The existing issue verification code did enforcement entirely within the

frontend. This meant that users could craft an API request to directly close

issues which should be verified first.
This change adds some gatekeeping in the API resource to ensure that users have

permission to do so when changing the issue status to closed.

Ran unit tests.
Checked that the issue verification UI still functioned correctly.