Ok, figured out why cgi-bin/webscr is there. It fixes a bug with the secure pages module that mangles your outgoing ssl url's like the https url to paypal for website paypment standard. You need to have this value in the secure url paths to make ubercart and secure pages play nice and create the secure url to paypal. Hope this helps somebody else.