[bug] Copilot fixes: HTTP header issues, nit in doc

Author: arielshaqed

pkg/api/controller.go

@@ -969,13 +969,12 @@ func (c *Controller) ReleaseTokenToMailbox(w http.ResponseWriter, r *http.Reques
 		// This endpoint is _usually_ visited by a browser.  Report to the user that
 		// they logged in, telling them the name they used to log in.
 		httputil.KeepPrivate(w)
+		w.WriteHeader(http.StatusOK)
 
 		err = releasedTokenTemplate.ExecuteTemplate(w, "releasedToken", &UserData{Username: username})
 		if c.handleAPIError(ctx, w, r, err) {
 			return
 		}
-
-		w.WriteHeader(http.StatusOK)
 	default:
 		writeResponse(w, r, http.StatusNoContent, nil)
 	}
@@ -6239,6 +6238,7 @@ func (c *Controller) GetUsageReportSummary(w http.ResponseWriter, r *http.Reques
 	// base on content-type return plain text or json (default)
 	if r.Header.Get("Accept") == "text/plain" {
 		httputil.KeepPrivate(w)
+		w.Header().Set("Content-Type", "text/plain; charset=utf-8")
 		_, _ = fmt.Fprintf(w, "Usage for installation ID: %s\n", installationID)
 		for _, rec := range records {
 			_, _ = fmt.Fprintf(w, "%d-%02d: %12d\n", rec.Year, rec.Month, rec.Count)

pkg/authentication/tokens.go

@@ -18,6 +18,6 @@ type LoginTokenProvider interface {
 	// called authenticated, initiated by the web browser running.
 	Release(ctx context.Context, loginRequestToken string) error
 	// GetToken returns a token waiting on mailbox.  It is called unauthenticated, initiated
-	// the requesting client, with no user on the context..
+	// the requesting client, with no user on the context.
 	GetToken(ctx context.Context, mailbox string) (string, time.Time, error)
 }