That is because the
JDBC connection is not setting up this when it is connecting. Besides the client machine/browser is not connecting to the database - the app server is (where SessionBean is running) more over it is probably using a Connection Pool so all users are running under the same username/password to the database.
Most likely you need to capture the username they logged into the application with and send that along with the insert to capture the user actually making the change.