Now that you've set that up, nobody can connect.
No, they can connect. You don't need (can't have) a VPN tunnel to connect. Once connected (open access point), however, the router won't route anything past itself until the client creates the VPN tunnel.
Heisengberg might have been here.