Too few parameters, Expected 2 i SQL?!

Altså, jeg trykkede vidst lidt for hurtigt, men beskeden taler vel for sig selv.
Min strSQL =
SELECT * FROM users WHERE username = MathiasRav AND password = <CENSURERET :)>

Min ASP:
Set Conn = Server.CreateObject("ADODB.Connection")
DSN = "DRIVER={Microsoft Access Driver (*.mdb)}; "
DSN = DSN & "DBQ=" & Server.MapPath ("db.mdb")
Conn.Open DSN

strSQL = "SELECT * FROM users WHERE username = " & strUserName & " AND password = " & strPassWord

%><%= strSQL %><%
Set rs = Conn.Execute(strSQL)

Min fejl:

Microsoft OLE DB Provider for ODBC Drivers error '80040e10'

[Microsoft][ODBC Microsoft Access Driver] Too few parameters. Expected 2.

/mathiasrav/validatelogin.asp, line 18

Hilsen Mathias

strSQL = "SELECT * FROM users WHERE username = '" & strUserName & "' AND password = '" & strPassWord & "'"

Jeg vil gætte på at dine to felter er tekst. Derfor skal der '' omkring det.

Tak tak tak for det!

np :)