is there any exception that you see in the server logs ?. Please attach web.xml as well.
If it is a BASIC auth webapp, then can you kill your browser after the 403 error and try to see if the same error persists when using localhost with new browser instance.
[Message sent by forum member 'kumarjayanti' (kumarjayanti)]
http://forums.java.net/jive/thread.jspa?messageID=320229