it('should set x-xss-protection', function (done) {

        request(app)
            .get('/')
            .expect(200)