fixing some bad practice with spongey castle dependency