FIX: get app iframe using a safer method + removed "get app window" helper