You need to match the query string parameter names in the Control Action methods so that model binder can pass them in correctly. So in you case it should be string retrunUrl
not string _returnUrl
.
...
public ActionResult Login(string returnUrl)
{
ViewBag.ReturnUrl = returnUrl;
return View();
}