Set spongycastle as the most preferred security provider

This was a slight oversight, android ships with a crippled version
of bouncycastle. It is prudent to set spongycastle as the most
preferred security provider rather than using the built-in
version of bouncycastle android ships with.