diff --git a/src/java/com/samskivert/servlet/user/UserRepository.java b/src/java/com/samskivert/servlet/user/UserRepository.java
index cce47a3d..ece9d1e0 100644
--- a/src/java/com/samskivert/servlet/user/UserRepository.java
+++ b/src/java/com/samskivert/servlet/user/UserRepository.java
@@ -292,7 +292,8 @@ public class UserRepository extends JORARepository
 
         // if we found one, update its expires time and reuse it
         if (authcode != null) {
-            update("update sessions set expires = '" + expires + "' where authcode = " + authcode);
+            update("update sessions set expires = '" + expires + "' where " +
+                   "authcode = '" + authcode + "'");
         } else {
             // otherwise create a new one and insert it into the table
             authcode = UserUtil.genAuthCode(user);