Islamist militants have stormed a hotel in Somalia's capital, engaging in an hours-long exchange of fire with security forces that left at least 20 people dead, according to police and witnesses.