diff --git a/acceptance-test/build.gradle b/acceptance-test/build.gradle
index 766aee3bd7..fe0e54ba55 100644
--- a/acceptance-test/build.gradle
+++ b/acceptance-test/build.gradle
@@ -95,6 +95,8 @@ dependencies {
     testRuntime 'org.pegdown:pegdown:1.6.0'
     testCompile project(path: ':core-common', configuration: 'testOutput')
     testCompile project(path: ':core-services', configuration: 'testOutput')
+
+    testCompile 'junit:junit:4.13.1'
 }
 
 task acceptanceTest(type: Test) {
diff --git a/app/src/main/java/org/zalando/nakadi/config/SecurityConfiguration.java b/app/src/main/java/org/zalando/nakadi/config/SecurityConfiguration.java
index 7d8a95ed17..7c3f65443d 100644
--- a/app/src/main/java/org/zalando/nakadi/config/SecurityConfiguration.java
+++ b/app/src/main/java/org/zalando/nakadi/config/SecurityConfiguration.java
@@ -30,7 +30,9 @@
 import java.io.IOException;
 import java.text.MessageFormat;
 import java.util.ArrayList;
+import java.util.Arrays;
 import java.util.List;
+import java.util.stream.Collectors;
 
 import static org.springframework.http.HttpMethod.DELETE;
 import static org.springframework.http.HttpMethod.GET;
@@ -55,7 +57,7 @@ public class SecurityConfiguration extends ResourceServerConfigurerAdapter {
     private String uidScope;
 
     @Value("${nakadi.oauth2.realms}")
-    private String realms;
+    private String[] realms;
 
     @Value("${nakadi.oauth2.scopes.nakadiAdmin}")
     private String nakadiAdminScope;
@@ -73,8 +75,11 @@ public static String hasScope(final String scope) {
         return MessageFormat.format("#oauth2.hasScope(''{0}'')", scope);
     }
 
-    public static String hasUidScopeAndAnyRealm(final String realms) {
-        return MessageFormat.format("#oauth2.hasUidScopeAndAnyRealm(''{0}'')", realms);
+    public static String hasUidScopeAndAnyRealm(final String[] realms) {
+        final String formattedRealms = Arrays.stream(realms)
+                .map(r -> MessageFormat.format("''{0}''", r))
+                .collect(Collectors.joining(","));
+        return MessageFormat.format("#oauth2.hasUidScopeAndAnyRealm({0})", formattedRealms);
     }
 
     @Override
diff --git a/build.gradle b/build.gradle
index 3ca7120006..11fec3531f 100644
--- a/build.gradle
+++ b/build.gradle
@@ -1,7 +1,7 @@
 subprojects {
     buildscript {
         ext {
-            springBootVersion = '2.3.1.RELEASE'
+            springBootVersion = '2.5.12'
         }
         repositories {
             mavenCentral()
diff --git a/core-common/build.gradle b/core-common/build.gradle
index e2a66ebaeb..8945af12ad 100644
--- a/core-common/build.gradle
+++ b/core-common/build.gradle
@@ -115,6 +115,7 @@ dependencies {
         exclude module: "hamcrest-library"
     }
     testCompile 'com.jayway.jsonpath:json-path'
+    testCompile 'junit:junit:4.13.1'
     testRuntime 'org.pegdown:pegdown:1.6.0'
 }
 // end::dependencies[]
diff --git a/gradle/wrapper/gradle-wrapper.jar b/gradle/wrapper/gradle-wrapper.jar
index 62d4c05355..e708b1c023 100644
Binary files a/gradle/wrapper/gradle-wrapper.jar and b/gradle/wrapper/gradle-wrapper.jar differ
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index 4d9ca16491..442d9132ea 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,5 +1,5 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-6.7.1-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-6.8.3-bin.zip
 zipStoreBase=GRADLE_USER_HOME
 zipStorePath=wrapper/dists
diff --git a/gradlew b/gradlew
index fbd7c51583..4f906e0c81 100755
--- a/gradlew
+++ b/gradlew
@@ -130,7 +130,7 @@ fi
 if [ "$cygwin" = "true" -o "$msys" = "true" ] ; then
     APP_HOME=`cygpath --path --mixed "$APP_HOME"`
     CLASSPATH=`cygpath --path --mixed "$CLASSPATH"`
-    
+
     JAVACMD=`cygpath --unix "$JAVACMD"`
 
     # We build the pattern for arguments to be converted via cygpath
diff --git a/gradlew.bat b/gradlew.bat
index a9f778a7a9..ac1b06f938 100644
--- a/gradlew.bat
+++ b/gradlew.bat
@@ -40,7 +40,7 @@ if defined JAVA_HOME goto findJavaFromJavaHome
 
 set JAVA_EXE=java.exe
 %JAVA_EXE% -version >NUL 2>&1
-if "%ERRORLEVEL%" == "0" goto init
+if "%ERRORLEVEL%" == "0" goto execute
 
 echo.
 echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH.
@@ -54,7 +54,7 @@ goto fail
 set JAVA_HOME=%JAVA_HOME:"=%
 set JAVA_EXE=%JAVA_HOME%/bin/java.exe
 
-if exist "%JAVA_EXE%" goto init
+if exist "%JAVA_EXE%" goto execute
 
 echo.
 echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME%
@@ -64,21 +64,6 @@ echo location of your Java installation.
 
 goto fail
 
-:init
-@rem Get command-line arguments, handling Windows variants
-
-if not "%OS%" == "Windows_NT" goto win9xME_args
-
-:win9xME_args
-@rem Slurp the command line arguments.
-set CMD_LINE_ARGS=
-set _SKIP=2
-
-:win9xME_args_slurp
-if "x%~1" == "x" goto execute
-
-set CMD_LINE_ARGS=%*
-
 :execute
 @rem Setup the command line
 
@@ -86,7 +71,7 @@ set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar
 
 
 @rem Execute Gradle
-"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %CMD_LINE_ARGS%
+"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %*
 
 :end
 @rem End local scope for the variables with windows NT shell