I just found two secret parameters.<p>To get two extra items, namely ghost and star, append <i>&opt=6358D569C9</i> to the link. Or use <i>$('body').addClass('secret')</i> in console.<p>To replace Mario with Toad (only in SMB), append <i>&opt=7F93F702E6</i>.<p>By using the latter <i>opt</i>, and adding <i>secret</i> manually, you can have both.