To circumvent the issue of 'halfing' make one AP the parent AP. To manage security, make mikrotik your parent AP. that way you do not have to use wep. you can use the hotspot feature to authenticate.
As an alternative...consider Unifi:
_______________________________________________
Skunkworks mailing list
Skunkworks@lists.my.co.ke
------------
List info, subscribe/unsubscribe
http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks
------------
Skunkworks Rules
http://my.co.ke/phpbb/viewtopic.php?f=24&t=94
------------
Other services @ http://my.co.ke