Use base64_url_decode for decoding signed request JSON.
Use base64_url_decode for decoding signed request JSON.

https://developers.facebook.com/docs/authentication/signed_request/ states that the JSON part of the signed request is base64url encoded.

Without this fix, decoding signed requests containing _ or - characters leads to garbled strings and JSON parsing fails subsequently.

mmangino/facebooker2