Add these two lines to tomcat-users.xml inside the tomcat-users tag.

  <role rolename="role-cdisessionbug"/>
  <user username="cdisessionbug" password="password" roles="role-cdisessionbug"/>
