revert remove sql restriction for get promotion

api/routes/request.js

@@ -58,8 +58,7 @@ request.route('/award')
 
 request.route('/promotion')
 
-  .get((req, res, next) => {
-    // TODO: add SQL authetnication
+  .get(apiAuthenticationMiddleware, checkSql, (req, res, next) => {
     const squadFilter = req.query.squadId;
     const fractFilter = req.query.fractFilter;
     const progressFilter = req.query.inProgress;