fixed sql syntax error in DBUser