use grails.util.Holders instead of org.codehaus.groovy.grails.commons.ApplicationHolder which was removed in 2.4
http://jira.grails.org/browse/GPSPRINGSECURITYCORE-276
license updates
update to Spring Security version 3.2.2.RELEASE