Building Api with Lumen: Authorization and Relationship