With patch 3 at ISE 2.4 it's still happen.
The workaround doesn't work is "captive-bypass disabled" because you can't choose a different browser.
You hav to enable "captive-bypass". But be aware that the apple users are not forwarded to the portal if the connect to the SSID.
Then they have to launch a browser and try reaching a website. This could problematic because of browser caching and more.