Welcome to Cisco Support Community. We would love to have your feedback.
For an introduction to the new site, click here. And see here for current known issues.
I would personally test to copy all the commands directly from the configuration template on WLSE and paste them all in the AP's configuration.
This should exclude any possible mistypings in the configuration template, such as a blank space right after the user's password.
If this doesn't help, some very useful debugs that you could collect on the WDS AP are
debug aaa authentication