Fixing the syntax for the SQLite statement

piphone.py

@@ -465,7 +465,7 @@ def static_files(filepath):
 
 def login_admin(user, password):
     db = sqlite3.connect(config['piphone']['db'])
-    user = db.execute('SELECT api, token, admin FROM users where api = ?', user)
+    user = db.execute('SELECT api, token, admin FROM users where api = ?', (user,))
     user = user.fetchone()
     if user is None:
         # user does not exist