"SELECT * FROM user&pass where username = 'admin'"

Is the table named user&pass?
You might try enclosing it in brackets.
"SELECT * FROM [user&pass] where username = 'admin'"