Bump tomcat8, fix tomcat permissions