[5.3] Add authentication check to the Authorize middleware

[JosephSilber]

If you're using the default auth, there's now no need to use the auth middleware too.

Before this change, if you forgo the auth middleware, the Authorize middleware would incorrectly return a 403 instead of a 401.

[taylorotwell]

This is giving us multiple places to modify the redirect path on failures though?

[JosephSilber]

Unfortunately yes, but I believe it's worth it.

[mark86092]

Could it possible to throw a unauthenticated exception, and let the error handler to handle it?
For example, we have ValidationException, and AuthorizationException.

[GrahamCampbell]

Could it possible to throw a unauthenticated exception, and let the error handler to handle it?

That's always how I do things, but laravel's sample implementations in the core don't really do that.

[taylorotwell]

I just can't really get behind having to modify the redirect in two places.

[JosephSilber]

Can the redirect go in the auth config then?