Fixes #829: loginRequired now responds with HTTP 403 in case of AJAX or loginUrl is not set (reverted from commit c2c12a9049)

framework/yii/web/User.php

@@ -287,8 +287,10 @@ class User extends Component
 	public function loginRequired()
 	{
 		$request = Yii::$app->getRequest();
-		if ($this->loginUrl !== null && !$request->getIsAjax()) {
+		if (!$request->getIsAjax()) {
 			$this->setReturnUrl($request->getUrl());
+		}
+		if ($this->loginUrl !== null) {
 			Yii::$app->getResponse()->redirect($this->loginUrl)->send();
 			exit();
 		} else {