If the users are already logged into your WordPress site, this should not be happening. Can you clarify if the users who this is happening to are logged into WordPress? If they are logged in. they are expected to be silently redirected to the Discourse URL that you have set in the return_path argument.