it('POST will reject a user with an unknown email address', (done) => {
      sess.post('/api/auth/local')
        .set('Content-Type', 'application/json')
        .set('Accept', 'application/json')
        .send({email: 'bad.dude@haxxors.com', password: 'abc123'})