Use cyptographic authentication to protect against tampering #16

Could use HMAC in combination with encryption as done now, but probably easier to switch from CTR (aka SIC) block mode operation to an authenticated encryption one like GCM. Looks like Bouncy Castle has support for GCM.