Query q = session.createQuery(query.toString());
int queryPos = 0;
q.setString(queryPos++, userId);
Iterator itr = q.list().iterator();
while (itr.hasNext()) {
PasswordTrackerHBM passwordTrackerHBM = (PasswordTrackerHBM)itr.next();
PasswordTrackerPool.remove((String)passwordTrackerHBM.getPrimaryKey());
session.delete(passwordTrackerHBM);