hvad er fejlen?

har en variabel der skal klistres på min sql streng

<%@ Language=\"VBSCRIPT\" %>
<% Response.Buffer = True %>
<%
user = klixbull
%>
<%

\'åbner forbindelse til basen
Set Conn = Server.CreateObject(\"ADODB.Connection\")
Conn.Open \"DRIVER={Microsoft Access Driver (*.mdb)}; DBQ=\" & Server.MapPath(\"login.mdb\")
SQL = \"SELECT * FROM users WHERE username = \"&user
set rs = Conn.Execute(SQL)
\'do until rs.eof
response.write rs(\"username\")
response.write \"<br>\"
response.write rs(\"email\")
\'movenext
\'loop
%>

men jeg får hele tiden den her fejl

Microsoft OLE DB Provider for ODBC Drivers error \'80040e14\'
[Microsoft][ODBC Microsoft Access Driver] Syntax error (missing operator) in query expression \'username =\'.
/mailtest/mail.asp, line 12