how’dy down under 
everything looks great. you are good to go 
on rb5009,
- make a single bridge.
- make 2 vlan iface : ip 10.0/24 and 200.0/24
- put ether2, 5-8 on the bridge. do bridge vlan filters.
how to guide available on MT wiki bridge vlan.
-
make your ap in bridge mode. plug in ether2 vlan 200. if you want to use the captive portal - the how to also available on wiki.
-
firewalls… no vlan 200 to 10 and vice versa except to the internet :
i think I have already wrote it somewhere in this forum not so long ago, i will post it later.
— edit.
maybe this post will help you with that vlan firewalls.
http://forum.mikrotik.com/t/block-between-vlans-in-the-same-bridge/167886/1
hope this helps.