Greetings,
thank you for providing this information, I did the compariosn I have just discovered the reason of the issue.
When I set HCSSL1.Connection:='Keep-Alive', authorization started to work properly.
It's been probably some change in authorization process towards new version of Tomcat, because contemporary version worked well even without setting this property.
Francois and Angus, thank you for you efficient help and have a great weekend ahead.
Karel