after you startup your tomcat, you type a concrete request url in broswer, the tomcat probably will prompt you the subsequent message.
it is because the <security-constraint> will restrict the access and in need of authentication.
please comment the following tags named security-constraint in web.xml file of directory WEB-INF of your webapp. it will help you to solve the issue.