it('should call update with correct parameters', () => {
      login.invalidPassword('robin4ever', 'hashedDbPassword', 'thisissalt')

      expect(crypto.createHmac().update).toHaveBeenCalledWith('robin4ever')
    })