decode the signed_request string before processing