Laravel passport - CreateFreshApiToken no laravel_token cookie

CreateFreshApiToken, once added to 'web' middleware group in Kernel.php, is supposed to attach laravel_token cookie to response for every request coming through web middleware, isn't it? Eg anything in this group supposed to receive the cookie:

Route::group(['middleware' => ['web']], function () {
    Route::get('/{vue?}', function () { return view('index'); } )->where('vue', '[\/\w\.-]*');
});

I'm trying to replace current workflow that uses client_secret, seeing that oauth2 and website are on the same domain, the idea of self-consuming api with the help of CreateFreshApiToken had a nice ring to it, though at this point I'm not sure if I'm doing it right.

via Chebli Mohamed