Right, both fixed, anyways this is not causing the problem.

You totally cannot have VLAN-s over wifi.
You can, using RADIUS or having an SSID with multiple password, one per vlan.

Remove the dns lines and the delegate line from below:
Done.

I'm not entirely certain that this is valid:
Where did you get this syntax from?
It's indeed working, so syntax should be valid.
I got it from the forum:

Just for reference, are you running the latest OpenWrt release? I was not able to get the hostapd.wpa_psk method to work-- even though I believe my configuration is correct and I could tell something had changed (i.e. the radio was disabled). Are your interfaces created and destroyed on-demand or does everything appear at startup? I decided to try the equally obscure wifi-vlan and wifi-station sections (which do not get stripped out by LuCI). This actually works as expected and does not require…
or
I've adjusted the given config to suit my needs and everything looks fine in luci and the passwords for the vlans work, I only have 1 issue when I try the wifi it doesn't give me an IP address, I left 1 wifi radio without vlan just to be able to access to router while setting up. Now that I'm thinking about it, is this config tailored for the "dumb AP" router 2 and the vlans should get the ip's from dhcp pools on the main router, is this assumption correct ? here are my configs: config interf…

This could potentially cause some issues, but I don't think it's relevant for this particular situation.
What issues? I'm glad of manage potencial problem outcomes. The only thing annoying is firewall enabling itself again when I update, so I get stuck out the router on the management vlan, so I have to connect to it directly.