At least 10 people have died in an attack by Somalia's Al-Qaeda-affiliated Shebab militants on a hotel in the capital Mogadishu, according to Somali security officials.