OK - I was planning on using the captive portal for the guest network, but this is for a coffee shop, and I have reservations around unsecured connections.
That being said, I was trying to undo what I did, but got this last issue that I can't find where to find it. I thought I cleared everything around the captive portal, but must have mised this:
Cocoa Cinnamon has been modified such that it is no longer editable from this Wizard. REASON: Dot 1x profile(Cocoa Cinnamon-aaa_prof) is also referenced by another AAA AP profile(Cocoa-Admin-aaa_prof)..
Use the full Configuration user interface to edit it.
I guess it isn't critical, since everything is working, but this is haning out there that could affect future upgrades.
Thanks so much all!