Routes going through api.php returning unauthorised whereas the same route going through web.php works

Question

I have a page which enables users to create \'folders\'. I\'m using the function below to getAll folders belonging to each user, so when a user logs in they should see all of th