in app/Http/Middleware/Authenticate.php [15:20]
protected function redirectTo($request) { if (! $request->expectsJson()) { return route('login'); } }