User threads include session threads, called sqlexec threads, which are the primary threads that the database server runs to service client applications.

Your EJB layer should be a stateless service fronted by a stateless session bean, so it cannot store user data such as a username or password.