7O
z@N`c>d(smCcTU{&q@%sQ&|_~yj&UI!OG5dMvUKoL9`q^BXQAZ7#d1Tm51LNL9}=R*
zZupP(T-=`YBms}S|7h94!E39!H>i_1h}2Ppss&W1<|%0tRwv!0EpJ(kU*26#X4q0T
z=u0_gz&<8;{BL_{mY(#agPdAE=OZRtmkAO^aZYGjl%Q7B$H*;n)?1c#t`M~iQ_hZ0
zOs!JC%Y+u1n_q4Hd|uDR?MY8M$nDJ=u4?kc@_@rlD0Z^MerT3P$p9Zx3g^{HY0-b`
zEIG>JO|>qU36dmy_WyAsHu^mU?MY9%#ih>L2gkX2P{7_349+!dw-J-&R4-u{O!A>Q
z^a!jLIkZ(I0Rj7)9B1rOpx4dPlb%c}-*eVJKhg>o2k^fQaE>KGo$;#ps!-_{+6(aW
zU8Af(y~Ko&LOASv^5M7%z6TQZq$g9z(|FSVdGPqR->&a1HPVhGm12Q2H#Q{)BQ-9K
zonZySWtH5Bvd=LwJn4M%9%t>BlJD+W(4O>Udcy0R8~?gVty4nCi8P@}SwCozAtBcV
zPF!eJQ%e9No9eQ6SJV0JM~n8jCq3!O4CHuo)qb{CTBk!_kmEZ_(<fOpnrEWV!@-=E
z{V_ba|2)xr{(|Dv?w*47q$h7cPH3FjZ+PaV2AOA5VJ1X-3t95#LR%UDiD0uQy-$75
zx$(wM-_ujjp7dlZ<V1Vbp(d=)3FyZYAh<(uL!zKbJwj9_D2D^~ukg%?uiY~`^m@1R
z_Y|}zJ=q3wQu*}xER7Yq(3c8m`w`PFfS3bHs)cx1vix<3;KxkC{Xui{`t?{pC9B&1
Y2j9(Bc-RNCG5`Po07*qoM6N<$g2PS0*8l(j

literal 0
HcmV?d00001