Replace References with ReferenceList.

This also means replacing ReferencesDeserializer.
Upgrade composer dependencies.