added public user shouldn't insert test

TODO.md

@@ -1,8 +1,8 @@
 Prioritized todo
 -----------------
 
-Acceptance tests
-SSL
+Acceptance tests - DONE
+SSL - Do in NGINX
 pg_bouncer/postgres pooling (test with Ab to get the errors below)
 redis-pool
 

test/acceptance/app.test.js

@@ -39,6 +39,13 @@ module.exports = {
     },{
       status: 200
     });
+  },
+  'GET /v1/ with SQL parameter on INSERT only. oAuth not used, so public user - should fail': function(){
+    assert.response(app, {
+      url: "/v1/?sql=INSERT%20INTO%20test_table%20(id)%20VALUES%20(1)&database=cartodb_test_user_1_db",
+      method: 'GET'
+    },{
+      status: 400
+    });
   }
-
 };