title: tomcat 7 manager app access denied
body: <p>When I first go to the manager app <code>http://localhost:8080/manager/html</code>, there was a browser prompt login window asking for username and password. By entering the wrong username and password, the page returned 403(access denied).</p>
  
  <p>So I googled a bit and setup as follows:</p>
  
  <pre><code>&lt;role rolename="manager-gui" /&gt;
  &lt;user username="admin" password="tomcat" roles="manager-gui"/&gt;
  &lt;!-- these 2 lines was there before my editing --&gt;
  &lt;user password="tom" roles="manager-script,admin" username="tom"/&gt;
  &lt;user password="tomcat" roles="manager-script,admin" username="tomcat"/&gt; 
  </code></pre>
  
  <p>After restarting tomcat, the manager app this time shows 403 page directly without asking for username and password.
  So I'm a bit confused. What kind of authentication is this manager app using?
  And how can I login to the manager app?</p>