Remove AllowAllCORSMixin from some API views

Remove the AllowAllCORSMixin from every API except LegacyProfileRetrieveApiView,
which is unlikely to cause any problems from being opened but also might not work
because it redirects to a page that likely isn't open

django/thunderstore/repository/api/experimental/views/package.py

@@ -6,7 +6,6 @@
 
 from thunderstore.cache.cache import ManualCacheCommunityMixin
 from thunderstore.cache.enums import CacheBustCondition
-from thunderstore.core.mixins import AllowAllCORSMixin
 from thunderstore.repository.api.experimental.serializers import (
     PackageSerializerExperimental,
 )
@@ -65,9 +64,7 @@ def get_queryset(self):
         return get_package_queryset()
 
 
-class PackageDetailApiView(
-    AllowAllCORSMixin, ManualCacheCommunityMixin, RetrieveAPIView
-):
+class PackageDetailApiView(ManualCacheCommunityMixin, RetrieveAPIView):
     """
     Get a single package
     """

django/thunderstore/repository/api/experimental/views/package_version.py

@@ -5,7 +5,6 @@
 
 from thunderstore.cache.cache import ManualCacheCommunityMixin
 from thunderstore.cache.enums import CacheBustCondition
-from thunderstore.core.mixins import AllowAllCORSMixin
 from thunderstore.repository.api.experimental.serializers import (
     MarkdownResponseSerializer,
     PackageVersionSerializerExperimental,
@@ -90,7 +89,7 @@ def retrieve(self, request, *args, **kwargs):
         return Response(serializer.data)
 
 
-class PackageVersionReadmeApiView(AllowAllCORSMixin, PackageVersionDetailMixin):
+class PackageVersionReadmeApiView(PackageVersionDetailMixin):
     """
     Get a package verion's readme
     """