Revert "Don't protect promotions"

This reverts commit 8e42b3ee7a43c338be5d7c68077073eb3a47e4d6.
Fix tests for my new checkout routes