Java Development Tools

I am using Jdeveloper 11g R2 to create a simple ADF application:
- New -> Fusion Web Application (ADF) and follow through the process to create the model/view projects
- Application --> Secure --> Configure ADF Security --> ADF Authentication
- select auto-gen login. error and welcome pages
- deploy the ADF application as EAR

The deployement was successful and was able to get the login page. If inputting wrong password, I got back the error page. However, if I input correct id/pwd, I got "Error 403--Forbidden":

Error 403--Forbidden
From RFC 2068 Hypertext Transfer Protocol -- HTTP/1.1:
10.4.4 403 Forbidden

The server understood the request, but is refusing to fulfill it. Authorization will not help and the request SHOULD NOT be repeated. If the request method was not HEAD and the server wishes to make public why the request has not been fulfilled, it SHOULD describe the reason for the refusal in the entity. This status code is commonly used when the server does not wish to reveal exactly why the request has been refused, or when no other response is applicable.

I did not change even a single line after all these files generation. I tihink it should work but it didn't.

Anyone got any clue?