Ensure the correct URL is being used when attempting access the catalog for a project.
If access is available, look in the project for file web.xml. This describes the authentication mechanism in use. This is defined under contextConfigLocation. Find the file in use and open it, for example, appSecurity-form-local.xml. Find the intercept-url entry for the url for the catalog. As in this case, there was an entry for static/Mobile/*.json but not for static/*.json. For the application, this might help narrow down the correct URL to access.