-
The description of all the routes has id field as well, which is generated every time a new user is created and is unique to each user. But the test cases has no mention of the id field.
-
The expected response of /login route says
Response: 200 OK with an authentication token in JSON format if successful, or 401 Unauthorized if the credentials are invalid."
But, the tests are not checking if auth code is being returned as response or not.
I would suggest, the tests to be revisited once.