Allow email verification middleware to work with API routes

Currently if you apply the email verification middleware to an API route (XHR) you get strange/broken behaviour because of the redirect.
So, when the request expects JSON, just return a 403. This solves my issues.

src/Illuminate/Auth/Middleware/EnsureEmailIsVerified.php

@@ -13,14 +13,18 @@ class EnsureEmailIsVerified
      *
      * @param  \Illuminate\Http\Request  $request
      * @param  \Closure  $next
-     * @return \Illuminate\Http\Response
+     * @return \Illuminate\Http\Response|\Illuminate\Http\RedirectResponse
      */
     public function handle($request, Closure $next)
     {
         if (! $request->user() ||
             ($request->user() instanceof MustVerifyEmail &&
             ! $request->user()->hasVerifiedEmail())) {
-            return Redirect::route('verification.notice');
+            if ($request->expectsJson()) {
+                abort(403, 'Your email address is not verified.');
+            } else {
+                return Redirect::route('verification.notice');
+            }
         }
 
         return $next($request);