If changeId() produces session ID which doesn't pass test in start() on line 88, then cookie with session ID is unset. So this check is here to ensure that newly created ID conforms to required  format and will not be discarded.