an idiom like 
`X_FRAME_OPTIONS = ENV_TOKENS.get('X_FRAME_OPTIONS', X_FRAME_OPTIONS)` seems to be more popular in `aws.py` and is probably more concise (since you're using `.get` anyway), and setting `X_FRAME_OPTIONS` in `common.py`