Proper Auth Controller: Login, Register: Logout

I made a small change here that is probably worth noting.

In the logout function, I used the following:

$user = User::where('email', $request->email)->first(); // REMOVED THIS LINE
$user = Auth::user(); // ADDED THIS LINE

if($user) {
      $user->tokens()->delete();
}

return response()->noContent();

If I am reading the video code properly, User A could log out User B by putting in their email instead of their own. By doing it like I have above, you can only log yourself out.

Logout must be inside the 'auth:sanctum' group, otherwise knowing any user's email you can logout him.