A couple of things stand out to me in the AP Config that I just need clarification on...
I see a static route is defined for 10.10.60.0/24 - is this related to VLAN60?
I see you have centralised L2 defined for DHCP on VLAN 60 - do you intend to have client traffic from VLAN 60 NAT'd by the AP? Are there any other devices (Switches) in that VLAN that perform DHCP relay (IP helper)?
The APs default VLAN id is 1, so while VLAN 10 is the native VLAN on the switch then VLAN 10 to the switch is VLAN 1 to the AP. This is effectively the same as connecting to switches together where ones native VLAN is 10 and the others native VLAN is 1 for the inter-switch connected ports. It's find to do this but can be confusing if it's the first time you've come across this behaviour.