Separated laravel app to its own folder (#540)

api/app/Policies/PersonalAccessTokenPolicy.php

@@ -0,0 +1,14 @@
+<?php
+
+namespace App\Policies;
+
+use App\Models\User;
+use Laravel\Sanctum\PersonalAccessToken;
+
+class PersonalAccessTokenPolicy
+{
+    public function delete(User $user, PersonalAccessToken $token)
+    {
+        return $token->tokenable()->is($user);
+    }
+}