Google browser forcibly added https (hidden by default https, not displayed), you actually visit is https: // localhost, tomcat is not configured at this address, so there is, of course, be denied access
Click on the address bar, mouse over the far left, hidden "https" will be displayed