Added a couple more tests.

package.json

@@ -80,6 +80,7 @@
     "traceur": "0.0.102",
     "traceur-runner": "^2.0.1",
     "traceur-source-maps": "^1.0.6",
-    "underscore": "^1.8.3"
+    "underscore": "^1.8.3",
+    "http-constants": "1.1.0"
   }
 }

src/test/api/auth/login.spec.js

@@ -90,4 +90,26 @@ describe('POST:/auth', () => {
 
 	});
 
+	describe('when successfully logged-in', () => {
+
+		let result = null;
+
+		before(() => {
+			return request('[email protected]', 'password').then((response) => {
+				result = response;
+			});
+		});
+
+		it('should not have a password listed.', () => {
+			expect(result.password).to.not.exist;
+		});
+
+		it('should have a list of user permissions', () => {
+			expect(result.permissions).to.exist;
+			expect(result.permissions).to.be.an('array');
+			expect(result.permissions.length).to.be.greaterThan(0);
+		});
+
+	});
+
 });