In best practices settings did you disable HTTP? I had a similar issue where I enabled HTTPS for management and it would no longer let the device redirect to the login page. under the webauth global setting, I had to run the command webauth-http-ena...
Do you have the dhcp relay on each vlan interface on the wireless controller? you need to have the SVI for each network you are using on your wireless, otherwise each vlan won't know to relay it. unfortunately you cant put a ip-helper address in th...