Relational parametricity for references and recursive types