title: Kill Sessions in Tomcat via CURL
body: <p>Edit: i now tried another method of sending my request (with the same result), by calling</p>
  
  <pre><code>curl "http://myUser:myPass@server:8080/manager/html/expire?path=/MyWebApp&amp;idle=0"
  </code></pre>
  
  <p>even when i just put <a href="http://server:8080/manager/html/expire?path=/myWebApp" rel="nofollow noreferrer">http://server:8080/manager/html/expire?path=/myWebApp</a> in my browsers adress bar, there is no credential prompt but simply a 403 Access Denied Page (i run Tomcat 8.0)</p>
  
  <hr>
  
  <p>As the title says : i try to kill all active sessions in an application in Tomcat and tried to do this with curl
  my request looks like this (i am in no way sure if its correct):</p>
  
  <pre><code>curl --anyauth -u myUser:myPass --data "idle=0" -d path=/MyWebApp http://server:8080/manager/html/expire 
  </code></pre>
  
  <p>All i get is an 403 Access Denied page.
  The user is defined for the roles manager-gui, manager-jmx and manager-script.
  What is the correct way to accomplish this? Is there a configuration i am missing, or is my request incorrect?</p>