it('when there is one right that match', (done) => {
    testReq({
      rightsObj: [{
        path: '/foo',
        methods: reaccess.ALL_MASK,