Ghost/test/unit/lib/security
..
password_spec.js
string_spec.js
tokens_spec.js