fix: add user in entityreferencenormalizer; fix: make max_depth a config setting;