If you’re experiencing the signed_request object not being set in a Page Tab app – turns out you need to have a forward slash at the end of the Page Tab URL, i.e. http://www.mydomain.com/facebookapp/.
As far as I know, this isn’t mentioned in the docs pertaining signed_request. Gotcha.