Just occurred to me: Where does authentication come into all this? Will it be added later? I believe the sample app has passport built in. But we should be considering authentication in the controllers and in these integration tests...