If your platform supports AES-GCM or AES-CCM, you could just do that and not bother with a separate MAC.  See http://nodejs.org/api/crypto.html#crypto_crypto_getciphers