The father and son attackers travelled to an area of the Philippines last month where Islamic State-aligned groups have operated, police say