If you need to force the user to a particular page, regardless of what the ReturnURL is stating, then use the following code in your Page_Load
protected void Page_Load(object sender, EventArgs e)
{
if (!Page.IsPostBack && !string.IsNullOrEmpty(Request.QueryString["ReturnURL"]))
{
//Do this to remove any URL info the user may be trying to get to
Response.Redirect(@"default.aspx");
}
}