That setting is per VAP/SSID, are you sure that number is not all users across all 2.4GHz SSIDs or perhaps it is including cached users in the user table? What do you see when you run the following?
show ap association ap-name <NameOfAP>
show ap association bssid xx:xx:xx:xx:xx:xx