Where can I see the full guide ?

Good all !

Tell me where you can see the full guidance on these topics:
1) CSRF - A simple example of how and where to use token, hash and what to compare them with.
2) Filters - example of user authentication or something like that.
and 
3) node_modules (npm packages) - how to place these modules with .js scripts in the folder ./app/* (NodeJS or other). I would not like to allow other users to access through http://site.com/node_modules/ module.js (located in the folder ./public/) because these modules are intended only for the server part.