missing quotes in IN() clause