tomcat7 host-manager 403 access denied

tomcat-user.xml

<?xml version='1.0' encoding='utf-8'?>
<tomcat-users>
  <role rolename="manager-script"/>
  <role rolename="manager-gui"/>
  <role rolename="manager-jmx"/>
  <role rolename="manager-status"/>
  <user username="admin" password="admin-2017" roles="manager-gui,admin-gui,manager-status"/>
</tomcat-users>