use spongy castle as security provider and change tests to android instrumentation