Good morning guys, steps to reproduce the issue:

1 - Grab the sources from https://github.com/abstractj/aerogear-controller-demo and switch to picketlink branch (which uses PicketLink only)

Follow these steps:

1. Deploy aerogear-controller-demo
2. Try to login with username: john password: 123
4. Use the restricted admin page to register a new user
5. Delete the newly created user
6. Logout
7. Try to login with username: john password: 123

PasswordCredentialHandler will throw NPE during the execution of the method validate because getEncodedHash will be null during login. Looks like SHASaltedPasswordStorage is not properly retrieving hashes from the database.