User
and password
are MS Access reserved words, I'd suggest using square brackets for the table name and all of the column names:
UPDATE [User]
SET [userName] = @userName,
[password] = @password,
[UserType] = @UserType,
[datejoined] = @datejoined,
[email] = @email,
[loggedIn] = @loggedIn,
[picFilePath] = @picFilePath
WHERE
[userName] = @userName