Start with a single wifi interface to get things working.
Set VLAN ID for the interface:
/interface bridge port
add bridge=bridge_router interface="wlan harf"
should be:
/interface bridge port
add bridge=bridge_router interface="wlan harf" frame-types=admit-only-untagged-and-priority-tagged pvid=20
Don’t forget to set “frame-types=admit-only-untagged-and-priority-tagged” on all access ports:
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
Asterikses are no good (but again, start with one interface):
add bridge=bridge_router frame-types=admit-only-untagged-and-priority-tagged \
interface=*E pvid=10
Just a personal preference, when you set pvid on the interface bridge port, you don’t have to set untagged interfaces on /interface bridge vlan.
Security isn’t secure, wpa-psk is not that much more secure than an open network. Use at least wpa2-psk.