setting 'cdt' tracker parameter in recent past (in the last 4 hours) should not require token_auth 

Fixes #6110, #4994 

Todo: 
 * update http://developer.piwik.org/api-reference/tracking-api
 * tests should pass