If a final registration statement contains a material misstatement or omission, the purchaser of a security offered under that statement can recover from everyone who signed it.