Should you do a more substantial check than just the `200` result?  For example, should you assert a few of the fields in user?