more Tracker refactoring to have better testable code and some bugfixes. Eg we did not throw an exception in case bulk was not authenticated (in this branch)