can't you simplify this?

```js
...
var userKeys = Object.keys(publicUser);

expect(publicKeys).to.be.eql(userKeys);
done();
```

I don't understand the need for the difference/XOR.

(And use `Object.keys` instead of `_.keys` since that's available in ES5.)