When interacting with the Facebook API within an app or tab iframe the signed_request may contain an oauth_token from a previously evaluated session.
In those cases the login() method should automatically parse that token instead of just checking the available oauth credentials.