diff --git a/package.json b/package.json
index 3df23dd..055185a 100644
--- a/package.json
+++ b/package.json
@@ -80,6 +80,7 @@
     "traceur": "0.0.102",
     "traceur-runner": "^2.0.1",
     "traceur-source-maps": "^1.0.6",
-    "underscore": "^1.8.3"
+    "underscore": "^1.8.3",
+    "http-constants": "1.1.0"
   }
 }
diff --git a/src/test/api/auth/login.spec.js b/src/test/api/auth/login.spec.js
index d9f7805..f37e748 100644
--- a/src/test/api/auth/login.spec.js
+++ b/src/test/api/auth/login.spec.js
@@ -90,4 +90,26 @@ describe('POST:/auth', () => {
 
 	});
 
+	describe('when successfully logged-in', () => {
+
+		let result = null;
+
+		before(() => {
+			return request('email@somewhere.com', 'password').then((response) => {
+				result = response;
+			});
+		});
+
+		it('should not have a password listed.', () => {
+			expect(result.password).to.not.exist;
+		});
+
+		it('should have a list of user permissions', () => {
+			expect(result.permissions).to.exist;
+			expect(result.permissions).to.be.an('array');
+			expect(result.permissions.length).to.be.greaterThan(0);
+		});
+
+	});
+
 });