The reason why there is createSid() is "it's not not standard confirming name". Sorry that I included in this patch, you know it's hard to sync code that active changing is difficult.

The reason why there is validateSid() is "it wasn't included in 5.5's strict session patch". 5.5 was released version, so we agreed not to include it. Since 5.6 is new, it's included.