use spongy castle as security provider

* use spongy castle (android version of bouncy castle) 
* change tests to android instrumentation and remove robolectric
* modify aesEncryptDecrypt for spongy castle and some improved comments