Laravel Nested Controllers and Scope Bindings For Security