Use policies to implement Access Control

https://cylab.be/blog/210/laravel-actionaccess-control-with-policies