The NPE is a known bug https://jira.jboss.org/jira/browse/EJBTHREE-1994
But the root cause is something specific to your application. Which bean method are you calling from the "authenticateUser" method? Can you post the relevant piece of code from the bean and its interfaces?