String Value Not Being Pass To Sql Statement

How can I get the UserID to pass to the sql statement?  The date is being passed but nothing else

Thank you.

My code:Public Function GetEmployeeByID(ByVal Today As Date, ByVal UserID As String) As SqlDataReaderDim dtToday As DateTime

dtToday = DateTime.Today

'Create connectionDim con As New SqlConnection(_connectionString)

'Create commandDim cmd As SqlCommand = New SqlCommand()With cmd

.Connection = con

.CommandText = "SELECT UserID FROM ATTTblAttendance WHERE UserID = @UserID And Today = " & dtToday" -->The UserID no showing up here

.CommandType = CommandType.Text

'Add Parameters.Parameters.AddWithValue("@UserID", UserID)

.Parameters.AddWithValue("@Today", Today)

End With

'Return DataReader

con.Open()Return cmd.ExecuteReader()

End Function