Twenty people, most said to be foreigners, have been killed in an attack by suspected Islamist militants on a cafe in Bangladesh, the army says.