`yii\web\User::loginRequired()` now returns the `Response` object instead of exiting the application