Only thing I have doubts about is using VLAN ID 1 explicitly (on your CAP). It is recommended not to set it to the bridge and also not when assigning ports to the bridge.
Not sure, but you might find more info here (if you haven’t found it already):
https://help.mikrotik.com/docs/display/ROS/WiFi#WiFi-CAPusing"wifi-qcom-ac"package:
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
Furthermore, your settings seems to be (over) complicated, but that might be lack of knowledge from my site 