it('should set x-frame-options DENY', function (done) {

        request(app)
            .get('/')
            .expect(200)