mass-assign protected attributes: topic_id, name, order_number, email, message