GET /{user-id}/likes/{page-id} 

may produce false-negative if user has weird privacy policy. Using signed request (tab applications) is only safe way to check if user is fan of a fanpage.