The militants who led the attack on a Kenyan mall hired a shop there in the weeks leading up to the siege, senior security sources have told the BBC.