You should include test spies for creating, deleting, and resetting api keys. We use [sinon](http://sinonjs.org/docs/#spys) for creating spies.