Use _path instead of _url in auth session controller (rails#53718)

Author: jeromedalbert

railties/lib/rails/generators/rails/authentication/templates/app/controllers/sessions_controller.rb.tt

@@ -1,6 +1,6 @@
 class SessionsController < ApplicationController
   allow_unauthenticated_access only: %i[ new create ]
-  rate_limit to: 10, within: 3.minutes, only: :create, with: -> { redirect_to new_session_url, alert: "Try again later." }
+  rate_limit to: 10, within: 3.minutes, only: :create, with: -> { redirect_to new_session_path, alert: "Try again later." }
 
   def new
   end